$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa File: CB355B666EA911F1979A4FB45FA30FBC.roa (raw, json) Hash identifier: /IseCICH6q3e2nUzOYWats2uppQ9nbnphidvQoo+KcI= Subject key identifier: 8A:9D:97:D3:AD:0F:05:EA:6A:45:A9:E5:12:CB:03:0E:2A:6C:D3:21 Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 1ABE Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa Signing time: Mon 05 Oct 2026 00:44:01 +0000 ROA not before: Mon 05 Oct 2026 00:44:01 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 9422 IP address blocks: 66.150.242.0/24 maxlen: 24 66.150.243.0/24 maxlen: 24 66.150.246.0/24 maxlen: 24 66.150.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6846 (0x1abe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Oct 5 00:44:01 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6ac2f2d1-6f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:0b:b4:5e:35:60:95:2f:28:79:80:15:1d: 24:88:0a:e7:64:bf:79:40:7f:09:56:7d:16:53:6e: 24:81:60:a2:77:77:42:4b:d7:61:4d:48:93:9a:1c: 0a:3f:ba:84:19:b3:94:26:e4:34:b8:73:11:bf:6e: b4:7b:47:db:4e:5f:ba:c4:a2:13:d8:fe:d6:bc:ff: f1:f4:22:db:18:4d:d1:d4:f7:0c:ea:78:71:75:99: ac:b5:e8:cb:59:fb:ba:cf:b3:ab:3a:5b:c7:4a:cf: 95:e2:86:e5:fb:51:b2:0c:1a:a2:8e:81:93:01:3d: a5:3f:ac:97:d9:c7:12:d0:d2:3a:d7:d6:f2:90:fd: 4c:fb:05:da:99:09:6e:36:af:33:3d:51:c5:c6:6a: 29:8f:bf:0a:93:2a:5d:b4:d6:d8:68:e8:5e:b0:9a: 35:76:cf:af:cc:e2:ee:f2:84:1d:84:ce:6a:5f:18: bf:6c:a6:8a:1c:f1:ed:11:d4:bc:6f:50:91:4a:65: ff:63:a1:a5:a8:84:6e:0a:58:0d:31:fd:a6:18:0d: d0:75:7d:64:e0:92:11:1b:c8:4a:1b:6c:24:64:7a: e8:81:85:2b:5e:e2:0c:24:f5:73:d4:98:92:b8:fa: 2d:98:8f:24:cb:9d:32:23:c7:36:63:dc:e2:4e:e0: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9D:97:D3:AD:0F:05:EA:6A:45:A9:E5:12:CB:03:0E:2A:6C:D3:21 X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/CB355B666EA911F1979A4FB45FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 66.150.242.0/23 66.150.246.0/23 Signature Algorithm: sha256WithRSAEncryption 43:14:8d:3a:bb:97:11:ea:3e:8a:69:ca:d9:30:e1:7f:50:f7: a3:33:cf:68:51:c3:15:5c:1c:88:f6:ad:b2:b7:65:a0:f1:cc: 21:6f:03:ec:75:2e:2c:23:11:5d:74:20:d7:ef:b6:77:38:27: 06:12:d5:dd:81:ff:bb:73:b7:5e:95:93:5e:29:d0:cb:13:c2: 45:75:a2:fd:b5:a0:3e:2d:39:e9:99:c9:1f:1c:01:48:2c:ec: f1:13:2d:2e:dc:ef:d1:0b:6e:ad:31:6c:e3:2d:59:e8:8c:89: 19:9e:dc:af:59:b3:f7:00:72:e0:fd:b2:21:c8:26:ed:1b:01: 61:f4:01:a7:e7:b4:e0:e3:4e:7a:23:e1:fe:85:61:d2:5d:b1: 4b:de:d9:45:2e:32:bf:5e:13:5c:17:74:ba:12:70:40:96:f1: 0c:b3:0a:36:6b:f3:6a:fb:c0:c0:24:bc:a2:dc:c9:5f:2a:9c: 7c:67:1a:9f:0b:e9:53:39:01:f7:3b:ed:23:b7:b0:b3:a2:93: f9:88:f6:cb:0a:db:d9:98:b1:5e:33:cb:2b:bb:f8:2a:5a:60: 21:e9:7f:79:8b:c9:63:a6:77:cc:e8:76:81:c2:56:31:f8:26: 17:bb:f2:62:5c:e3:02:4c:a8:22:8b:66:4b:73:eb:1f:18:02: 6c:fe:bc:8c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICGr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjYxMDA1MDA0NDAxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyZjJkMS02ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEYLtF41YJUvKHmAFR0kiArnZL95QH8JVn0WU24kgWCid3dCS9dhTUiTmhwK P7qEGbOUJuQ0uHMRv260e0fbTl+6xKIT2P7WvP/x9CLbGE3R1PcM6nhxdZmstejL Wfu6z7OrOlvHSs+V4obl+1GyDBqijoGTAT2lP6yX2ccS0NI619bykP1M+wXamQlu Nq8zPVHFxmopj78KkypdtNbYaOhesJo1ds+vzOLu8oQdhM5qXxi/bKaKHPHtEdS8 b1CRSmX/Y6GlqIRuClgNMf2mGA3QdX1k4JIRG8hKG2wkZHrogYUrXuIMJPVz1JiS uPotmI8ky50yI8c2Y9ziTuCZlQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIqdl9Ot DwXqakWp5RLLAw4qbNMhMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvQ0IzNTVCNjY2 RUE5MTFGMTk3OUE0RkI0NUZBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBQpbyAwQBQpb2MA0GCSqGSIb3DQEBCwUAA4IBAQBDFI06u5cR6j6K acrZMOF/UPejM89oUcMVXByI9q2yt2Wg8cwhbwPsdS4sIxFddCDX77Z3OCcGEtXd gf+7c7delZNeKdDLE8JFdaL9taA+LTnpmckfHAFILOzxEy0u3O/RC26tMWzjLVno jIkZntyvWbP3AHLg/bIhyCbtGwFh9AGn57Tg4056I+H+hWHSXbFL3tlFLjK/XhNc F3S6EnBAlvEMswo2a/Nq+8DAJLyi3MlfKpx8ZxqfC+lTOQH3O+0jt7CzopP5iPbL CtvZmLFeM8sru/gqWmAh6X95i8ljpnfM6HaBwlYx+CYXu/JiXOMCTKgii2ZLc+sf GAJs/ryM -----END CERTIFICATE-----Generated at Tue Oct 6 22:18:09 2026 by rpki-client