$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa File: CB355B666EA911F1979A4FB45FA30FBC.roa (raw, json) Hash identifier: EFHnA2af/j04RagH4w+3B1hjPaj4axNV+Q60XLb7eWc= Subject key identifier: 57:C4:0D:AB:AC:BC:6A:B0:16:99:C5:04:D7:77:C3:BC:82:57:42:5C Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1A99 Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa Signing time: Wed 29 Jul 2026 09:05:00 +0000 ROA not before: Wed 29 Jul 2026 09:05:00 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 9422 IP address blocks: 66.150.242.0/24 maxlen: 24 66.150.243.0/24 maxlen: 24 66.150.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 16:17:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6809 (0x1a99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jul 29 09:05:00 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a69c23c-49e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:b7:4c:aa:d1:8c:13:99:b6:17:fc:d4:8e: e1:da:a6:0f:98:1a:2c:f7:59:91:55:11:a2:ca:1f: e4:02:2e:17:20:bb:68:ca:db:ca:f7:09:a9:b9:54: 90:95:71:53:39:9d:92:a3:33:b7:d9:01:33:48:a0: 93:85:71:07:46:cc:dc:d7:0c:8d:12:ee:d9:d4:3f: 29:0a:42:a2:27:d9:8c:d3:0d:dc:8f:41:cc:d7:81: e5:75:a9:81:4c:b6:4b:a3:3a:9b:f6:48:b8:4a:43: aa:e5:5f:58:53:b3:d7:16:64:9d:0d:00:b6:5b:d6: c7:22:84:11:65:13:e5:03:51:7d:e3:4b:72:4c:67: a8:35:ac:05:e0:7b:22:37:da:9d:4a:21:bb:b8:20: b2:85:4f:18:41:5c:49:2b:6f:f8:db:1b:b2:f8:41: 3b:f5:d7:06:86:b1:bf:a0:dc:10:ce:22:d6:0c:fb: 29:4c:31:a7:79:5c:29:59:0c:2b:22:84:08:64:b2: 27:a4:8d:65:0c:5f:ee:cf:bf:aa:6b:c3:40:e2:4e: 39:09:ed:98:ee:2a:9c:5e:a5:7d:03:48:09:05:5f: f5:15:83:26:52:12:26:aa:74:77:4a:8f:6e:93:9f: 8e:49:c8:47:02:9a:66:fe:a2:4e:2f:a5:ee:ce:bf: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:0D:AB:AC:BC:6A:B0:16:99:C5:04:D7:77:C3:BC:82:57:42:5C X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 66.150.242.0/23 66.150.246.0/24 Signature Algorithm: sha256WithRSAEncryption b1:11:45:a8:5a:ab:50:e9:6e:fb:60:48:3b:04:37:11:ca:5b: d4:90:d5:c5:4f:37:3c:c1:3d:37:13:39:79:73:d1:77:b0:dc: 99:67:67:00:8c:a4:3e:d6:7c:a0:17:8a:ad:ab:85:3d:72:a8: 20:15:08:f2:54:91:c6:b3:29:ba:b2:49:7e:14:1c:24:5e:46: 5e:ef:f7:cd:e3:b3:3a:2f:71:62:b9:c1:a9:e6:cb:a6:da:f1: 08:44:4b:61:d3:a8:da:2e:28:dd:5d:31:a2:4a:22:d2:1b:0a: df:e9:7f:8c:21:de:a2:85:5b:8c:41:d6:e0:cc:5e:6d:a4:a6: d7:29:a3:5b:3c:e5:2e:bf:e7:8f:79:b6:00:59:ed:74:7e:62: aa:8d:97:df:fe:ad:33:cf:d8:30:24:9b:63:80:da:5b:9f:6c: df:5b:04:74:e3:b7:cc:d0:02:03:ba:ca:a0:f5:dc:37:17:f3: 48:b6:6f:54:d8:0d:43:be:67:26:31:39:6a:66:1c:cd:07:c1: 19:e1:5b:32:34:a1:4f:13:cc:12:fb:52:2a:00:38:30:72:48: aa:2c:72:95:8b:99:ab:72:1d:c9:14:46:97:87:e9:61:50:4a: c6:96:ee:0a:2d:17:18:8a:ab:f7:f7:da:5a:99:25:d2:c3:99: 3c:f7:b1:d7 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYwNzI5MDkwNTAwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5YzIzYy00OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9u3TKrRjBOZthf81I7h2qYPmBos91mRVRGiyh/kAi4XILtoytvK9wmpuVSQ lXFTOZ2SozO32QEzSKCThXEHRszc1wyNEu7Z1D8pCkKiJ9mM0w3cj0HM14HldamB TLZLozqb9ki4SkOq5V9YU7PXFmSdDQC2W9bHIoQRZRPlA1F940tyTGeoNawF4Hsi N9qdSiG7uCCyhU8YQVxJK2/42xuy+EE79dcGhrG/oNwQziLWDPspTDGneVwpWQwr IoQIZLInpI1lDF/uz7+qa8NA4k45Ce2Y7iqcXqV9A0gJBV/1FYMmUhImqnR3So9u k5+OSchHAppm/qJOL6Xuzr9V7wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFfEDaus vGqwFpnFBNd3w7yCV0JcMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvQ0IzNTVCNjY2 RUE5MTFGMTk3OUE0RkI0NUZBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBQpbyAwQAQpb2MA0GCSqGSIb3DQEBCwUAA4IBAQCxEUWoWqtQ6W77 YEg7BDcRylvUkNXFTzc8wT03Ezl5c9F3sNyZZ2cAjKQ+1nygF4qtq4U9cqggFQjy VJHGsym6skl+FBwkXkZe7/fN47M6L3FiucGp5sum2vEIREth06jaLijdXTGiSiLS Gwrf6X+MId6ihVuMQdbgzF5tpKbXKaNbPOUuv+ePebYAWe10fmKqjZff/q0zz9gw JJtjgNpbn2zfWwR047fM0AIDusqg9dw3F/NItm9U2A1DvmcmMTlqZhzNB8EZ4Vsy NKFPE8wS+1IqADgwckiqLHKVi5mrch3JFEaXh+lhUErGlu4KLRcYiqv399pamSXS w5k897HX -----END CERTIFICATE-----Generated at Tue Sep 1 04:52:12 2026 by rpki-client