$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/3C3DE5B6AE5211F18ACCAF026211F970.roa File: 3C3DE5B6AE5211F18ACCAF026211F970.roa (raw, json) Hash identifier: fSn+1K56kX62VEQ4HL8mADlDJ99haJdkNEoVoHCOFeA= Subject key identifier: 9B:BE:F0:84:33:31:68:0E:8B:2A:2A:BB:F6:63:22:94:6A:EE:EF:26 Certificate issuer: /CN=A911BEC0/serialNumber=307369E293076676497151F6CC6FD6D558EABE97 Certificate serial: 0C Authority key identifier: 30:73:69:E2:93:07:66:76:49:71:51:F6:CC:6F:D6:D5:58:EA:BE:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/3C3DE5B6AE5211F18ACCAF026211F970.roa Signing time: Sun 13 Sep 2026 07:42:21 +0000 ROA not before: Sun 13 Sep 2026 07:42:21 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 11179 IP address blocks: 167.179.3.0/24 maxlen: 24 167.179.23.0/24 maxlen: 24 167.179.25.0/24 maxlen: 24 167.179.27.0/24 maxlen: 24 167.179.32.0/24 maxlen: 24 167.179.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.crl rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BEC0, serialNumber=307369E293076676497151F6CC6FD6D558EABE97 Validity Not Before: Sep 13 07:42:21 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aa653dd-4517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:d9:a7:98:8a:df:87:66:c2:9c:e7:0d:c3: a5:50:25:3f:5d:9b:c9:4d:00:6b:1b:b2:81:f8:21: b1:68:0b:5a:94:15:ad:06:9d:95:67:99:1e:ab:ed: f0:4d:2f:83:51:a9:52:a9:c2:08:a7:6a:56:c1:39: c7:68:50:47:d8:e1:b4:a9:55:71:da:43:e9:09:bc: 37:c0:f5:8f:b9:71:03:66:46:9c:25:bd:2e:2f:07: d1:75:6c:31:3e:15:c2:5d:c9:ed:02:0e:31:8d:d5: 8d:f7:38:33:de:0e:99:4c:27:3a:de:2b:20:52:b1: ed:ce:8f:8a:a3:24:a6:bf:16:a5:e7:d5:fd:8e:6a: ef:5b:b0:7e:de:4b:e6:d9:da:6a:c4:e5:5e:b5:e3: 30:81:61:fb:b2:ec:20:9f:08:23:72:d3:24:a0:f3: 7b:01:e6:13:33:68:16:97:65:b1:00:6d:6d:c3:3d: 2b:9f:b8:e8:0a:44:b5:c0:b2:64:21:c1:c6:24:44: 0f:5e:b5:17:85:70:1e:2e:7f:6d:38:de:3b:24:a7: 17:9e:d7:20:98:d8:98:81:24:de:95:90:d6:0d:8e: e6:ed:45:d7:60:63:31:72:80:3e:3c:b9:4e:df:d3: c7:ee:fb:07:8a:43:03:07:b7:27:92:77:d0:3b:43: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BE:F0:84:33:31:68:0E:8B:2A:2A:BB:F6:63:22:94:6A:EE:EF:26 X509v3 Authority Key Identifier: keyid:30:73:69:E2:93:07:66:76:49:71:51:F6:CC:6F:D6:D5:58:EA:BE:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MHNp4pMHZnZJcVH2zG_W1Vjqvpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEC0/7F0A0916A9C411F1BAD43F9D6E11F970/3C3DE5B6AE5211F18ACCAF026211F970.roa sbgp-ipAddrBlock: critical IPv4: 167.179.3.0/24 167.179.23.0/24 167.179.25.0/24 167.179.27.0/24 167.179.32.0/24 167.179.35.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:80:6c:16:9d:ec:e7:99:ae:c4:19:94:fe:0a:1f:b1:04:51: 08:f4:cc:5a:32:e8:71:8a:b7:87:87:2b:90:5d:d2:74:74:16: d0:d8:b3:9e:93:2a:7d:90:ce:0c:1c:dc:7c:b6:3a:d7:ae:19: 3b:5e:0c:82:6d:71:56:c0:f5:33:8d:81:be:34:71:07:46:b2: ac:10:3b:b6:a6:d8:ae:90:8c:c8:94:c0:52:22:83:41:a9:6d: 38:e9:96:e9:f0:4d:2e:18:4d:75:39:13:8a:cb:25:11:30:4c: d8:ba:5d:5c:44:d2:b4:0b:0d:6b:a3:ca:87:98:41:cb:2c:6a: f1:3d:40:09:40:31:24:a3:02:48:34:74:c2:70:f0:68:d4:cd: 5a:9d:a0:75:73:ef:c0:62:3a:b3:71:40:05:1d:98:86:44:ab: bf:12:57:03:24:c0:d3:17:54:cb:f5:5f:13:68:ae:b7:d0:0c: 24:72:ed:83:66:f7:90:c7:bf:7d:a3:1a:b0:1b:92:ac:e9:c4: 94:ef:5c:b2:03:44:8f:5a:a6:45:b3:22:79:4f:16:b0:68:54: a6:80:d5:1c:8c:2f:c6:b9:be:18:9b:3b:55:b7:79:ee:e6:f9: 5b:06:ae:30:fa:dc:db:4a:33:63:31:a2:4f:d9:91:94:f7:6d: df:76:73:06 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkVDMDExMC8GA1UEBRMoMzA3MzY5RTI5MzA3NjY3NjQ5NzE1MUY2Q0M2RkQ2RDU1 OEVBQkU5NzAeFw0yNjA5MTMwNzQyMjFaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTY1M2RkLTQ1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW7dmnmIrfh2bCnOcNw6VQJT9dm8lNAGsbsoH4IbFoC1qUFa0GnZVnmR6r7fBN L4NRqVKpwginalbBOcdoUEfY4bSpVXHaQ+kJvDfA9Y+5cQNmRpwlvS4vB9F1bDE+ FcJdye0CDjGN1Y33ODPeDplMJzreKyBSse3Oj4qjJKa/FqXn1f2Oau9bsH7eS+bZ 2mrE5V614zCBYfuy7CCfCCNy0ySg83sB5hMzaBaXZbEAbW3DPSufuOgKRLXAsmQh wcYkRA9etReFcB4uf2043jskpxee1yCY2JiBJN6VkNYNjubtRddgYzFygD48uU7f 08fu+weKQwMHtyeSd9A7Q5ivAgMBAAGjggJ+MIICejAdBgNVHQ4EFgQUm77whDMx aA6LKiq79mMilGru7yYwHwYDVR0jBBgwFoAUMHNp4pMHZnZJcVH2zG/W1Vjqvpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRUMwLzdGMEEwOTE2QTlD NDExRjFCQUQ0M0Y5RDZFMTFGOTcwL01ITnA0cE1IWm5aSmNWSDJ6R19XMVZqcXZw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUhOcDRwTUhablpKY1ZIMnpHX1cxVmpxdnBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkVDMC83RjBBMDkxNkE5QzQxMUYxQkFENDNGOUQ2RTExRjk3MC8zQzNERTVCNkFF NTIxMUYxOEFDQ0FGMDI2MjExRjk3MC5yb2EwPQYIKwYBBQUHAQcBAf8ELjAsMCoE AgABMCQDBACnswMDBACnsxcDBACnsxkDBACnsxsDBACnsyADBACnsyMwDQYJKoZI hvcNAQELBQADggEBAD6AbBad7OeZrsQZlP4KH7EEUQj0zFoy6HGKt4eHK5Bd0nR0 FtDYs56TKn2Qzgwc3Hy2OteuGTteDIJtcVbA9TONgb40cQdGsqwQO7am2K6QjMiU wFIig0GpbTjplunwTS4YTXU5E4rLJREwTNi6XVxE0rQLDWujyoeYQcssavE9QAlA MSSjAkg0dMJw8GjUzVqdoHVz78BiOrNxQAUdmIZEq78SVwMkwNMXVMv1XxNorrfQ DCRy7YNm95DHv32jGrAbkqzpxJTvXLIDRI9apkWzInlPFrBoVKaA1RyML8a5vhib O1W3ee7m+VsGrjD63NtKM2Mxok/ZkZT3bd92cwY= -----END CERTIFICATE-----Generated at Tue Sep 22 12:24:50 2026 by rpki-client