$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa File: 407A24884C3C11F0A124A87BC4F9AE02.roa (raw, json) Hash identifier: 0Wf67IaAbf9jCjzIWkoLcbDExAAK8BH6AcoTi0j5O50= Subject key identifier: 1E:C0:89:08:00:2C:AE:B9:F8:62:0D:BF:9B:E4:C7:28:28:DA:A7:A9 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C8A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:48:26 +0000 ROA not before: Wed 18 Jun 2025 12:03:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153973 IP address blocks: 165.101.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11402 (0x2c8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jun 18 12:03:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c239-0417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:37:68:2c:0e:99:d5:a9:42:3a:0c:87:45:57: 1f:4d:2a:ab:40:59:5f:61:2d:e5:5e:3b:fe:0a:82: 15:e5:1c:f7:51:51:ae:45:c9:de:19:09:d8:1a:7b: 1a:95:1d:61:b5:45:61:3e:fa:80:bf:1f:2a:cd:d4: f8:b9:9c:8d:8e:4f:99:de:10:b7:36:9d:b1:68:87: ad:ca:02:dc:1f:da:39:b5:bf:80:0d:80:5d:fe:cd: 5c:ba:ba:b6:8c:08:f4:a2:18:fb:73:73:68:9e:68: 73:f8:9b:1b:64:f0:50:4a:27:28:51:16:a1:ab:7a: fa:24:1d:16:ff:d5:94:47:07:83:f4:56:52:e0:b8: a6:c7:f9:b8:4e:3b:fb:e1:a1:12:3d:b5:4d:d4:00: d7:21:c9:02:52:fc:25:b0:8a:6f:68:25:d5:21:b9: 40:50:5c:42:ba:31:5d:a6:8b:81:21:96:58:73:fa: 54:f2:78:43:3d:23:cc:ed:90:65:5a:cc:20:78:ff: 80:09:c9:aa:19:22:ea:1c:24:3d:d8:eb:94:09:a4: bf:0b:61:78:46:15:30:57:11:0c:b9:79:a9:e1:4c: ec:b8:bf:64:de:98:c0:c0:69:e7:3d:30:bd:cd:5a: c4:54:75:cd:70:f8:9f:de:6b:84:60:87:bd:61:3f: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C0:89:08:00:2C:AE:B9:F8:62:0D:BF:9B:E4:C7:28:28:DA:A7:A9 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/407A24884C3C11F0A124A87BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.10.0/23 Signature Algorithm: sha256WithRSAEncryption 92:0f:9d:e4:f6:29:c2:10:2c:16:f1:18:47:b1:2b:35:cf:b7: 5e:55:e4:36:8b:c6:e5:7f:ec:f5:3e:a2:a8:44:d0:8b:fa:f9: a9:de:f0:c8:f2:fe:87:1e:a8:ee:ca:5d:eb:bf:03:b2:98:8b: 04:6b:15:f9:d9:4e:81:85:98:4f:e4:69:8e:20:f9:0f:96:44: 77:76:61:40:4d:db:c3:7a:ac:26:4d:12:6d:c1:a7:dd:77:51: b8:8b:70:62:0c:40:0f:99:ac:42:5a:83:2c:d1:73:12:84:3b: 4d:f8:bd:86:a2:79:73:82:d7:01:03:ba:1e:64:e5:be:b4:c0: a3:fc:ca:b4:87:8b:dc:a2:02:5d:47:72:72:29:33:4c:49:2c: de:fe:60:4c:44:b2:32:e9:d6:8c:b0:33:2e:9b:ca:dc:29:a3: c6:aa:02:f3:68:f7:d1:51:a5:9d:a8:45:f2:44:8c:67:29:33: fa:f0:72:d9:c8:a6:24:c5:2c:78:0f:8e:ee:18:45:ae:09:79: 19:1e:df:2b:af:f8:cb:72:20:f8:79:ec:b8:a7:01:c5:e9:50: fa:b3:5b:20:56:ca:34:80:da:92:b4:2e:e3:6e:d9:23:96:0f: 5d:e1:0b:bd:8d:46:39:c9:ab:95:91:01:43:d6:b3:e5:b1:7c: e8:b4:04:30 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNjE4MTIwMzMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzIzOS0wNDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6jdoLA6Z1alCOgyHRVcfTSqrQFlfYS3lXjv+CoIV5Rz3UVGuRcneGQnYGnsa lR1htUVhPvqAvx8qzdT4uZyNjk+Z3hC3Np2xaIetygLcH9o5tb+ADYBd/s1curq2 jAj0ohj7c3Nonmhz+JsbZPBQSicoURahq3r6JB0W/9WURweD9FZS4Limx/m4Tjv7 4aESPbVN1ADXIckCUvwlsIpvaCXVIblAUFxCujFdpouBIZZYc/pU8nhDPSPM7ZBl WswgeP+ACcmqGSLqHCQ92OuUCaS/C2F4RhUwVxEMuXmp4UzsuL9k3pjAwGnnPTC9 zVrEVHXNcPif3muEYIe9YT/lHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB7AiQgA LK65+GINv5vkxygo2qepMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDA3QTI0ODg0 QzNDMTFGMEExMjRBODdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWUKMA0GCSqGSIb3DQEBCwUAA4IBAQCSD53k9inCECwW8RhHsSs1 z7deVeQ2i8blf+z1PqKoRNCL+vmp3vDI8v6HHqjuyl3rvwOymIsEaxX52U6BhZhP 5GmOIPkPlkR3dmFATdvDeqwmTRJtwafdd1G4i3BiDEAPmaxCWoMs0XMShDtN+L2G onlzgtcBA7oeZOW+tMCj/Mq0h4vcogJdR3JyKTNMSSze/mBMRLIy6daMsDMum8rc KaPGqgLzaPfRUaWdqEXyRIxnKTP68HLZyKYkxSx4D47uGEWuCXkZHt8rr/jLciD4 eey4pwHF6VD6s1sgVso0gNqStC7jbtkjlg9d4Qu9jUY5yauVkQFD1rPlsXzotAQw -----END CERTIFICATE-----Generated at Mon Mar 2 21:25:13 2026 by rpki-client