$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CBDD09E430E111F09B76D311C4F9AE02.roa File: CBDD09E430E111F09B76D311C4F9AE02.roa (raw, json) Hash identifier: sY7EBkThUecrfKfG+kSCpuHCSj6wPtVy9PUYEZdqikI= Subject key identifier: A7:B4:9E:5E:19:B4:BB:57:8A:03:13:F0:98:A4:39:92:BC:6E:ED:84 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: F0 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CBDD09E430E111F09B76D311C4F9AE02.roa Signing time: Fri 05 Jun 2026 07:39:23 +0000 ROA not before: Fri 05 Jun 2026 07:39:23 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 36642 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jun 5 07:39:23 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a227d2b-f764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:b1:8e:f1:47:81:8b:20:42:a2:cd:be:49: 99:23:64:f8:1a:81:7c:cd:18:86:8c:4b:ff:9e:bf: 3e:68:a0:11:1f:85:da:e6:50:ab:97:ea:66:59:62: 60:09:72:fe:66:2e:0a:9c:80:87:bc:31:f8:e8:74: 7d:cf:58:76:ab:36:fd:00:f7:07:b7:d3:5c:42:da: 16:e0:67:22:84:02:35:9a:21:03:81:01:24:6f:6e: 9f:be:94:78:e5:21:b7:34:ca:d8:10:ad:14:ce:f2: bc:f0:5f:b3:9b:6f:6c:6b:ff:4c:c9:46:00:8d:e4: 41:99:c1:6f:43:99:38:07:74:1a:df:f4:e2:a2:d8: a2:46:74:61:fc:e8:c6:6f:61:51:f3:e2:c1:8b:f7: d8:52:67:be:9a:54:89:89:13:a5:90:6d:7c:ba:0d: 0d:4d:bc:cd:16:7c:62:a4:49:7d:d3:ab:66:05:89: dc:57:b9:90:7a:3d:e9:ca:54:61:71:0d:5f:e4:45: f5:6e:0d:dc:9b:22:c9:ee:24:4e:e9:81:5b:0a:64: 06:01:f8:a6:4f:6b:c6:4d:ce:49:84:27:8f:79:0b: b8:94:98:0f:05:f8:ec:f2:38:03:31:d5:48:53:d8: d6:fa:6c:59:33:88:59:bb:22:ae:76:0d:c1:ce:ff: 2c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B4:9E:5E:19:B4:BB:57:8A:03:13:F0:98:A4:39:92:BC:6E:ED:84 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CBDD09E430E111F09B76D311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption 51:e8:b6:c1:21:ba:62:f8:eb:14:47:fd:58:25:fa:4c:75:45: 40:82:69:df:ea:f0:ac:b9:e5:ba:8e:69:0b:88:43:0f:0e:12: 28:74:ae:51:4e:4f:32:8c:fb:b3:9b:26:23:d7:9d:0f:43:2b: 13:13:aa:27:6a:6b:81:59:bf:9b:1c:66:1b:6d:c3:d8:a2:29: 09:f8:dd:f8:d6:05:6d:63:5f:b5:07:8a:07:8c:94:6f:f2:53: 6e:e2:ac:d2:3f:8d:1b:bc:b1:a3:98:21:55:79:42:fa:4c:be: 54:bf:82:de:c1:93:1e:f7:95:b4:1a:a9:d6:32:3f:ab:57:8a: af:4c:6f:7c:c7:70:25:d0:7e:09:ae:59:f9:b2:bb:60:db:6e: 5d:2a:4d:58:19:85:31:a5:78:94:20:1d:94:dc:b9:94:69:4e: be:43:82:96:b6:86:da:a4:78:69:8f:35:d7:b7:75:07:d8:e9: 74:31:10:61:e2:04:8d:b0:7f:e9:42:81:18:b3:5e:a4:23:0a: b4:9f:66:51:03:79:59:ac:70:1e:34:9f:a3:2a:50:9c:a2:3b: 8b:de:47:85:0f:5c:2a:42:18:9a:42:c8:ca:8d:a8:82:a6:f8: 46:0e:3a:9a:c6:41:7c:d3:9e:77:33:c0:43:62:4e:f1:bf:70: f7:dc:ec:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwNjA1MDczOTIzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyN2QyYi1mNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2CxjvFHgYsgQqLNvkmZI2T4GoF8zRiGjEv/nr8+aKARH4Xa5lCrl+pmWWJg CXL+Zi4KnICHvDH46HR9z1h2qzb9APcHt9NcQtoW4GcihAI1miEDgQEkb26fvpR4 5SG3NMrYEK0UzvK88F+zm29sa/9MyUYAjeRBmcFvQ5k4B3Qa3/TiotiiRnRh/OjG b2FR8+LBi/fYUme+mlSJiROlkG18ug0NTbzNFnxipEl906tmBYncV7mQej3pylRh cQ1f5EX1bg3cmyLJ7iRO6YFbCmQGAfimT2vGTc5JhCePeQu4lJgPBfjs8jgDMdVI U9jW+mxZM4hZuyKudg3Bzv8sawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKe0nl4Z tLtXigMT8JikOZK8bu2EMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGQzkvOEQzNUU4MkUzMDJDMTFGMDg3NzY0QTJCQzRGOUFFMDIvQ0JERDA5RTQz MEUxMTFGMDlCNzZEMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWMqMA0GCSqGSIb3DQEBCwUAA4IBAQBR6LbBIbpi+OsUR/1YJfpM dUVAgmnf6vCsueW6jmkLiEMPDhIodK5RTk8yjPuzmyYj150PQysTE6onamuBWb+b HGYbbcPYoikJ+N341gVtY1+1B4oHjJRv8lNu4qzSP40bvLGjmCFVeUL6TL5Uv4Le wZMe95W0GqnWMj+rV4qvTG98x3Al0H4Jrln5srtg225dKk1YGYUxpXiUIB2U3LmU aU6+Q4KWtobapHhpjzXXt3UH2Ol0MRBh4gSNsH/pQoEYs16kIwq0n2ZRA3lZrHAe NJ+jKlCcojuL3keFD1wqQhiaQsjKjaiCpvhGDjqaxkF80553M8BDYk7xv3D33Oxx -----END CERTIFICATE-----Generated at Sat Jun 13 13:37:43 2026 by rpki-client