$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa File: 3BA64F0AF22611F094D5D2AE526F56BC.roa (raw, json) Hash identifier: YGxVjUrVfovLN/jy6ItV76eCZhcW+wo+hqDcHt810KI= Subject key identifier: 76:89:8F:BB:2C:CA:D0:DE:FE:7A:8C:E8:3B:ED:D9:C3:3F:B9:C0:C0 Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 1347 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa Signing time: Tue 20 Oct 2026 17:32:26 +0000 ROA not before: Tue 20 Oct 2026 17:32:25 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 20473 IP address blocks: 66.42.32.0/20 maxlen: 24 66.42.48.0/20 maxlen: 24 139.180.128.0/19 maxlen: 24 139.180.160.0/19 maxlen: 24 139.180.192.0/19 maxlen: 24 158.247.192.0/18 maxlen: 24 167.179.64.0/18 maxlen: 24 207.148.64.0/20 maxlen: 24 207.148.80.0/21 maxlen: 24 207.148.88.0/21 maxlen: 24 207.148.96.0/20 maxlen: 24 207.148.112.0/22 maxlen: 24 207.148.116.0/22 maxlen: 24 207.148.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4935 (0x1347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Oct 20 17:32:25 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ad7a5a9-ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:9b:f3:3b:db:db:c5:bf:27:06:53:5f:a3: f8:6d:cd:8a:81:89:db:0c:c0:e7:a7:78:c8:f4:e5: 45:6d:f1:38:fb:a2:55:45:af:fe:b8:70:fd:bc:e0: f5:d8:d8:ee:2b:89:19:0b:78:4d:8d:3b:23:a8:6f: 52:55:32:9b:98:d3:68:88:1f:a5:fc:9c:a6:5b:a8: 96:6d:cc:3e:f4:3f:ed:90:86:e5:b6:6b:bc:eb:49: 2b:9c:e8:5e:50:72:95:36:ed:d9:64:a3:67:19:9c: 51:21:9b:a5:70:4f:59:0e:72:3e:72:7c:5a:2d:e2: c1:5f:32:e6:15:98:48:b2:c6:74:62:8d:b1:fa:dd: 4b:d0:97:80:f0:58:58:8e:5b:95:75:fa:0f:f1:fe: 5e:51:e1:08:a9:8b:32:42:87:85:66:25:91:95:3c: 6e:af:be:1a:10:89:fe:95:30:c8:12:1e:fa:fb:65: 66:12:08:a1:14:85:ae:7b:51:90:82:d1:9b:a3:d7: 20:cc:74:52:be:e9:93:7a:e8:10:46:3e:1e:57:d4: 99:64:cb:d4:7a:e0:15:d0:16:d3:41:60:9f:5a:7c: 50:76:fe:c6:05:3b:15:01:37:32:6c:48:33:e9:94: f7:2b:30:1d:32:b8:f2:f9:7b:cb:49:85:b5:0c:c0: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:89:8F:BB:2C:CA:D0:DE:FE:7A:8C:E8:3B:ED:D9:C3:3F:B9:C0:C0 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/3BA64F0AF22611F094D5D2AE526F56BC.roa sbgp-ipAddrBlock: critical IPv4: 66.42.32.0/19 139.180.128.0-139.180.223.255 158.247.192.0/18 167.179.64.0/18 207.148.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7f:be:f5:cc:2d:07:c8:3e:31:c1:e6:fc:b7:4e:c6:77:d7:11: c5:f2:88:00:5e:26:d7:6f:8a:b7:0a:72:c4:81:5d:9c:fb:a1: b6:84:4e:6b:2f:93:ec:f3:42:90:95:ff:c1:3f:9a:d3:b5:69: 56:ea:79:ad:54:fe:99:37:40:d9:d6:e0:d6:d4:ba:8a:7a:bf: 86:b3:b3:ef:c6:19:95:13:f5:8f:72:12:70:df:39:42:12:9e: 33:24:87:52:37:ec:d1:d7:c0:a7:3c:17:92:f1:c7:f5:4c:ea: da:08:4c:a1:24:14:21:da:f7:ec:d6:68:9a:af:9f:60:b3:58: 1f:72:c5:ef:21:aa:e5:a4:39:b6:07:f0:c6:3f:12:43:85:ed: a6:56:7b:69:14:f8:93:a5:b2:78:75:d6:d2:f2:39:4d:ff:f6: 76:57:87:7e:e2:da:cd:4f:9a:dd:2d:42:4b:21:5f:b8:32:30: 79:c3:71:db:f1:bb:cc:5f:ed:70:33:0e:e9:9d:1e:03:9e:2b: 07:8c:fa:89:e3:ec:27:b0:09:56:76:3d:17:ce:42:19:24:e5: b0:82:5e:17:da:e6:77:73:97:0f:36:ab:7f:e6:3b:f8:e4:5a: 10:83:3d:80:23:4f:e2:7c:70:9a:cd:ce:3b:7d:21:cc:89:cb: 29:4d:06:d7 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICE0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjYxMDIwMTczMjI1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWQ3YTVhOS1hZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooCb8zvb28W/JwZTX6P4bc2KgYnbDMDnp3jI9OVFbfE4+6JVRa/+uHD9vOD1 2NjuK4kZC3hNjTsjqG9SVTKbmNNoiB+l/JymW6iWbcw+9D/tkIbltmu860krnOhe UHKVNu3ZZKNnGZxRIZulcE9ZDnI+cnxaLeLBXzLmFZhIssZ0Yo2x+t1L0JeA8FhY jluVdfoP8f5eUeEIqYsyQoeFZiWRlTxur74aEIn+lTDIEh76+2VmEgihFIWue1GQ gtGbo9cgzHRSvumTeugQRj4eV9SZZMvUeuAV0BbTQWCfWnxQdv7GBTsVATcybEgz 6ZT3KzAdMrjy+XvLSYW1DMA0ZQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFHaJj7ss ytDe/nqM6Dvt2cM/ucDAMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJDREYvRUNFMEZCRTZFMzZEMTFFODk1NkYzNTE2QzRGOUFFMDIvM0JBNjRGMEFG MjI2MTFGMDk0RDVEMkFFNTI2RjU2QkMucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQFQiogMAwDBAeLtIADBAWLtMADBAae98ADBAans0ADBAbPlEAwDQYJ KoZIhvcNAQELBQADggEBAH++9cwtB8g+McHm/LdOxnfXEcXyiABeJtdvircKcsSB XZz7obaETmsvk+zzQpCV/8E/mtO1aVbqea1U/pk3QNnW4NbUuop6v4azs+/GGZUT 9Y9yEnDfOUISnjMkh1I37NHXwKc8F5Lxx/VM6toITKEkFCHa9+zWaJqvn2CzWB9y xe8hquWkObYH8MY/EkOF7aZWe2kU+JOlsnh11tLyOU3/9nZXh37i2s1Pmt0tQksh X7gyMHnDcdvxu8xf7XAzDumdHgOeKweM+onj7CewCVZ2PRfOQhkk5bCCXhfa5ndz lw82q3/mO/jkWhCDPYAjT+J8cJrNzjt9IcyJyylNBtc= -----END CERTIFICATE-----Generated at Sun Nov 15 21:57:04 2026 by rpki-client