$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa File: 0CF90768BDE011EAAEA46554C4F9AE02.roa (raw, json) Hash identifier: R2yPeR6Mpcet9jaRAeSDk4lOa3vryAfaHzlmkvPYCAM= Subject key identifier: 23:74:33:B9:CF:7A:91:2E:61:6B:11:72:F6:B7:75:A6:C7:A1:90:8E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CD7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:11 +0000 ROA not before: Mon 01 Dec 2025 09:40:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9430 IP address blocks: 157.15.159.0/24 maxlen: 24 161.248.26.0/24 maxlen: 24 164.164.32.0/24 maxlen: 24 164.164.123.0/24 maxlen: 24 164.164.124.0/24 maxlen: 24 164.164.126.0/24 maxlen: 24 164.164.127.0/24 maxlen: 24 164.164.184.0/24 maxlen: 24 164.164.187.0/24 maxlen: 24 164.164.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11479 (0x2cd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Dec 1 09:40:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2a3-78a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:42:59:12:50:14:6b:b7:6e:9e:35:31:a0: 80:85:14:de:cc:64:42:6d:65:b6:59:f4:a1:49:fb: 82:b8:38:ef:65:1e:4b:dc:15:bb:e2:3d:4f:d6:51: 0e:41:43:88:5a:55:64:b8:fd:e9:dd:22:a2:7e:83: c4:23:51:e2:08:e4:16:67:82:72:c5:a3:a0:cf:e6: 48:8a:09:b8:89:94:96:1d:79:75:7a:01:d9:5c:7f: 89:73:29:d9:0f:36:18:40:f5:53:34:2c:ac:f8:6a: 0a:28:77:56:b2:f3:0a:13:03:f8:1e:8e:ce:81:16: d1:aa:fe:6c:e6:4a:47:3a:66:9d:32:c9:e7:86:b3: 13:62:06:7d:1f:96:18:9d:c4:0d:97:ef:5d:b5:5b: 2f:fa:61:a5:51:16:bd:f8:a3:df:ec:43:5c:c8:da: ef:97:97:d9:7a:cd:11:0c:94:a6:dd:d6:70:d3:fe: ed:b7:1e:1a:57:1a:c0:56:db:18:c4:39:f2:e0:94: 62:07:6f:a4:85:b0:74:87:71:e5:38:80:93:73:ca: 17:c4:10:a0:c0:89:da:7b:da:ef:2e:56:60:19:4e: 7f:fe:82:d0:53:5b:56:87:83:9d:8e:cd:ac:25:d6: 4a:d0:7c:a7:7b:78:ed:1d:1a:7e:4d:5d:bd:1e:c3: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:74:33:B9:CF:7A:91:2E:61:6B:11:72:F6:B7:75:A6:C7:A1:90:8E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.159.0/24 161.248.26.0/24 164.164.32.0/24 164.164.123.0-164.164.124.255 164.164.126.0/23 164.164.184.0/24 164.164.187.0/24 164.164.192.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:cf:43:b3:b3:79:0f:57:44:33:48:1b:4d:89:1e:0c:bd:91: 1e:02:9e:ac:81:85:77:40:ed:90:39:15:a6:70:73:2a:d6:7f: 87:34:b7:87:99:c1:58:49:1b:10:99:25:94:c5:c6:73:86:bc: 02:5d:68:d7:d1:92:26:b3:90:e3:cb:8d:98:93:a3:44:68:28: 4e:77:75:29:2a:98:55:1a:1c:1e:b4:30:e5:2b:2a:06:e0:6b: 3d:f3:db:e9:5d:3a:a1:41:58:79:19:8d:76:66:dc:80:2c:46: 7b:dd:aa:9c:d0:45:b8:b0:e2:c5:85:39:3b:a1:48:e6:53:36: 22:6c:2b:4d:bf:1c:32:94:5c:b5:b5:eb:1c:08:29:22:13:3b: d7:47:38:47:59:d1:21:3a:4f:ad:ec:67:a8:a2:f9:fd:6c:6b: d6:a2:eb:85:62:98:59:8f:7f:8a:82:c7:82:1a:f7:ca:e6:cb: ff:55:20:f7:ed:e4:a7:08:55:5f:3a:e0:d0:0d:a2:24:ea:6e: b6:8d:28:86:8c:1e:66:26:69:9a:2c:64:b1:a7:8b:ae:a4:4c: df:50:0b:76:02:ac:ab:81:c1:f9:c2:00:12:80:35:f8:8c:cc: 3b:da:de:aa:b2:1c:3f:b4:25:ff:bf:5b:c3:9f:35:af:1b:0f: ee:24:cd:19 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICLNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMjAxMDk0MDU4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJhMy03OGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0JCWRJQFGu3bp41MaCAhRTezGRCbWW2WfShSfuCuDjvZR5L3BW74j1P1lEO QUOIWlVkuP3p3SKifoPEI1HiCOQWZ4JyxaOgz+ZIigm4iZSWHXl1egHZXH+JcynZ DzYYQPVTNCys+GoKKHdWsvMKEwP4Ho7OgRbRqv5s5kpHOmadMsnnhrMTYgZ9H5YY ncQNl+9dtVsv+mGlURa9+KPf7ENcyNrvl5fZes0RDJSm3dZw0/7ttx4aVxrAVtsY xDny4JRiB2+khbB0h3HlOICTc8oXxBCgwInae9rvLlZgGU5//oLQU1tWh4Odjs2s JdZK0Hyne3jtHRp+TV29HsOubwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFCN0M7nP epEuYWsRcva3dabHoZCOMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMENGOTA3NjhC REUwMTFFQUFFQTQ2NTU0QzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQAnQ+fAwQAofgaAwQApKQgMAwDBACkpHsDBACkpHwDBAGkpH4DBACk pLgDBACkpLsDBACkpMAwDQYJKoZIhvcNAQELBQADggEBAIrPQ7OzeQ9XRDNIG02J Hgy9kR4CnqyBhXdA7ZA5FaZwcyrWf4c0t4eZwVhJGxCZJZTFxnOGvAJdaNfRkiaz kOPLjZiTo0RoKE53dSkqmFUaHB60MOUrKgbgaz3z2+ldOqFBWHkZjXZm3IAsRnvd qpzQRbiw4sWFOTuhSOZTNiJsK02/HDKUXLW16xwIKSITO9dHOEdZ0SE6T63sZ6ii +f1sa9ai64VimFmPf4qCx4Ia98rmy/9VIPft5KcIVV864NANoiTqbraNKIaMHmYm aZosZLGni66kTN9QC3YCrKuBwfnCABKANfiMzDva3qqyHD+0Jf+/W8OfNa8bD+4k zRk= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:22 2026 by rpki-client