$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa File: 1568A012213C11EEA25DBF55C4F9AE02.roa (raw, json) Hash identifier: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E= Subject key identifier: C4:BA:C3:2B:90:61:80:67:84:B6:74:D7:E0:70:41:78:18:3F:13:E5 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 10E2 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:26:51 +0000 ROA not before: Fri 02 May 2025 17:57:12 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18036 IP address blocks: 147.76.19.0/24 maxlen: 24 147.76.240.0/24 maxlen: 24 147.76.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4322 (0x10e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 17:57:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a468cb-b8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:37:ee:3b:35:b3:6c:55:f3:95:1c:85:ea: 07:c5:9b:d8:9f:79:95:ab:7b:ea:9b:5d:ec:74:1f: 0f:98:a0:f6:03:91:8e:58:48:62:29:5f:9b:e6:ad: 27:d8:b5:e3:28:48:0b:10:a0:13:a8:12:cf:18:0e: 90:86:11:91:27:6d:13:77:da:91:16:bf:1f:88:c7: d2:58:e7:5c:2b:73:ff:e4:cb:94:52:ff:13:7f:15: a6:8e:74:ee:68:02:1b:3a:e0:d0:06:55:31:f6:f3: 24:e6:27:25:2a:36:cc:51:df:1a:d0:13:6f:23:2d: d7:eb:d8:b0:f6:63:5c:bc:2b:86:1f:87:81:f7:c9: 64:de:42:f4:9d:40:2f:e1:95:c7:50:dd:04:0a:76: 53:2c:7d:d6:a2:e3:47:a7:01:92:a8:01:aa:1d:08: 8f:8b:6f:8b:97:ae:be:bd:45:20:28:fc:f7:04:5e: 1b:de:69:f8:d5:65:13:66:75:7a:dd:e9:c8:9a:5d: a8:f7:96:ff:2e:09:f6:b6:31:76:2d:ad:dc:fa:74: 0e:45:63:4d:73:fd:13:9b:2a:24:98:50:35:b1:22: 39:62:e2:cf:5b:e3:70:df:e1:32:52:69:e7:b7:7c: 1f:4f:cf:ae:30:05:02:28:6d:bd:b7:48:d5:a5:96: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:C3:2B:90:61:80:67:84:B6:74:D7:E0:70:41:78:18:3F:13:E5 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/1568A012213C11EEA25DBF55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 147.76.19.0/24 147.76.240.0/23 Signature Algorithm: sha256WithRSAEncryption 33:2a:96:39:30:ef:eb:f2:ed:f2:b5:95:2a:91:b5:b4:62:fa: 26:b2:0b:9c:c8:05:e2:be:4d:9a:62:50:52:ef:b0:36:9c:62: 4f:f8:28:9f:ec:3a:95:3f:55:75:0b:cd:c1:67:3e:4a:8a:dc: 0c:cf:fb:85:49:4f:97:aa:6f:76:ef:11:09:c5:6e:e7:82:3d: bc:02:fb:af:31:1d:cd:21:cd:ca:3c:38:79:41:c7:33:71:11: 1f:8c:32:23:f4:9f:47:d6:84:46:2c:a5:12:ba:d4:e8:ae:89: 2b:76:6e:10:86:38:38:d5:fb:1b:da:bd:2b:57:69:ca:3a:8e: 62:19:78:76:d0:28:8d:0b:fd:ba:ee:a4:23:5a:da:ff:76:51: f0:fd:e1:58:7b:a8:2c:b2:96:2b:62:00:48:f8:f6:cd:32:a4: 0d:7d:8e:37:41:68:4c:36:e7:0e:d8:51:1d:ac:c6:d7:42:d8: 31:34:cd:18:31:a6:bc:85:16:cb:d1:6e:24:e2:b7:1e:98:7f: 6c:30:01:f6:7b:f8:84:73:68:54:84:ed:63:94:20:77:6c:cb: 9b:c3:59:1e:8c:10:23:6d:9c:0b:f8:6d:fc:48:5b:a6:eb:3d: cc:b0:6e:c4:9b:3c:77:5f:35:ad:84:aa:ce:ce:2a:1d:58:65: 3a:87:af:3a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICEOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTAyMTc1NzEyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhjYi1iOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjZk37js1s2xV85UcheoHxZvYn3mVq3vqm13sdB8PmKD2A5GOWEhiKV+b5q0n 2LXjKEgLEKATqBLPGA6QhhGRJ20Td9qRFr8fiMfSWOdcK3P/5MuUUv8TfxWmjnTu aAIbOuDQBlUx9vMk5iclKjbMUd8a0BNvIy3X69iw9mNcvCuGH4eB98lk3kL0nUAv 4ZXHUN0ECnZTLH3WouNHpwGSqAGqHQiPi2+Ll66+vUUgKPz3BF4b3mn41WUTZnV6 3enIml2o95b/Lgn2tjF2La3c+nQORWNNc/0TmyokmFA1sSI5YuLPW+Nw3+EyUmnn t3wfT8+uMAUCKG29t0jVpZbKAwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMS6wyuQ YYBnhLZ01+BwQXgYPxPlMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvMTU2OEEwMTIy MTNDMTFFRUEyNURCRjU1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAk0wTAwQBk0zwMA0GCSqGSIb3DQEBCwUAA4IBAQAzKpY5MO/r8u3y tZUqkbW0YvomsgucyAXivk2aYlBS77A2nGJP+Cif7DqVP1V1C83BZz5KitwMz/uF SU+Xqm927xEJxW7ngj28AvuvMR3NIc3KPDh5QcczcREfjDIj9J9H1oRGLKUSutTo rokrdm4Qhjg41fsb2r0rV2nKOo5iGXh20CiNC/267qQjWtr/dlHw/eFYe6gsspYr YgBI+PbNMqQNfY43QWhMNucO2FEdrMbXQtgxNM0YMaa8hRbL0W4k4rcemH9sMAH2 e/iEc2hUhO1jlCB3bMubw1kejBAjbZwL+G38SFum6z3MsG7Emzx3XzWthKrOziod WGU6h686 -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:46 2026 by rpki-client