$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa File: 1B6234F8C6C411F0B021E76AC4F9AE02.roa (raw, json) Hash identifier: t4+3LN/hueMKngo4ar9UOhcNWAcfUiqbwIr0Dz+ZKjk= Subject key identifier: 28:44:6B:D2:D9:75:CB:EB:3C:8F:8E:C1:68:BB:B3:D1:CD:E3:15:5A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CF8 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:57 +0000 ROA not before: Tue 13 Jan 2026 12:08:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153950 IP address blocks: 160.25.111.0/24 maxlen: 24 165.99.212.0/23 maxlen: 24 192.232.32.0/24 maxlen: 24 192.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11512 (0x2cf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 13 12:08:20 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2d1-e326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:89:22:d7:b8:df:06:6d:6e:c0:e4:dd:d6: 57:e6:8d:cd:d6:13:89:0d:76:72:96:ee:90:10:55: d7:39:10:9c:8a:d9:87:e2:a6:b5:b5:c2:4b:c5:3b: b2:fe:20:0e:7a:9f:24:da:77:3a:20:f3:14:b8:70: f3:5c:96:65:c6:8f:da:02:0f:53:25:54:77:e1:df: 73:f9:76:4e:99:8d:35:5d:f0:2d:01:b1:12:b6:72: cd:8a:5f:40:23:03:58:c4:fe:38:11:36:05:f7:bd: 08:32:65:8a:ed:a7:60:c9:9b:60:91:dc:3a:bc:cc: 6b:21:22:02:81:24:4a:6d:81:4a:45:de:bf:30:a9: ab:a7:0e:f3:8d:0f:40:4d:6d:28:51:ee:12:55:23: 41:d6:b0:65:ba:a5:89:42:ac:05:8d:71:24:f3:1b: e8:fe:cc:e0:ee:59:03:45:11:7e:09:11:ca:ca:46: b1:fb:1d:ee:c7:4e:e1:4a:67:50:dc:82:78:1f:c9: 72:9a:fe:2d:07:4e:f3:22:94:00:09:04:ac:64:fb: ab:65:9c:ac:9e:f0:a7:07:fc:2f:0d:86:1d:9e:bb: 14:fb:e3:c8:67:bf:30:ff:ad:38:26:ae:f2:fa:68: a6:e2:72:6a:34:8e:6b:2b:35:28:87:b5:ee:ed:0e: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:6B:D2:D9:75:CB:EB:3C:8F:8E:C1:68:BB:B3:D1:CD:E3:15:5A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.111.0/24 165.99.212.0/23 192.232.32.0/23 Signature Algorithm: sha256WithRSAEncryption 85:e1:73:37:46:f7:22:21:42:8f:98:e6:7e:53:fc:db:0f:ae: 63:e9:30:d8:b2:6c:47:4b:8b:64:47:ff:9f:a2:8c:8f:40:75: 0f:88:ec:b7:04:52:db:81:e6:cf:5d:29:0c:55:a4:39:ca:25: ba:dc:a6:e0:1c:ba:83:49:d8:06:b0:4b:8b:fe:e9:a3:dc:e7: d3:de:b4:57:a9:8f:9f:19:9f:ea:cb:26:dd:a3:7c:de:70:c2: 64:11:42:3f:cc:5f:d9:b3:ce:45:11:57:c4:58:85:45:f0:b3: 55:ba:02:4a:b9:90:a7:22:27:df:ee:bb:47:d4:b1:68:1e:c0: ee:2d:85:b2:f8:ea:2d:c6:a5:02:49:09:d6:1c:c6:4a:15:ea: eb:e1:21:5e:ae:86:fd:33:42:81:3f:c5:5d:5a:04:39:2f:dd: 0a:fc:88:e4:36:f3:ef:54:66:ee:19:e8:9e:f7:e6:ff:1f:64: 8f:05:8a:12:e3:ab:e5:f8:68:4a:3f:c8:ff:7a:5b:ab:11:06: 3e:e3:24:f7:95:3e:df:05:cc:22:ce:ee:83:77:25:1c:63:a5: f9:0b:07:5d:9d:29:be:90:7c:1a:80:b4:37:38:fc:a4:4a:21: c3:8c:10:5e:5a:ad:89:7b:9a:d1:14:c9:d2:a3:e4:c2:89:3f: a5:d7:1c:aa -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICLPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTEzMTIwODIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJkMS1lMzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYCJIte43wZtbsDk3dZX5o3N1hOJDXZylu6QEFXXORCcitmH4qa1tcJLxTuy /iAOep8k2nc6IPMUuHDzXJZlxo/aAg9TJVR34d9z+XZOmY01XfAtAbEStnLNil9A IwNYxP44ETYF970IMmWK7adgyZtgkdw6vMxrISICgSRKbYFKRd6/MKmrpw7zjQ9A TW0oUe4SVSNB1rBluqWJQqwFjXEk8xvo/szg7lkDRRF+CRHKykax+x3ux07hSmdQ 3IJ4H8lymv4tB07zIpQACQSsZPurZZysnvCnB/wvDYYdnrsU++PIZ78w/604Jq7y +mim4nJqNI5rKzUoh7Xu7Q5WDwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFChEa9LZ dcvrPI+OwWi7s9HN4xVaMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUI2MjM0RjhD NkM0MTFGMEIwMjFFNzZBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAoBlvAwQBpWPUAwQBwOggMA0GCSqGSIb3DQEBCwUAA4IBAQCF4XM3 RvciIUKPmOZ+U/zbD65j6TDYsmxHS4tkR/+fooyPQHUPiOy3BFLbgebPXSkMVaQ5 yiW63KbgHLqDSdgGsEuL/umj3OfT3rRXqY+fGZ/qyybdo3zecMJkEUI/zF/Zs85F EVfEWIVF8LNVugJKuZCnIiff7rtH1LFoHsDuLYWy+OotxqUCSQnWHMZKFerr4SFe rob9M0KBP8VdWgQ5L90K/IjkNvPvVGbuGeie9+b/H2SPBYoS46vl+GhKP8j/elur EQY+4yT3lT7fBcwizu6DdyUcY6X5CwddnSm+kHwagLQ3OPykSiHDjBBeWq2Je5rR FMnSo+TCiT+l1xyq -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:00 2026 by rpki-client