$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/BC0F1A48A67911F1932095496A11F970.roa File: BC0F1A48A67911F1932095496A11F970.roa (raw, json) Hash identifier: glD139X26ew8NYKcqT1AVGm1INFPUxYbUokwUTsw9YM= Subject key identifier: 31:02:87:D0:1B:B3:6E:C7:03:9F:61:B7:AC:73:90:C1:E5:7D:4C:C6 Certificate issuer: /CN=A9172999/serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7 Certificate serial: 46 Authority key identifier: CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/BC0F1A48A67911F1932095496A11F970.roa Signing time: Mon 07 Sep 2026 06:35:21 +0000 ROA not before: Mon 07 Sep 2026 06:35:21 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 2914 IP address blocks: 186.240.241.0/24 maxlen: 24 186.240.242.0/24 maxlen: 24 186.240.243.0/24 maxlen: 24 186.240.244.0/24 maxlen: 24 186.240.246.0/24 maxlen: 24 186.240.247.0/24 maxlen: 24 186.240.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=CD4454B24E3FF7DC75CBBE919BDDA79C47B95EA7 Validity Not Before: Sep 7 06:35:21 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9e5b29-721a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:a7:3f:30:40:88:1b:43:0b:c3:70:fa:e8: 6e:ca:74:1b:6e:3e:4a:df:bc:d7:80:00:96:91:4d: 47:6c:11:21:c2:90:b4:84:66:49:7a:e4:91:b5:86: a4:83:9c:25:d3:3d:3b:f8:f4:ae:63:3d:21:44:3b: 2a:9d:a4:31:10:d2:3b:b2:bb:df:2a:81:68:bf:ee: 60:25:ad:1a:62:fa:34:67:cc:ad:2e:31:d6:f0:56: f3:f9:bb:c3:55:da:55:36:23:ee:bd:4a:99:f0:ca: 47:f1:62:43:c2:4e:c8:43:31:6d:5e:9a:1e:a8:fd: ed:17:d2:17:9f:b9:3c:5c:49:0c:20:d5:32:83:30: 9f:f4:d0:ac:b9:82:a7:af:44:1a:28:93:fb:c1:0b: a3:33:24:65:10:87:b5:89:04:54:18:98:7b:27:d1: e2:14:82:99:e6:e3:9d:01:4e:aa:e7:4d:62:a2:8f: cc:7a:13:19:47:1b:4f:3f:ff:ad:c8:21:88:11:65: 66:f0:ee:8d:fb:b7:da:68:38:9e:eb:00:8f:2c:bd: 96:8c:00:73:56:a7:52:dd:45:65:52:8d:6b:0e:90: 1d:46:88:23:ab:5c:cf:6f:c7:fc:2f:2e:2d:0a:b9: 1a:3a:16:3a:76:85:3d:2c:23:9b:36:3b:27:0f:c2: 30:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:87:D0:1B:B3:6E:C7:03:9F:61:B7:AC:73:90:C1:E5:7D:4C:C6 X509v3 Authority Key Identifier: keyid:CD:44:54:B2:4E:3F:F7:DC:75:CB:BE:91:9B:DD:A7:9C:47:B9:5E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/zURUsk4_99x1y76Rm92nnEe5Xqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/zURUsk4_99x1y76Rm92nnEe5Xqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/AEFC55B04FF211F19B127DF19EEE528E/BC0F1A48A67911F1932095496A11F970.roa sbgp-ipAddrBlock: critical IPv4: 186.240.241.0-186.240.244.255 186.240.246.0-186.240.248.255 Signature Algorithm: sha256WithRSAEncryption 4a:49:5f:a1:c5:60:2c:f8:75:93:03:5b:ff:96:6f:50:42:99: 64:e7:45:87:3e:ac:f5:64:99:34:dc:cf:01:e5:6c:43:af:b7: fd:68:ae:0f:e3:4c:8a:a7:56:53:06:cb:58:12:3d:27:a3:fd: 70:07:0f:e4:15:e5:a7:79:08:8c:a6:51:31:90:72:03:9f:f2: 93:df:9b:0f:07:cd:85:fe:4a:43:4c:bb:49:bd:7b:c4:14:d1: 1b:80:e5:7f:fc:ea:1b:40:d6:52:14:43:50:f4:93:52:33:23: f7:21:2c:25:fd:74:76:3b:33:39:a0:da:91:8d:28:52:83:78: 2f:ac:47:2d:4a:bc:57:0a:70:47:c8:9a:52:8f:ad:78:fd:d7: 20:95:88:df:b1:3b:04:4f:66:86:d4:40:7c:c5:02:29:2e:e7: 00:5b:9a:7f:f2:38:5c:e1:86:9d:51:43:b9:f2:88:a0:1b:2f: 29:5a:66:40:37:dc:f1:d1:95:4d:6e:fd:ce:e9:39:60:16:b2: 98:eb:ec:d2:8e:b1:92:6b:61:5b:e3:65:97:8d:03:75:56:ef: 28:a5:98:4a:08:b4:e2:4e:a1:41:34:03:19:ea:ec:e6:7f:e4: 69:ab:84:f9:19:97:16:29:66:00:27:53:5d:41:7a:32:a7:04: 66:33:69:70 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk5OTExMC8GA1UEBRMoQ0Q0NDU0QjI0RTNGRjdEQzc1Q0JCRTkxOUJEREE3OUM0 N0I5NUVBNzAeFw0yNjA5MDcwNjM1MjFaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWU1YjI5LTcyMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgBqc/MECIG0MLw3D66G7KdBtuPkrfvNeAAJaRTUdsESHCkLSEZkl65JG1hqSD nCXTPTv49K5jPSFEOyqdpDEQ0juyu98qgWi/7mAlrRpi+jRnzK0uMdbwVvP5u8NV 2lU2I+69SpnwykfxYkPCTshDMW1emh6o/e0X0hefuTxcSQwg1TKDMJ/00Ky5gqev RBook/vBC6MzJGUQh7WJBFQYmHsn0eIUgpnm450BTqrnTWKij8x6ExlHG08//63I IYgRZWbw7o37t9poOJ7rAI8svZaMAHNWp1LdRWVSjWsOkB1GiCOrXM9vx/wvLi0K uRo6Fjp2hT0sI5s2OycPwjCvAgMBAAGjggJ2MIICcjAdBgNVHQ4EFgQUMQKH0Buz bscDn2G3rHOQweV9TMYwHwYDVR0jBBgwFoAUzURUsk4/99x1y76Rm92nnEe5Xqcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTk5L0FFRkM1NUIwNEZG MjExRjE5QjEyN0RGMTlFRUU1MjhFL3pVUlVzazRfOTl4MXk3NlJtOTJubkVlNVhx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvelVSVXNrNF85OXgxeTc2Um05Mm5uRWU1WHFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9BRUZDNTVCMDRGRjIxMUYxOUIxMjdERjE5RUVFNTI4RS9CQzBGMUE0OEE2 NzkxMUYxOTMyMDk1NDk2QTExRjk3MC5yb2EwNQYIKwYBBQUHAQcBAf8EJjAkMCIE AgABMBwwDAMEALrw8QMEALrw9DAMAwQBuvD2AwQAuvD4MA0GCSqGSIb3DQEBCwUA A4IBAQBKSV+hxWAs+HWTA1v/lm9QQplk50WHPqz1ZJk03M8B5WxDr7f9aK4P40yK p1ZTBstYEj0no/1wBw/kFeWneQiMplExkHIDn/KT35sPB82F/kpDTLtJvXvEFNEb gOV//OobQNZSFENQ9JNSMyP3ISwl/XR2OzM5oNqRjShSg3gvrEctSrxXCnBHyJpS j614/dcglYjfsTsET2aG1EB8xQIpLucAW5p/8jhc4YadUUO58oigGy8pWmZAN9zx 0ZVNbv3O6TlgFrKY6+zSjrGSa2Fb42WXjQN1Vu8opZhKCLTiTqFBNAMZ6uzmf+Rp q4T5GZcWKWYAJ1NdQXoypwRmM2lw -----END CERTIFICATE-----Generated at Mon Sep 21 14:59:39 2026 by rpki-client