$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa File: 69FDEAC6645511EFB98C143DC4F9AE02.roa (raw, json) Hash identifier: 09VvW3k0eoInlQS+H6ZHr0QcmrKaADNzaQ8RUnamjko= Subject key identifier: 21:DA:85:25:98:7F:E9:9B:54:23:BA:D0:2F:14:33:F4:1D:0C:DC:5E Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0E58 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa Signing time: Thu 30 Jul 2026 17:35:09 +0000 ROA not before: Thu 30 Jul 2026 17:35:09 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 141180 IP address blocks: 87.119.2.0/24 maxlen: 24 87.119.3.0/24 maxlen: 24 87.119.4.0/24 maxlen: 24 87.119.5.0/24 maxlen: 24 87.119.6.0/24 maxlen: 24 87.119.7.0/24 maxlen: 24 87.119.8.0/24 maxlen: 24 87.119.10.0/24 maxlen: 24 87.119.11.0/24 maxlen: 24 87.119.13.0/24 maxlen: 24 87.119.14.0/24 maxlen: 24 87.119.15.0/24 maxlen: 24 87.119.16.0/24 maxlen: 24 87.119.17.0/24 maxlen: 24 87.119.18.0/24 maxlen: 24 87.119.19.0/24 maxlen: 24 87.119.32.0/24 maxlen: 24 87.119.33.0/24 maxlen: 24 87.119.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3672 (0xe58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Jul 30 17:35:09 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a6b8b4d-daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:87:34:52:a1:8a:52:e9:0c:e4:4e:89:0e:a9: 58:f4:3f:bf:ea:87:44:0c:62:7b:d6:29:81:ae:53: a3:40:89:a6:20:ed:4c:1c:f5:97:e5:e1:77:6e:9e: 94:fb:f4:4d:8a:e0:f8:f6:23:65:9f:17:f5:04:73: cf:99:5e:b1:e6:b8:08:c6:5d:03:79:e4:7f:46:46: 0c:a9:03:8a:e5:34:4e:22:82:de:b0:f6:2b:ae:0f: 59:9f:3b:d9:9a:61:e9:48:a2:d0:7a:17:7a:ce:7a: 36:00:44:82:b9:dc:44:38:46:db:cb:c4:1d:09:4f: 87:32:6a:83:68:e6:fc:51:95:ec:72:ad:c7:23:1e: 1f:9d:c1:3d:ab:35:fd:d8:b1:75:ae:08:ad:eb:50: 0e:c2:4a:56:7d:0e:cf:5c:f3:67:49:58:10:55:5f: d6:e3:74:bd:cf:2b:b7:7e:28:1b:59:cc:c5:2d:e8: 49:1c:70:b2:a9:86:23:6e:52:24:fb:27:8a:d6:0c: 35:63:f7:46:54:89:94:1c:c1:0e:90:3a:d7:ea:0e: cd:42:ae:85:3b:91:07:fb:95:a4:3e:96:de:97:c8: 04:fd:a2:05:7d:1e:96:1a:e5:95:09:75:ee:c4:64: a3:52:49:27:eb:d1:b3:1c:ad:9e:ab:de:3e:26:99: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DA:85:25:98:7F:E9:9B:54:23:BA:D0:2F:14:33:F4:1D:0C:DC:5E X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/69FDEAC6645511EFB98C143DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 87.119.2.0-87.119.8.255 87.119.10.0/23 87.119.13.0-87.119.19.255 87.119.32.0-87.119.34.255 Signature Algorithm: sha256WithRSAEncryption 3b:1a:c7:85:f7:f4:7a:4d:f3:df:d1:d7:4d:c2:dc:38:c9:4e: b5:a6:f3:ac:17:01:53:6b:4c:8f:96:a9:f7:ce:a5:b6:07:70: 39:ad:e3:66:62:b8:1d:a6:41:14:23:75:91:9c:a3:ce:b7:b9: 8f:a0:10:4b:b7:70:c1:78:0d:33:9b:3d:65:60:9c:09:f0:32: 70:63:ba:d7:f1:ae:a7:b6:f2:cc:3b:7c:46:de:7c:66:90:b3: 87:dd:d2:25:21:09:90:fc:8d:17:34:15:9b:22:c1:c1:7c:d9: e7:7d:e6:c5:78:20:90:e5:ab:c3:b7:21:fe:36:f5:0f:86:c8: c5:ea:6b:0f:a2:0b:24:f5:10:ca:cf:1d:08:08:f8:d7:7c:af: c7:fe:33:e5:06:00:34:a6:b2:c5:21:d6:3b:3c:b5:ed:79:86: dc:dd:83:c7:fc:9a:9d:77:3d:16:cb:58:af:08:32:a3:bc:96: 1d:85:77:8e:78:c1:49:ae:63:9f:96:4e:d2:e6:e1:f5:4b:50: a8:4f:5f:d3:7c:98:f0:f0:0f:08:ae:f7:ac:d2:58:ad:4f:f6: eb:af:4f:ea:cf:ef:a0:ff:e9:53:85:2b:a4:57:c1:ea:58:5a: 30:92:41:01:8b:f8:96:52:ee:55:76:69:2a:56:c8:19:a6:8d: eb:6f:d4:ac -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICDlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjYwNzMwMTczNTA5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZiOGI0ZC1kYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14c0UqGKUukM5E6JDqlY9D+/6odEDGJ71imBrlOjQImmIO1MHPWX5eF3bp6U +/RNiuD49iNlnxf1BHPPmV6x5rgIxl0DeeR/RkYMqQOK5TROIoLesPYrrg9ZnzvZ mmHpSKLQehd6zno2AESCudxEOEbby8QdCU+HMmqDaOb8UZXscq3HIx4fncE9qzX9 2LF1rgit61AOwkpWfQ7PXPNnSVgQVV/W43S9zyu3figbWczFLehJHHCyqYYjblIk +yeK1gw1Y/dGVImUHMEOkDrX6g7NQq6FO5EH+5WkPpbel8gE/aIFfR6WGuWVCXXu xGSjUkkn69GzHK2eq94+JplC2QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFCHahSWY f+mbVCO60C8UM/QdDNxeMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2NzgvQkVCMzMzRkEyMjUxMTFFQUIyQ0I4NDY5QzRGOUFFMDIvNjlGREVBQzY2 NDU1MTFFRkI5OEMxNDNEQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwMAwDBAFXdwIDBABXdwgDBAFXdwowDAMEAFd3DQMEAld3EDAMAwQFV3cg AwQAV3ciMA0GCSqGSIb3DQEBCwUAA4IBAQA7GseF9/R6TfPf0ddNwtw4yU61pvOs FwFTa0yPlqn3zqW2B3A5reNmYrgdpkEUI3WRnKPOt7mPoBBLt3DBeA0zmz1lYJwJ 8DJwY7rX8a6ntvLMO3xG3nxmkLOH3dIlIQmQ/I0XNBWbIsHBfNnnfebFeCCQ5avD tyH+NvUPhsjF6msPogsk9RDKzx0ICPjXfK/H/jPlBgA0prLFIdY7PLXteYbc3YPH /Jqddz0Wy1ivCDKjvJYdhXeOeMFJrmOflk7S5uH1S1CoT1/TfJjw8A8Irves0lit T/brr0/qz++g/+lThSukV8HqWFowkkEBi/iWUu5VdmkqVsgZpo3rb9Ss -----END CERTIFICATE-----Generated at Thu Sep 10 21:59:05 2026 by rpki-client