$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa File: FC86F6E896C711F1AEEE8D0A5411F970.roa (raw, json) Hash identifier: dAuO2BeAosWe+PuBWWYZH985vq1j2KsHsh8dEBqSois= Subject key identifier: CF:84:74:91:24:F5:94:D1:2C:35:50:23:E0:CC:08:E2:2D:0B:27:AA Certificate issuer: /CN=A9120974/serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Certificate serial: 1170 Authority key identifier: AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa Signing time: Tue 08 Sep 2026 07:52:41 +0000 ROA not before: Tue 08 Sep 2026 07:52:41 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132203 IP address blocks: 142.86.0.0/17 maxlen: 18 142.86.128.0/18 maxlen: 24 149.41.0.0/18 maxlen: 24 149.41.64.0/18 maxlen: 24 149.41.128.0/18 maxlen: 24 161.120.0.0/17 maxlen: 18 161.120.128.0/19 maxlen: 20 161.120.128.0/23 maxlen: 24 161.120.160.0/19 maxlen: 19 161.120.160.0/20 maxlen: 20 161.120.160.0/23 maxlen: 24 161.120.170.0/23 maxlen: 24 161.120.176.0/20 maxlen: 20 161.120.192.0/19 maxlen: 19 161.120.224.0/19 maxlen: 19 162.14.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4464 (0x1170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=AC8864263824EDE3655B99742DFB39E883BB9145 Validity Not Before: Sep 8 07:52:41 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a9fbec9-c021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:0c:a7:a0:32:ad:71:de:d5:31:b3:99:00: 35:9c:72:48:ab:75:43:a0:dc:af:21:c5:1e:03:a1: 1f:ea:72:3a:72:17:85:c6:15:84:ad:8a:2a:d4:56: 2c:82:a9:d8:b8:78:c7:94:60:19:79:c5:6f:06:55: ee:a7:e1:86:1f:4c:9f:d4:c7:00:11:43:34:cc:3a: d7:c1:83:19:ae:e5:33:f0:68:e1:cf:3e:95:b1:86: a7:d3:f7:ef:62:75:42:a0:cc:07:9b:b8:36:2e:50: bb:e6:ba:aa:b7:92:35:4f:c1:ba:26:a1:b7:a6:bf: cf:82:38:5d:92:0b:8e:35:91:1b:cd:8d:fe:d2:9f: 97:e3:8c:ba:21:16:f4:54:53:fd:82:13:6a:ea:7b: b8:a9:f2:0c:a2:a7:35:f9:63:60:c7:86:99:4e:45: d5:84:a2:a5:4a:e4:68:2d:9f:b1:c0:82:48:ca:4d: 4e:e1:29:da:89:d3:76:e6:8c:f8:37:68:8d:8c:fc: 79:2c:e6:7c:75:ad:ac:40:50:0a:3c:7c:a1:46:c0: 30:66:24:ce:e7:72:ba:91:d0:f5:35:f7:14:59:b1: 3c:ce:9f:e4:94:9a:e3:4a:51:f0:be:51:84:c5:1a: 04:9d:9d:bf:53:ae:ac:72:2a:43:d8:9c:40:e1:c4: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:84:74:91:24:F5:94:D1:2C:35:50:23:E0:CC:08:E2:2D:0B:27:AA X509v3 Authority Key Identifier: keyid:AC:88:64:26:38:24:ED:E3:65:5B:99:74:2D:FB:39:E8:83:BB:91:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/rIhkJjgk7eNlW5l0Lfs56IO7kUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rIhkJjgk7eNlW5l0Lfs56IO7kUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/E105B3BA3A4911E9940F2D16C4F9AE02/FC86F6E896C711F1AEEE8D0A5411F970.roa sbgp-ipAddrBlock: critical IPv4: 142.86.0.0-142.86.191.255 149.41.0.0-149.41.191.255 161.120.0.0/16 162.14.60.0/22 Signature Algorithm: sha256WithRSAEncryption 29:eb:c5:90:9b:dc:43:5a:a4:ff:30:91:78:c7:b6:1a:95:6f: 49:27:43:73:97:63:a0:70:56:9d:9f:83:bc:22:ef:f1:06:ba: 99:f7:a5:ba:21:30:d5:cd:14:7d:b2:26:22:95:63:22:5d:5d: f1:b0:b6:61:9b:ed:ce:8a:f6:1a:1f:0f:da:fb:e3:62:86:0a: 98:c4:a3:7b:63:52:a1:cc:b1:43:36:c8:af:d6:bb:a3:be:6f: 11:92:c6:90:0c:d0:f6:6f:ac:82:01:1b:53:cf:b8:9a:cc:3e: 16:a6:74:d5:1d:d6:8e:67:a6:6b:a2:66:f0:34:09:16:b3:f0: aa:79:23:22:39:24:49:4d:c5:40:a8:e9:35:c1:b9:d0:36:15: 1e:f8:e9:1f:26:5d:f7:1a:6f:5c:65:52:98:b5:f1:a5:47:33: 79:13:01:02:a6:93:4c:cd:43:ae:97:64:34:e0:25:ad:5d:3f: 33:df:65:18:f9:0e:36:06:8d:03:bb:dc:64:6a:f1:38:e4:00: 38:61:af:51:8c:8a:75:ab:a6:20:d6:c9:60:49:e2:71:bb:a0: 11:4f:a2:d4:df:35:43:c1:aa:bd:3f:6b:51:b3:b2:99:49:cd: 18:58:ee:bb:dc:b7:8e:1b:0b:62:d2:65:9c:5f:9a:35:10:dc: ec:4b:69:ee -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICEXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKEFDODg2NDI2MzgyNEVERTM2NTVCOTk3NDJERkIzOUU4 ODNCQjkxNDUwHhcNMjYwOTA4MDc1MjQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTlmYmVjOS1jMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kUMp6AyrXHe1TGzmQA1nHJIq3VDoNyvIcUeA6Ef6nI6cheFxhWErYoq1FYs gqnYuHjHlGAZecVvBlXup+GGH0yf1McAEUM0zDrXwYMZruUz8Gjhzz6VsYan0/fv YnVCoMwHm7g2LlC75rqqt5I1T8G6JqG3pr/PgjhdkguONZEbzY3+0p+X44y6IRb0 VFP9ghNq6nu4qfIMoqc1+WNgx4aZTkXVhKKlSuRoLZ+xwIJIyk1O4SnaidN25oz4 N2iNjPx5LOZ8da2sQFAKPHyhRsAwZiTO53K6kdD1NfcUWbE8zp/klJrjSlHwvlGE xRoEnZ2/U66scipD2JxA4cQHaQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFM+EdJEk 9ZTRLDVQI+DMCOItCyeqMB8GA1UdIwQYMBaAFKyIZCY4JO3jZVuZdC37OeiDu5FF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FMTA1QjNCQTNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9ySWhrSmpnazdlTmxXNWwwTGZzNTZJTzdr VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JJaGtKamdrN2VObFc1bDBMZnM1NklPN2tVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA5NzQvRTEwNUIzQkEzQTQ5MTFFOTk0MEYyRDE2QzRGOUFFMDIvRkM4NkY2RTg5 NkM3MTFGMUFFRUU4RDBBNTQxMUY5NzAucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAr BAIAATAlMAsDAwGOVgMEBo5WgDALAwMAlSkDBAaVKYADAwCheAMEAqIOPDANBgkq hkiG9w0BAQsFAAOCAQEAKevFkJvcQ1qk/zCReMe2GpVvSSdDc5djoHBWnZ+DvCLv 8Qa6mfeluiEw1c0UfbImIpVjIl1d8bC2YZvtzor2Gh8P2vvjYoYKmMSje2NSocyx QzbIr9a7o75vEZLGkAzQ9m+sggEbU8+4msw+FqZ01R3Wjmema6Jm8DQJFrPwqnkj IjkkSU3FQKjpNcG50DYVHvjpHyZd9xpvXGVSmLXxpUczeRMBAqaTTM1DrpdkNOAl rV0/M99lGPkONgaNA7vcZGrxOOQAOGGvUYyKdaumINbJYEnicbugEU+i1N81Q8Gq vT9rUbOymUnNGFjuu9y3jhsLYtJlnF+aNRDc7Etp7g== -----END CERTIFICATE-----Generated at Wed Sep 23 00:36:30 2026 by rpki-client