$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/F22C58CEE69611EAA594260CC4F9AE02.roa File: F22C58CEE69611EAA594260CC4F9AE02.roa (raw, json) Hash identifier: 9yNn6fM/mAMTPBWBJguXD7+aFLMZWUxYjmpKTvo8s9U= Subject key identifier: A1:F2:7B:6B:77:17:09:FF:7E:2E:3D:F0:58:BF:7E:4D:C7:1F:81:6C Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 19BD Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/F22C58CEE69611EAA594260CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:52:43 +0000 ROA not before: Thu 08 May 2025 15:51:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7633 IP address blocks: 196.12.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6589 (0x19bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: May 8 15:51:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a460cb-c10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3f:b7:4e:a1:b1:36:02:e3:33:06:13:a3:a7: 16:a6:92:be:2c:de:62:5d:9f:62:12:2c:57:c5:7a: 4d:4c:a0:b6:a6:50:c8:ac:31:60:40:1d:27:ab:ac: 34:db:14:9b:46:22:6c:75:92:05:be:ba:2c:a9:83: a4:7e:13:e1:bf:9e:40:96:02:62:78:bc:9a:d6:d8: 8e:bc:e4:4f:fd:fd:b9:b3:de:01:b8:94:92:2f:00: ad:89:79:c5:b0:f7:65:45:af:45:70:70:88:fd:9c: 56:45:84:c6:36:f4:79:32:5d:4f:b1:8e:ea:87:66: 86:99:73:40:ba:4e:0f:91:0f:d7:6b:60:4c:7e:e8: 91:6b:a3:4c:24:26:d4:0b:40:9b:b5:fb:3d:58:8a: 0a:13:ef:8c:b5:72:6d:7d:e8:15:fc:69:cf:29:d7: 3c:7b:99:53:0e:45:19:49:a8:f5:3a:b4:a1:69:e5: 61:c0:b2:ff:4c:74:47:39:1a:2c:73:d0:5f:73:33: 89:ab:4d:5b:75:fa:b2:d2:14:96:e9:84:e8:db:fb: d5:d6:c6:e3:14:d3:07:5b:e6:83:93:c0:77:f1:6c: 1a:b8:bb:68:3f:6f:85:5b:92:20:18:39:f5:ec:0f: cc:c1:0e:89:62:b2:d6:96:1f:cf:d2:17:8e:65:f4: 61:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F2:7B:6B:77:17:09:FF:7E:2E:3D:F0:58:BF:7E:4D:C7:1F:81:6C X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/F22C58CEE69611EAA594260CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 196.12.32.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:d8:db:89:5c:46:ba:d8:99:2c:1e:bd:56:f7:30:89:ee:3d: 71:0c:4f:c1:8f:28:f3:48:da:41:33:fc:bd:47:62:36:a7:7e: 1c:19:e9:a2:ed:4b:ed:ea:2f:2c:0a:c9:ed:a7:8a:2f:da:0f: bb:81:87:20:5f:c9:b4:f6:27:f1:18:56:fc:8e:cb:93:86:f9: 73:d9:98:29:f2:a4:28:a0:84:de:8f:3b:86:83:97:f0:97:57: af:7b:9f:bd:b4:e1:4f:79:59:70:67:5e:a6:f6:d6:e8:54:34: cd:48:a5:b2:5a:7f:2f:53:1a:59:bd:bd:d0:4a:94:79:33:fd: b6:b6:82:93:52:c7:0c:bb:c2:1e:fb:9a:d1:7f:5a:0a:7c:03: ea:a3:48:89:5d:8d:c3:9e:50:2f:ca:71:ae:be:24:36:f3:eb: d7:47:82:fc:f1:17:43:6c:b7:c1:53:ec:0c:dc:5e:6c:9e:be: 4c:ce:0e:74:df:de:0b:d9:07:35:78:a3:44:6a:e8:43:45:b0: 61:82:38:6a:28:51:9a:7a:04:dd:72:c6:6c:45:44:d9:90:0c: d1:3a:dd:ba:38:58:e9:fc:10:5b:69:1d:03:f6:32:d0:f1:8b: 85:ab:e9:cb:4c:20:41:a8:ec:6d:7f:6b:9d:7d:e2:0b:96:22: 21:7e:d6:b2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNTA4MTU1MTU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjBjYi1jMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T+3TqGxNgLjMwYTo6cWppK+LN5iXZ9iEixXxXpNTKC2plDIrDFgQB0nq6w0 2xSbRiJsdZIFvrosqYOkfhPhv55AlgJieLya1tiOvORP/f25s94BuJSSLwCtiXnF sPdlRa9FcHCI/ZxWRYTGNvR5Ml1PsY7qh2aGmXNAuk4PkQ/Xa2BMfuiRa6NMJCbU C0Cbtfs9WIoKE++MtXJtfegV/GnPKdc8e5lTDkUZSaj1OrShaeVhwLL/THRHORos c9BfczOJq01bdfqy0hSW6YTo2/vV1sbjFNMHW+aDk8B38WwauLtoP2+FW5IgGDn1 7A/MwQ6JYrLWlh/P0heOZfRhwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKHye2t3 Fwn/fi498Fi/fk3HH4FsMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMERGM0IyNUU3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjIyQzU4Q0VF Njk2MTFFQUE1OTQyNjBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFxAwgMA0GCSqGSIb3DQEBCwUAA4IBAQBf2NuJXEa62JksHr1W9zCJ 7j1xDE/BjyjzSNpBM/y9R2I2p34cGemi7Uvt6i8sCsntp4ov2g+7gYcgX8m09ifx GFb8jsuThvlz2Zgp8qQooITejzuGg5fwl1eve5+9tOFPeVlwZ16m9tboVDTNSKWy Wn8vUxpZvb3QSpR5M/22toKTUscMu8Ie+5rRf1oKfAPqo0iJXY3DnlAvynGuviQ2 8+vXR4L88RdDbLfBU+wM3F5snr5Mzg50394L2Qc1eKNEauhDRbBhgjhqKFGaegTd csZsRUTZkAzROt26OFjp/BBbaR0D9jLQ8YuFq+nLTCBBqOxtf2udfeILliIhftay -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:14 2026 by rpki-client