$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa File: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (raw, json) Hash identifier: K5UpNUHa6t6Y1d0NaTfgXbCJO963+ZytJ1fygBZFsus= Subject key identifier: 1C:75:CF:6C:A8:D5:5E:E2:58:6B:BC:C0:E3:A7:B0:6D:F2:60:FC:31 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0611 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa Signing time: Tue 03 Nov 2026 00:47:33 +0000 ROA not before: Tue 03 Nov 2026 00:47:33 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 5065 IP address blocks: 223.29.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 3 00:47:33 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ae92f25-51fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2b:83:55:98:85:c1:11:30:28:d9:de:90:4d: 47:d2:16:06:b0:0a:0f:02:12:2f:b1:e8:f3:e2:5d: 54:bf:72:d9:92:12:07:c3:41:68:44:a9:ff:3c:68: 2f:3c:db:d8:18:11:31:06:ef:4c:63:0c:ad:9f:56: 50:c3:51:93:c0:6d:53:f4:1f:2b:3a:e4:a2:d9:19: d9:ff:95:5d:4e:98:c9:60:b5:4c:25:55:3d:43:07: f4:15:a7:69:50:73:d0:3b:40:23:cd:f1:08:4e:fe: fa:7d:1b:9e:35:90:1a:31:54:9c:76:d8:52:25:52: b1:00:3b:0f:d5:e4:7a:31:60:84:20:df:96:73:a2: d7:3f:82:57:8d:26:fc:f1:07:93:70:c4:c7:71:b2: 46:d5:1f:bd:79:00:b4:1b:8c:e9:5c:ef:c3:cf:d4: 5d:48:f0:a7:2b:e1:67:51:5c:9b:15:28:df:b8:63: 69:d1:2d:fa:cf:9d:34:90:84:0b:2f:9a:b6:01:2d: 92:1a:38:7c:5b:00:c0:26:45:3b:09:ee:a8:3a:64: ca:8f:d3:e7:41:b1:31:cf:f6:8a:05:8b:bb:0b:87: 95:3c:75:4f:6f:bf:49:c6:be:b6:93:47:27:f9:6f: ad:3e:3c:ce:aa:69:59:0e:80:00:a2:e8:83:f0:60: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:75:CF:6C:A8:D5:5E:E2:58:6B:BC:C0:E3:A7:B0:6D:F2:60:FC:31 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 223.29.136.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:0c:b3:cd:6f:ff:80:d7:7f:3d:c6:3b:b9:61:c6:4e:f3:80: 2d:ab:5a:60:4c:bb:ed:fc:a5:ee:ed:0c:2f:79:aa:0b:f6:e5: d8:b3:e2:f4:3d:c2:16:d0:4a:44:6b:4e:1e:bf:6f:15:c7:31: 06:d3:fe:c2:4f:15:ab:77:0a:8f:98:dc:c9:51:38:68:a7:cc: 2f:6c:58:73:2e:43:94:d6:21:96:72:c8:7f:6a:ac:95:1a:b0: 70:b5:91:b1:8e:b9:ee:44:9c:4d:48:d9:f7:f6:64:04:8f:57: 55:29:81:b9:dc:74:61:cd:7b:fe:0c:42:9c:66:c3:d2:b8:06: 8d:88:c6:64:65:d8:4c:fd:39:06:0c:4f:35:97:4e:73:9c:a2: c6:87:9d:81:a5:86:69:ff:4f:88:06:6b:1f:e7:65:bf:b8:46: 93:c6:f8:fd:c7:d2:be:72:52:bd:4d:1c:6d:25:cb:70:6e:fc: 4c:7e:13:ec:e9:7f:a3:0f:5c:d4:8a:a7:41:ab:85:ba:10:e2: dc:f4:3e:88:0c:32:4b:b4:45:ad:fd:05:53:00:c4:f8:9a:60: 22:9a:82:db:7c:0c:76:f1:c0:aa:19:d6:06:55:34:f3:6d:99: dd:9c:3a:ad:df:ad:d2:eb:77:6e:5e:0c:4f:8d:b3:4c:a4:16: 61:87:99:b8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjYxMTAzMDA0NzMzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5MmYyNS01MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8yuDVZiFwREwKNnekE1H0hYGsAoPAhIvsejz4l1Uv3LZkhIHw0FoRKn/PGgv PNvYGBExBu9MYwytn1ZQw1GTwG1T9B8rOuSi2RnZ/5VdTpjJYLVMJVU9Qwf0Fadp UHPQO0AjzfEITv76fRueNZAaMVScdthSJVKxADsP1eR6MWCEIN+Wc6LXP4JXjSb8 8QeTcMTHcbJG1R+9eQC0G4zpXO/Dz9RdSPCnK+FnUVybFSjfuGNp0S36z500kIQL L5q2AS2SGjh8WwDAJkU7Ce6oOmTKj9PnQbExz/aKBYu7C4eVPHVPb79Jxr62k0cn +W+tPjzOqmlZDoAAouiD8GDjowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBx1z2yo 1V7iWGu8wOOnsG3yYPwxMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMzdENUVDOENC NjhBMTFGMDlEMDRFOTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC3x2IMA0GCSqGSIb3DQEBCwUAA4IBAQCcDLPNb/+A1389xju5YcZO 84Atq1pgTLvt/KXu7QwveaoL9uXYs+L0PcIW0EpEa04ev28VxzEG0/7CTxWrdwqP mNzJUThop8wvbFhzLkOU1iGWcsh/aqyVGrBwtZGxjrnuRJxNSNn39mQEj1dVKYG5 3HRhzXv+DEKcZsPSuAaNiMZkZdhM/TkGDE81l05znKLGh52BpYZp/0+IBmsf52W/ uEaTxvj9x9K+clK9TRxtJctwbvxMfhPs6X+jD1zUiqdBq4W6EOLc9D6IDDJLtEWt /QVTAMT4mmAimoLbfAx28cCqGdYGVTTzbZndnDqt363S63duXgxPjbNMpBZhh5m4 -----END CERTIFICATE-----Generated at Thu Nov 5 12:22:54 2026 by rpki-client