$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/86189EC666DA11F09EA9AE34C4F9AE02.roa File: 86189EC666DA11F09EA9AE34C4F9AE02.roa (raw, json) Hash identifier: 9/apOtVkZ/yvClYHlRF6oHhkFzOPkMQvSX1j7FIQgWM= Subject key identifier: 70:F7:DE:D0:1C:BC:BB:BC:0A:08:2E:F6:8B:AC:8E:86:D9:A6:B0:81 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CA1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/86189EC666DA11F09EA9AE34C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:48:56 +0000 ROA not before: Tue 22 Jul 2025 09:01:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141834 IP address blocks: 165.101.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11425 (0x2ca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 22 09:01:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c258-5a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:ff:99:39:cf:eb:6b:66:fc:df:c4:24:e4: 5d:b0:68:99:d9:43:f1:ee:75:81:f3:14:3d:7b:26: 24:2d:23:bf:3d:d4:a2:50:5e:04:f1:5c:d0:05:22: d8:89:7e:bd:1c:7f:89:6b:18:24:b2:29:26:13:9a: de:3b:cd:57:13:61:66:84:ca:44:63:45:70:82:da: e1:49:f4:0a:53:ac:a1:8a:cb:49:e1:9b:f6:7e:11: d9:18:8b:8f:86:cc:a1:14:05:80:cd:c8:45:e1:87: fa:ff:6b:f6:74:80:85:96:68:bf:b1:85:e9:c3:bd: fe:da:5f:f1:4c:b9:bf:9a:1e:27:61:3e:e3:0f:5f: 19:05:0e:26:ff:bf:4b:a7:22:ff:ac:e2:28:ae:8f: 3f:6a:95:38:c7:d9:15:9a:dc:25:77:3d:33:93:11: 52:2e:c7:42:2c:9a:d1:7e:4f:7e:0e:2f:8e:90:0d: f5:be:43:c6:23:0a:21:ea:7d:d2:23:aa:78:f6:2d: 31:44:c2:bb:1b:1d:30:a3:eb:31:81:92:f9:65:7a: f9:fd:27:c5:25:34:b4:6c:4b:b3:f9:fa:5a:fe:4d: 78:52:9d:3e:17:21:5c:68:30:a8:38:44:e9:b4:e5: f0:b7:e4:80:43:cd:ac:05:68:c8:b4:67:3a:5b:e8: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F7:DE:D0:1C:BC:BB:BC:0A:08:2E:F6:8B:AC:8E:86:D9:A6:B0:81 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/86189EC666DA11F09EA9AE34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.134.0/24 Signature Algorithm: sha256WithRSAEncryption 41:38:51:79:b5:07:7b:f0:c9:16:7d:63:c5:c6:30:24:41:3c: 04:54:e1:f5:fd:98:3b:35:7c:3e:21:25:82:04:8d:e4:5e:32: c5:10:23:9b:64:6b:72:4b:86:4f:5c:7a:a3:fe:63:52:47:c7: 6a:a0:77:25:a0:99:e2:83:e6:78:d2:7b:dc:a8:8f:6c:17:71: e2:05:d5:72:ea:cf:1e:17:6d:df:bf:9a:2b:eb:6a:e9:15:f8: 9e:8f:84:28:9e:f8:73:34:c4:f1:4f:ad:b0:2b:56:28:34:17: dc:83:26:18:f8:98:29:e1:cd:af:e5:2c:0c:57:29:65:56:27: 9a:ed:80:3b:35:b6:6f:90:42:6b:0c:7f:ad:47:a5:a0:60:32: 82:e2:04:b0:80:67:53:98:24:02:95:80:84:b8:05:03:e9:f2: f7:e1:16:33:a2:92:80:b5:1b:79:fd:10:5b:d2:96:f9:ba:c4: 29:6c:dc:98:2c:13:42:52:73:f4:f0:30:c5:6f:f5:b9:ec:2a: 64:74:54:a7:47:f7:69:9f:d5:c8:50:3d:8e:60:11:b6:2f:d8: 2c:68:e6:70:67:fd:ef:b7:34:bb:a7:74:5a:53:56:48:d9:86: b1:f0:23:8e:23:97:51:dd:14:e6:f9:bd:3e:51:9a:a2:62:d8: ef:f6:d0:d5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzIyMDkwMTU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI1OC01YTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMH/mTnP62tm/N/EJORdsGiZ2UPx7nWB8xQ9eyYkLSO/PdSiUF4E8VzQBSLY iX69HH+JaxgksikmE5reO81XE2FmhMpEY0VwgtrhSfQKU6yhistJ4Zv2fhHZGIuP hsyhFAWAzchF4Yf6/2v2dICFlmi/sYXpw73+2l/xTLm/mh4nYT7jD18ZBQ4m/79L pyL/rOIoro8/apU4x9kVmtwldz0zkxFSLsdCLJrRfk9+Di+OkA31vkPGIwoh6n3S I6p49i0xRMK7Gx0wo+sxgZL5ZXr5/SfFJTS0bEuz+fpa/k14Up0+FyFcaDCoOETp tOXwt+SAQ82sBWjItGc6W+hFFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHD33tAc vLu8Cggu9ousjobZprCBMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODYxODlFQzY2 NkRBMTFGMDlFQTlBRTM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWWGMA0GCSqGSIb3DQEBCwUAA4IBAQBBOFF5tQd78MkWfWPFxjAk QTwEVOH1/Zg7NXw+ISWCBI3kXjLFECObZGtyS4ZPXHqj/mNSR8dqoHcloJnig+Z4 0nvcqI9sF3HiBdVy6s8eF23fv5or62rpFfiej4QonvhzNMTxT62wK1YoNBfcgyYY +Jgp4c2v5SwMVyllViea7YA7NbZvkEJrDH+tR6WgYDKC4gSwgGdTmCQClYCEuAUD 6fL34RYzopKAtRt5/RBb0pb5usQpbNyYLBNCUnP08DDFb/W57CpkdFSnR/dpn9XI UD2OYBG2L9gsaOZwZ/3vtzS7p3RaU1ZI2Yax8COOI5dR3RTm+b0+UZqiYtjv9tDV -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:34 2026 by rpki-client