$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/81EDAEEC6DE911F1BE416AB35CA30FBC.roa File: 81EDAEEC6DE911F1BE416AB35CA30FBC.roa (raw, json) Hash identifier: mfLDoHKjc1wOzAFQMRnpJlmvc97T+kUZ6co3lhJxleI= Subject key identifier: E1:DA:23:9B:A7:27:1F:A7:73:A6:FA:A2:E7:00:C8:AA:87:EF:92:71 Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0585 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/81EDAEEC6DE911F1BE416AB35CA30FBC.roa Signing time: Mon 02 Nov 2026 20:40:01 +0000 ROA not before: Mon 02 Nov 2026 20:40:00 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 963 IP address blocks: 52.128.224.0/19 maxlen: 24 148.66.0.0/19 maxlen: 24 216.118.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 20:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Nov 2 20:40:00 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae8f520-91cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:50:ec:2a:c3:f1:e4:cd:55:f8:57:c8:55:fb: 6e:cb:76:78:96:b3:29:90:17:5c:e0:41:d8:bb:f5: 54:3e:46:60:f8:25:c1:10:df:a1:f5:88:a6:d8:2b: 3f:c5:36:66:84:cb:28:6e:13:5e:5d:51:4d:96:16: 44:ca:76:f8:ce:98:ff:ad:72:61:07:6e:26:69:ad: 29:f3:8d:be:0f:95:41:fb:65:69:5a:3c:03:7b:2e: a4:cd:12:f0:2f:2a:7c:91:82:87:1b:b8:0d:64:9c: fe:d6:1b:db:9a:62:58:3e:ff:8b:c3:c4:ee:10:df: 50:79:93:d0:28:07:12:7c:cc:bc:89:ab:b5:19:7b: 4e:83:61:2a:a8:11:39:27:5f:c5:8d:be:79:3e:04: 81:ae:9e:3a:c8:f9:37:82:3e:47:79:86:be:68:87: 4c:c4:05:7c:23:d1:00:dc:98:97:c5:bb:03:28:f1: f0:6d:45:ed:86:77:6a:ec:63:ed:e5:74:fc:dd:b5: 70:97:ed:f3:10:91:3d:8b:98:dd:82:89:cc:99:1e: b6:3d:17:12:e4:d6:30:f4:91:26:33:57:23:9b:8c: eb:fe:46:8c:f6:0d:06:f2:ff:97:5a:f1:e5:2e:ac: 40:41:8f:5c:65:34:fb:c8:0f:10:03:b4:29:3a:10: 5e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DA:23:9B:A7:27:1F:A7:73:A6:FA:A2:E7:00:C8:AA:87:EF:92:71 X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/81EDAEEC6DE911F1BE416AB35CA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 52.128.224.0/19 148.66.0.0/19 216.118.224.0/19 Signature Algorithm: sha256WithRSAEncryption 85:d4:ed:c8:28:2a:e8:31:7f:4c:26:4b:4b:e4:a2:47:5b:25: 84:b9:53:5e:10:32:3f:04:af:36:60:a0:e4:90:6f:4a:96:26: 23:87:ae:5b:04:5f:92:46:7b:8c:06:2e:3c:de:fe:f8:42:49: 63:de:9e:b4:2c:0c:6e:7a:8a:b1:85:9c:13:67:2e:b2:a0:04: 19:8d:c1:92:8b:ba:69:7b:84:c4:d9:e5:1c:ad:84:4a:16:21: 3c:fe:34:b6:e6:ad:ed:9f:c3:9e:aa:b8:c0:76:59:00:2b:dc: 55:4f:1f:13:67:45:18:33:bd:e5:71:26:6d:c3:56:96:e4:34: 01:d5:22:7a:cc:39:06:0e:c3:c1:87:d1:0f:9e:18:bd:e9:51: 56:4f:1d:2d:09:a3:c1:26:8b:1e:d6:17:94:08:f2:59:81:dc: 90:ab:28:84:51:15:a0:fe:21:c9:9c:30:dd:f1:c1:ec:8d:8d: 35:cb:b3:cb:f1:59:3d:70:c6:b3:22:dc:5e:28:c4:4b:cc:fd: ff:e7:73:17:9f:f3:81:62:72:d3:66:14:93:bd:7f:43:64:73: 4c:35:17:c2:13:1b:bc:9e:4f:33:ff:ad:ca:02:31:f3:d2:12: 46:02:dc:13:32:66:72:c7:a4:e7:a6:cd:9a:54:4c:d0:25:2f: 94:e3:00:9f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjYxMTAyMjA0MDAwWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU4ZjUyMC05MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lDsKsPx5M1V+FfIVftuy3Z4lrMpkBdc4EHYu/VUPkZg+CXBEN+h9Yim2Cs/ xTZmhMsobhNeXVFNlhZEynb4zpj/rXJhB24maa0p842+D5VB+2VpWjwDey6kzRLw Lyp8kYKHG7gNZJz+1hvbmmJYPv+Lw8TuEN9QeZPQKAcSfMy8iau1GXtOg2EqqBE5 J1/Fjb55PgSBrp46yPk3gj5HeYa+aIdMxAV8I9EA3JiXxbsDKPHwbUXthndq7GPt 5XT83bVwl+3zEJE9i5jdgonMmR62PRcS5NYw9JEmM1cjm4zr/kaM9g0G8v+XWvHl LqxAQY9cZTT7yA8QA7QpOhBeIQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOHaI5un Jx+nc6b6oucAyKqH75JxMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvRTMyQzg3Q0M1MEQ1MTFFQ0IzRjhENTI5QzRGOUFFMDIvODFFREFFRUM2 REU5MTFGMUJFNDE2QUIzNUNBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFNIDgAwQFlEIAAwQF2HbgMA0GCSqGSIb3DQEBCwUAA4IBAQCF1O3I KCroMX9MJktL5KJHWyWEuVNeEDI/BK82YKDkkG9KliYjh65bBF+SRnuMBi483v74 Qklj3p60LAxueoqxhZwTZy6yoAQZjcGSi7ppe4TE2eUcrYRKFiE8/jS25q3tn8Oe qrjAdlkAK9xVTx8TZ0UYM73lcSZtw1aW5DQB1SJ6zDkGDsPBh9EPnhi96VFWTx0t CaPBJose1heUCPJZgdyQqyiEURWg/iHJnDDd8cHsjY01y7PL8Vk9cMazItxeKMRL zP3/53MXn/OBYnLTZhSTvX9DZHNMNRfCExu8nk8z/63KAjHz0hJGAtwTMmZyx6Tn ps2aVEzQJS+U4wCf -----END CERTIFICATE-----Generated at Sun Nov 15 18:32:44 2026 by rpki-client