$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/297936B0088611F08C1DB151C4F9AE02.roa File: 297936B0088611F08C1DB151C4F9AE02.roa (raw, json) Hash identifier: nxyjqcCj6eZhzUYfJc4qcVPSpoVBW7H98Aa42N7ODHE= Subject key identifier: 0D:EE:67:BB:5F:52:85:DB:62:50:70:1E:89:B6:B6:4B:55:48:99:B1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2B9C Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/297936B0088611F08C1DB151C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:42:38 +0000 ROA not before: Thu 08 May 2025 15:52:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133640 IP address blocks: 160.191.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11164 (0x2b9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c0dd-3646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:81:84:db:25:5f:ec:c0:cb:4d:52:57:ff: a8:bb:89:ca:e8:ac:48:66:b2:17:13:ef:41:4b:f7: 76:02:4a:46:76:06:19:e5:4f:6b:a6:04:18:57:18: 35:34:cb:f5:8a:8c:45:31:bc:70:28:27:b6:4a:f4: c3:e1:9f:29:fe:29:f4:67:59:d5:5a:0d:f4:01:cd: d5:a8:27:34:53:00:8c:b5:6f:8d:ab:c8:a8:cc:dd: 27:61:0b:8e:6c:f7:c8:3e:f1:3b:3e:56:fa:c5:cf: 11:ab:81:c2:68:40:1c:57:eb:ac:2e:a9:71:e6:5c: b5:a4:7c:0f:2d:39:28:6f:ae:94:62:4a:1b:3e:99: 94:a3:5a:28:81:e9:b5:f6:f0:0c:7e:d5:41:bb:1c: a0:ad:85:4d:d6:db:09:4d:1e:75:c0:dd:4f:73:7f: 75:49:35:7d:55:00:55:e5:23:fa:91:49:d5:42:45: f1:61:f3:01:dd:5b:3a:b1:b1:f8:7b:3a:97:a5:61: 57:e8:8e:43:86:c4:7d:e8:f8:3c:75:72:2b:bf:77: d9:ba:2c:31:f7:34:46:91:d0:76:7a:13:ea:74:4c: 9a:fe:39:c7:c5:60:55:db:73:bd:6e:c9:5a:32:31: 85:da:ac:b3:4d:18:66:30:c9:74:f0:ff:24:76:90: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EE:67:BB:5F:52:85:DB:62:50:70:1E:89:B6:B6:4B:55:48:99:B1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/297936B0088611F08C1DB151C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.144.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f9:79:43:98:53:39:84:e9:33:00:9d:13:f7:30:12:4a:72: 85:47:b0:fb:e8:c9:38:93:70:f5:23:c2:e2:df:83:06:b7:81: a9:14:ec:67:88:03:c1:b0:ef:98:b4:4b:2d:97:f4:5f:62:6c: 06:de:03:b0:59:bc:da:bb:4b:5a:78:f6:8d:28:8c:7f:ed:93: 7b:b7:1b:f6:39:25:da:33:58:0c:11:e8:19:ae:7a:fd:2b:2c: 03:99:7e:b3:42:11:ee:fb:ec:4e:df:04:64:16:5b:78:b0:e9: 3f:4a:7f:c8:12:72:38:54:1c:6f:cf:a5:24:70:8b:cc:ca:54: 48:19:2a:dc:0e:2a:1b:f2:c1:eb:b9:59:b3:23:4e:c2:43:26: 73:b9:4c:73:b4:04:c3:98:43:49:d2:57:e6:63:de:fb:d3:34: 92:a3:3c:de:0e:3b:de:bf:c5:b8:35:ec:d0:18:23:3b:01:76: 5a:0a:62:a2:a9:07:c9:92:91:b5:9e:3a:d7:fe:7e:11:ec:02: ec:3f:5c:b8:50:99:10:2e:ba:31:2d:f8:17:cf:36:4b:65:21: a1:9b:f6:61:84:25:bb:03:1d:4e:b0:69:c4:c2:32:3a:ce:d9: 8e:96:63:75:95:ca:d5:26:48:7e:6b:cd:1f:ed:c4:8c:17:6f: 04:fa:3b:78 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzBkZC0zNjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L+BhNslX+zAy01SV/+ou4nK6KxIZrIXE+9BS/d2AkpGdgYZ5U9rpgQYVxg1 NMv1ioxFMbxwKCe2SvTD4Z8p/in0Z1nVWg30Ac3VqCc0UwCMtW+Nq8iozN0nYQuO bPfIPvE7Plb6xc8Rq4HCaEAcV+usLqlx5ly1pHwPLTkob66UYkobPpmUo1oogem1 9vAMftVBuxygrYVN1tsJTR51wN1Pc391STV9VQBV5SP6kUnVQkXxYfMB3Vs6sbH4 ezqXpWFX6I5DhsR96Pg8dXIrv3fZuiwx9zRGkdB2ehPqdEya/jnHxWBV23O9bsla MjGF2qyzTRhmMMl08P8kdpAAgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA3uZ7tf UoXbYlBwHom2tktVSJmxMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjk3OTM2QjAw ODg2MTFGMDhDMURCMTUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoL+QMA0GCSqGSIb3DQEBCwUAA4IBAQC0+XlDmFM5hOkzAJ0T9zAS SnKFR7D76Mk4k3D1I8Li34MGt4GpFOxniAPBsO+YtEstl/RfYmwG3gOwWbzau0ta ePaNKIx/7ZN7txv2OSXaM1gMEegZrnr9KywDmX6zQhHu++xO3wRkFlt4sOk/Sn/I EnI4VBxvz6UkcIvMylRIGSrcDiob8sHruVmzI07CQyZzuUxztATDmENJ0lfmY977 0zSSozzeDjvev8W4NezQGCM7AXZaCmKiqQfJkpG1njrX/n4R7ALsP1y4UJkQLrox LfgXzzZLZSGhm/ZhhCW7Ax1OsGnEwjI6ztmOlmN1lcrVJkh+a80f7cSMF28E+jt4 -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:37 2026 by rpki-client