$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/5DE12890180311EBA311E181C4F9AE02.roa File: 5DE12890180311EBA311E181C4F9AE02.roa (raw, json) Hash identifier: seXTL8b/GlL5pAHEn0dIzFxZfIVXQQa01fgUmwB4ZW0= Subject key identifier: 1B:33:7C:8C:F7:5D:3E:BF:4E:AF:8C:38:DC:6E:C0:57:FA:FA:A3:2B Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Certificate serial: 089F Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/5DE12890180311EBA311E181C4F9AE02.roa Signing time: Mon 24 Aug 2026 15:16:46 +0000 ROA not before: Mon 24 Aug 2026 15:16:46 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38466 IP address blocks: 66.23.160.0/19 maxlen: 19 66.23.160.0/24 maxlen: 24 66.23.161.0/24 maxlen: 24 66.23.162.0/24 maxlen: 24 66.23.163.0/24 maxlen: 24 66.23.164.0/24 maxlen: 24 66.23.165.0/24 maxlen: 24 66.23.166.0/24 maxlen: 24 66.23.167.0/24 maxlen: 24 66.23.168.0/24 maxlen: 24 66.23.169.0/24 maxlen: 24 66.23.170.0/24 maxlen: 24 66.23.171.0/24 maxlen: 24 66.23.172.0/24 maxlen: 24 66.23.173.0/24 maxlen: 24 66.23.174.0/24 maxlen: 24 66.23.175.0/24 maxlen: 24 66.23.176.0/24 maxlen: 24 66.23.177.0/24 maxlen: 24 66.23.178.0/24 maxlen: 24 66.23.179.0/24 maxlen: 24 66.23.180.0/24 maxlen: 24 66.23.181.0/24 maxlen: 24 66.23.182.0/24 maxlen: 24 66.23.183.0/24 maxlen: 24 66.23.184.0/24 maxlen: 24 66.23.185.0/24 maxlen: 24 66.23.186.0/24 maxlen: 24 66.23.187.0/24 maxlen: 24 66.23.188.0/24 maxlen: 24 66.23.189.0/24 maxlen: 24 66.23.190.0/24 maxlen: 24 66.23.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826 Validity Not Before: Aug 24 15:16:46 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6a8c605d-cb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:ff:c0:f0:40:77:78:fd:7c:43:ea:8f:15: 73:e9:05:85:3d:74:2f:8e:50:61:55:64:5d:ab:c9: b0:97:c4:67:35:33:ad:e9:56:1b:40:cc:93:97:01: 0d:69:92:16:7b:0d:79:dd:69:9f:11:70:a5:2d:aa: df:de:f5:22:7b:be:26:ad:24:89:70:25:6f:5c:ee: bd:f0:19:9a:8c:1c:0e:04:e0:5c:bb:aa:14:27:94: 05:cd:3e:3b:74:38:e9:6c:8d:29:83:4f:c8:a9:e7: 3a:23:0d:b6:f5:05:87:9c:82:c8:9b:1d:5a:29:0e: c5:6d:ff:ac:0e:fe:2a:b2:0a:8a:8b:b8:0b:51:21: 53:71:97:53:ca:be:c6:58:56:30:8f:21:14:27:4a: 75:9a:de:44:9f:28:c0:af:39:70:5c:17:e2:35:ac: f6:36:c1:e3:88:2c:82:48:26:7a:68:78:da:ad:3b: e0:d7:24:48:58:bd:bc:a2:a8:cc:28:d5:28:05:7d: eb:a2:ef:33:7f:d7:90:79:b0:b1:e7:b3:b0:03:09: 46:47:61:c7:d2:0b:30:6e:b3:1f:b2:d2:62:6c:a2: 60:d7:b9:58:72:78:db:ef:65:4a:87:42:71:5b:7d: 56:73:f8:59:55:d1:55:e9:8d:d9:95:a2:5b:9b:0a: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:7C:8C:F7:5D:3E:BF:4E:AF:8C:38:DC:6E:C0:57:FA:FA:A3:2B X509v3 Authority Key Identifier: keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/5DE12890180311EBA311E181C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 66.23.160.0/19 Signature Algorithm: sha256WithRSAEncryption 46:da:c1:fe:a3:77:2d:56:cf:e0:85:1c:0b:46:67:2d:ce:fa: ff:dd:42:3c:a2:fb:ed:a0:26:7c:44:78:c1:03:af:b1:06:a6: c2:6e:95:8d:ab:7c:bc:a7:88:d5:3d:c9:43:26:69:e9:e6:3f: 8a:f9:16:46:f8:dc:ad:e8:dc:7e:2c:1a:c8:b0:ce:bf:f7:c1: 18:13:3c:5a:7c:d7:80:79:64:37:11:b7:cc:c5:98:b3:1b:b1: b3:52:ce:c2:f0:b6:e7:f1:4d:84:97:d3:78:0a:3c:9c:c6:6b: 24:3a:1d:91:99:fd:19:8b:d9:7f:bd:d6:c4:72:42:81:93:74: 61:33:fb:09:61:b2:c0:1e:3f:c4:ca:6c:0f:6e:29:08:1c:0d: 21:ec:19:e6:11:9f:2e:03:55:fc:c8:fa:08:75:51:c5:dd:21: 3a:1d:33:f1:10:17:85:0a:26:0b:16:8c:ee:f5:c5:0a:ba:46: ba:86:3c:e3:8d:1e:6d:d3:05:39:99:a6:6b:b5:bb:29:1d:e2: ab:e3:21:17:6d:44:1b:52:8c:ef:d6:be:ab:ee:c9:83:1d:5d: 7d:42:90:22:77:6f:04:fe:28:6e:fe:88:77:59:13:26:43:7d: a4:1b:21:8a:ee:07:83:10:a6:16:59:88:0d:5a:ed:8f:6c:dc: e3:99:ce:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDExOTQwQkI1ODM0NEFBMkM3OUM0OTUzOUQ2REY5MTUx OTZFRkU4MjYwHhcNMjYwODI0MTUxNjQ2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjNjA1ZC1jYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy//wPBAd3j9fEPqjxVz6QWFPXQvjlBhVWRdq8mwl8RnNTOt6VYbQMyTlwEN aZIWew153WmfEXClLarf3vUie74mrSSJcCVvXO698BmajBwOBOBcu6oUJ5QFzT47 dDjpbI0pg0/Iqec6Iw229QWHnILImx1aKQ7Fbf+sDv4qsgqKi7gLUSFTcZdTyr7G WFYwjyEUJ0p1mt5EnyjArzlwXBfiNaz2NsHjiCyCSCZ6aHjarTvg1yRIWL28oqjM KNUoBX3rou8zf9eQebCx57OwAwlGR2HH0gswbrMfstJibKJg17lYcnjb72VKh0Jx W31Wc/hZVdFV6Y3ZlaJbmwrJFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBszfIz3 XT6/Tq+MONxuwFf6+qMrMB8GA1UdIwQYMBaAFBGUC7WDRKosecSVOdbfkVGW7+gm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9DMEI1NzQyMjA5 NzUxMUVCOUQ0NjFCMzBDNEY5QUUwMi9FWlFMdFlORXFpeDV4SlU1MXQtUlVaYnY2 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VaUUx0WU5FcWl4NXhKVTUxdC1SVVpidjZDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkI2MDAvQzBCNTc0MjIwOTc1MTFFQjlENDYxQjMwQzRGOUFFMDIvNURFMTI4OTAx ODAzMTFFQkEzMTFFMTgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFQhegMA0GCSqGSIb3DQEBCwUAA4IBAQBG2sH+o3ctVs/ghRwLRmct zvr/3UI8ovvtoCZ8RHjBA6+xBqbCbpWNq3y8p4jVPclDJmnp5j+K+RZG+Nyt6Nx+ LBrIsM6/98EYEzxafNeAeWQ3EbfMxZizG7GzUs7C8Lbn8U2El9N4CjycxmskOh2R mf0Zi9l/vdbEckKBk3RhM/sJYbLAHj/EymwPbikIHA0h7BnmEZ8uA1X8yPoIdVHF 3SE6HTPxEBeFCiYLFozu9cUKuka6hjzjjR5t0wU5maZrtbspHeKr4yEXbUQbUozv 1r6r7smDHV19QpAid28E/ihu/oh3WRMmQ32kGyGK7geDEKYWWYgNWu2PbNzjmc5O -----END CERTIFICATE-----Generated at Sat Sep 5 08:08:23 2026 by rpki-client