$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/7231A4D0C49811F19B22255D5611F970.roa File: 7231A4D0C49811F19B22255D5611F970.roa (raw, json) Hash identifier: 9/fgnu9E4e9LnIGfEROu7ZmqKYYNtqS+tLoxhfBD5DM= Subject key identifier: 40:EF:03:0E:5F:BD:46:5D:EF:AB:6D:BC:8F:A2:52:73:71:A7:0E:EA Certificate issuer: /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89 Certificate serial: 7F Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/7231A4D0C49811F19B22255D5611F970.roa Signing time: Sat 10 Oct 2026 10:50:46 +0000 ROA not before: Sat 10 Oct 2026 10:50:45 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 400619 IP address blocks: 162.4.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89 Validity Not Before: Oct 10 10:50:45 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aca1885-cf10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:46:88:63:ca:f8:b7:ed:8b:dd:84:ac:b4: 4e:e2:d5:7a:9a:67:28:05:da:e7:7d:e7:af:f8:f7: 2c:5f:43:02:88:06:07:33:3a:fa:ad:7c:a8:29:b3: 7b:e2:86:41:88:83:74:c5:0f:2e:ec:1e:4e:51:82: a3:ac:10:9a:4c:84:c8:b1:e7:0f:bd:b8:22:5e:eb: c7:a1:18:70:aa:e3:6b:ed:66:37:e3:4e:e1:b0:6c: 32:84:bb:5b:4f:3d:35:8c:bf:ec:37:6b:2c:eb:4a: eb:59:38:b4:0c:1f:bd:00:6b:53:6b:b0:23:84:c8: 56:4c:0b:46:f2:c1:68:fe:70:e2:fc:ab:3f:36:2e: 80:64:2a:22:bb:d6:ae:ad:11:a5:fa:06:c5:6f:76: c5:c7:14:ac:98:8e:92:94:d2:55:fa:ab:5b:24:b9: 2f:d6:79:ab:d8:cc:d5:81:b7:37:d7:9a:f8:d6:a8: a1:ac:6d:9a:fe:0a:0f:b2:49:be:02:29:3c:46:e7: ce:ce:7d:01:ae:2d:c2:e7:cd:59:7a:e8:af:61:40: d8:d5:db:2e:09:ff:dd:3c:b2:96:9f:5b:44:b4:32: bb:01:50:ae:bc:7f:fc:b0:28:a3:c2:81:8a:8b:c4: 2a:d0:6e:dc:d9:78:56:2c:5a:0a:15:97:7a:c2:45: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EF:03:0E:5F:BD:46:5D:EF:AB:6D:BC:8F:A2:52:73:71:A7:0E:EA X509v3 Authority Key Identifier: keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/7231A4D0C49811F19B22255D5611F970.roa sbgp-ipAddrBlock: critical IPv4: 162.4.40.0/23 Signature Algorithm: sha256WithRSAEncryption a1:11:c0:4f:ce:73:ef:3a:00:e9:22:8e:99:83:c5:b1:90:75: 1f:67:1b:22:b2:17:96:c2:59:99:27:40:a8:42:e7:c7:99:71: 07:ef:49:50:f1:43:bd:a1:c7:13:66:fb:22:8f:83:0e:1d:d0: 4d:55:cf:b9:ef:23:87:79:db:3f:21:8b:d4:09:49:18:bb:52: 1d:5f:61:90:4a:35:fe:14:32:68:10:2e:18:3d:6b:39:e3:93: c4:37:9d:23:b6:71:18:f2:bb:2e:ac:c5:41:8e:83:37:e3:17: d0:95:d0:b7:5c:a7:d0:77:46:5e:03:1d:69:6c:ec:96:b5:ec: 4d:3c:b4:21:61:a4:7f:be:b7:a0:57:88:3b:a9:a6:33:2d:60: 0b:a9:88:b2:44:f7:71:46:43:d3:b0:02:6b:c6:21:25:11:92: 29:a1:a3:26:63:3e:55:7d:0d:90:d0:02:55:35:c5:dd:71:0d: 2d:cb:a3:e0:1e:b3:82:d6:79:91:43:d9:bc:4f:b5:b7:46:01: 7a:95:e0:84:42:98:db:72:b9:f9:fb:66:80:e4:62:cf:7b:5d: 2f:94:54:47:e8:28:08:2b:79:27:b4:3b:cb:eb:27:53:40:a9: 89:25:58:f5:e3:33:27:c9:7e:e7:f6:d6:fd:32:00:aa:1d:0f: 22:f7:90:d1 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Njk5QzExMC8GA1UEBRMoNUJCOUE4RTFBNDA2MEFDQzJGM0JGQTIxRUZDQUQyQzMw NjZFOEU4OTAeFw0yNjEwMTAxMDUwNDVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2ExODg1LWNmMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCV5kaIY8r4t+2L3YSstE7i1XqaZygF2ud956/49yxfQwKIBgczOvqtfKgps3vi hkGIg3TFDy7sHk5RgqOsEJpMhMix5w+9uCJe68ehGHCq42vtZjfjTuGwbDKEu1tP PTWMv+w3ayzrSutZOLQMH70Aa1NrsCOEyFZMC0bywWj+cOL8qz82LoBkKiK71q6t EaX6BsVvdsXHFKyYjpKU0lX6q1skuS/WeavYzNWBtzfXmvjWqKGsbZr+Cg+ySb4C KTxG587OfQGuLcLnzVl66K9hQNjV2y4J/908spafW0S0MrsBUK68f/ywKKPCgYqL xCrQbtzZeFYsWgoVl3rCRV3LAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUQO8DDl+9 Rl3vq228j6JSc3GnDuowHwYDVR0jBBgwFoAUW7mo4aQGCswvO/oh78rSwwZujokw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDLzlCOURDQTMyNDFG OTExRjFBN0FBQTAzM0JGODMzNzczL1c3bW80YVFHQ3N3dk9fb2g3OHJTd3dadWpv ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVzdtbzRhUUdDc3d2T19vaDc4clN3d1p1am9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk5Qy85QjlEQ0EzMjQxRjkxMUYxQTdBQUEwMzNCRjgzMzc3My83MjMxQTREMEM0 OTgxMUYxOUIyMjI1NUQ1NjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGiBCgwDQYJKoZIhvcNAQELBQADggEBAKERwE/Oc+86AOkijpmDxbGQ dR9nGyKyF5bCWZknQKhC58eZcQfvSVDxQ72hxxNm+yKPgw4d0E1Vz7nvI4d52z8h i9QJSRi7Uh1fYZBKNf4UMmgQLhg9aznjk8Q3nSO2cRjyuy6sxUGOgzfjF9CV0Ldc p9B3Rl4DHWls7Ja17E08tCFhpH++t6BXiDuppjMtYAupiLJE93FGQ9OwAmvGISUR kimhoyZjPlV9DZDQAlU1xd1xDS3Lo+Aes4LWeZFD2bxPtbdGAXqV4IRCmNtyufn7 ZoDkYs97XS+UVEfoKAgreSe0O8vrJ1NAqYklWPXjMyfJfuf21v0yAKodDyL3kNE= -----END CERTIFICATE-----Generated at Tue Oct 20 22:18:26 2026 by rpki-client