$ rpki-client -vvvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/E05FE99AB0D511E5B4F68B09C4F9AE02.roa File: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (raw, json) Hash identifier: 0QvFI/ahBWX5VoB/jvMXb7RKSIsf6B/YSEBaV7eS1ag= Subject key identifier: 12:D0:BD:2A:6A:A4:FA:C5:BD:8D:B8:95:F5:D5:A9:13:CF:4B:67:80 Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 35B1 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/E05FE99AB0D511E5B4F68B09C4F9AE02.roa Signing time: Sat 12 Sep 2026 15:16:38 +0000 ROA not before: Sat 12 Sep 2026 15:16:38 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 38227 IP address blocks: 123.176.72.0/21 maxlen: 21 123.176.72.0/22 maxlen: 22 123.176.76.0/22 maxlen: 22 182.50.72.0/22 maxlen: 22 182.50.72.0/23 maxlen: 23 2407:2800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13745 (0x35b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Sep 12 15:16:38 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa56cd6-c927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:99:db:48:f2:0d:8c:2b:a0:ad:62:3f:4a: ee:57:3e:5e:87:44:8f:1e:04:5a:2a:75:f1:87:71: 24:12:b4:59:e6:77:ab:2d:3d:39:ff:04:a3:24:64: 0c:ff:ff:74:13:a0:4a:ea:01:5a:6a:a1:08:6a:c6: 80:a1:6f:35:7c:13:7c:af:f9:e5:01:5a:5d:a1:05: 00:b1:1c:9a:32:b8:e5:27:89:cf:1e:fe:e7:9f:60: 65:53:b6:d6:d5:f4:19:2c:93:aa:98:34:a8:af:92: f5:13:d9:74:8b:08:b7:fa:f5:39:cf:2d:9c:0f:72: 07:f3:74:ae:68:bf:8b:70:8c:55:ad:16:52:39:54: f2:58:5e:06:6e:f2:2b:85:35:bd:7d:d8:fb:37:c7: 9e:bc:6d:bf:f8:71:5e:34:96:a5:5e:a4:d6:3e:57: 4b:4c:23:5f:3c:ce:7c:5d:bd:76:80:c9:29:8a:c5: 4b:88:2c:a4:0b:8e:56:2f:7c:95:e8:62:48:4e:2f: 28:68:29:7b:28:80:06:75:01:30:30:4c:5e:d7:dc: f6:41:12:85:2b:7a:fc:37:e1:7d:ad:83:8e:39:36: 7e:ec:d2:8b:42:ab:53:16:12:a6:e4:8c:db:80:8f: 7e:f6:04:67:77:c6:ce:b5:60:d4:0a:a8:78:d4:bf: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D0:BD:2A:6A:A4:FA:C5:BD:8D:B8:95:F5:D5:A9:13:CF:4B:67:80 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/E05FE99AB0D511E5B4F68B09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.176.72.0/21 182.50.72.0/22 IPv6: 2407:2800::/32 Signature Algorithm: sha256WithRSAEncryption 52:f5:fd:a2:a6:36:30:ff:0d:5e:51:cf:67:b6:6c:26:f3:0e: ef:5c:7f:f8:90:90:dc:7c:6c:ed:6b:6f:a6:46:e1:aa:8a:a1: e3:66:d4:96:8f:a4:ec:36:60:76:ba:d1:3c:59:57:74:d6:27: 28:7b:47:54:49:27:5a:3c:4a:4d:93:23:12:63:ea:83:c1:cc: 39:31:90:ec:52:06:f5:a2:e0:bc:79:f7:7a:04:c1:ed:34:81: 5d:af:be:fb:f6:e1:ba:ae:4a:1b:64:12:04:7a:05:b7:03:fe: 8e:62:b3:1d:2d:68:4a:bc:e8:7f:eb:44:b4:23:ce:40:27:2d: 88:58:53:9c:f7:56:75:c1:16:9a:48:2e:f1:77:1a:44:ff:1f: 24:d6:d2:da:de:2b:2b:91:e9:6d:51:8d:1e:ec:56:19:30:95: 81:8c:7f:39:80:ac:de:ff:e0:fc:8e:e2:b3:e4:a7:25:c3:40: 84:06:a6:3f:e8:00:c6:87:b1:ae:64:ae:e9:db:36:2a:17:f9: b2:89:bd:01:7a:be:7c:6a:7a:64:b1:7e:67:40:9a:99:c7:7d: 9c:30:a4:c2:74:e8:1e:0e:9a:77:3c:12:f3:96:f4:46:36:c6: ef:3d:4b:42:80:0a:a8:e5:54:ef:bd:b1:a7:24:f9:e1:e5:86: d6:98:a6:a8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjYwOTEyMTUxNjM4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE1NmNkNi1jOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokyZ20jyDYwroK1iP0ruVz5eh0SPHgRaKnXxh3EkErRZ5nerLT05/wSjJGQM //90E6BK6gFaaqEIasaAoW81fBN8r/nlAVpdoQUAsRyaMrjlJ4nPHv7nn2BlU7bW 1fQZLJOqmDSor5L1E9l0iwi3+vU5zy2cD3IH83SuaL+LcIxVrRZSOVTyWF4GbvIr hTW9fdj7N8eevG2/+HFeNJalXqTWPldLTCNfPM58Xb12gMkpisVLiCykC45WL3yV 6GJITi8oaCl7KIAGdQEwMExe19z2QRKFK3r8N+F9rYOOOTZ+7NKLQqtTFhKm5Izb gI9+9gRnd8bOtWDUCqh41L83UQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFBLQvSpq pPrFvY24lfXVqRPPS2eAMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzIwMUQvQ0QxRTI5NDgxRDkyMTFFMkEzQjFGNEY1MDhCMDJDRDIvRTA1RkU5OUFC MEQ1MTFFNUI0RjY4QjA5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQDe7BIAwQCtjJIMA0EAgACMAcDBQAkBygAMA0GCSqGSIb3DQEBCwUA A4IBAQBS9f2ipjYw/w1eUc9ntmwm8w7vXH/4kJDcfGzta2+mRuGqiqHjZtSWj6Ts NmB2utE8WVd01icoe0dUSSdaPEpNkyMSY+qDwcw5MZDsUgb1ouC8efd6BMHtNIFd r7779uG6rkobZBIEegW3A/6OYrMdLWhKvOh/60S0I85AJy2IWFOc91Z1wRaaSC7x dxpE/x8k1tLa3isrkeltUY0e7FYZMJWBjH85gKze/+D8juKz5Kclw0CEBqY/6ADG h7GuZK7p2zYqF/myib0Ber58anpksX5nQJqZx32cMKTCdOgeDpp3PBLzlvRGNsbv PUtCgAqo5VTvvbGnJPnh5YbWmKao -----END CERTIFICATE-----Generated at Tue Sep 22 23:18:42 2026 by rpki-client