$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa File: 24CD77AA968211EF8D4B2A1CC4F9AE02.roa (raw, json) Hash identifier: 1Pk/w4RfGYpCnV4h06Om8zJai6FjPiHqzsnCA0XsJzw= Subject key identifier: 09:E8:B4:50:2A:24:AA:14:0B:CD:86:52:F6:7F:79:7D:B1:E2:75:52 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C4A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:46:53 +0000 ROA not before: Thu 08 May 2025 15:55:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153240 IP address blocks: 160.191.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11338 (0x2c4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c1dd-4f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:95:bb:32:5c:01:f0:86:6f:de:03:53:3b: e4:a5:5c:75:59:b0:64:90:79:f9:8e:cf:69:53:05: 6a:50:ce:8f:5a:7e:d8:8b:2b:c7:65:dd:27:a4:c7: 90:f0:9c:71:bd:2b:11:cd:df:c0:c1:0b:57:ee:b5: 76:32:08:a4:d2:8a:af:b7:d3:f4:4a:86:e5:da:4c: f2:23:36:29:e1:8a:65:26:04:40:33:08:27:d8:66: f1:da:15:a3:90:78:87:24:a4:63:30:2d:db:b3:10: 92:6d:97:83:f1:c8:cb:14:50:e1:38:ff:fb:28:dd: 97:42:d9:7c:88:a7:a9:dc:44:35:4d:d7:f0:ed:6c: 80:7f:b9:89:44:e4:19:43:36:25:8a:7b:fd:b6:9d: af:28:df:66:41:f8:aa:d7:1c:0e:96:19:6d:92:9b: 34:92:1f:1b:81:dc:c7:6e:45:22:9c:ce:c6:cc:00: 01:33:0c:50:0b:c7:aa:46:3d:38:d3:70:8c:68:f7: d3:ae:03:92:10:1f:1e:3a:f2:b4:02:b9:37:45:58: 00:d7:4f:fd:bc:e7:be:66:56:e7:4b:c8:69:81:94: 38:7b:d5:d6:0b:81:b5:20:70:24:59:44:f1:af:08: b7:5d:27:d5:9a:56:41:9f:9b:e9:39:58:b6:a8:9e: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:B4:50:2A:24:AA:14:0B:CD:86:52:F6:7F:79:7D:B1:E2:75:52 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.120.0/23 Signature Algorithm: sha256WithRSAEncryption 21:4b:99:51:d1:85:3a:73:08:9e:07:7e:a2:da:01:ad:46:57: 29:76:a0:5b:6f:ce:15:e5:78:1b:18:a3:27:0d:5f:6d:6f:6a: a3:34:7b:17:a5:c0:30:08:dd:8c:0c:58:d4:42:0f:fc:53:72: 43:d2:b8:b4:40:be:50:cf:b3:2c:34:de:7d:80:13:42:9b:76: b7:4d:c1:86:ee:16:f5:1f:29:52:9f:23:49:82:1b:c0:17:eb: d5:0e:a2:1c:18:26:a4:09:c7:f7:aa:c2:3d:c5:ec:62:b7:45: 6a:20:00:ff:8b:b2:78:7f:a7:80:43:95:f6:f5:c9:62:b8:34: 7a:bb:b9:3e:ab:a2:18:07:ae:93:c9:74:d3:3e:4e:eb:62:18: 67:42:9f:8b:c4:0d:7c:99:1c:bb:91:82:bb:93:76:7f:76:08: 18:fe:0d:46:d5:6d:60:af:79:7e:0f:2f:8d:b6:0d:e8:c8:aa: 1c:16:83:94:17:e3:df:e0:84:21:d6:0c:3d:ca:bb:da:1e:35: a4:08:3f:bf:33:a3:3d:ce:76:ba:1f:4f:03:36:b5:6c:6b:ca: b7:4a:bf:4b:73:c0:99:40:01:f9:5a:dd:0b:33:c8:ce:3f:6f: f7:e6:7f:b0:a7:b6:96:be:e4:3d:61:2c:1d:b9:a7:2c:c2:76: 46:3b:ef:4d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzFkZC00ZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKmVuzJcAfCGb94DUzvkpVx1WbBkkHn5js9pUwVqUM6PWn7YiyvHZd0npMeQ 8JxxvSsRzd/AwQtX7rV2Mgik0oqvt9P0Sobl2kzyIzYp4YplJgRAMwgn2Gbx2hWj kHiHJKRjMC3bsxCSbZeD8cjLFFDhOP/7KN2XQtl8iKep3EQ1Tdfw7WyAf7mJROQZ QzYlinv9tp2vKN9mQfiq1xwOlhltkps0kh8bgdzHbkUinM7GzAABMwxQC8eqRj04 03CMaPfTrgOSEB8eOvK0Ark3RVgA10/9vOe+ZlbnS8hpgZQ4e9XWC4G1IHAkWUTx rwi3XSfVmlZBn5vpOVi2qJ7unQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAnotFAq JKoUC82GUvZ/eX2x4nVSMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjRDRDc3QUE5 NjgyMTFFRjhENEIyQTFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL94MA0GCSqGSIb3DQEBCwUAA4IBAQAhS5lR0YU6cwieB36i2gGt RlcpdqBbb84V5XgbGKMnDV9tb2qjNHsXpcAwCN2MDFjUQg/8U3JD0ri0QL5Qz7Ms NN59gBNCm3a3TcGG7hb1HylSnyNJghvAF+vVDqIcGCakCcf3qsI9xexit0VqIAD/ i7J4f6eAQ5X29cliuDR6u7k+q6IYB66TyXTTPk7rYhhnQp+LxA18mRy7kYK7k3Z/ dggY/g1G1W1gr3l+Dy+Ntg3oyKocFoOUF+Pf4IQh1gw9yrvaHjWkCD+/M6M9zna6 H08DNrVsa8q3Sr9Lc8CZQAH5Wt0LM8jOP2/35n+wp7aWvuQ9YSwduacswnZGO+9N -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:43 2026 by rpki-client