$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa File: 7ABEE1BA81E211F18448C63773A30FBC.roa (raw, json) Hash identifier: vfHOYbedB2VpffqaIE+vsrAkKNRDh3wfSNls3RNvcdc= Subject key identifier: B1:B5:DA:99:0B:51:17:DB:EB:AB:D5:75:89:8D:F1:8A:1B:14:53:B8 Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Certificate serial: 019E Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa Signing time: Wed 16 Sep 2026 18:08:19 +0000 ROA not before: Wed 16 Sep 2026 18:08:19 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 395886 IP address blocks: 177.2.16.0/20 maxlen: 24 177.2.176.0/21 maxlen: 24 177.2.184.0/21 maxlen: 24 177.3.32.0/20 maxlen: 24 177.3.80.0/21 maxlen: 24 177.3.88.0/21 maxlen: 24 177.4.80.0/20 maxlen: 24 177.5.48.0/20 maxlen: 24 177.7.128.0/20 maxlen: 24 177.201.224.0/20 maxlen: 24 187.53.192.0/20 maxlen: 20 187.54.48.0/21 maxlen: 21 187.126.64.0/20 maxlen: 24 200.97.32.0/20 maxlen: 24 200.217.96.0/20 maxlen: 24 200.222.224.0/20 maxlen: 24 201.15.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52 Validity Not Before: Sep 16 18:08:19 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6aaadb13-9286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ef:cd:4b:78:ae:ab:b9:ad:02:12:80:4c:5b: 51:48:53:4c:2e:29:18:59:28:ed:eb:b3:6a:f7:b1: 2c:0b:8b:93:de:1b:5b:75:fd:ff:ad:dc:1e:fd:71: 54:2c:41:20:ca:6a:7d:8b:8e:78:14:50:fc:b2:df: 9f:c9:7b:21:da:e6:47:f6:02:51:ea:86:7f:b1:67: 35:59:f5:4c:de:cd:9f:a3:cf:11:03:a2:10:eb:08: d4:fe:c6:5b:bc:10:80:1e:1f:80:c1:2a:06:c6:80: 33:6b:b5:fe:a6:e6:48:6c:fc:58:43:66:8a:15:f6: f1:33:f3:7c:a7:45:d5:67:94:0e:22:0a:89:04:ee: 3e:4d:a7:bf:9b:53:dc:fd:af:1f:aa:d3:db:50:fb: 2f:ba:e9:17:74:15:0f:0d:b0:d8:88:cb:e3:8e:9b: 4b:e1:12:30:f3:ac:f1:b2:69:02:d2:9a:00:b4:08: e1:fc:23:af:23:1e:e3:05:3a:ab:a1:d0:c3:c4:80: 87:17:a7:73:88:a6:eb:5d:8e:1a:54:4f:8a:cc:1f: dd:29:70:0c:9b:9d:6b:21:90:2a:29:89:94:41:21: 50:4c:4a:8e:f1:e9:81:68:e0:dc:48:ab:52:0b:0b: 04:33:06:8c:20:26:a6:1e:06:fa:6e:93:e9:66:c2: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B5:DA:99:0B:51:17:DB:EB:AB:D5:75:89:8D:F1:8A:1B:14:53:B8 X509v3 Authority Key Identifier: keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7ABEE1BA81E211F18448C63773A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.2.16.0/20 177.2.176.0/20 177.3.32.0/20 177.3.80.0/20 177.4.80.0/20 177.5.48.0/20 177.7.128.0/20 177.201.224.0/20 187.53.192.0/20 187.54.48.0/21 187.126.64.0/20 200.97.32.0/20 200.217.96.0/20 200.222.224.0/20 201.15.160.0/20 Signature Algorithm: sha256WithRSAEncryption bf:d1:ce:52:27:18:c7:2d:1b:29:9a:4b:3b:25:f2:9f:70:0c: 44:48:d8:64:86:51:9f:28:b3:9b:9d:11:a6:52:ad:57:55:8d: bc:7d:59:60:5f:29:cb:32:25:1a:67:c6:8b:25:53:c7:3f:76: 8f:fc:db:de:46:15:9f:04:96:9d:f3:89:fc:a4:50:79:db:3a: 63:8b:8a:eb:d1:b2:74:af:c1:f1:15:38:0b:5b:2f:ee:8a:fd: 54:eb:d8:34:67:32:c7:49:7d:b0:ea:38:9c:03:d2:6a:a3:7b: 3e:90:79:84:44:51:81:17:82:0a:da:cd:b8:3d:cb:4d:63:d2: ad:8b:1b:37:6f:ae:10:6f:8e:ff:8d:36:07:42:7d:81:49:7f: f1:e9:49:e4:f8:d6:40:ca:49:34:5b:88:a5:21:6d:9d:99:5b: 7b:eb:39:86:4a:87:30:e2:a0:f1:f6:a1:af:06:41:dd:ea:b5: 82:5d:12:d7:1d:9c:f8:74:4f:33:0c:cf:ec:83:66:26:c6:c6: 40:2b:c2:a9:69:bd:c9:2e:d7:18:63:03:35:59:a2:b9:64:c3: 80:ae:7e:73:7d:b2:d4:d9:ce:81:36:7d:a4:1a:e7:5d:34:04: cb:1f:ba:ec:d8:f8:b3:08:ea:a9:98:63:0b:82:3e:c8:16:55: 17:62:8e:1b -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKEVDMzY4RDU4MkUxMTc3RTA5OTE1RTMzRjQ0RURCOURF NEVGMzJDNTIwHhcNMjYwOTE2MTgwODE5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFhZGIxMy05Mjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmO/NS3iuq7mtAhKATFtRSFNMLikYWSjt67Nq97EsC4uT3htbdf3/rdwe/XFU LEEgymp9i454FFD8st+fyXsh2uZH9gJR6oZ/sWc1WfVM3s2fo88RA6IQ6wjU/sZb vBCAHh+AwSoGxoAza7X+puZIbPxYQ2aKFfbxM/N8p0XVZ5QOIgqJBO4+Tae/m1Pc /a8fqtPbUPsvuukXdBUPDbDYiMvjjptL4RIw86zxsmkC0poAtAjh/COvIx7jBTqr odDDxICHF6dziKbrXY4aVE+KzB/dKXAMm51rIZAqKYmUQSFQTEqO8emBaODcSKtS CwsEMwaMICamHgb6bpPpZsIsiwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLG12pkL URfb66vVdYmN8YobFFO4MB8GA1UdIwQYMBaAFOw2jVguEXfgmRXjP0Ttud5O8yxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8zQkRFMUQ2RTRG MkMxMUYxQkJFMkY2RUE5QkVFNTI4RS83RGFOV0M0UmQtQ1pGZU1fUk8yNTNrN3pM RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyLzdEYU5XQzRSZC1DWkZlTV9STzI1M2s3ekxGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY3OEMvM0JERTFENkU0RjJDMTFGMUJCRTJGNkVBOUJFRTUyOEUvN0FCRUUxQkE4 MUUyMTFGMTg0NDhDNjM3NzNBMzBGQkMucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg BAIAATBaAwQEsQIQAwQEsQKwAwQEsQMgAwQEsQNQAwQEsQRQAwQEsQUwAwQEsQeA AwQEscngAwQEuzXAAwQDuzYwAwQEu35AAwQEyGEgAwQEyNlgAwQEyN7gAwQEyQ+g MA0GCSqGSIb3DQEBCwUAA4IBAQC/0c5SJxjHLRspmks7JfKfcAxESNhkhlGfKLOb nRGmUq1XVY28fVlgXynLMiUaZ8aLJVPHP3aP/NveRhWfBJad84n8pFB52zpji4rr 0bJ0r8HxFTgLWy/uiv1U69g0ZzLHSX2w6jicA9Jqo3s+kHmERFGBF4IK2s24PctN Y9Ktixs3b64Qb47/jTYHQn2BSX/x6Unk+NZAykk0W4ilIW2dmVt76zmGSocw4qDx 9qGvBkHd6rWCXRLXHZz4dE8zDM/sg2YmxsZAK8Kpab3JLtcYYwM1WaK5ZMOArn5z fbLU2c6BNn2kGuddNATLH7rs2PizCOqpmGMLgj7IFlUXYo4b -----END CERTIFICATE-----Generated at Sun Sep 20 17:20:20 2026 by rpki-client