$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa File: 3CF264E6FCD211F0AE068C126C6F56BC.roa (raw, json) Hash identifier: gUt1lTDpbb3hwYWSJSBlxD32TZwLgsbF0St/dNmvzh0= Subject key identifier: 86:A1:16:57:AF:F9:40:F6:02:D8:EC:94:57:3B:E1:01:32:51:79:E6 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2D09 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa Signing time: Sun 01 Mar 2026 22:51:21 +0000 ROA not before: Thu 29 Jan 2026 05:20:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133591 IP address blocks: 165.99.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11529 (0x2d09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 29 05:20:34 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2e9-c1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:39:75:22:cc:f4:84:cc:7c:4c:8e:76:99: d7:50:e5:71:99:01:c9:be:ab:94:1e:3d:8b:cc:7d: 15:24:e3:64:b0:95:3a:4c:f9:cd:bb:54:ec:8d:68: b2:f5:ea:d0:73:07:9a:e1:a6:fe:b8:4a:34:c6:33: 02:4a:aa:62:90:34:9a:89:16:84:45:bb:7a:c8:e9: 37:8d:f7:cd:3f:85:a1:c8:b6:ca:06:db:7c:a5:09: de:19:20:50:31:df:ea:c7:5d:7a:6e:ff:9f:0f:fb: 0e:21:63:02:8e:d7:62:61:27:35:15:da:0e:6a:7e: bc:5e:52:35:42:fe:5b:5b:b0:83:db:39:bf:ae:4e: 3b:d2:1c:e2:be:5b:90:68:5f:00:52:1a:03:8a:5e: 31:58:3d:cd:1a:2f:a9:97:3e:e9:6c:a4:f6:8a:ca: 04:df:1e:6c:4b:bc:ed:81:87:b4:c0:f4:77:d1:0a: 57:d0:60:0e:f3:18:be:a4:0a:cc:3e:9c:e2:c1:8f: f7:ee:4a:e0:82:83:69:6c:35:84:d0:52:e4:ec:e4: a1:76:ac:ad:2a:18:aa:32:a2:51:99:82:74:26:07: 72:89:13:ff:40:72:17:26:c8:ad:35:eb:ee:07:15: d1:5a:b6:17:12:fe:de:88:f2:77:83:1f:4d:ec:f8: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A1:16:57:AF:F9:40:F6:02:D8:EC:94:57:3B:E1:01:32:51:79:E6 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CF264E6FCD211F0AE068C126C6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 165.99.133.0/24 Signature Algorithm: sha256WithRSAEncryption be:3a:ea:27:1b:51:b2:e3:b8:8f:f8:f6:af:8e:35:f1:37:f2: 82:d5:0f:6c:91:af:76:d6:d8:6a:fe:57:7e:75:96:f9:dc:a2: d8:3d:37:e2:83:07:50:9f:ca:6e:ee:88:62:b5:16:b6:94:8e: 06:5f:19:17:ad:fa:0d:eb:41:16:5d:91:5f:02:26:8f:b6:fc: d1:f8:84:98:27:15:3e:ca:70:42:8b:17:45:69:51:67:a1:c5: a9:de:d0:38:5a:71:c4:b3:39:c8:96:07:8b:8c:f6:af:b7:01: e9:21:e4:6e:b9:30:48:e3:fb:10:31:28:a2:63:be:de:ff:ce: f4:4e:52:87:b0:2c:26:ac:0e:c8:27:29:cd:e3:77:39:93:98: e2:fe:86:08:96:b7:e8:79:d5:ee:8e:90:02:8b:71:44:6a:ac: 0c:d2:bd:5f:76:9d:2c:a0:54:8e:bd:6d:81:61:3b:76:de:51: 61:3f:3a:61:c3:9d:4e:70:d1:14:e5:38:7c:c6:11:73:5d:6a: f1:91:b4:8b:f0:52:e8:23:d0:e6:5c:1d:15:40:b3:14:1e:e9: e6:48:5f:a8:91:04:ee:f6:ee:cc:e3:91:58:2d:ec:4f:dd:55: ce:97:e3:e2:0c:47:a3:ed:0f:4c:be:f6:47:ea:19:72:2f:bd: 65:25:d6:9d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTI5MDUyMDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJlOS1jMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhA5dSLM9ITMfEyOdpnXUOVxmQHJvquUHj2LzH0VJONksJU6TPnNu1TsjWiy 9erQcwea4ab+uEo0xjMCSqpikDSaiRaERbt6yOk3jffNP4WhyLbKBtt8pQneGSBQ Md/qx116bv+fD/sOIWMCjtdiYSc1FdoOan68XlI1Qv5bW7CD2zm/rk470hzivluQ aF8AUhoDil4xWD3NGi+plz7pbKT2isoE3x5sS7ztgYe0wPR30QpX0GAO8xi+pArM PpziwY/37krggoNpbDWE0FLk7OShdqytKhiqMqJRmYJ0JgdyiRP/QHIXJsitNevu BxXRWrYXEv7eiPJ3gx9N7PgGswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIahFlev +UD2AtjslFc74QEyUXnmMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0NGMjY0RTZG Q0QyMTFGMEFFMDY4QzEyNkM2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWOFMA0GCSqGSIb3DQEBCwUAA4IBAQC+OuonG1Gy47iP+PavjjXx N/KC1Q9ska921thq/ld+dZb53KLYPTfigwdQn8pu7ohitRa2lI4GXxkXrfoN60EW XZFfAiaPtvzR+ISYJxU+ynBCixdFaVFnocWp3tA4WnHEsznIlgeLjPavtwHpIeRu uTBI4/sQMSiiY77e/870TlKHsCwmrA7IJynN43c5k5ji/oYIlrfoedXujpACi3FE aqwM0r1fdp0soFSOvW2BYTt23lFhPzphw51OcNEU5Th8xhFzXWrxkbSL8FLoI9Dm XB0VQLMUHunmSF+okQTu9u7M45FYLexP3VXOl+PiDEej7Q9MvvZH6hlyL71lJdad -----END CERTIFICATE-----Generated at Mon Mar 2 15:04:38 2026 by rpki-client