$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa File: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (raw, json) Hash identifier: hJoeKtSFmOwqcUsxk+fMQUORN7XH+jhDQZqblI/IjZ4= Subject key identifier: 66:B5:6E:E2:CC:CC:1B:AE:3C:37:18:48:71:10:EF:AD:F3:69:BE:C6 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 035B Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa Signing time: Wed 27 May 2026 01:32:15 +0000 ROA not before: Wed 27 May 2026 01:32:15 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 3550 IP address blocks: 165.220.0.0/21 maxlen: 21 165.220.16.0/21 maxlen: 21 165.220.24.0/21 maxlen: 21 165.220.32.0/19 maxlen: 19 165.220.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: May 27 01:32:15 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a16499e-d464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:5a:7b:88:54:55:a1:17:73:c5:6c:4e:c7: bf:66:a2:05:78:b6:48:53:63:b5:8c:58:62:56:82: c9:70:f0:cc:cc:18:e5:90:6e:73:4e:17:c7:f3:9b: a9:db:c5:5e:0d:61:bd:77:d6:bd:57:fd:dd:31:7a: a0:14:43:70:57:66:11:c8:52:56:42:f1:bd:b6:a3: 4c:ae:56:99:5d:63:b1:be:0c:c1:4a:7f:7c:2c:09: f7:c0:72:3f:83:ff:70:55:f1:80:da:05:ce:6f:0c: 37:10:b5:87:92:30:36:3f:17:eb:62:c3:50:f9:6c: ce:bd:dd:42:fa:29:0e:d3:60:15:ea:fb:10:74:14: 01:86:c0:1c:18:98:da:16:a9:c8:7c:06:a1:db:1e: 0e:d1:e9:da:96:25:35:4a:bf:7f:7d:9a:3e:e9:80: 7f:8a:e0:18:2f:31:74:ee:2a:cb:bf:4b:c1:bb:18: d1:be:42:d1:e4:c9:98:ed:5a:7b:6a:69:27:fb:f8: d8:60:5d:d6:c8:ed:45:16:e5:31:6b:c3:cf:30:97: 02:90:3a:0a:3f:19:61:bb:09:68:9f:17:de:52:c5: fc:64:89:9a:3c:dd:52:f8:a1:2d:71:4e:b6:12:1e: af:57:7d:8d:96:35:56:7b:9f:e2:da:e1:a3:cf:b3: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:6E:E2:CC:CC:1B:AE:3C:37:18:48:71:10:EF:AD:F3:69:BE:C6 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.220.0.0/21 165.220.16.0-165.220.127.255 Signature Algorithm: sha256WithRSAEncryption 36:82:f5:76:f9:a1:31:07:a6:52:c2:ec:2d:14:4d:44:ce:81: 5f:ce:1c:91:4d:37:71:4c:be:ca:c6:64:9f:06:99:c0:b3:f2: 33:32:d0:d3:9d:40:74:df:d3:e4:fd:2d:c2:a9:d2:40:74:3e: 31:7c:3a:d4:71:ee:ed:84:11:a0:d0:4f:30:11:87:13:7b:a3: 00:27:0e:4a:91:de:c1:fd:05:8b:3c:03:97:03:50:48:18:64: 5c:12:a2:54:c0:fe:ef:2c:14:6e:ad:e8:f3:ad:cc:00:47:e5: 75:b9:49:f3:15:5c:ad:f0:4a:ce:f4:a8:62:08:16:77:34:83: 5c:56:49:87:d4:5f:5f:70:47:ae:c6:7a:55:7e:46:5f:7b:ac: 35:d3:db:8a:16:a7:8d:09:49:ce:bb:0c:cc:0f:3d:a8:75:46: ae:e1:aa:fc:7f:0e:d4:cf:2b:e5:d6:01:c8:e7:c3:d1:bb:6b: d8:3d:be:ee:4d:4e:73:de:e3:ed:7a:6f:3f:36:dc:c5:4e:4d: 6f:44:ea:4b:f8:2f:21:49:8f:61:52:63:24:80:80:96:cc:56: a5:02:ac:ef:3c:15:78:aa:7a:d5:1b:50:99:71:be:78:ac:1b: 11:0d:23:c5:e9:6a:82:45:e7:6f:14:6b:2f:ee:5d:ec:e5:59: 1a:e2:80:3d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjYwNTI3MDEzMjE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTE2NDk5ZS1kNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3Zae4hUVaEXc8VsTse/ZqIFeLZIU2O1jFhiVoLJcPDMzBjlkG5zThfH85up 28VeDWG9d9a9V/3dMXqgFENwV2YRyFJWQvG9tqNMrlaZXWOxvgzBSn98LAn3wHI/ g/9wVfGA2gXObww3ELWHkjA2PxfrYsNQ+WzOvd1C+ikO02AV6vsQdBQBhsAcGJja FqnIfAah2x4O0enaliU1Sr9/fZo+6YB/iuAYLzF07irLv0vBuxjRvkLR5MmY7Vp7 amkn+/jYYF3WyO1FFuUxa8PPMJcCkDoKPxlhuwlonxfeUsX8ZImaPN1S+KEtcU62 Eh6vV32NljVWe5/i2uGjz7NTiwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGa1buLM zBuuPDcYSHEQ763zab7GMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg0OTQvMzFCODI2M0MwOTkzMTFFREIyMUM5QjRCQzRGOUFFMDIvRkJERkM5MjJD QjZCMTFGMEI3RENFMDZCQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQDpdwAMAwDBASl3BADBAel3AAwDQYJKoZIhvcNAQELBQADggEBADaC 9Xb5oTEHplLC7C0UTUTOgV/OHJFNN3FMvsrGZJ8GmcCz8jMy0NOdQHTf0+T9LcKp 0kB0PjF8OtRx7u2EEaDQTzARhxN7owAnDkqR3sH9BYs8A5cDUEgYZFwSolTA/u8s FG6t6POtzABH5XW5SfMVXK3wSs70qGIIFnc0g1xWSYfUX19wR67GelV+Rl97rDXT 24oWp40JSc67DMwPPah1Rq7hqvx/DtTPK+XWAcjnw9G7a9g9vu5NTnPe4+16bz82 3MVOTW9E6kv4LyFJj2FSYySAgJbMVqUCrO88FXiqetUbUJlxvnisGxENI8XpaoJF 528Uay/uXezlWRrigD0= -----END CERTIFICATE-----Generated at Sat Jun 13 23:57:41 2026 by rpki-client