$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139453/5E39D056C79011F1846CF77F4011F970/DEDA9D2EC79211F197908AD34011F970.roa File: DEDA9D2EC79211F197908AD34011F970.roa (raw, json) Hash identifier: 0+b8US1wZqB7ItJMNP9WDfAOLllD2mgkQynZMpYiFsM= Subject key identifier: 20:8C:17:9F:B5:81:24:2E:0E:63:52:24:DD:BA:FD:11:AC:94:B7:72 Certificate issuer: /CN=A9139453/serialNumber=29DD7D717EADB8B41AAB8064950CEEF1C8FD4814 Certificate serial: 04 Authority key identifier: 29:DD:7D:71:7E:AD:B8:B4:1A:AB:80:64:95:0C:EE:F1:C8:FD:48:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kd19cX6tuLQaq4BklQzu8cj9SBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139453/5E39D056C79011F1846CF77F4011F970/DEDA9D2EC79211F197908AD34011F970.roa Signing time: Wed 14 Oct 2026 05:48:51 +0000 ROA not before: Wed 14 Oct 2026 05:48:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45956 IP address blocks: 159.13.216.0/21 maxlen: 21 159.13.216.0/22 maxlen: 22 159.13.216.0/24 maxlen: 24 159.13.217.0/24 maxlen: 24 159.13.218.0/24 maxlen: 24 159.13.219.0/24 maxlen: 24 159.13.220.0/22 maxlen: 22 159.13.220.0/24 maxlen: 24 159.13.221.0/24 maxlen: 24 159.13.222.0/24 maxlen: 24 159.13.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139453/5E39D056C79011F1846CF77F4011F970/Kd19cX6tuLQaq4BklQzu8cj9SBQ.crl rsync://rpki.apnic.net/member_repository/A9139453/5E39D056C79011F1846CF77F4011F970/Kd19cX6tuLQaq4BklQzu8cj9SBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kd19cX6tuLQaq4BklQzu8cj9SBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139453, serialNumber=29DD7D717EADB8B41AAB8064950CEEF1C8FD4814 Validity Not Before: Oct 14 05:48:51 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6acf17c3-176a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:1f:08:2b:1b:3a:2a:5b:67:54:e7:22:f6: a3:23:e5:64:1b:07:73:0f:9b:73:17:89:cd:26:91: fc:29:b2:a8:ad:4c:85:b8:30:8d:83:5a:de:0b:84: ec:91:2b:3e:f2:d1:b4:5f:e3:20:dc:8e:19:ec:6b: 9e:b4:e9:79:65:47:a8:54:9d:0b:d1:1e:a2:72:a4: d9:13:25:fc:64:59:83:c7:83:71:ba:17:d9:4c:45: 70:2f:3d:82:30:60:4f:8b:1e:75:14:6c:52:25:42: 7e:f5:9a:56:d3:78:74:e7:ac:3a:79:48:77:d3:8f: 19:a0:b2:39:01:26:8f:f5:19:df:75:16:c8:45:4d: bd:d1:a4:cf:9e:c5:5c:d5:0a:a6:ef:57:73:62:33: 56:c6:31:87:e1:38:50:0a:00:bb:4f:0e:56:d3:a6: ea:bd:ad:44:f2:89:e6:72:13:01:bf:76:54:d9:28: 08:20:3f:c7:ca:b4:ad:a8:03:ee:b5:06:33:20:d8: 74:64:6c:06:6c:02:a9:f2:e4:68:b1:0f:9a:8c:40: 3e:30:19:ec:2c:35:8c:56:af:27:80:6b:85:87:b3: ae:74:b1:6d:d8:a6:fb:6f:e5:d1:62:72:83:e3:71: b5:f3:25:91:e9:27:89:05:3a:15:c5:74:c9:a2:c4: 3a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8C:17:9F:B5:81:24:2E:0E:63:52:24:DD:BA:FD:11:AC:94:B7:72 X509v3 Authority Key Identifier: keyid:29:DD:7D:71:7E:AD:B8:B4:1A:AB:80:64:95:0C:EE:F1:C8:FD:48:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139453/5E39D056C79011F1846CF77F4011F970/Kd19cX6tuLQaq4BklQzu8cj9SBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kd19cX6tuLQaq4BklQzu8cj9SBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139453/5E39D056C79011F1846CF77F4011F970/DEDA9D2EC79211F197908AD34011F970.roa sbgp-ipAddrBlock: critical IPv4: 159.13.216.0/21 Signature Algorithm: sha256WithRSAEncryption 29:06:79:f0:d2:54:9b:fe:d0:2c:6e:f6:b8:9e:00:49:94:a2: 75:86:57:45:73:fd:48:3f:ae:43:77:54:0a:c6:de:45:af:78: ae:52:b3:b7:c7:04:3e:f7:c1:e7:ec:3b:9e:ed:d4:98:9a:8c: aa:8b:8e:73:60:12:9c:a6:00:dd:c2:c6:0a:5d:e4:a0:e8:d3: 23:43:59:3f:36:f4:24:18:1f:cc:df:a3:9c:cb:52:f6:c7:06: 42:80:70:89:9b:e1:70:a6:49:91:bf:03:a3:c8:27:de:5e:d8: 69:91:d2:2a:94:ac:4d:3a:92:b6:9c:49:49:c2:6e:91:c5:41: 5f:d7:6e:7a:c2:1d:21:9d:d6:b0:79:1b:0b:60:97:7e:46:6c: 66:02:a5:9c:45:b8:6f:00:a8:ed:bb:ed:3b:a3:3a:2b:31:0a: 65:ca:9d:5d:1f:a5:66:b7:63:08:a9:37:84:ca:08:6a:7d:d1: e0:fa:90:aa:66:0a:2e:ad:d4:aa:81:e7:55:d3:ff:2b:5f:49: 84:cd:fc:50:2a:6c:25:d0:81:12:46:d6:9f:6a:c2:11:4c:67: 29:23:8a:8b:96:17:a4:57:86:c9:3a:53:98:a7:11:4a:ac:f0: 4d:c6:d7:8f:cb:aa:65:b1:57:fa:f7:26:bd:b4:59:8e:a1:c8: 78:40:5f:ed -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTQ1MzExMC8GA1UEBRMoMjlERDdENzE3RUFEQjhCNDFBQUI4MDY0OTUwQ0VFRjFD OEZENDgxNDAeFw0yNjEwMTQwNTQ4NTFaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2YxN2MzLTE3NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuYB8IKxs6KltnVOci9qMj5WQbB3MPm3MXic0mkfwpsqitTIW4MI2DWt4LhOyR Kz7y0bRf4yDcjhnsa5606XllR6hUnQvRHqJypNkTJfxkWYPHg3G6F9lMRXAvPYIw YE+LHnUUbFIlQn71mlbTeHTnrDp5SHfTjxmgsjkBJo/1Gd91FshFTb3RpM+exVzV CqbvV3NiM1bGMYfhOFAKALtPDlbTpuq9rUTyieZyEwG/dlTZKAggP8fKtK2oA+61 BjMg2HRkbAZsAqny5GixD5qMQD4wGewsNYxWryeAa4WHs650sW3Ypvtv5dFicoPj cbXzJZHpJ4kFOhXFdMmixDoBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUIIwXn7WB JC4OY1Ik3br9EayUt3IwHwYDVR0jBBgwFoAUKd19cX6tuLQaq4BklQzu8cj9SBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NDUzLzVFMzlEMDU2Qzc5 MDExRjE4NDZDRjc3RjQwMTFGOTcwL0tkMTljWDZ0dUxRYXE0QmtsUXp1OGNqOVNC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS2QxOWNYNnR1TFFhcTRCa2xRenU4Y2o5U0JRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTQ1My81RTM5RDA1NkM3OTAxMUYxODQ2Q0Y3N0Y0MDExRjk3MC9ERURBOUQyRUM3 OTIxMUYxOTc5MDhBRDM0MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAOfDdgwDQYJKoZIhvcNAQELBQADggEBACkGefDSVJv+0Cxu9rieAEmU onWGV0Vz/Ug/rkN3VArG3kWveK5Ss7fHBD73wefsO57t1JiajKqLjnNgEpymAN3C xgpd5KDo0yNDWT829CQYH8zfo5zLUvbHBkKAcImb4XCmSZG/A6PIJ95e2GmR0iqU rE06kracSUnCbpHFQV/XbnrCHSGd1rB5Gwtgl35GbGYCpZxFuG8AqO277TujOisx CmXKnV0fpWa3YwipN4TKCGp90eD6kKpmCi6t1KqB51XT/ytfSYTN/FAqbCXQgRJG 1p9qwhFMZykjiouWF6RXhsk6U5inEUqs8E3G14/LqmWxV/r3Jr20WY6hyHhAX+0= -----END CERTIFICATE-----Generated at Thu Oct 22 20:02:12 2026 by rpki-client