$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/7AA2F5228F4411F0830D0B1EC4F9AE02.roa File: 7AA2F5228F4411F0830D0B1EC4F9AE02.roa (raw, json) Hash identifier: Mh6xm78auUKAwke23lojP8OjM0xqIQ6biFwnIBwuAI0= Subject key identifier: C1:66:00:C6:74:35:92:27:3B:AE:AC:70:DB:1F:71:13:D4:B2:B8:A1 Certificate issuer: /CN=A916CDAC/serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Certificate serial: D6 Authority key identifier: DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/7AA2F5228F4411F0830D0B1EC4F9AE02.roa Signing time: Fri 11 Sep 2026 15:33:32 +0000 ROA not before: Fri 11 Sep 2026 15:33:32 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 31898 IP address blocks: 140.83.32.0/21 maxlen: 21 140.83.40.0/22 maxlen: 22 140.83.44.0/22 maxlen: 22 140.83.48.0/20 maxlen: 20 140.83.80.0/21 maxlen: 21 140.83.94.0/24 maxlen: 24 140.83.95.0/24 maxlen: 24 146.56.32.0/20 maxlen: 20 146.56.48.0/21 maxlen: 21 146.56.61.0/24 maxlen: 24 146.56.96.0/20 maxlen: 20 146.56.112.0/21 maxlen: 21 146.56.120.0/22 maxlen: 22 146.56.124.0/22 maxlen: 22 146.56.128.0/18 maxlen: 18 146.56.178.0/24 maxlen: 24 161.118.0.0/24 maxlen: 24 161.118.1.0/24 maxlen: 24 161.118.2.0/24 maxlen: 24 161.118.3.0/24 maxlen: 24 161.118.6.0/24 maxlen: 24 161.118.7.0/24 maxlen: 24 161.118.128.0/19 maxlen: 19 161.118.160.0/19 maxlen: 19 161.118.192.0/18 maxlen: 18 192.188.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=DDFCA9D034945A5924116137D62877F0CE52BF1B Validity Not Before: Sep 11 15:33:32 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6aa41f4c-a9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:c2:02:38:fa:16:72:91:3c:da:0a:33:e0: a1:2b:9f:5f:14:7b:54:28:d3:36:b5:68:c6:2a:82: 9b:ec:31:fa:04:f6:8f:04:89:8c:52:59:d1:90:3b: 48:aa:bf:c2:35:f8:cd:f0:4c:5a:fb:32:99:6f:62: 7f:d0:32:45:5e:4a:61:bd:8b:e6:59:75:63:11:50: 7b:de:78:24:c7:72:20:86:15:77:90:05:1c:ba:a7: 25:b3:f6:f1:7f:4a:38:53:78:cf:95:30:e2:95:72: 4c:b3:30:70:2c:c1:d5:39:c4:63:cf:e1:d3:e4:3e: 25:ae:7d:30:20:88:a1:39:b3:15:eb:7a:81:78:47: 90:fc:fa:51:36:73:8e:45:1b:9f:22:19:c4:13:19: 9b:e5:27:91:8b:1c:06:82:f5:26:48:bd:ad:cd:aa: 8f:45:a1:79:42:2b:37:12:59:77:11:63:0a:0b:a8: 7d:4c:ee:e6:ac:05:32:e9:5f:31:cc:9f:a1:b5:ac: d1:8e:99:e1:44:eb:7d:a1:f4:51:4c:22:7a:11:cc: f0:ca:93:a5:b0:96:f7:57:df:fe:51:86:81:4b:a5: 7f:97:7b:1b:3f:25:d5:fe:53:ad:e9:77:a2:d2:e5: fa:3c:44:44:05:66:9a:b7:37:80:05:65:df:4c:78: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:66:00:C6:74:35:92:27:3B:AE:AC:70:DB:1F:71:13:D4:B2:B8:A1 X509v3 Authority Key Identifier: keyid:DD:FC:A9:D0:34:94:5A:59:24:11:61:37:D6:28:77:F0:CE:52:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/3fyp0DSUWlkkEWE31ih38M5Svxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3fyp0DSUWlkkEWE31ih38M5Svxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/78D593188F3911F08632A039C4F9AE02/7AA2F5228F4411F0830D0B1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 140.83.32.0/19 140.83.80.0/21 140.83.94.0/23 146.56.32.0-146.56.55.255 146.56.61.0/24 146.56.96.0-146.56.191.255 161.118.0.0/22 161.118.6.0/23 161.118.128.0/17 192.188.171.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e9:f8:53:38:31:02:c2:bc:32:bf:1e:79:36:3b:53:bb:8a: 7b:2b:c8:53:7a:48:81:5d:de:82:3c:e4:a5:51:d7:50:c4:1a: d5:2a:12:d3:31:58:0c:5a:3c:35:9f:fb:a5:ad:17:45:8f:6e: 3f:5e:80:16:18:2e:97:e8:bc:43:9b:ee:cc:fd:d4:df:ea:42: 87:c5:6e:c1:ba:9f:9a:56:15:e2:9f:e4:ef:7f:2e:ed:d8:4d: a7:52:29:51:fb:17:49:c7:7f:5f:e8:8c:9b:bf:a3:44:da:9d: 08:1f:ae:4e:46:82:4d:3a:62:33:91:1e:22:f3:37:ed:9b:09: 31:27:46:84:c8:4b:6a:09:2a:08:a1:c5:eb:24:b4:bd:66:7f: 04:d1:29:83:17:3f:5b:9b:45:f2:9e:ce:44:3c:be:9d:d4:fe: 3e:df:d3:b8:92:13:7b:d0:d2:95:98:1f:d9:7d:b8:02:8b:14: 3f:fe:27:e7:8c:dc:e9:8f:d8:94:fc:95:aa:1d:6a:ad:32:19: e5:36:b0:a5:2a:b9:9c:19:cf:ab:39:ca:df:4f:8c:c4:a8:0c: a5:5e:96:0c:68:5f:2c:a6:4a:3b:32:ad:46:b3:5a:c9:19:1c: 5b:c5:1d:53:87:d8:e4:2a:78:aa:39:e4:1a:5e:a7:21:bc:16: 28:92:65:c8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEQUMxMTAvBgNVBAUTKERERkNBOUQwMzQ5NDVBNTkyNDExNjEzN0Q2Mjg3N0Yw Q0U1MkJGMUIwHhcNMjYwOTExMTUzMzMyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWE0MWY0Yy1hOWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B3CAjj6FnKRPNoKM+ChK59fFHtUKNM2tWjGKoKb7DH6BPaPBImMUlnRkDtI qr/CNfjN8Exa+zKZb2J/0DJFXkphvYvmWXVjEVB73ngkx3IghhV3kAUcuqcls/bx f0o4U3jPlTDilXJMszBwLMHVOcRjz+HT5D4lrn0wIIihObMV63qBeEeQ/PpRNnOO RRufIhnEExmb5SeRixwGgvUmSL2tzaqPRaF5Qis3Ell3EWMKC6h9TO7mrAUy6V8x zJ+htazRjpnhROt9ofRRTCJ6EczwypOlsJb3V9/+UYaBS6V/l3sbPyXV/lOt6Xei 0uX6PEREBWaatzeABWXfTHhIRQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFMFmAMZ0 NZInO66scNsfcRPUsrihMB8GA1UdIwQYMBaAFN38qdA0lFpZJBFhN9Yod/DOUr8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RBQy83OEQ1OTMxODhG MzkxMUYwODYzMkEwMzlDNEY5QUUwMi8zZnlwMERTVVdsa2tFV0UzMWloMzhNNVN2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNmeXAwRFNVV2xra0VXRTMxaWgzOE01U3Z4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNEQUMvNzhENTkzMTg4RjM5MTFGMDg2MzJBMDM5QzRGOUFFMDIvN0FBMkY1MjI4 RjQ0MTFGMDgzMEQwQjFFQzRGOUFFMDIucm9hMGUGCCsGAQUFBwEHAQH/BFYwVDBS BAIAATBMAwQFjFMgAwQDjFNQAwQBjFNeMAwDBAWSOCADBAOSODADBACSOD0wDAME BZI4YAMEBpI4gAMEAqF2AAMEAaF2BgMEB6F2gAMEAMC8qzANBgkqhkiG9w0BAQsF AAOCAQEALOn4UzgxAsK8Mr8eeTY7U7uKeyvIU3pIgV3egjzkpVHXUMQa1SoS0zFY DFo8NZ/7pa0XRY9uP16AFhgul+i8Q5vuzP3U3+pCh8VuwbqfmlYV4p/k738u7dhN p1IpUfsXScd/X+iMm7+jRNqdCB+uTkaCTTpiM5EeIvM37ZsJMSdGhMhLagkqCKHF 6yS0vWZ/BNEpgxc/W5tF8p7ORDy+ndT+Pt/TuJITe9DSlZgf2X24AosUP/4n54zc 6Y/YlPyVqh1qrTIZ5TawpSq5nBnPqznK30+MxKgMpV6WDGhfLKZKOzKtRrNayRkc W8UdU4fY5Cp4qjnkGl6nIbwWKJJlyA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:44 2026 by rpki-client