$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/007686A0D3DD11F08C79D853C4F9AE02.roa File: 007686A0D3DD11F08C79D853C4F9AE02.roa (raw, json) Hash identifier: snafex4e2SJ4Z7RULXkopBIE0X2g6JmA9mTt3bV4/r4= Subject key identifier: 2D:32:E0:E9:6D:8B:3D:C3:36:9F:6B:42:67:E7:43:94:11:67:6E:6F Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 69 Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/007686A0D3DD11F08C79D853C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:07:07 +0000 ROA not before: Mon 08 Dec 2025 02:24:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 150436 IP address blocks: 187.42.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Dec 8 02:24:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4561b-a771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:c1:42:1a:66:b3:75:6f:9f:64:aa:ff:e4: d6:8a:52:8b:d1:a4:21:c0:49:a6:11:18:36:9a:50: e4:b5:e0:d6:86:4e:27:85:8e:4d:8a:52:1c:5c:9a: 1b:7a:4b:1d:73:5c:03:6d:46:c6:79:dc:1a:ac:e2: 8f:54:f9:9c:a3:b0:f2:86:82:2b:2b:00:6e:21:27: 8d:03:a3:06:fb:06:4b:41:fd:eb:0b:30:54:09:c0: bf:e8:72:d2:2e:cc:42:19:28:81:8a:0e:4b:a3:7c: 62:eb:29:9d:4c:fd:b1:91:5b:43:30:61:19:c7:07: 96:49:3d:57:21:06:d7:3d:ed:e0:e7:47:a6:21:7e: 97:1c:8b:6a:df:21:84:df:bc:81:f2:17:1d:30:bc: 2f:10:7f:f1:09:2b:54:c9:67:99:e9:02:fc:53:09: 7f:a0:6b:bf:ce:46:54:66:3d:5a:dd:b1:43:e3:14: 78:dd:f6:f7:1b:87:7a:7a:2a:bd:6c:08:66:91:5d: 99:c7:31:d6:38:43:1e:e0:42:23:e7:65:a2:5c:3b: 82:76:c0:54:9f:07:1b:9b:bf:a5:3e:cf:d5:83:bf: 41:63:83:43:f4:1e:32:72:41:5b:62:cb:85:f8:e2: 77:c8:ef:34:93:29:c8:b8:f6:ee:b6:2d:d6:5d:04: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:32:E0:E9:6D:8B:3D:C3:36:9F:6B:42:67:E7:43:94:11:67:6E:6F X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/007686A0D3DD11F08C79D853C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 187.42.0.0/17 Signature Algorithm: sha256WithRSAEncryption 98:34:ba:8a:5b:f7:f2:4b:f3:7c:1e:35:a5:ed:ec:af:a8:28: fa:eb:c1:80:80:f1:3b:dd:4e:8c:8c:b8:31:87:18:cc:d7:5a: 33:ab:e5:58:21:65:49:c8:5b:74:27:ea:47:d6:22:2d:ac:95: 9f:82:c8:02:55:d9:07:c9:47:99:67:fd:d8:c0:af:17:12:5a: 78:29:aa:60:df:a2:27:58:c5:e0:4d:76:41:94:e8:fb:59:99: bf:e4:4a:97:1f:2e:48:65:23:b3:5c:01:06:95:51:44:b6:d8: 02:62:a2:5a:62:a9:b6:70:c3:f3:9b:98:26:54:a0:c5:a0:a3: 4a:32:d3:a9:f0:ea:54:a9:8e:6c:ed:20:fa:94:e7:c4:3a:a8: 37:8d:48:f7:1d:fc:88:50:e0:0b:da:77:f1:1f:e8:37:bc:79: 79:ec:a4:a1:3e:02:e5:e7:0a:f1:03:d2:c5:5c:1f:4a:5a:ba: 42:77:ef:2b:8a:c2:50:c1:a7:36:0a:7e:fe:15:03:d4:b0:7f: 39:5f:5e:98:67:f0:f7:b6:c5:31:42:7d:4b:a0:79:36:e4:57: 8d:19:44:0c:f7:19:11:ee:17:15:99:7e:4c:f0:93:ec:01:5d: 44:40:d2:62:08:25:07:9e:56:56:b8:1d:63:cf:a4:f2:ba:19: 53:3c:db:ba -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjUyMDExMC8GA1UEBRMoMDI0RDhGMTVBQTM5NzcyMTc1ODgzQTJFREMxNjUwMTRF MTkyOEExQTAeFw0yNTEyMDgwMjI0MjBaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ1NjFiLWE3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0qcFCGmazdW+fZKr/5NaKUovRpCHASaYRGDaaUOS14NaGTieFjk2KUhxcmht6 Sx1zXANtRsZ53Bqs4o9U+ZyjsPKGgisrAG4hJ40Dowb7BktB/esLMFQJwL/octIu zEIZKIGKDkujfGLrKZ1M/bGRW0MwYRnHB5ZJPVchBtc97eDnR6Yhfpcci2rfIYTf vIHyFx0wvC8Qf/EJK1TJZ5npAvxTCX+ga7/ORlRmPVrdsUPjFHjd9vcbh3p6Kr1s CGaRXZnHMdY4Qx7gQiPnZaJcO4J2wFSfBxubv6U+z9WDv0Fjg0P0HjJyQVtiy4X4 4nfI7zSTKci49u62LdZdBBEXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQULTLg6W2L PcM2n2tCZ+dDlBFnbm8wHwYDVR0jBBgwFoAUAk2PFao5dyF1iDou3BZQFOGSihow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNTIwLzRBMTJBMzNDODJG NDExRjA5Qjc0MzU0RUM0RjlBRTAyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2lo by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvQWsyUEZhbzVkeUYxaURvdTNCWlFGT0dTaWhvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80QTEyQTMzQzgyRjQxMUYwOUI3NDM1NEVDNEY5QUUwMi8wMDc2ODZBMEQz REQxMUYwOEM3OUQ4NTNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAe7KgAwDQYJKoZIhvcNAQELBQADggEBAJg0uopb9/JL83weNaXt7K+o KPrrwYCA8TvdToyMuDGHGMzXWjOr5VghZUnIW3Qn6kfWIi2slZ+CyAJV2QfJR5ln /djArxcSWngpqmDfoidYxeBNdkGU6PtZmb/kSpcfLkhlI7NcAQaVUUS22AJiolpi qbZww/ObmCZUoMWgo0oy06nw6lSpjmztIPqU58Q6qDeNSPcd/IhQ4Avad/Ef6De8 eXnspKE+AuXnCvED0sVcH0paukJ37yuKwlDBpzYKfv4VA9SwfzlfXphn8Pe2xTFC fUugeTbkV40ZRAz3GRHuFxWZfkzwk+wBXURA0mIIJQeeVla4HWPPpPK6GVM827o= -----END CERTIFICATE-----Generated at Mon Mar 2 09:07:26 2026 by rpki-client