$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/789D214AED3A11F08DE1F4EF4A6F56BC.roa File: 789D214AED3A11F08DE1F4EF4A6F56BC.roa (raw, json) Hash identifier: f7m6Ri59NO7Jp2510XoqXQl4WwY6ugI1J7B+P8brlmI= Subject key identifier: 6B:CB:85:76:42:91:63:C2:0D:E0:B0:8C:97:45:B7:DD:E3:BF:7B:D0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CF1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/789D214AED3A11F08DE1F4EF4A6F56BC.roa Signing time: Sun 01 Mar 2026 22:50:47 +0000 ROA not before: Fri 09 Jan 2026 09:06:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149020 IP address blocks: 160.187.141.0/24 maxlen: 24 160.191.77.0/24 maxlen: 24 161.248.242.0/24 maxlen: 24 165.99.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11505 (0x2cf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 9 09:06:24 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2c6-a8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:7c:f8:98:2a:2c:ae:20:9c:35:cd:30:be: bf:35:74:ee:58:2c:94:4e:60:a0:35:27:96:50:66: c4:88:c6:e7:79:29:b5:39:83:20:19:f4:ac:80:8f: 78:ce:7a:8c:50:e5:af:72:d2:53:d4:ff:51:e3:82: ff:eb:05:e7:a7:cd:e9:ff:dc:b0:bb:6b:ba:21:83: 64:94:24:24:e6:50:b5:ac:5d:c7:d9:ed:2b:ee:13: e7:51:dc:06:20:e0:6f:4a:48:84:1b:bf:69:0f:02: 15:6a:66:8d:43:fb:37:21:b5:2a:da:c8:12:fa:a0: 18:58:7c:f5:6f:1e:2e:19:1f:50:1c:2f:5f:3f:f6: 77:d5:a2:f5:06:de:20:7f:b1:2b:df:7b:c3:c6:d2: b8:18:8f:71:20:e1:93:d4:a9:c0:7f:d3:73:e1:23: a0:f6:bf:a2:1f:5e:52:dd:b2:be:ef:c5:58:da:b3: e8:85:f5:59:c5:19:81:5d:71:02:98:16:53:2b:e0: 1c:21:33:89:3f:1d:e7:df:83:dc:e9:0d:23:35:52: 66:84:d7:cf:7a:eb:39:4a:a5:35:67:ab:4c:c5:5c: b6:01:5b:1c:04:0c:93:0b:55:da:61:53:b5:6b:8e: 01:88:20:41:58:34:72:78:54:b2:a4:7c:c3:31:87: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:85:76:42:91:63:C2:0D:E0:B0:8C:97:45:B7:DD:E3:BF:7B:D0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/789D214AED3A11F08DE1F4EF4A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 160.187.141.0/24 160.191.77.0/24 161.248.242.0/24 165.99.9.0/24 Signature Algorithm: sha256WithRSAEncryption 17:75:50:84:a3:53:53:e0:1d:eb:c0:cf:25:47:1b:c7:93:71: 5d:60:03:32:45:6d:86:cf:11:30:86:bd:f0:71:22:fe:ba:6d: 1e:c5:f3:47:77:da:b5:b1:b0:a7:7d:0b:a5:f2:40:97:68:e3: d0:44:ed:74:76:3c:b1:4b:5c:a5:d3:07:f2:21:5e:fb:b8:6c: 31:10:86:83:d2:dd:97:b3:65:37:e7:6d:60:b6:d8:c0:e5:e0: f2:c6:3c:91:9b:83:1a:3f:26:85:4a:98:94:d5:6a:3f:9a:16: 6b:9c:68:03:88:a0:f3:06:26:89:01:2d:50:b1:08:08:db:d9: 8c:ee:14:08:23:fa:45:3f:57:e6:ae:d0:51:59:0b:35:cb:8d: 6f:30:db:ab:89:d3:18:20:81:63:19:60:fc:20:1f:c4:02:be: e5:70:cf:fb:8e:be:54:d3:34:8e:48:3e:14:ab:9b:ec:bb:05: 4c:c3:53:fd:e6:7f:80:53:96:50:19:2e:0d:1a:99:8c:ad:27: bc:94:55:f9:f7:bf:d1:27:a8:f8:6c:a0:8b:b9:b3:c8:f4:ad: a5:e1:3a:b0:f5:7e:32:05:1f:51:06:50:ed:55:b8:53:45:ad: 4b:9f:71:b7:fe:54:9e:b8:46:9b:77:62:df:f7:59:72:91:56: 4c:14:78:af -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICLPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTA5MDkwNjI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJjNi1hOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnC98+JgqLK4gnDXNML6/NXTuWCyUTmCgNSeWUGbEiMbneSm1OYMgGfSsgI94 znqMUOWvctJT1P9R44L/6wXnp83p/9ywu2u6IYNklCQk5lC1rF3H2e0r7hPnUdwG IOBvSkiEG79pDwIVamaNQ/s3IbUq2sgS+qAYWHz1bx4uGR9QHC9fP/Z31aL1Bt4g f7Er33vDxtK4GI9xIOGT1KnAf9Nz4SOg9r+iH15S3bK+78VY2rPohfVZxRmBXXEC mBZTK+AcITOJPx3n34Pc6Q0jNVJmhNfPeus5SqU1Z6tMxVy2AVscBAyTC1XaYVO1 a44BiCBBWDRyeFSypHzDMYcbfwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGvLhXZC kWPCDeCwjJdFt93jv3vQMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzg5RDIxNEFF RDNBMTFGMDhERTFGNEVGNEE2RjU2QkMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAoLuNAwQAoL9NAwQAofjyAwQApWMJMA0GCSqGSIb3DQEBCwUAA4IB AQAXdVCEo1NT4B3rwM8lRxvHk3FdYAMyRW2GzxEwhr3wcSL+um0exfNHd9q1sbCn fQul8kCXaOPQRO10djyxS1yl0wfyIV77uGwxEIaD0t2Xs2U3521gttjA5eDyxjyR m4MaPyaFSpiU1Wo/mhZrnGgDiKDzBiaJAS1QsQgI29mM7hQII/pFP1fmrtBRWQs1 y41vMNuridMYIIFjGWD8IB/EAr7lcM/7jr5U0zSOSD4Uq5vsuwVMw1P95n+AU5ZQ GS4NGpmMrSe8lFX597/RJ6j4bKCLubPI9K2l4Tqw9X4yBR9RBlDtVbhTRa1Ln3G3 /lSeuEabd2Lf91lykVZMFHiv -----END CERTIFICATE-----Generated at Mon Mar 2 22:33:01 2026 by rpki-client