$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa File: CDD9D46EA82511F0A1B4386EC4F9AE02.roa (raw, json) Hash identifier: W51/pFv7Uuiihna9js4ORITaTanbCuE5f0i5f6lmUjg= Subject key identifier: D8:CC:A3:DE:CA:75:C5:F2:47:46:0B:A9:AC:B5:3C:FF:F1:48:B6:54 Certificate issuer: /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Certificate serial: 012A Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa Signing time: Thu 01 Oct 2026 07:53:27 +0000 ROA not before: Thu 01 Oct 2026 07:53:27 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135495 IP address blocks: 163.227.240.0/24 maxlen: 24 2001:df3:7200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 06:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771 Validity Not Before: Oct 1 07:53:27 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6abe1176-f0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:6c:2b:c3:5a:57:b1:27:ec:76:f2:7b:92: 34:56:53:b0:85:3a:1e:92:f1:9c:c9:ae:1e:cb:24: fc:0f:42:d4:66:0d:19:82:34:7c:8a:c6:0f:de:9f: f6:5c:83:8c:f5:9b:37:68:23:38:c0:f4:50:82:d4: fb:69:f5:27:07:07:ea:ee:a1:b0:66:a3:b6:b8:81: ee:94:3a:5b:ac:0c:19:17:7e:db:e9:6c:53:ce:41: e8:ff:0e:44:74:67:2d:7f:44:5a:d8:e0:fc:69:99: d9:e8:98:e0:dc:09:f6:fb:f7:76:02:2a:dd:ac:30: ec:55:9f:2a:8e:9c:16:f0:85:23:b9:5c:54:ef:f2: d9:c9:eb:4c:f5:a7:a6:e1:6a:7f:df:60:f0:d3:a5: e6:fb:e8:06:ee:9a:08:64:8c:32:72:a0:7e:77:0c: c3:07:93:00:54:fd:ac:f9:a4:31:ca:89:18:2c:d0: 6f:ef:0f:87:71:1c:22:b0:18:a7:00:e9:f9:dc:7e: cc:06:ed:3b:f1:f3:27:d1:c7:14:e2:b8:f5:8b:e2: 55:91:db:65:5e:de:52:38:af:d2:d5:82:8c:6d:d5: 64:32:04:66:7a:a8:f8:95:e6:bc:f7:d6:64:07:98: 37:82:22:42:fa:dc:8a:64:71:64:3e:b1:11:f9:cf: 83:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:CC:A3:DE:CA:75:C5:F2:47:46:0B:A9:AC:B5:3C:FF:F1:48:B6:54 X509v3 Authority Key Identifier: keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/CDD9D46EA82511F0A1B4386EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.227.240.0/24 IPv6: 2001:df3:7200::/48 Signature Algorithm: sha256WithRSAEncryption 21:a2:04:10:a4:a8:43:93:47:9a:1e:ed:99:28:f7:41:b1:33: 57:e9:e7:31:48:6b:e5:d8:e2:60:ac:4f:17:dc:4e:a7:fc:c6: cc:91:ca:7a:af:cd:98:ba:b2:84:72:af:aa:1e:9c:a5:1f:81: e2:94:f2:84:04:90:61:d4:3f:d0:43:a8:51:ce:20:2a:85:57: 48:72:95:96:dc:3e:b2:ac:8f:50:ff:be:d3:4f:21:16:e0:a6: 0a:34:5c:69:6e:03:00:bf:be:56:54:d8:da:c2:d6:06:de:5a: af:fe:4c:65:e5:55:ae:fb:ce:4b:41:85:45:75:47:10:d7:94: 6e:95:98:4f:40:91:6b:35:ec:a6:3d:c0:d6:f7:84:2c:af:3a: be:d8:f6:07:1f:c2:3c:5c:45:ad:03:fe:29:99:cb:a0:ff:be: dc:7d:86:3a:ca:a4:ed:e5:5e:ee:a7:f4:de:72:fb:4a:9e:15: 07:8a:56:3a:a1:94:d4:76:e4:4d:34:93:a7:e8:c8:32:d4:c0: a4:6b:24:0a:a6:f4:5d:e6:f0:76:b8:31:0b:f8:e6:8f:b1:c9: 4b:7a:dd:98:81:fe:f5:ad:2a:a6:f9:06:37:54:3a:19:38:ec: 74:f6:2f:c2:1a:8c:9d:bf:53:26:38:54:81:62:28:13:91:f5: a8:55:86:97 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhGNzIxMTAvBgNVBAUTKEFBOTA5REVCMzU1QkUzMTRGMDU1MzIxOTQzMEQwOUFD RTJEOEU3NzEwHhcNMjYxMDAxMDc1MzI3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJlMTE3Ni1mMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjJsK8NaV7En7Hbye5I0VlOwhToekvGcya4eyyT8D0LUZg0ZgjR8isYP3p/2 XIOM9Zs3aCM4wPRQgtT7afUnBwfq7qGwZqO2uIHulDpbrAwZF37b6WxTzkHo/w5E dGctf0Ra2OD8aZnZ6Jjg3An2+/d2AirdrDDsVZ8qjpwW8IUjuVxU7/LZyetM9aem 4Wp/32Dw06Xm++gG7poIZIwycqB+dwzDB5MAVP2s+aQxyokYLNBv7w+HcRwisBin AOn53H7MBu078fMn0ccU4rj1i+JVkdtlXt5SOK/S1YKMbdVkMgRmeqj4lea899Zk B5g3giJC+tyKZHFkPrER+c+DAwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNjMo97K dcXyR0YLqay1PP/xSLZUMB8GA1UdIwQYMBaAFKqQnes1W+MU8FUyGUMNCazi2Odx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY3Mi9DQUFGMEQ0QzBF MkMxMUYwOEYxRDY5ODFDNEY5QUUwMi9xcENkNnpWYjR4VHdWVElaUXcwSnJPTFk1 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FwQ2Q2elZiNHhUd1ZUSVpRdzBKck9MWTUzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhGNzIvQ0FBRjBENEMwRTJDMTFGMDhGMUQ2OTgxQzRGOUFFMDIvQ0REOUQ0NkVB ODI1MTFGMEExQjQzODZFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAo+PwMA8EAgACMAkDBwAgAQ3zcgAwDQYJKoZIhvcNAQELBQADggEB ACGiBBCkqEOTR5oe7Zko90GxM1fp5zFIa+XY4mCsTxfcTqf8xsyRynqvzZi6soRy r6oenKUfgeKU8oQEkGHUP9BDqFHOICqFV0hylZbcPrKsj1D/vtNPIRbgpgo0XGlu AwC/vlZU2NrC1gbeWq/+TGXlVa77zktBhUV1RxDXlG6VmE9AkWs17KY9wNb3hCyv Or7Y9gcfwjxcRa0D/imZy6D/vtx9hjrKpO3lXu6n9N5y+0qeFQeKVjqhlNR25E00 k6foyDLUwKRrJAqm9F3m8Ha4MQv45o+xyUt63ZiB/vWtKqb5BjdUOhk47HT2L8Ia jJ2/UyY4VIFiKBOR9ahVhpc= -----END CERTIFICATE-----Generated at Thu Oct 8 12:34:37 2026 by rpki-client