$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa File: 0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa (raw, json) Hash identifier: 4BxNlRQfG7e9eIyKUxoLWMzCNpqeIW8fRNXSiyA6bk4= Subject key identifier: 8C:C2:69:61:ED:E8:CB:F4:26:63:1F:B2:58:26:A4:E7:5C:14:91:AA Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 0BAA Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa Signing time: Wed 12 Aug 2026 19:38:52 +0000 ROA not before: Wed 12 Aug 2026 19:38:52 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 137969 IP address blocks: 39.109.66.0/23 maxlen: 23 39.109.66.0/24 maxlen: 24 39.109.67.0/24 maxlen: 24 39.109.68.0/22 maxlen: 22 39.109.68.0/24 maxlen: 24 39.109.69.0/24 maxlen: 24 39.109.70.0/24 maxlen: 24 39.109.71.0/24 maxlen: 24 39.109.72.0/21 maxlen: 21 39.109.72.0/24 maxlen: 24 39.109.73.0/24 maxlen: 24 39.109.74.0/24 maxlen: 24 39.109.75.0/24 maxlen: 24 39.109.79.0/24 maxlen: 24 39.109.80.0/21 maxlen: 21 39.109.80.0/24 maxlen: 24 39.109.88.0/22 maxlen: 22 39.109.88.0/24 maxlen: 24 39.109.89.0/24 maxlen: 24 103.82.216.0/24 maxlen: 24 103.82.217.0/24 maxlen: 24 103.82.218.0/24 maxlen: 24 103.82.219.0/24 maxlen: 24 103.98.14.0/24 maxlen: 24 103.119.132.0/23 maxlen: 23 103.119.132.0/24 maxlen: 24 103.119.133.0/24 maxlen: 24 2403:e840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 19:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Aug 12 19:38:52 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7ccbcb-4b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:9d:a3:e7:dd:78:08:57:72:ec:94:37:a1: 0a:f3:bf:13:ff:87:2f:7a:aa:44:cd:4b:c4:99:ac: 1a:9d:42:48:48:57:ce:5e:07:74:5a:59:fd:15:47: a5:eb:56:9b:48:b6:d4:27:7a:b0:b1:6d:0a:b9:9c: 95:51:d0:27:db:5d:d9:a2:92:32:ef:e5:e0:f3:e7: 4f:e4:e1:f8:66:63:17:f8:70:64:c3:e7:e1:f3:4b: c5:42:d6:74:c6:98:ce:1c:75:d6:db:e3:1d:7d:70: 94:68:e6:11:11:fb:2b:ee:75:ac:88:d5:88:92:db: 3d:3e:cf:82:24:66:e7:f1:5d:a4:44:e8:da:93:1e: 81:16:b7:a2:20:76:c4:4f:0e:d1:4a:37:e4:18:76: 91:dd:c5:e5:9c:68:a5:f7:d8:b5:28:d5:1c:84:be: 1d:30:1e:3a:03:00:f5:7b:c3:0b:46:49:05:2a:58: 6c:16:71:d0:9d:a2:a3:24:0c:c4:ab:e1:30:5e:a5: 02:cf:32:49:a4:30:37:72:fc:6c:05:5a:92:cf:d9: ed:b7:d8:46:b2:17:bb:bf:97:15:ae:e0:21:08:12: db:66:83:18:17:cb:81:21:b2:92:7a:71:0d:30:b7: b1:62:1d:82:25:20:e3:11:9c:ee:f7:74:1a:78:99: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:69:61:ED:E8:CB:F4:26:63:1F:B2:58:26:A4:E7:5C:14:91:AA X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0A5773F6BBBC11ECB2E7FF46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.109.66.0-39.109.91.255 103.82.216.0/22 103.98.14.0/24 103.119.132.0/23 IPv6: 2403:e840::/32 Signature Algorithm: sha256WithRSAEncryption 93:2e:fe:fa:28:49:b4:a8:c2:51:d4:83:a9:38:45:88:a1:b8: 0d:11:d4:1c:d1:b4:37:ea:8b:62:a8:00:67:52:33:d0:3e:7f: 8b:de:46:6d:a1:29:93:b4:ce:f8:0e:00:b7:3b:82:03:1a:6f: 30:26:71:74:8f:0b:22:87:d9:6b:4e:8c:6f:0a:95:83:f8:17: 3e:4e:11:e7:26:9b:c1:da:33:1b:06:2a:ce:23:de:e6:0f:9f: 56:eb:be:41:10:1d:93:f0:81:4c:cd:32:fa:db:27:fb:66:2d: 8d:9c:9d:a8:49:bd:19:f4:07:9b:b5:e9:a4:1b:e0:0a:a9:3c: fc:17:6f:e6:49:c9:a5:b3:0c:dd:a7:47:b4:be:da:0e:02:c3: d2:8f:83:30:c2:d6:8f:47:d7:93:4f:38:30:17:71:f7:86:ed: e5:9a:16:a6:bb:a7:67:88:b0:0f:7f:d0:dc:f6:04:b6:b0:64: d6:3b:64:5c:69:26:94:91:63:0d:de:0a:e2:40:72:77:7b:a1: 66:ac:08:e2:7c:f0:7c:12:81:56:c4:57:eb:fd:27:ca:9a:b1: 77:3c:7e:ac:e8:8d:fa:0a:7a:14:ad:9a:0d:ae:b8:e6:dc:de: 2e:8a:6d:dd:1b:2f:d9:ca:2e:3a:ac:f1:ad:28:88:ac:b5:17: cb:1e:03:9f -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjYwODEyMTkzODUyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdjY2JjYi00YjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBmdo+fdeAhXcuyUN6EK878T/4cveqpEzUvEmawanUJISFfOXgd0Wln9FUel 61abSLbUJ3qwsW0KuZyVUdAn213ZopIy7+Xg8+dP5OH4ZmMX+HBkw+fh80vFQtZ0 xpjOHHXW2+MdfXCUaOYREfsr7nWsiNWIkts9Ps+CJGbn8V2kROjakx6BFreiIHbE Tw7RSjfkGHaR3cXlnGil99i1KNUchL4dMB46AwD1e8MLRkkFKlhsFnHQnaKjJAzE q+EwXqUCzzJJpDA3cvxsBVqSz9ntt9hGshe7v5cVruAhCBLbZoMYF8uBIbKSenEN MLexYh2CJSDjEZzu93QaeJlM6QIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFIzCaWHt 6Mv0JmMfslgmpOdcFJGqMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvMEE1NzczRjZC QkJDMTFFQ0IyRTdGRjQ2QzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAm BAIAATAgMAwDBAEnbUIDBAInbVgDBAJnUtgDBABnYg4DBAFnd4QwDQQCAAIwBwMF ACQD6EAwDQYJKoZIhvcNAQELBQADggEBAJMu/vooSbSowlHUg6k4RYihuA0R1BzR tDfqi2KoAGdSM9A+f4veRm2hKZO0zvgOALc7ggMabzAmcXSPCyKH2WtOjG8KlYP4 Fz5OEecmm8HaMxsGKs4j3uYPn1brvkEQHZPwgUzNMvrbJ/tmLY2cnahJvRn0B5u1 6aQb4AqpPPwXb+ZJyaWzDN2nR7S+2g4Cw9KPgzDC1o9H15NPODAXcfeG7eWaFqa7 p2eIsA9/0Nz2BLawZNY7ZFxpJpSRYw3eCuJAcnd7oWasCOJ88HwSgVbEV+v9J8qa sXc8fqzojfoKehStmg2uuObc3i6Kbd0bL9nKLjqs8a0oiKy1F8seA58= -----END CERTIFICATE-----Generated at Thu Sep 10 08:17:10 2026 by rpki-client