$ rpki-client -vvf rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/9C23DD445B4811F187CD073F95833773.roa File: 9C23DD445B4811F187CD073F95833773.roa (raw, json) Hash identifier: ljPRUB3g7RiWyYH/UgctlTqbP9nIAv9HVVId34sT6J4= Subject key identifier: 69:1A:D4:AE:68:D7:62:FF:D8:50:3D:C8:C8:F0:10:1E:CD:86:08:FF Certificate issuer: /CN=A915440E/serialNumber=4BACDC282AD56E0CDA31D7A9068CD75B94A722C1 Certificate serial: 03 Authority key identifier: 4B:AC:DC:28:2A:D5:6E:0C:DA:31:D7:A9:06:8C:D7:5B:94:A7:22:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6zcKCrVbgzaMdepBozXW5SnIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/9C23DD445B4811F187CD073F95833773.roa Signing time: Fri 29 May 2026 10:24:44 +0000 ROA not before: Fri 29 May 2026 10:24:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136614 IP address blocks: 163.128.28.0/24 maxlen: 24 163.128.29.0/24 maxlen: 24 2402:5160::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.crl rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6zcKCrVbgzaMdepBozXW5SnIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 09:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915440E, serialNumber=4BACDC282AD56E0CDA31D7A9068CD75B94A722C1 Validity Not Before: May 29 10:24:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a19696c-b22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:32:14:cd:6a:12:be:d2:1c:38:38:a3:aa:7e: d3:9e:af:e6:b2:34:8b:fc:fe:75:3e:af:c5:52:83: 68:b1:5c:5b:57:04:01:06:ad:ec:d5:2f:2f:a5:a5: 56:1e:70:60:3c:94:b7:cf:e9:a7:ad:58:0c:0b:32: 5b:05:91:ec:99:86:03:6d:4d:5c:42:b7:d4:86:5e: 3a:3c:cc:62:c7:3b:d6:1b:77:8d:84:5c:cb:41:09: 90:d2:2f:c5:65:36:13:a7:4e:86:5f:6a:85:14:32: 95:f9:06:af:d4:71:25:ad:10:7f:7c:8b:53:cd:5e: 33:69:cf:85:16:ae:14:00:f5:1c:93:00:dd:3c:8b: 31:87:00:2e:f9:53:00:cd:aa:39:67:73:70:eb:9f: f3:9e:0a:7a:81:e7:22:98:55:cb:fb:fa:6d:5d:e2: ec:c3:ca:e4:3d:e0:16:2a:32:b2:07:05:55:de:c4: 1a:40:79:db:bd:3b:45:3f:31:bc:ef:1a:88:f0:f0: 36:a5:1d:77:6c:f9:06:c7:26:ab:6a:f7:08:5b:d7: f6:52:25:f0:67:be:ef:57:12:f0:26:db:2f:e0:8f: b5:bb:53:16:df:d0:30:ff:f5:5a:f4:50:96:cc:0a: d2:61:53:75:11:24:c3:30:07:b9:1f:d6:b2:8d:01: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:D4:AE:68:D7:62:FF:D8:50:3D:C8:C8:F0:10:1E:CD:86:08:FF X509v3 Authority Key Identifier: keyid:4B:AC:DC:28:2A:D5:6E:0C:DA:31:D7:A9:06:8C:D7:5B:94:A7:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/S6zcKCrVbgzaMdepBozXW5SnIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6zcKCrVbgzaMdepBozXW5SnIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915440E/EA05A2CE5B4611F1B032521094833773/9C23DD445B4811F187CD073F95833773.roa sbgp-ipAddrBlock: critical IPv4: 163.128.28.0/23 IPv6: 2402:5160::/32 Signature Algorithm: sha256WithRSAEncryption 6d:b9:ca:57:be:41:73:43:da:8d:5d:9e:11:b8:d9:f9:ab:ca: a2:7e:bd:41:55:cb:94:88:ea:05:84:94:96:07:b3:a6:16:61: 92:2e:dd:55:db:9e:d5:5d:4e:17:23:49:33:ff:ee:74:d3:1f: 45:ea:6c:95:cc:f9:d6:9b:ca:9f:a8:31:07:42:5f:a3:85:b8: a5:3a:cf:0f:df:29:ee:c3:32:0d:63:e9:f1:ad:09:0c:fa:a8: be:4c:6c:f6:29:15:ed:e1:f5:63:4c:8d:d6:1c:99:c2:61:f8: 16:9e:15:11:4e:6b:5a:ad:1a:4e:65:3f:b4:29:e6:cc:ee:76: 10:5d:46:ff:68:39:db:03:01:bd:6b:8d:ca:5d:b4:1c:92:cd: be:a4:ee:75:49:38:33:ad:1e:86:6b:2f:0a:8c:5c:19:c4:4f: 60:7e:91:f1:c0:4f:ef:61:d9:8f:e0:5f:cb:b8:59:9a:0b:05: 1d:5c:6b:48:04:fc:b4:20:b6:8f:e0:ea:ff:e5:96:ec:b0:e3: de:38:ca:ac:90:8a:8d:9b:d8:b8:79:38:d7:a0:51:b3:9a:32: 2f:af:7c:a3:36:b6:4e:53:33:fa:b3:9a:2e:02:41:97:9e:25: 7f:de:80:1e:bb:d2:55:ae:23:ff:43:2f:b2:a7:9d:de:85:cd: 46:3c:9b:d9 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDQwRTExMC8GA1UEBRMoNEJBQ0RDMjgyQUQ1NkUwQ0RBMzFEN0E5MDY4Q0Q3NUI5 NEE3MjJDMTAeFw0yNjA1MjkxMDI0NDRaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMTk2OTZjLWIyMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnMhTNahK+0hw4OKOqftOer+ayNIv8/nU+r8VSg2ixXFtXBAEGrezVLy+lpVYe cGA8lLfP6aetWAwLMlsFkeyZhgNtTVxCt9SGXjo8zGLHO9Ybd42EXMtBCZDSL8Vl NhOnToZfaoUUMpX5Bq/UcSWtEH98i1PNXjNpz4UWrhQA9RyTAN08izGHAC75UwDN qjlnc3Drn/OeCnqB5yKYVcv7+m1d4uzDyuQ94BYqMrIHBVXexBpAedu9O0U/Mbzv Gojw8DalHXds+QbHJqtq9whb1/ZSJfBnvu9XEvAm2y/gj7W7Uxbf0DD/9Vr0UJbM CtJhU3URJMMwB7kf1rKNAfRdAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUaRrUrmjX Yv/YUD3IyPAQHs2GCP8wHwYDVR0jBBgwFoAUS6zcKCrVbgzaMdepBozXW5SnIsEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NDBFL0VBMDVBMkNFNUI0 NjExRjFCMDMyNTIxMDk0ODMzNzczL1M2emNLQ3JWYmd6YU1kZXBCb3pYVzVTbklz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzZ6Y0tDclZiZ3phTWRlcEJvelhXNVNuSXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDQwRS9FQTA1QTJDRTVCNDYxMUYxQjAzMjUyMTA5NDgzMzc3My85QzIzREQ0NDVC NDgxMUYxODdDRDA3M0Y5NTgzMzc3My5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAGjgBwwDQQCAAIwBwMFACQCUWAwDQYJKoZIhvcNAQELBQADggEBAG25 yle+QXND2o1dnhG42fmryqJ+vUFVy5SI6gWElJYHs6YWYZIu3VXbntVdThcjSTP/ 7nTTH0XqbJXM+dabyp+oMQdCX6OFuKU6zw/fKe7DMg1j6fGtCQz6qL5MbPYpFe3h 9WNMjdYcmcJh+BaeFRFOa1qtGk5lP7Qp5szudhBdRv9oOdsDAb1rjcpdtBySzb6k 7nVJODOtHoZrLwqMXBnET2B+kfHAT+9h2Y/gX8u4WZoLBR1ca0gE/LQgto/g6v/l luyw4944yqyQio2b2Lh5ONegUbOaMi+vfKM2tk5TM/qzmi4CQZeeJX/egB670lWu I/9DL7Knnd6FzUY8m9k= -----END CERTIFICATE-----Generated at Wed Jun 24 12:15:32 2026 by rpki-client