$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa File: 1D77B4081BD911EAB49CC840C4F9AE02.roa (raw, json) Hash identifier: aM0okos6HP2lmuHFZTzsM6czS1dLwWW/PzQ8J/OHsFE= Subject key identifier: AA:10:83:2C:D0:B6:52:CE:91:D8:9D:59:52:29:94:E8:19:D7:0A:F0 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0CCB Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa Signing time: Tue 14 Jul 2026 19:19:50 +0000 ROA not before: Tue 14 Jul 2026 19:19:50 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 135600 IP address blocks: 45.114.4.0/23 maxlen: 23 45.114.6.0/23 maxlen: 23 103.67.170.0/24 maxlen: 24 103.67.171.0/24 maxlen: 24 202.133.192.0/20 maxlen: 20 202.133.208.0/20 maxlen: 20 203.17.180.0/24 maxlen: 24 203.17.181.0/24 maxlen: 24 203.17.182.0/23 maxlen: 23 2405:d180::/32 maxlen: 32 2405:d180:8000::/34 maxlen: 34 2405:d180:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 18:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jul 14 19:19:50 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a568bd6-234a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:25:6d:10:fc:f4:53:1b:78:67:67:ff:5b: b5:ba:a9:97:b1:23:f0:4f:e5:fa:2f:a5:aa:44:79: 85:29:d9:fc:9e:9c:57:c6:21:04:cf:89:ef:13:5e: 1f:1f:19:76:65:0b:7b:84:e1:a8:99:d6:1c:d7:a3: c8:b6:ed:da:9c:f9:f4:da:15:7b:7d:d2:68:2d:22: b9:74:c3:43:00:08:cc:77:5a:a8:05:45:46:65:23: 61:d6:b9:82:19:ca:e9:9d:98:4f:a0:89:44:fc:20: 5b:47:0c:18:27:e7:ac:12:67:39:05:f1:bd:54:5a: 65:ca:b1:0b:10:99:51:31:d9:0a:cf:2f:5c:d3:5e: ca:91:7e:1d:df:b7:70:27:9f:04:53:6b:cc:7c:51: a7:4f:8c:86:e4:fc:9c:69:e3:2c:d7:e2:9c:0b:ea: f5:a8:63:f1:f5:a0:34:1f:c3:b6:03:e3:46:d2:8c: 45:b9:dd:03:c2:4f:da:b5:93:75:46:b8:50:0a:50: bf:38:45:ab:09:dd:1a:59:a1:6c:98:0d:00:6f:f8: 2d:d4:82:5d:4a:0c:33:59:13:c9:cf:35:b5:01:ea: 5d:48:49:b5:22:41:f0:01:75:80:d5:07:99:25:4b: fa:0c:27:a7:17:80:3b:4d:4b:a4:ee:f5:ed:d9:9f: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:83:2C:D0:B6:52:CE:91:D8:9D:59:52:29:94:E8:19:D7:0A:F0 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.4.0/22 103.67.170.0/23 202.133.192.0/19 203.17.180.0/22 IPv6: 2405:d180::/32 Signature Algorithm: sha256WithRSAEncryption 2f:09:56:f7:f9:41:7b:04:4e:0e:6c:cb:4f:84:93:d8:b3:dc: 55:22:30:0c:18:6a:75:b7:fc:d7:e8:4b:04:df:37:30:ed:46: af:e5:7b:91:b9:72:e5:86:3d:fd:e4:16:41:c1:57:07:3c:a0: bb:3c:a0:88:cf:f7:d4:c4:af:41:46:b8:21:4a:a2:c4:7e:5c: 6f:88:74:88:0a:64:12:a8:2b:11:23:f1:1f:d9:d1:7d:1a:fc: 97:2b:1f:35:88:a4:ce:2b:3f:c0:a2:30:73:64:9d:19:dd:88: 66:bd:92:40:78:2c:f1:ac:9d:9f:04:02:b2:be:d2:ee:8a:bd: 98:4e:e7:ff:60:38:df:26:90:a8:4c:b3:ce:91:75:d3:78:2f: 6f:d1:52:69:84:e3:14:0c:b3:c6:a1:85:94:a4:7b:f0:2d:e7: 0e:3b:ac:78:2c:35:a8:7b:75:e4:f8:30:b5:47:d2:2d:6c:d0: 04:38:41:02:e7:34:0f:2e:6e:89:54:3c:76:4d:19:65:cf:f0: 49:d4:6d:cb:f1:11:a6:b0:1a:12:06:29:c6:6c:f2:7d:bf:9e: dd:15:3b:ee:e2:cb:a5:83:12:e9:45:1b:56:52:4b:4a:ad:18: 09:79:e7:74:46:66:5b:6a:ee:5c:05:42:67:60:a2:7f:6a:e4: 1d:fe:f8:b2 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjYwNzE0MTkxOTUwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU2OGJkNi0yMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/YlbRD89FMbeGdn/1u1uqmXsSPwT+X6L6WqRHmFKdn8npxXxiEEz4nvE14f Hxl2ZQt7hOGomdYc16PItu3anPn02hV7fdJoLSK5dMNDAAjMd1qoBUVGZSNh1rmC GcrpnZhPoIlE/CBbRwwYJ+esEmc5BfG9VFplyrELEJlRMdkKzy9c017KkX4d37dw J58EU2vMfFGnT4yG5PycaeMs1+KcC+r1qGPx9aA0H8O2A+NG0oxFud0Dwk/atZN1 RrhQClC/OEWrCd0aWaFsmA0Ab/gt1IJdSgwzWRPJzzW1AepdSEm1IkHwAXWA1QeZ JUv6DCenF4A7TUuk7vXt2Z8qtwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFKoQgyzQ tlLOkdidWVIplOgZ1wrwMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvMUQ3N0I0MDgx QkQ5MTFFQUI0OUNDODQwQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLXIEAwQBZ0OqAwQFyoXAAwQCyxG0MA0EAgACMAcDBQAkBdGAMA0G CSqGSIb3DQEBCwUAA4IBAQAvCVb3+UF7BE4ObMtPhJPYs9xVIjAMGGp1t/zX6EsE 3zcw7Uav5XuRuXLlhj395BZBwVcHPKC7PKCIz/fUxK9BRrghSqLEflxviHSICmQS qCsRI/Ef2dF9GvyXKx81iKTOKz/AojBzZJ0Z3YhmvZJAeCzxrJ2fBAKyvtLuir2Y Tuf/YDjfJpCoTLPOkXXTeC9v0VJphOMUDLPGoYWUpHvwLecOO6x4LDWoe3Xk+DC1 R9ItbNAEOEEC5zQPLm6JVDx2TRllz/BJ1G3L8RGmsBoSBinGbPJ9v57dFTvu4sul gxLpRRtWUktKrRgJeed0RmZbau5cBUJnYKJ/auQd/viy -----END CERTIFICATE-----Generated at Sat Jul 18 01:51:55 2026 by rpki-client