$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/6654FB224CDE11F092AD8884C4F9AE02.roa File: 6654FB224CDE11F092AD8884C4F9AE02.roa (raw, json) Hash identifier: tUQ4OZMXFH+xrV98iKu7AJbquoxNBr3j3I8mALdyxPE= Subject key identifier: 08:B3:6C:02:9D:44:FB:7F:D1:26:F2:D1:15:B4:4E:86:60:61:B5:A3 Certificate issuer: /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Certificate serial: 8C Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/6654FB224CDE11F092AD8884C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:08:46 +0000 ROA not before: Thu 19 Jun 2025 07:26:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153980 IP address blocks: 165.101.32.0/23 maxlen: 23 165.101.32.0/24 maxlen: 24 165.101.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:57:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E Validity Not Before: Jun 19 07:26:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3e5fe-6c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:be:d8:8a:79:70:38:6c:95:66:f7:7a:f4:2b: 62:2f:f7:0e:94:f2:71:f1:e2:d7:e7:ae:a4:0d:09: 68:83:bd:99:ab:fa:0b:f8:8d:9b:2c:65:34:23:3e: 9d:31:a9:8f:72:50:1f:19:6a:42:ff:ba:41:ea:59: 4a:0b:83:56:82:3d:a9:25:1e:f1:56:97:26:dc:3f: 6e:25:6f:ee:15:39:60:0c:19:b8:c2:78:41:a8:55: 53:81:88:f4:77:a4:b4:00:a6:94:88:6a:41:33:16: 32:4c:90:50:cc:77:9e:d9:b8:96:eb:f7:0c:5b:dc: c1:e2:98:5d:18:8c:50:e9:d3:69:1d:40:da:3b:80: 17:20:c6:50:3c:3b:22:42:52:36:a6:36:27:cc:ee: 60:20:2d:96:9f:6d:7a:cb:e6:65:37:ae:29:07:70: 9c:59:85:4b:9e:9d:5b:36:44:a0:60:f7:41:31:19: 9d:1e:76:69:df:cb:ce:cb:7d:07:9a:43:80:03:ba: 65:6e:0d:ad:93:99:0b:a6:54:85:f2:df:2a:67:09: 72:20:1d:58:0c:c5:6f:f7:a6:52:04:81:e6:a8:26: ae:2a:32:be:dc:ba:64:b1:64:f3:7c:01:3d:f5:7a: d9:3c:db:b1:f9:66:66:a2:c0:d1:5b:85:cb:27:d3: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B3:6C:02:9D:44:FB:7F:D1:26:F2:D1:15:B4:4E:86:60:61:B5:A3 X509v3 Authority Key Identifier: keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/6654FB224CDE11F092AD8884C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.32.0/23 Signature Algorithm: sha256WithRSAEncryption 08:40:61:95:f9:e3:0b:8f:3b:52:83:cb:0c:02:2f:96:d2:1c: c4:b8:00:bb:80:59:ac:da:8b:cb:60:aa:16:96:18:13:ed:b8: 4c:0e:7c:8a:ca:4c:c6:a4:57:67:1e:94:2d:86:da:bc:ec:7a: 2f:5b:e0:89:56:d8:29:ae:bd:87:f7:bf:87:fe:97:53:bf:bc: 0a:cf:b9:47:2a:46:e1:de:4c:f0:99:ae:b2:1d:c3:e5:d5:81: c3:ec:b0:be:19:5f:aa:2a:c0:86:de:37:ce:26:3d:94:6e:a1: f7:a4:2e:c6:a6:29:87:4f:24:6d:2a:3c:95:69:d0:be:d9:ae: cc:e8:e3:60:60:39:e9:53:a9:cb:ae:c4:cd:ab:e5:8c:88:67: 1c:7f:63:30:7f:93:01:7e:73:ea:ea:7d:ea:64:8a:00:2e:2d: be:bb:a1:c0:61:e4:fd:a6:99:95:ae:e2:31:40:de:3f:f9:0e: 50:58:6a:0d:5f:83:ba:05:34:fd:7a:b4:80:ff:b5:0d:96:ed: 61:e7:91:30:3b:7b:7d:6a:8e:3d:c1:26:d7:f9:85:02:08:08: 29:e4:dc:1f:91:3c:ff:5d:f6:89:9d:2e:d9:63:53:fc:c5:32: b9:85:0c:6d:75:ca:85:0e:0a:ec:b0:0f:68:b6:10:e0:0c:d2: dd:c5:7f:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyM0ExMTAvBgNVBAUTKDUwMTI1NUU5MDE3QTYzNzg5MjZEMzZBRUI1RUZGMTlD NDVENjU3NEUwHhcNMjUwNjE5MDcyNjQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTVmZS02YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl77YinlwOGyVZvd69CtiL/cOlPJx8eLX566kDQlog72Zq/oL+I2bLGU0Iz6d MamPclAfGWpC/7pB6llKC4NWgj2pJR7xVpcm3D9uJW/uFTlgDBm4wnhBqFVTgYj0 d6S0AKaUiGpBMxYyTJBQzHee2biW6/cMW9zB4phdGIxQ6dNpHUDaO4AXIMZQPDsi QlI2pjYnzO5gIC2Wn216y+ZlN64pB3CcWYVLnp1bNkSgYPdBMRmdHnZp38vOy30H mkOAA7plbg2tk5kLplSF8t8qZwlyIB1YDMVv96ZSBIHmqCauKjK+3LpksWTzfAE9 9XrZPNux+WZmosDRW4XLJ9MhwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAizbAKd RPt/0Sby0RW0ToZgYbWjMB8GA1UdIwQYMBaAFFASVekBemN4km02rrXv8ZxF1ldO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTIzQS9ERTgyQ0I0ODRD REQxMUYwQkZBMDhGODBDNEY5QUUwMi9VQkpWNlFGNlkzaVNiVGF1dGVfeG5FWFdW MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VCSlY2UUY2WTNpU2JUYXV0ZV94bkVYV1YwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUyM0EvREU4MkNCNDg0Q0REMTFGMEJGQTA4RjgwQzRGOUFFMDIvNjY1NEZCMjI0 Q0RFMTFGMDkyQUQ4ODg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWUgMA0GCSqGSIb3DQEBCwUAA4IBAQAIQGGV+eMLjztSg8sMAi+W 0hzEuAC7gFms2ovLYKoWlhgT7bhMDnyKykzGpFdnHpQthtq87HovW+CJVtgprr2H 97+H/pdTv7wKz7lHKkbh3kzwma6yHcPl1YHD7LC+GV+qKsCG3jfOJj2UbqH3pC7G pimHTyRtKjyVadC+2a7M6ONgYDnpU6nLrsTNq+WMiGccf2Mwf5MBfnPq6n3qZIoA Li2+u6HAYeT9ppmVruIxQN4/+Q5QWGoNX4O6BTT9erSA/7UNlu1h55EwO3t9ao49 wSbX+YUCCAgp5NwfkTz/XfaJnS7ZY1P8xTK5hQxtdcqFDgrssA9othDgDNLdxX+1 -----END CERTIFICATE-----Generated at Mon Mar 2 01:08:51 2026 by rpki-client