$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa File: AAEECC6A6E2D11F1A887915478A30FBC.roa (raw, json) Hash identifier: KDmIL0UVKyRTr72nl0LWwKgCMUpqUwyvh8foGwA2BHY= Subject key identifier: C3:B4:49:F2:B4:74:B3:A5:54:5F:95:71:44:67:DC:30:0C:6B:89:C5 Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Certificate serial: 85 Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa Signing time: Tue 13 Oct 2026 15:40:59 +0000 ROA not before: Tue 13 Oct 2026 15:40:59 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 140900 IP address blocks: 151.123.227.0/24 maxlen: 24 151.123.228.0/24 maxlen: 24 151.123.229.0/24 maxlen: 24 151.123.230.0/24 maxlen: 24 151.123.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D Validity Not Before: Oct 13 15:40:59 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ace510b-9c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:64:52:e9:bb:da:c3:55:0c:8f:b3:08:25: bb:5b:a2:f8:91:bb:7a:e7:6f:73:52:18:fa:3e:f8: 61:23:80:09:34:45:5c:21:af:79:c3:b9:3d:68:90: 0e:af:ca:d7:0c:ec:92:8e:1b:2c:eb:d6:48:e1:1c: 43:e4:ab:fe:f6:9a:fd:78:cf:66:e5:96:8a:a8:1c: 9f:0d:d6:d3:53:a1:c9:a3:21:ee:20:46:ba:03:a5: 09:3b:7c:27:bb:6c:32:b3:6a:a3:27:10:c1:e3:7c: e9:15:e1:6b:34:9b:dc:df:37:ed:47:44:dc:81:12: d6:c2:0d:c2:4b:7e:41:de:cd:b0:08:ba:71:0c:49: e3:19:24:d3:1a:9d:45:03:b0:c0:ac:39:b1:56:de: 41:b9:d5:92:7d:90:ce:c3:93:4c:b0:7b:87:5a:76: 69:e6:cb:18:58:f7:88:fa:d3:06:1e:d1:1b:c7:47: 86:ed:3d:8d:30:b7:08:62:c0:f5:8d:30:b3:44:3d: 92:38:29:19:ca:2a:58:b5:3b:eb:2e:10:41:1f:66: e1:9a:a5:fd:97:de:f7:ef:05:32:0d:50:d9:aa:f7: e6:db:98:99:9a:98:d7:8a:96:aa:61:44:59:3c:f3: 4a:c2:00:5c:13:77:83:22:f6:3c:88:70:3c:5d:b8: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:49:F2:B4:74:B3:A5:54:5F:95:71:44:67:DC:30:0C:6B:89:C5 X509v3 Authority Key Identifier: keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/AAEECC6A6E2D11F1A887915478A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 151.123.227.0-151.123.231.255 Signature Algorithm: sha256WithRSAEncryption 38:01:61:77:5d:17:1b:ec:9c:1a:0f:c0:a7:70:28:04:72:54: 51:b4:41:b7:83:15:16:f8:49:71:72:c3:7d:92:43:88:2e:73: ac:7d:23:c9:ce:36:32:75:f9:5c:40:c5:72:42:4b:15:23:44: 23:cd:7a:b6:7e:a2:1c:20:1b:99:39:a5:29:34:a1:bc:50:18: e3:1e:4e:77:8d:55:54:66:fc:44:63:33:71:22:e8:c1:43:45: af:e9:f2:7c:ae:e3:6e:74:cb:d6:5b:ea:3a:b9:73:99:af:a1: 11:f3:65:f8:f6:05:41:cb:cb:07:26:3a:b1:a2:f8:86:e8:8e: 53:28:98:af:22:04:5e:b0:32:8b:da:89:f3:9e:0d:94:dd:d0: 40:0a:56:06:64:2e:4d:bf:51:be:eb:91:0d:9c:fc:07:59:84: 5f:3b:a4:24:88:e7:55:ff:8f:07:88:35:26:37:66:fc:b6:d0: 9e:a5:42:03:04:3c:b8:06:f2:e2:e0:2f:41:72:1c:2c:84:d7: 61:af:61:f3:da:57:6c:e2:d5:e1:db:08:fa:b0:e4:be:dd:94: e1:dd:cd:88:c7:44:40:f5:9c:08:fc:ed:bd:bb:2b:0a:3a:b3: af:5f:be:8f:aa:ab:f6:10:40:b3:33:fd:ae:91:de:38:63:ee: 26:0a:9a:30 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDYzN0Q1NkE3NUJCOTVCQzVDOUU2QjA4OUQ5MzRDQjVF MkZCRDk2MkQwHhcNMjYxMDEzMTU0MDU5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNlNTEwYi05YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CZkUum72sNVDI+zCCW7W6L4kbt6529zUhj6PvhhI4AJNEVcIa95w7k9aJAO r8rXDOySjhss69ZI4RxD5Kv+9pr9eM9m5ZaKqByfDdbTU6HJoyHuIEa6A6UJO3wn u2wys2qjJxDB43zpFeFrNJvc3zftR0TcgRLWwg3CS35B3s2wCLpxDEnjGSTTGp1F A7DArDmxVt5BudWSfZDOw5NMsHuHWnZp5ssYWPeI+tMGHtEbx0eG7T2NMLcIYsD1 jTCzRD2SOCkZyipYtTvrLhBBH2bhmqX9l9737wUyDVDZqvfm25iZmpjXipaqYURZ PPNKwgBcE3eDIvY8iHA8Xbg6VwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFMO0SfK0 dLOlVF+VcURn3DAMa4nFMB8GA1UdIwQYMBaAFGN9VqdbuVvFyeawidk0y14vvZYt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS83N0FDN0JEMjM0 RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9ZMzFXcDF1NVc4WEo1ckNKMlRUTFhpLTls aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvNzdBQzdCRDIzNEY3MTFGMUJCNzM2Q0E3N0NFRTUyOEUvQUFFRUNDNkE2 RTJEMTFGMUE4ODc5MTU0NzhBMzBGQkMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBACXe+MDBAOXe+AwDQYJKoZIhvcNAQELBQADggEBADgBYXddFxvs nBoPwKdwKARyVFG0QbeDFRb4SXFyw32SQ4guc6x9I8nONjJ1+VxAxXJCSxUjRCPN erZ+ohwgG5k5pSk0obxQGOMeTneNVVRm/ERjM3Ei6MFDRa/p8nyu4250y9Zb6jq5 c5mvoRHzZfj2BUHLywcmOrGi+IbojlMomK8iBF6wMovaifOeDZTd0EAKVgZkLk2/ Ub7rkQ2c/AdZhF87pCSI51X/jweINSY3Zvy20J6lQgMEPLgG8uLgL0FyHCyE12Gv YfPaV2zi1eHbCPqw5L7dlOHdzYjHRED1nAj87b27Kwo6s69fvo+qq/YQQLMz/a6R 3jhj7iYKmjA= -----END CERTIFICATE-----Generated at Tue Oct 27 12:31:54 2026 by rpki-client