$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa File: 1D77B4081BD911EAB49CC840C4F9AE02.roa (raw, json) Hash identifier: d0N0+ozuWdpcxDDoPKaBdN3Mx94MvRgN2nEEP72M5AU= Subject key identifier: 96:48:B6:72:05:3C:A1:28:00:43:10:91:3A:6D:C4:27:9D:42:E9:41 Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0CB1 Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa Signing time: Tue 09 Jun 2026 09:28:46 +0000 ROA not before: Tue 09 Jun 2026 09:28:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135600 IP address blocks: 45.114.4.0/23 maxlen: 23 45.114.6.0/23 maxlen: 23 103.67.170.0/24 maxlen: 24 103.67.171.0/24 maxlen: 24 202.133.192.0/20 maxlen: 20 202.133.208.0/20 maxlen: 20 203.17.180.0/24 maxlen: 24 203.17.181.0/24 maxlen: 24 203.17.182.0/23 maxlen: 23 2405:d180:8000::/34 maxlen: 34 2405:d180:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Jun 9 09:28:46 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6a27dcce-fbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:e4:ab:31:e4:c6:cc:0a:6e:4e:ab:da:8c: 43:c1:ed:b4:bf:b1:9b:2f:5b:80:02:8a:27:ad:09: 51:c8:5b:55:47:4e:9d:6e:e9:92:e0:2c:46:30:f5: 2d:11:5e:71:f4:1f:36:9b:31:64:4a:91:ee:a5:f8: cf:93:e1:2f:ba:49:58:06:99:3c:70:ed:6a:06:ec: 92:79:8f:59:ff:8a:85:7c:aa:24:3b:7c:60:75:6b: 7c:e7:0e:50:ab:dd:63:ac:fe:49:80:54:f9:8b:2d: ac:e8:df:79:15:eb:b6:e0:cb:7b:72:79:99:80:0f: 27:25:d7:51:04:31:e0:54:54:91:56:95:b9:73:ce: 5c:62:06:ab:e6:d9:9f:0e:95:da:ac:13:33:e5:0c: cb:f4:53:92:b9:28:4f:e4:c4:68:58:a2:48:08:f2: 3a:16:1e:77:ae:e5:75:e0:e6:45:2c:2d:ed:33:88: df:c8:85:68:77:ed:28:2b:f7:0f:ae:57:b0:49:1d: 17:05:b3:48:2a:b6:e4:ac:38:b8:d8:43:7a:8e:95: 88:0c:2b:68:02:18:0f:19:90:10:93:cf:3a:a1:54: 4c:9b:c6:10:17:60:1e:a4:14:4a:bf:5b:a9:ca:c6: ee:fa:14:c8:78:a4:d1:59:5e:18:ba:7a:8c:9b:42: 30:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:48:B6:72:05:3C:A1:28:00:43:10:91:3A:6D:C4:27:9D:42:E9:41 X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.4.0/22 103.67.170.0/23 202.133.192.0/19 203.17.180.0/22 IPv6: 2405:d180:8000::/33 Signature Algorithm: sha256WithRSAEncryption 44:c3:09:8b:0b:3b:0c:43:ec:c2:81:84:af:af:02:ed:03:8b: 92:7e:9a:e1:a4:90:c8:73:15:bb:6e:6b:46:2d:07:44:2a:b4: b2:eb:a8:0b:94:7c:c4:d0:87:fc:33:88:31:74:7a:ff:c5:ce: 33:13:9c:fa:02:ee:4c:ab:60:4e:d2:2e:b2:23:c4:1a:49:e8: a7:5a:5f:15:e2:d0:17:b6:ab:fe:23:93:f1:22:1f:70:1f:fe: 65:88:f9:60:e9:3b:f1:15:7c:e6:bb:b1:58:19:8a:91:d9:a9: e1:4f:32:be:e3:42:51:f3:22:3d:0d:2a:ba:78:75:57:0c:1e: d2:cb:ef:ce:88:c7:c5:81:3d:4e:85:90:7a:91:81:ca:00:3d: 8b:9a:6b:d1:84:70:bb:f8:6a:ed:85:2f:be:f6:93:7f:cc:43: a4:95:5c:aa:1c:60:2b:5b:8b:b4:f3:ad:11:56:36:f0:3c:65: 61:83:92:da:4c:80:47:ac:2d:47:41:b1:e2:92:3f:d2:62:dd: e9:6c:2a:35:c2:57:95:48:a2:3a:d2:35:48:c3:be:cd:04:b6: ae:9f:99:6f:82:62:ac:75:3c:ce:e0:fc:69:14:59:e9:dd:39: 89:eb:19:53:e9:44:d8:d2:3e:30:9f:c4:60:f1:c4:1b:d8:0a: f0:a0:7c:81 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjYwNjA5MDkyODQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI3ZGNjZS1mYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDzkqzHkxswKbk6r2oxDwe20v7GbL1uAAoonrQlRyFtVR06dbumS4CxGMPUt EV5x9B82mzFkSpHupfjPk+EvuklYBpk8cO1qBuySeY9Z/4qFfKokO3xgdWt85w5Q q91jrP5JgFT5iy2s6N95Feu24Mt7cnmZgA8nJddRBDHgVFSRVpW5c85cYgar5tmf DpXarBMz5QzL9FOSuShP5MRoWKJICPI6Fh53ruV14OZFLC3tM4jfyIVod+0oK/cP rlewSR0XBbNIKrbkrDi42EN6jpWIDCtoAhgPGZAQk886oVRMm8YQF2AepBRKv1up ysbu+hTIeKTRWV4YunqMm0Iw7wIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFJZItnIF PKEoAEMQkTptxCedQulBMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvMUQ3N0I0MDgx QkQ5MTFFQUI0OUNDODQwQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAe BAIAATAYAwQCLXIEAwQBZ0OqAwQFyoXAAwQCyxG0MA4EAgACMAgDBgckBdGAgDAN BgkqhkiG9w0BAQsFAAOCAQEARMMJiws7DEPswoGEr68C7QOLkn6a4aSQyHMVu25r Ri0HRCq0suuoC5R8xNCH/DOIMXR6/8XOMxOc+gLuTKtgTtIusiPEGknop1pfFeLQ F7ar/iOT8SIfcB/+ZYj5YOk78RV85ruxWBmKkdmp4U8yvuNCUfMiPQ0qunh1Vwwe 0svvzojHxYE9ToWQepGBygA9i5pr0YRwu/hq7YUvvvaTf8xDpJVcqhxgK1uLtPOt EVY28DxlYYOS2kyAR6wtR0Gx4pI/0mLd6WwqNcJXlUiiOtI1SMO+zQS2rp+Zb4Ji rHU8zuD8aRRZ6d05iesZU+lE2NI+MJ/EYPHEG9gK8KB8gQ== -----END CERTIFICATE-----Generated at Sat Jun 13 23:30:48 2026 by rpki-client