$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CAA99CAC6EA911F1979A4FB45FA30FBC.roa File: CAA99CAC6EA911F1979A4FB45FA30FBC.roa (raw, json) Hash identifier: ENCI9CeHT5VNjvCEl53bIKPzORl8L39b2/i5oxCUHC0= Subject key identifier: 67:08:66:24:50:71:83:C3:19:DC:5C:78:D4:A7:17:EE:BE:0C:37:C0 Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1A7B Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CAA99CAC6EA911F1979A4FB45FA30FBC.roa Signing time: Tue 23 Jun 2026 02:18:15 +0000 ROA not before: Tue 23 Jun 2026 02:18:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138128 IP address blocks: 66.150.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 16:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6779 (0x1a7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jun 23 02:18:15 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a39ece7-d32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:84:08:b5:46:18:7e:e3:77:45:d9:ac:54: b8:85:42:ef:29:46:64:53:ea:fd:36:29:a9:97:2c: b9:61:76:9f:13:46:5f:bb:ff:14:60:98:d3:4c:14: 81:74:4f:6d:e0:1f:8b:4d:f1:c6:35:1f:02:07:9e: 6c:62:d5:d1:14:cf:03:d4:04:46:aa:f4:a6:a9:49: ed:cf:40:e9:6c:40:c6:fe:ad:0f:b3:a7:2e:64:e4: 7d:d5:a5:e4:e3:6b:93:64:0d:99:9b:1d:5e:05:3a: 8b:0d:64:54:7a:3b:75:84:ac:06:52:e5:7d:86:32: b6:38:41:62:56:84:20:48:d2:52:c3:31:e6:aa:78: e1:43:04:31:9b:10:36:09:f8:0a:af:59:4f:5a:48: 37:1e:86:97:1a:5f:05:29:8f:38:1a:72:49:8b:9f: 1c:ca:5c:86:7c:c9:39:fe:d0:73:a0:d2:7f:1d:38: 9a:61:98:a7:af:1d:d8:6b:12:7a:5e:0f:b9:b8:b2: fe:72:1f:31:60:a9:b8:7a:92:2f:5e:e6:26:03:b9: 13:21:d6:30:0d:25:52:88:3c:4e:20:60:2a:96:af: 47:f6:27:59:e1:9e:09:f8:02:2f:0c:bb:14:bf:9a: 06:b7:9f:de:df:72:f3:05:be:7b:33:3a:ee:d9:c0: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:08:66:24:50:71:83:C3:19:DC:5C:78:D4:A7:17:EE:BE:0C:37:C0 X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CAA99CAC6EA911F1979A4FB45FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 66.150.240.0/23 Signature Algorithm: sha256WithRSAEncryption 89:df:47:e2:08:05:30:bc:b9:3a:93:4d:bf:5e:a8:bc:43:74: 0d:09:31:01:7a:5f:6b:81:62:4c:57:e9:f2:d4:5c:ad:34:bf: af:1a:8e:59:a5:4e:a7:b1:3e:9f:6c:b3:ac:71:5d:ea:30:d7: cb:ea:7a:79:ec:18:fb:02:01:8e:bd:31:9f:2e:76:64:70:73: cc:33:59:fc:73:9e:b7:c6:dd:44:b3:b4:d8:8e:1e:8a:49:9c: e3:2b:10:5d:f4:db:8c:81:df:63:58:8f:2c:e9:ba:b5:9a:39: 1c:fe:6f:7b:ce:af:15:9a:36:a9:26:4f:b1:fc:dc:e5:67:20: 6c:9e:6c:51:11:b4:25:1d:3f:79:ee:03:9a:cc:ff:87:bc:dd: 2c:c3:30:f6:7a:1c:44:06:4e:99:ba:73:90:99:61:89:b2:57: fc:ca:32:19:7b:85:2c:f0:83:b6:9e:96:65:d4:5b:94:c9:67: 17:3a:c6:3b:f0:76:ba:fc:32:9d:57:87:2e:82:d9:13:e5:65: 5c:3b:86:cc:89:c6:07:5a:77:bf:f3:09:0f:6c:b7:b9:4e:e0: 78:3a:c9:b1:ca:80:3c:9b:21:f5:2d:3f:ed:55:0c:6c:ad:3e: ee:34:11:29:71:08:14:0d:ea:cc:7c:21:c0:87:d9:a1:12:6d: ee:5f:ed:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwNjIzMDIxODE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM5ZWNlNy1kMzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgyECLVGGH7jd0XZrFS4hULvKUZkU+r9Nimplyy5YXafE0Zfu/8UYJjTTBSB dE9t4B+LTfHGNR8CB55sYtXRFM8D1ARGqvSmqUntz0DpbEDG/q0Ps6cuZOR91aXk 42uTZA2Zmx1eBTqLDWRUejt1hKwGUuV9hjK2OEFiVoQgSNJSwzHmqnjhQwQxmxA2 CfgKr1lPWkg3HoaXGl8FKY84GnJJi58cylyGfMk5/tBzoNJ/HTiaYZinrx3YaxJ6 Xg+5uLL+ch8xYKm4epIvXuYmA7kTIdYwDSVSiDxOIGAqlq9H9idZ4Z4J+AIvDLsU v5oGt5/e33LzBb57Mzru2cDlTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGcIZiRQ cYPDGdxceNSnF+6+DDfAMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvQ0FBOTlDQUM2 RUE5MTFGMTk3OUE0RkI0NUZBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBQpbwMA0GCSqGSIb3DQEBCwUAA4IBAQCJ30fiCAUwvLk6k02/Xqi8 Q3QNCTEBel9rgWJMV+ny1FytNL+vGo5ZpU6nsT6fbLOscV3qMNfL6np57Bj7AgGO vTGfLnZkcHPMM1n8c563xt1Es7TYjh6KSZzjKxBd9NuMgd9jWI8s6bq1mjkc/m97 zq8VmjapJk+x/NzlZyBsnmxREbQlHT957gOazP+HvN0swzD2ehxEBk6ZunOQmWGJ slf8yjIZe4Us8IO2npZl1FuUyWcXOsY78Ha6/DKdV4cugtkT5WVcO4bMicYHWne/ 8wkPbLe5TuB4OsmxyoA8myH1LT/tVQxsrT7uNBEpcQgUDerMfCHAh9mhEm3uX+3g -----END CERTIFICATE-----Generated at Mon Jul 13 04:11:02 2026 by rpki-client