$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/BC0F1A48A67911F1932095496A11F970.roa File: BC0F1A48A67911F1932095496A11F970.roa (raw, json) Hash identifier: o1LDxCSAZOslL3FS+wqhWw7kZhVq2twAD8H5vbfybgY= Subject key identifier: 4D:7C:D9:DA:3B:FD:6C:C7:7C:C9:FF:BA:01:7D:59:7C:B9:57:58:9D Certificate issuer: /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7 Certificate serial: 53 Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/BC0F1A48A67911F1932095496A11F970.roa Signing time: Tue 29 Sep 2026 08:25:56 +0000 ROA not before: Tue 29 Sep 2026 08:25:56 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 2914 IP address blocks: 186.240.228.0/24 maxlen: 24 186.240.229.0/24 maxlen: 24 186.240.230.0/24 maxlen: 24 186.240.231.0/24 maxlen: 24 186.240.232.0/24 maxlen: 24 186.240.233.0/24 maxlen: 24 186.240.234.0/24 maxlen: 24 186.240.235.0/24 maxlen: 24 186.240.241.0/24 maxlen: 24 186.240.242.0/24 maxlen: 24 186.240.243.0/24 maxlen: 24 186.240.244.0/24 maxlen: 24 186.240.246.0/24 maxlen: 24 186.240.247.0/24 maxlen: 24 186.240.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 00:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7 Validity Not Before: Sep 29 08:25:56 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6abb7614-ec79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:f0:a1:d4:a9:70:40:66:9b:b8:af:20:f7: b1:9a:64:e2:d1:93:86:8f:a5:bc:59:50:3c:05:dd: 3c:d7:ba:a0:2e:de:87:53:ca:be:6e:c5:3c:8b:9d: 0e:6f:4d:3c:cd:99:e7:e1:3f:76:8d:58:14:9d:fc: a6:c2:83:01:e2:bd:b2:03:25:a1:18:bc:72:25:62: e9:0d:e0:13:b6:61:ee:cf:52:a4:13:73:62:de:df: 6e:6f:e9:c8:cc:0d:6a:7d:30:06:75:70:9b:08:55: 93:e4:14:85:16:da:94:17:f0:81:c5:91:96:3c:bc: 8b:0e:85:5a:29:a1:07:1d:cd:5c:98:bd:5b:10:de: d5:bc:70:f9:71:8b:be:b0:8b:57:d3:e0:fc:ad:00: 2a:fe:52:b5:45:29:2e:b8:a5:fc:73:dc:7f:c5:4d: 03:47:af:b3:4e:f0:b9:ca:6a:c6:80:47:05:71:c5: ac:d1:70:b2:e7:d6:93:8a:e6:bc:df:f5:1b:7d:b2: cd:5a:de:d4:ef:8b:a4:e2:2d:dd:35:bb:38:70:a3: dd:c1:8e:7f:6a:02:55:35:22:af:cf:cc:4e:4e:94: 94:c9:ac:56:91:53:9d:17:fc:ce:17:19:df:0a:6f: 24:a7:1c:af:cd:11:a1:5a:b2:84:22:ca:79:c1:41: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7C:D9:DA:3B:FD:6C:C7:7C:C9:FF:BA:01:7D:59:7C:B9:57:58:9D X509v3 Authority Key Identifier: keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/BC0F1A48A67911F1932095496A11F970.roa sbgp-ipAddrBlock: critical IPv4: 186.240.228.0-186.240.235.255 186.240.241.0-186.240.244.255 186.240.246.0-186.240.248.255 Signature Algorithm: sha256WithRSAEncryption 2b:e8:f1:15:00:8a:25:21:03:5c:47:6f:df:91:87:56:1c:0e: c8:51:bc:69:26:89:68:c0:0d:2f:1a:cb:85:47:96:21:e0:f5: 6a:00:92:a5:f6:4f:90:49:21:62:e4:f6:60:76:37:1c:e6:2c: a9:6c:cf:54:97:10:26:7a:45:53:a0:1d:4a:bb:e7:12:f4:48: 8e:ef:11:99:fb:82:05:78:8f:c7:a6:b6:cb:cc:65:47:87:6d: 01:6c:f9:05:20:31:a7:ab:1a:40:83:50:a5:4d:d5:e4:f0:e2: e2:c0:62:7e:6a:a5:6a:86:33:31:74:3a:4d:21:8d:a8:a0:57: 4b:b5:8e:e0:f2:0e:50:d8:a9:95:ae:90:98:ce:4b:a5:27:ae: 96:27:c7:00:c1:e3:4e:56:7f:b2:b6:13:13:dd:81:e2:ac:00: 5a:0a:6c:64:88:31:a4:2b:d6:22:b6:f3:1c:8d:0b:ef:4d:f4: 6e:14:07:46:de:f3:37:be:64:52:1d:9a:2f:4d:4c:a4:1e:97: 62:b6:b4:bc:40:a0:78:a2:de:64:18:af:c7:0f:73:27:35:96: 1c:2f:98:86:c3:f5:e7:a8:62:04:bd:68:40:dc:eb:65:2c:ef: 62:37:0a:38:25:da:88:15:e4:da:2f:61:fb:85:d1:bc:40:f4: 9f:65:40:25 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0 N0I5NUVBNzAeFw0yNjA5MjkwODI1NTZaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmI3NjE0LWVjNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcE/Ch1KlwQGabuK8g97GaZOLRk4aPpbxZUDwF3TzXuqAu3odTyr5uxTyLnQ5v TTzNmefhP3aNWBSd/KbCgwHivbIDJaEYvHIlYukN4BO2Ye7PUqQTc2Le325v6cjM DWp9MAZ1cJsIVZPkFIUW2pQX8IHFkZY8vIsOhVopoQcdzVyYvVsQ3tW8cPlxi76w i1fT4PytACr+UrVFKS64pfxz3H/FTQNHr7NO8LnKasaARwVxxazRcLLn1pOK5rzf 9Rt9ss1a3tTvi6TiLd01uzhwo93Bjn9qAlU1Iq/PzE5OlJTJrFaRU50X/M4XGd8K bySnHK/NEaFasoQiynnBQdH/AgMBAAGjggKEMIICgDAdBgNVHQ4EFgQUTXzZ2jv9 bMd8yf+6AX1ZfLlXWJ0wHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9BRUZDNTVCMDRGRjIxMUYxOUIxMjdERjE5RUVFNTI4RS9CQzBGMUE0OEE2 NzkxMUYxOTMyMDk1NDk2QTExRjk3MC5yb2EwQwYIKwYBBQUHAQcBAf8ENDAyMDAE AgABMCowDAMEArrw5AMEArrw6DAMAwQAuvDxAwQAuvD0MAwDBAG68PYDBAC68Pgw DQYJKoZIhvcNAQELBQADggEBACvo8RUAiiUhA1xHb9+Rh1YcDshRvGkmiWjADS8a y4VHliHg9WoAkqX2T5BJIWLk9mB2NxzmLKlsz1SXECZ6RVOgHUq75xL0SI7vEZn7 ggV4j8emtsvMZUeHbQFs+QUgMaerGkCDUKVN1eTw4uLAYn5qpWqGMzF0Ok0hjaig V0u1juDyDlDYqZWukJjOS6UnrpYnxwDB405Wf7K2ExPdgeKsAFoKbGSIMaQr1iK2 8xyNC+9N9G4UB0be8ze+ZFIdmi9NTKQel2K2tLxAoHii3mQYr8cPcyc1lhwvmIbD 9eeoYgS9aEDc62Us72I3Cjgl2ogV5NovYfuF0bxA9J9lQCU= -----END CERTIFICATE-----Generated at Tue Oct 6 20:24:42 2026 by rpki-client