$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/DDFBF53064F811F18CD9A2CE7647A888.roa File: DDFBF53064F811F18CD9A2CE7647A888.roa (raw, json) Hash identifier: qQJZK5DFPG0io6YNv45bEjgk/qh3wGUrSQbYNODneBQ= Subject key identifier: E9:66:08:B9:5E:97:52:8E:06:43:B3:3F:85:B5:31:4E:02:58:74:CB Certificate issuer: /CN=A9165C34/serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Certificate serial: 15 Authority key identifier: 91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/DDFBF53064F811F18CD9A2CE7647A888.roa Signing time: Wed 10 Jun 2026 18:19:38 +0000 ROA not before: Wed 10 Jun 2026 18:19:38 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 142529 IP address blocks: 162.4.132.0/24 maxlen: 24 162.4.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 09:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165C34, serialNumber=91152A21E02EA91AFAB6CADC1D779F926751520D Validity Not Before: Jun 10 18:19:38 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a29aab9-6dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:92:65:4c:64:e3:1c:66:2f:9d:db:31:3c: 71:d3:ee:0d:c7:43:0c:96:68:e4:a8:4e:8a:9e:94: df:13:ad:e0:20:9f:52:53:b9:eb:04:28:88:e2:79: 2e:41:ab:40:b3:27:88:f6:06:bc:d0:88:55:b5:f1: da:70:60:75:8d:33:39:34:7e:06:cb:c5:b6:74:81: a9:29:f9:7b:81:62:97:77:d0:41:58:c6:83:41:41: 69:91:0d:1c:2a:56:74:a9:d6:7d:c0:21:83:08:6b: ff:65:58:22:42:51:8f:09:40:26:e9:d4:34:36:5b: ce:c9:78:10:ad:d0:e4:91:2f:e9:c4:c7:0d:c4:16: 93:5a:21:4e:32:93:55:ce:0a:22:3a:92:0f:72:79: 30:23:ef:ee:92:77:ad:07:d7:91:61:06:71:01:b7: a3:04:9e:1a:d2:dd:e4:22:c3:28:de:dd:0f:e6:27: e2:c2:77:fb:fa:cb:dc:53:42:d7:36:64:86:23:94: 2c:3b:a7:ae:3a:6d:c1:0c:c0:65:ad:84:7c:e4:f3: 64:78:71:dc:3f:be:5f:9d:43:23:fe:d7:6a:ef:8f: cb:90:39:e7:b4:d4:ac:1f:d0:5b:2b:c8:ff:d0:32: 96:a1:e5:7d:65:5d:60:3c:7a:ea:42:94:19:34:78: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:66:08:B9:5E:97:52:8E:06:43:B3:3F:85:B5:31:4E:02:58:74:CB X509v3 Authority Key Identifier: keyid:91:15:2A:21:E0:2E:A9:1A:FA:B6:CA:DC:1D:77:9F:92:67:51:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/kRUqIeAuqRr6tsrcHXefkmdRUg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kRUqIeAuqRr6tsrcHXefkmdRUg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/20ED12B44FAC11F1916432979E833773/DDFBF53064F811F18CD9A2CE7647A888.roa sbgp-ipAddrBlock: critical IPv4: 162.4.132.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:97:01:15:ed:8f:af:39:c4:9f:ab:1f:a3:28:fe:d1:10:ab: 12:8e:27:00:19:3d:a2:18:d9:1a:b4:b4:da:b9:11:6b:92:72: 80:bf:9b:96:d2:90:12:c0:f6:8e:28:67:d1:e5:c6:c5:92:0f: 42:40:6f:a7:ed:e1:35:04:e4:59:ef:f9:a9:a2:50:d8:b3:85: 04:23:17:3c:e3:67:f5:67:9a:2a:65:5a:50:8a:c0:4b:4d:b2: b8:f1:19:0d:f6:31:c9:2b:e0:9e:d9:27:f0:b5:4c:80:8a:63: 0f:80:b9:82:fb:28:23:9f:96:2b:66:7d:13:93:da:6d:97:e3: 33:a0:02:be:5e:4a:5c:11:24:77:c0:5a:f9:da:08:f2:f8:bc: 05:00:19:fb:70:77:be:69:d9:c9:84:31:85:a4:28:f8:40:30: 67:ce:66:ba:32:96:64:f8:0b:79:02:05:2e:56:63:b3:58:e1: 2e:06:03:67:46:cd:06:28:df:70:0f:26:d9:67:fa:d1:cc:50: 5a:7b:19:0a:b0:5e:92:17:c2:fc:80:e9:b0:56:58:a6:2f:4c: 16:00:41:a0:50:1e:ca:b2:0d:26:2e:99:45:14:7e:ca:2e:c4: 4b:68:37:b1:87:d2:e3:dd:91:08:51:98:86:ff:98:61:18:6e: a3:90:b9:c2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NUMzNDExMC8GA1UEBRMoOTExNTJBMjFFMDJFQTkxQUZBQjZDQURDMUQ3NzlGOTI2 NzUxNTIwRDAeFw0yNjA2MTAxODE5MzhaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMjlhYWI5LTZkZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl9JJlTGTjHGYvndsxPHHT7g3HQwyWaOSoToqelN8TreAgn1JTuesEKIjieS5B q0CzJ4j2BrzQiFW18dpwYHWNMzk0fgbLxbZ0gakp+XuBYpd30EFYxoNBQWmRDRwq VnSp1n3AIYMIa/9lWCJCUY8JQCbp1DQ2W87JeBCt0OSRL+nExw3EFpNaIU4yk1XO CiI6kg9yeTAj7+6Sd60H15FhBnEBt6MEnhrS3eQiwyje3Q/mJ+LCd/v6y9xTQtc2 ZIYjlCw7p646bcEMwGWthHzk82R4cdw/vl+dQyP+12rvj8uQOee01Kwf0FsryP/Q Mpah5X1lXWA8eupClBk0eJm9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6WYIuV6X Uo4GQ7M/hbUxTgJYdMswHwYDVR0jBBgwFoAUkRUqIeAuqRr6tsrcHXefkmdRUg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1QzM0LzIwRUQxMkI0NEZB QzExRjE5MTY0MzI5NzlFODMzNzczL2tSVXFJZUF1cVJyNnRzcmNIWGVma21kUlVn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva1JVcUllQXVxUnI2dHNyY0hYZWZrbWRSVWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUMzNC8yMEVEMTJCNDRGQUMxMUYxOTE2NDMyOTc5RTgzMzc3My9EREZCRjUzMDY0 RjgxMUYxOENEOUEyQ0U3NjQ3QTg4OC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGiBIQwDQYJKoZIhvcNAQELBQADggEBABqXARXtj685xJ+rH6Mo/tEQ qxKOJwAZPaIY2Rq0tNq5EWuScoC/m5bSkBLA9o4oZ9HlxsWSD0JAb6ft4TUE5Fnv +amiUNizhQQjFzzjZ/VnmiplWlCKwEtNsrjxGQ32Mckr4J7ZJ/C1TICKYw+AuYL7 KCOflitmfROT2m2X4zOgAr5eSlwRJHfAWvnaCPL4vAUAGftwd75p2cmEMYWkKPhA MGfOZroylmT4C3kCBS5WY7NY4S4GA2dGzQYo33APJtln+tHMUFp7GQqwXpIXwvyA 6bBWWKYvTBYAQaBQHsqyDSYumUUUfsouxEtoN7GH0uPdkQhRmIb/mGEYbqOQucI= -----END CERTIFICATE-----Generated at Sat Jun 13 13:39:55 2026 by rpki-client