$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa File: F4D5953246AF11E9A68E7652C4F9AE02.roa (raw, json) Hash identifier: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ= Subject key identifier: 45:C7:27:63:FE:1F:69:3B:22:54:CD:37:4C:22:A7:F3:80:1B:79:15 Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Certificate serial: 10E0 Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:26:49 +0000 ROA not before: Fri 02 May 2025 17:57:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10152 IP address blocks: 147.76.0.0/24 maxlen: 24 147.76.1.0/24 maxlen: 24 147.76.51.0/24 maxlen: 24 147.76.180.0/24 maxlen: 24 147.76.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4320 (0x10e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708 Validity Not Before: May 2 17:57:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a468c9-abca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:f9:41:5c:29:f3:c7:70:af:6c:09:dc:23: 20:13:5d:88:52:14:db:16:ff:95:d4:18:b6:ea:e5: 7f:a9:d5:34:4d:8b:e3:78:6c:2b:24:d8:75:87:b1: 0a:11:3a:bb:cd:ac:c9:cd:de:72:3e:39:95:76:98: 85:01:73:ac:33:4c:dd:b5:cb:c4:84:62:b2:6b:00: 90:14:66:cc:c0:09:45:a6:bb:f7:e9:e9:68:dd:eb: 36:f7:8a:de:96:21:dc:b4:cb:0b:cb:75:c3:97:b2: 11:46:4a:98:77:b7:46:a9:ed:1c:ab:14:c7:fc:09: b8:59:d0:71:1d:f7:18:d7:ea:b4:38:78:da:4b:d2: 64:88:ed:2b:bc:46:c6:bf:93:3d:9c:cb:68:71:72: 44:b5:e2:4d:2b:cc:25:c6:cf:6b:c1:75:55:f2:ea: ea:e8:5b:a3:b7:6f:23:7f:e0:5a:9f:f3:24:cb:bd: af:e6:a1:8c:34:c2:39:d0:84:7e:88:2e:8c:f6:a9: 07:a2:f9:0d:53:fe:b2:14:b4:15:38:f8:35:c5:44: 2e:f0:f7:2e:9f:f1:e5:ca:68:ae:6a:08:6d:68:6e: 84:2b:e9:b1:97:60:91:2c:db:0b:7f:ed:02:80:fa: f0:59:5c:6c:1c:c9:15:3c:9e:7a:e3:ea:dc:85:e5: 39:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C7:27:63:FE:1F:69:3B:22:54:CD:37:4C:22:A7:F3:80:1B:79:15 X509v3 Authority Key Identifier: keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 147.76.0.0/23 147.76.51.0/24 147.76.180.0/23 Signature Algorithm: sha256WithRSAEncryption 06:d5:7c:c5:25:8e:b0:7a:02:9e:ea:f6:ce:d9:a5:bf:61:5e: 05:d1:e9:2d:1a:b1:81:5e:73:81:84:bb:b4:70:bf:df:16:75: 5a:7c:e0:c9:78:21:13:c8:70:1b:62:20:f0:e7:c9:ca:f7:0e: 8a:41:b0:09:95:14:d5:0c:1b:80:6a:6f:a2:a6:3f:cf:b8:a5: b0:81:53:c1:da:7f:1d:34:a4:07:9f:d2:90:3a:c0:a2:b4:c6: c7:bf:83:3d:cf:ec:31:b9:a1:f0:c0:46:7c:a3:86:e0:4a:8f: 08:a1:df:1d:89:f1:d0:ef:a1:f0:cf:8b:ed:b2:5c:59:99:44: b6:c2:02:81:08:89:2b:25:07:77:67:bf:b5:6a:c9:06:5f:15: f9:be:f2:0e:31:02:66:65:72:da:b4:39:d8:09:4b:97:3f:0a: 38:bd:a5:99:8b:50:65:09:ff:6b:f4:da:ba:99:ad:23:5e:d8: 71:8f:43:ed:50:07:28:02:7f:e8:c1:86:ee:6b:44:0d:d4:37: e2:d1:e3:d6:38:40:3a:64:8e:6b:bb:ae:af:cd:f8:c9:d7:23: 52:38:68:43:15:0d:5f:77:62:7c:dc:10:31:6a:df:20:20:4f: 7b:37:17:b3:6b:22:03:bb:d4:3b:f1:e0:0b:24:3a:84:7d:c0: 20:fd:a8:cb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG NzkzRjQ3MDgwHhcNMjUwNTAyMTc1NzEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhjOS1hYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFH5QVwp88dwr2wJ3CMgE12IUhTbFv+V1Bi26uV/qdU0TYvjeGwrJNh1h7EK ETq7zazJzd5yPjmVdpiFAXOsM0zdtcvEhGKyawCQFGbMwAlFprv36elo3es294re liHctMsLy3XDl7IRRkqYd7dGqe0cqxTH/Am4WdBxHfcY1+q0OHjaS9JkiO0rvEbG v5M9nMtocXJEteJNK8wlxs9rwXVV8urq6Fujt28jf+Ban/Mky72v5qGMNMI50IR+ iC6M9qkHovkNU/6yFLQVOPg1xUQu8Pcun/HlymiuaghtaG6EK+mxl2CRLNsLf+0C gPrwWVxsHMkVPJ564+rcheU5EwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEXHJ2P+ H2k7IlTNN0wip/OAG3kVMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2 QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvRjRENTk1MzI0 NkFGMTFFOUE2OEU3NjUyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBk0wAAwQAk0wzAwQBk0y0MA0GCSqGSIb3DQEBCwUAA4IBAQAG1XzF JY6wegKe6vbO2aW/YV4F0ektGrGBXnOBhLu0cL/fFnVafODJeCETyHAbYiDw58nK 9w6KQbAJlRTVDBuAam+ipj/PuKWwgVPB2n8dNKQHn9KQOsCitMbHv4M9z+wxuaHw wEZ8o4bgSo8Iod8difHQ76Hwz4vtslxZmUS2wgKBCIkrJQd3Z7+1askGXxX5vvIO MQJmZXLatDnYCUuXPwo4vaWZi1BlCf9r9Nq6ma0jXthxj0PtUAcoAn/owYbua0QN 1Dfi0ePWOEA6ZI5ru66vzfjJ1yNSOGhDFQ1fd2J83BAxat8gIE97NxezayIDu9Q7 8eALJDqEfcAg/ajL -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:29 2026 by rpki-client