$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa File: 1568A012213C11EEA25DBF55C4F9AE02.roa (raw, json) Hash identifier: zKTr6M0/sBtcOGxEMR4AlkDFaYrPenLVP8SUSOOJflg= Subject key identifier: 63:2B:E4:22:14:D4:E5:B9:93:AB:44:87:43:32:98:2D:51:FC:65:22 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 103F Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa Signing time: Fri 02 May 2025 17:57:12 +0000 ROA not before: Fri 02 May 2025 17:57:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18036 IP address blocks: 147.76.19.0/24 maxlen: 24 147.76.240.0/24 maxlen: 24 147.76.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4159 (0x103f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 17:57:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68150778-1426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:30:00:ab:57:2f:71:35:68:4d:41:6c:44: a7:fb:44:37:97:b5:fe:0a:0a:a6:14:31:46:39:ba: 0c:3d:7e:2a:15:62:bd:f1:ec:06:9a:7b:f9:89:cf: a7:5e:89:3e:8e:6c:bc:a6:a3:bc:c8:32:c4:54:ba: 3d:32:74:2c:4b:7f:7e:2f:e6:8d:32:77:6a:51:35: a8:2b:00:7d:34:8b:10:71:3a:0d:ca:c5:66:d7:dd: 01:a7:cb:a6:2c:39:bf:0a:3f:1e:48:dc:91:2a:12: d6:f9:33:58:60:99:10:81:6b:8a:11:e6:c7:e0:b5: 73:86:fc:68:e6:69:11:a7:71:80:63:d7:63:01:f5: 15:d9:a7:cf:ae:82:b9:b4:f4:37:d1:62:0f:ac:65: 54:be:ac:5c:4c:11:b4:92:20:9b:5d:a6:ea:ec:35: 34:5a:68:0f:a6:ac:49:a9:05:db:3f:0c:e6:8a:08: 63:8f:03:de:a3:f3:f0:26:3a:37:44:b1:86:09:f2: 18:56:87:f4:a3:e1:1e:4e:fd:18:26:a3:d7:3d:5c: 5a:c1:2f:0d:60:d6:bb:f8:cb:31:e4:94:85:bf:9a: 7f:98:4b:39:64:00:4e:e5:52:2a:ee:a0:cb:13:1a: 57:31:04:e1:57:bb:53:65:15:62:cf:d6:68:45:57: 51:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:E4:22:14:D4:E5:B9:93:AB:44:87:43:32:98:2D:51:FC:65:22 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.76.19.0/24 147.76.240.0/23 Signature Algorithm: sha256WithRSAEncryption 25:0e:4b:4d:f5:cc:b4:37:ff:9b:a4:42:36:e0:ec:ae:03:3c: 49:ff:7f:ed:c5:71:26:0c:8b:cd:42:2f:03:fc:fe:e6:f6:85: 4e:ec:0d:a0:97:a4:24:ac:85:78:59:fd:11:f3:38:20:0a:94: ec:67:9e:00:2e:12:c3:f8:c3:2d:76:7a:2d:bd:2a:42:6b:6f: 67:d4:57:98:0d:da:3a:45:2a:c2:9a:d3:44:99:02:22:a2:f2: e6:73:ea:48:43:c3:f3:dd:c0:cf:a7:66:c3:d1:2c:ae:95:c6: 4e:e0:22:8a:fb:de:76:6f:d8:43:d7:61:55:b5:2d:5b:6e:5b: 00:cd:eb:0f:fe:c9:f1:ae:cd:63:69:01:16:09:4f:a0:81:8f: eb:8e:47:53:b8:89:c6:f5:21:a0:f8:6d:69:04:e6:ad:df:69: 50:b0:0b:1b:42:01:1d:d1:93:f1:7d:c0:b9:b5:20:f4:97:d4: 17:41:38:87:3e:0f:94:23:03:41:02:a6:14:18:5b:cc:70:40: c1:02:5d:72:7b:eb:89:74:5e:9c:f9:d0:0e:65:70:41:fa:e1: fa:15:e6:69:d8:22:8d:61:ae:a8:95:86:d0:df:f4:fd:71:02: 09:35:f0:b0:cd:d3:28:51:ea:35:b1:92:da:d8:68:f1:45:43: 15:c4:de:dc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICED8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTAyMTc1NzEyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MDc3OC0xNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsi8wAKtXL3E1aE1BbESn+0Q3l7X+CgqmFDFGOboMPX4qFWK98ewGmnv5ic+n Xok+jmy8pqO8yDLEVLo9MnQsS39+L+aNMndqUTWoKwB9NIsQcToNysVm190Bp8um LDm/Cj8eSNyRKhLW+TNYYJkQgWuKEebH4LVzhvxo5mkRp3GAY9djAfUV2afProK5 tPQ30WIPrGVUvqxcTBG0kiCbXabq7DU0WmgPpqxJqQXbPwzmighjjwPeo/PwJjo3 RLGGCfIYVof0o+EeTv0YJqPXPVxawS8NYNa7+Msx5JSFv5p/mEs5ZABO5VIq7qDL ExpXMQThV7tTZRViz9ZoRVdRYQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGMr5CIU 1OW5k6tEh0MymC1R/GUiMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvMTU2OEEwMTIy MTNDMTFFRUEyNURCRjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACTTBMDBAGTTPAwDQYJKoZIhvcNAQELBQADggEBACUOS031 zLQ3/5ukQjbg7K4DPEn/f+3FcSYMi81CLwP8/ub2hU7sDaCXpCSshXhZ/RHzOCAK lOxnngAuEsP4wy12ei29KkJrb2fUV5gN2jpFKsKa00SZAiKi8uZz6khDw/PdwM+n ZsPRLK6Vxk7gIor73nZv2EPXYVW1LVtuWwDN6w/+yfGuzWNpARYJT6CBj+uOR1O4 icb1IaD4bWkE5q3faVCwCxtCAR3Rk/F9wLm1IPSX1BdBOIc+D5QjA0ECphQYW8xw QMECXXJ764l0Xpz50A5lcEH64foV5mnYIo1hrqiVhtDf9P1xAgk18LDN0yhR6jWx ktrYaPFFQxXE3tw= -----END CERTIFICATE-----Generated at Wed Nov 5 10:09:28 2025 by rpki-client