$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CC3E7A3A30E111F09B76D311C4F9AE02.roa File: CC3E7A3A30E111F09B76D311C4F9AE02.roa (raw, json) Hash identifier: 4VQy2uTuYmBTt5p4bl4BylIiGQ88q1IjeeXSwehmuI0= Subject key identifier: 90:9D:80:3C:62:04:33:87:C7:16:F6:E6:D1:48:FC:6B:C8:E0:88:55 Certificate issuer: /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Certificate serial: F3 Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CC3E7A3A30E111F09B76D311C4F9AE02.roa Signing time: Fri 05 Jun 2026 07:39:29 +0000 ROA not before: Fri 05 Jun 2026 07:39:29 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 40779 IP address blocks: 165.99.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 06:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409 Validity Not Before: Jun 5 07:39:29 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a227d30-3e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:63:2d:bd:fb:a4:c9:66:9e:6d:7e:bb:30: 5c:46:0e:10:4e:74:1f:58:2c:20:b4:95:6f:98:62: 36:ba:89:58:04:f5:c0:9f:ce:7a:e4:1a:be:0b:24: 6b:75:75:d2:3b:2b:2a:b8:f3:01:47:aa:ec:d6:30: 5e:e3:da:84:b1:23:02:24:43:19:b9:48:a5:dd:cc: 38:71:3e:19:d7:6e:4a:b7:f7:f3:da:60:f6:78:d1: 70:0e:45:73:ed:9d:20:57:e9:55:3d:bc:94:e1:b2: 27:c4:12:8e:68:e1:5e:87:62:44:78:ee:02:7e:a7: 5d:72:f6:5d:f7:b1:84:54:a1:69:64:a4:9d:97:7e: 56:89:f4:06:e5:98:fb:1a:56:43:dd:14:f4:e2:c1: 73:c1:9e:3b:c1:10:43:f2:c7:ab:01:9a:f4:03:2c: e4:7a:f3:6c:4f:4b:37:5e:6e:19:7f:67:88:45:dc: 08:53:00:2a:27:75:6d:a3:f3:e9:43:7c:f1:58:f4: 15:a2:e9:15:0c:14:f8:75:ec:59:a0:65:13:4a:e0: b3:c9:ad:53:8f:96:ee:3f:b1:64:ad:eb:35:40:9d: c4:e3:8e:99:94:f2:0d:55:d8:f4:b8:a8:d5:c3:e0: dd:99:83:ca:62:1e:a9:cc:82:db:bf:6d:0b:25:03: 0b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9D:80:3C:62:04:33:87:C7:16:F6:E6:D1:48:FC:6B:C8:E0:88:55 X509v3 Authority Key Identifier: keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/CC3E7A3A30E111F09B76D311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.42.0/23 Signature Algorithm: sha256WithRSAEncryption a1:e9:12:f6:1e:cf:ba:59:60:7c:a9:2f:84:61:36:b1:23:cd: b3:bc:e5:a1:43:9e:ec:51:4b:2c:5e:b9:c6:15:c7:b3:6e:2a: a6:eb:30:cd:3c:99:b3:ff:fc:2c:6b:12:2d:d7:86:86:22:e4: f2:f4:1c:55:78:14:fe:75:72:03:3f:36:ec:01:41:f9:a9:24: 96:2d:ae:ab:4d:1e:7e:c6:a4:c4:30:47:ce:b1:24:74:02:6a: 64:52:4e:9c:3a:ce:98:9f:74:aa:ec:d3:30:51:bb:3a:0b:3e: 6b:91:e2:3b:80:1c:de:03:5a:f2:df:ce:26:b3:aa:15:ca:fd: aa:90:06:95:e5:18:c7:27:db:51:40:3f:03:f2:04:6a:9b:da: 76:48:10:6a:17:50:08:dc:15:47:25:b3:9f:c4:3a:fe:30:e7: 74:8e:6c:3a:4d:d8:fe:ae:f7:9a:b7:5b:ad:cf:33:26:c0:0d: 23:0a:0e:ab:b6:0b:68:14:03:63:3f:bc:77:e1:85:28:7e:6c: 15:f7:66:7c:0e:c8:fb:7b:c3:66:fe:71:43:5b:e2:ac:3f:d4: 5e:f1:af:7f:d0:45:7a:2a:c4:81:e6:62:d3:3c:70:e1:bc:7a: dd:ea:ac:8c:f7:87:5e:20:c1:58:1f:98:3a:4c:25:be:24:f3: 90:c4:f7:30 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGQzkxMTAvBgNVBAUTKDc2NjVFMjgzNUQxNjAwODVFMzFFQzI0NTIyMkQ0QjJG N0U0ODQ0MDkwHhcNMjYwNjA1MDczOTI5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTIyN2QzMC0zZTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjIdjLb37pMlmnm1+uzBcRg4QTnQfWCwgtJVvmGI2uolYBPXAn8565Bq+CyRr dXXSOysquPMBR6rs1jBe49qEsSMCJEMZuUil3cw4cT4Z125Kt/fz2mD2eNFwDkVz 7Z0gV+lVPbyU4bInxBKOaOFeh2JEeO4CfqddcvZd97GEVKFpZKSdl35WifQG5Zj7 GlZD3RT04sFzwZ47wRBD8serAZr0AyzkevNsT0s3Xm4Zf2eIRdwIUwAqJ3Vto/Pp Q3zxWPQVoukVDBT4dexZoGUTSuCzya1Tj5buP7Fkres1QJ3E446ZlPINVdj0uKjV w+DdmYPKYh6pzILbv20LJQML8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJCdgDxi BDOHxxb25tFI/GvI4IhVMB8GA1UdIwQYMBaAFHZl4oNdFgCF4x7CRSItSy9+SEQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREZDOS84RDM1RTgyRTMw MkMxMUYwODc3NjRBMkJDNEY5QUUwMi9kbVhpZzEwV0FJWGpIc0pGSWkxTEwzNUlS QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RtWGlnMTBXQUlYakhzSkZJaTFMTDM1SVJBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGQzkvOEQzNUU4MkUzMDJDMTFGMDg3NzY0QTJCQzRGOUFFMDIvQ0MzRTdBM0Ez MEUxMTFGMDlCNzZEMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWMqMA0GCSqGSIb3DQEBCwUAA4IBAQCh6RL2Hs+6WWB8qS+EYTax I82zvOWhQ57sUUssXrnGFcezbiqm6zDNPJmz//wsaxIt14aGIuTy9BxVeBT+dXID PzbsAUH5qSSWLa6rTR5+xqTEMEfOsSR0AmpkUk6cOs6Yn3Sq7NMwUbs6Cz5rkeI7 gBzeA1ry384ms6oVyv2qkAaV5RjHJ9tRQD8D8gRqm9p2SBBqF1AI3BVHJbOfxDr+ MOd0jmw6Tdj+rveat1utzzMmwA0jCg6rtgtoFANjP7x34YUofmwV92Z8Dsj7e8Nm /nFDW+KsP9Re8a9/0EV6KsSB5mLTPHDhvHrd6qyM94deIMFYH5g6TCW+JPOQxPcw -----END CERTIFICATE-----Generated at Sat Jun 13 13:09:06 2026 by rpki-client