$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa File: 2B253FB4F5C911F0A1C4DE1F456F56BC.roa (raw, json) Hash identifier: ow+3ff8AkvdLOWRfajJBjxwDI6tkB4X0po9lrznZf/M= Subject key identifier: 28:52:A2:C1:75:65:C9:4F:DD:9B:91:B1:9F:F4:63:D7:F5:8F:DD:97 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2D00 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa Signing time: Sun 01 Mar 2026 22:51:08 +0000 ROA not before: Tue 20 Jan 2026 06:28:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150045 IP address blocks: 192.58.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11520 (0x2d00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 20 06:28:01 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2db-0a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:f6:82:1c:c5:8e:5f:58:3b:c8:32:77:39: 77:9c:b7:d7:32:10:52:6c:82:50:80:c1:e7:d7:7f: 16:ca:01:c1:89:60:db:5e:4b:f4:f5:6e:0b:cf:28: cf:fa:3e:9f:46:52:03:22:be:10:d7:e2:45:fa:d5: a6:24:8e:21:9f:72:4b:f7:34:dc:9d:e9:36:62:e9: 27:bd:66:27:68:4e:27:be:68:f3:7d:4a:54:18:2a: 6d:7c:6f:ca:94:2a:f9:04:06:de:22:7d:90:b0:92: a8:d9:78:f1:21:bf:95:17:f0:ce:1e:95:32:ab:bf: 97:f6:b9:12:67:c9:30:9f:ec:92:b1:9b:90:a5:3d: 37:4d:15:ea:93:f8:ae:a5:29:53:98:bf:42:37:ae: 1a:1d:8a:c6:74:ac:8b:75:4b:86:cc:9a:f8:fe:1f: 5a:29:0e:58:86:11:4f:4b:25:67:9a:51:1c:65:7f: ca:4d:cd:db:53:3c:a4:4f:d7:33:87:88:1b:2c:c8: d5:f7:a7:e8:6d:78:c7:65:25:df:6b:8e:75:1c:d8: d6:a7:65:8f:9b:a1:8e:81:9d:b6:4b:8e:27:93:60: ca:b5:80:13:50:3a:40:3e:a6:b3:ef:1e:a8:6c:2c: 54:f3:3c:40:1e:07:c7:e7:db:97:68:1e:ff:ee:86: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:52:A2:C1:75:65:C9:4F:DD:9B:91:B1:9F:F4:63:D7:F5:8F:DD:97 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.58.101.0/24 Signature Algorithm: sha256WithRSAEncryption ad:b5:24:72:8e:8a:c5:61:41:c9:47:dd:93:b7:b3:84:48:8a: 4c:83:ad:c0:c0:1f:1c:30:51:5c:3c:30:27:da:2c:d6:c0:5f: 34:4d:cf:35:aa:37:5f:ae:d5:b3:f1:d0:4a:c1:7d:6e:be:54: 43:55:da:35:b4:41:fd:3f:82:9d:c4:b0:c4:73:a0:17:93:b6: cb:0d:6d:aa:13:bf:c2:2b:33:66:f2:23:42:a4:5b:3a:be:4f: de:f5:39:3e:cf:63:f6:3d:07:50:4a:00:eb:88:86:e0:ef:00: 8b:0a:d1:ad:3a:b8:4d:66:75:8d:88:d8:0b:dc:35:07:1c:b2: 9f:75:f4:71:c9:f1:32:88:b8:da:af:16:5c:e8:d7:09:40:b1: 1e:5c:8b:75:a8:9c:70:e1:b3:ef:32:52:5c:26:bb:07:18:14: 86:15:4f:19:de:21:56:ed:d0:60:e8:fe:ed:63:54:37:b6:9a: 37:88:42:85:b9:0d:08:2a:fc:92:ad:d8:d1:c2:22:36:d5:1a: bc:7e:85:15:89:e8:84:0a:7d:c7:9f:b2:de:f4:a8:c1:47:96: 45:d2:c4:31:2e:e0:5a:33:28:41:14:0a:de:4d:ac:70:7e:37: b4:aa:13:b7:c1:59:07:58:c6:21:86:0f:ac:2c:0c:93:4d:26: 2e:dd:7a:4f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTIwMDYyODAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJkYi0wYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwT2ghzFjl9YO8gydzl3nLfXMhBSbIJQgMHn138WygHBiWDbXkv09W4LzyjP +j6fRlIDIr4Q1+JF+tWmJI4hn3JL9zTcnek2YuknvWYnaE4nvmjzfUpUGCptfG/K lCr5BAbeIn2QsJKo2XjxIb+VF/DOHpUyq7+X9rkSZ8kwn+ySsZuQpT03TRXqk/iu pSlTmL9CN64aHYrGdKyLdUuGzJr4/h9aKQ5YhhFPSyVnmlEcZX/KTc3bUzykT9cz h4gbLMjV96fobXjHZSXfa451HNjWp2WPm6GOgZ22S44nk2DKtYATUDpAPqaz7x6o bCxU8zxAHgfH59uXaB7/7oaqmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFChSosF1 ZclP3ZuRsZ/0Y9f1j92XMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkIyNTNGQjRG NUM5MTFGMEExQzRERTFGNDU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwDplMA0GCSqGSIb3DQEBCwUAA4IBAQCttSRyjorFYUHJR92Tt7OE SIpMg63AwB8cMFFcPDAn2izWwF80Tc81qjdfrtWz8dBKwX1uvlRDVdo1tEH9P4Kd xLDEc6AXk7bLDW2qE7/CKzNm8iNCpFs6vk/e9Tk+z2P2PQdQSgDriIbg7wCLCtGt OrhNZnWNiNgL3DUHHLKfdfRxyfEyiLjarxZc6NcJQLEeXIt1qJxw4bPvMlJcJrsH GBSGFU8Z3iFW7dBg6P7tY1Q3tpo3iEKFuQ0IKvySrdjRwiI21Rq8foUVieiECn3H n7Le9KjBR5ZF0sQxLuBaMyhBFAreTaxwfje0qhO3wVkHWMYhhg+sLAyTTSYu3XpP -----END CERTIFICATE-----Generated at Mon Mar 2 17:00:29 2026 by rpki-client