$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa File: 65DCB430F25A11E9937D9D73C4F9AE02.roa (raw, json) Hash identifier: /+pskZIgdZg2wFT4CZ4Lq9N3zL/KUni8cMBngAXzhv4= Subject key identifier: FB:3B:16:31:47:D5:ED:84:9C:2F:B4:DA:79:49:D3:A0:E4:FC:EB:7C Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0E27 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa Signing time: Wed 30 Sep 2026 18:35:37 +0000 ROA not before: Wed 30 Sep 2026 18:35:37 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 63969 IP address blocks: 59.152.96.0/20 maxlen: 24 103.85.156.0/22 maxlen: 24 144.48.116.0/22 maxlen: 24 182.48.64.0/19 maxlen: 24 2404:4f80:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 17:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3623 (0xe27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Sep 30 18:35:37 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd5679-8cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:cf:96:c4:61:42:1e:28:53:0f:b4:69:42: 88:0f:33:0b:18:d2:00:0a:f2:87:4f:fd:fe:a5:27: 4f:d2:3b:ca:74:3c:a8:88:44:d6:6b:60:26:ad:1d: cb:d6:a7:67:9b:f3:b8:e4:0a:9d:74:54:8b:f5:b7: 4e:b0:9b:e1:ce:bc:29:12:e4:bf:c0:15:2e:6b:68: bd:33:e8:a7:56:c9:ec:ad:85:4a:18:60:32:b9:0c: c8:b9:79:5e:a4:2d:fe:44:17:f0:98:02:18:b0:62: 49:7c:aa:7b:f8:61:db:53:45:dd:3c:4d:f8:ed:08: 0c:7e:5c:07:3c:94:bf:48:61:83:94:36:ea:71:dd: 83:15:ca:c9:58:b1:03:0f:be:1c:a0:b7:ec:25:74: 3d:a5:15:62:2b:1c:d6:34:52:7d:e1:ad:ba:ae:56: 11:bd:d7:58:8c:32:7d:24:42:d3:59:56:b5:ea:85: 9a:c3:42:6d:ad:25:3b:7f:3c:3b:0b:69:f2:71:40: 08:0a:79:fe:83:11:cc:29:af:fb:7e:f2:b9:2b:e9: e4:d5:8d:7f:ba:82:fe:45:03:62:f7:e2:86:26:c6: f9:86:fc:65:2d:9a:8c:8b:fa:77:bf:13:df:54:8c: 71:f4:e6:9e:35:1d:4f:08:fa:cf:bb:44:75:85:f7: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3B:16:31:47:D5:ED:84:9C:2F:B4:DA:79:49:D3:A0:E4:FC:EB:7C X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/65DCB430F25A11E9937D9D73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.96.0/20 103.85.156.0/22 144.48.116.0/22 182.48.64.0/19 IPv6: 2404:4f80:29::/48 Signature Algorithm: sha256WithRSAEncryption 76:62:06:d8:0e:c0:26:48:d4:05:82:10:b9:44:69:6d:f3:17: 64:3c:7e:4f:9b:58:09:bf:65:45:15:ea:91:8e:80:aa:84:88: e7:a6:2e:98:c8:c1:b5:88:4d:9c:a1:59:32:99:72:44:2d:90: 93:6f:82:be:59:49:39:fe:21:73:6c:d8:82:07:35:0b:6b:59: d7:b1:5f:33:7f:0f:86:22:e8:9a:57:b3:a4:18:e9:75:97:5e: 5f:79:d2:11:7d:70:58:dd:e1:62:5b:a2:3a:60:3b:f7:3d:88: 96:dc:db:2f:6c:5c:72:6e:f8:4d:3a:7b:16:ea:d6:c1:2c:30: 1e:7e:b0:e6:f7:31:1c:85:72:03:1f:2d:a4:fa:61:8b:39:88: 39:78:87:a7:32:ce:70:5b:9e:32:df:9b:b8:d8:b5:ad:c5:5d: 96:26:62:f7:8e:0d:81:c6:d5:9b:05:cd:b4:6d:68:72:db:b4: 8b:5f:6a:38:3d:6f:76:c9:c2:32:5e:ce:b5:e2:7e:90:79:63: c8:09:a9:9c:8e:89:b6:86:b3:59:71:a2:12:95:86:55:d7:87: 5b:69:5d:2c:fc:7a:82:38:c9:20:34:3f:d3:84:e1:0b:cb:16: 29:81:dd:03:e3:df:9a:ec:99:45:14:6c:90:ba:73:be:4a:a8: 6a:7a:5b:18 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICDicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjYwOTMwMTgzNTM3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNTY3OS04Y2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw/PlsRhQh4oUw+0aUKIDzMLGNIACvKHT/3+pSdP0jvKdDyoiETWa2AmrR3L 1qdnm/O45AqddFSL9bdOsJvhzrwpEuS/wBUua2i9M+inVsnsrYVKGGAyuQzIuXle pC3+RBfwmAIYsGJJfKp7+GHbU0XdPE347QgMflwHPJS/SGGDlDbqcd2DFcrJWLED D74coLfsJXQ9pRViKxzWNFJ94a26rlYRvddYjDJ9JELTWVa16oWaw0JtrSU7fzw7 C2nycUAICnn+gxHMKa/7fvK5K+nk1Y1/uoL+RQNi9+KGJsb5hvxlLZqMi/p3vxPf VIxx9OaeNR1PCPrPu0R1hfc5PwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFPs7FjFH 1e2EnC+02nlJ06Dk/Ot8MB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvNjVEQ0I0MzBG MjVBMTFFOTkzN0Q5RDczQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQEO5hgAwQCZ1WcAwQCkDB0AwQFtjBAMA8EAgACMAkDBwAkBE+AACkw DQYJKoZIhvcNAQELBQADggEBAHZiBtgOwCZI1AWCELlEaW3zF2Q8fk+bWAm/ZUUV 6pGOgKqEiOemLpjIwbWITZyhWTKZckQtkJNvgr5ZSTn+IXNs2IIHNQtrWdexXzN/ D4Yi6JpXs6QY6XWXXl950hF9cFjd4WJbojpgO/c9iJbc2y9sXHJu+E06exbq1sEs MB5+sOb3MRyFcgMfLaT6YYs5iDl4h6cyznBbnjLfm7jYta3FXZYmYveODYHG1ZsF zbRtaHLbtItfajg9b3bJwjJezrXifpB5Y8gJqZyOibaGs1lxohKVhlXXh1tpXSz8 eoI4ySA0P9OE4QvLFimB3QPj35rsmUUUbJC6c75KqGp6Wxg= -----END CERTIFICATE-----Generated at Wed Oct 28 07:23:29 2026 by rpki-client