$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa File: 8651A204EAC311EF98912624C4F9AE02.roa (raw, json) Hash identifier: GcP/aZcKbO9v2mrcne9E7bnRKsccprRqxWMcMLZ3bck= Subject key identifier: 99:ED:93:D5:4F:78:8E:91:ED:9E:4A:38:CA:7F:0E:4B:DB:C8:C4:4A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C5E Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:47:22 +0000 ROA not before: Thu 08 May 2025 15:55:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153284 IP address blocks: 161.248.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11358 (0x2c5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c1fa-40e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:d6:e5:04:68:f7:10:58:81:d5:c1:1f:76: ee:36:45:b3:cd:18:dc:64:36:a5:10:8e:57:d5:0e: 72:9e:f2:5e:24:3d:c4:72:d7:a5:43:c4:04:3b:d7: e5:3f:58:d1:69:a3:e0:64:39:b5:95:95:a0:c5:14: b0:7a:72:84:29:68:62:fb:e2:bd:61:2a:b5:d2:15: 5f:2e:89:42:58:15:3a:81:61:c6:3a:46:fa:e7:81: 48:9a:6c:18:a4:a4:2b:a9:1e:2a:cf:66:da:78:c6: b5:31:48:3c:78:32:2e:af:f5:0c:73:55:7e:75:2b: d5:0c:82:3e:4e:cd:27:f7:b7:f7:19:b2:53:a7:da: 75:5b:16:69:53:0d:15:e8:76:9f:39:34:d8:ec:28: ac:0f:f3:74:56:3b:ba:27:65:8e:a2:99:5a:ca:0f: e4:9a:2e:12:81:a6:b6:ea:0e:25:69:b0:b3:f1:da: 2e:a0:8a:81:9f:a0:b6:53:60:bf:18:1b:d7:76:74: 20:15:f2:c2:f0:a8:00:fc:30:38:35:52:35:bb:0e: 6e:33:24:a0:ec:44:6d:0d:b8:d2:69:f0:da:f9:78: 57:bf:5d:50:f1:4b:ce:ab:91:95:24:ce:23:41:8c: 0a:a7:e8:6f:cc:8f:73:a1:cf:e7:fe:96:ab:d5:0c: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:ED:93:D5:4F:78:8E:91:ED:9E:4A:38:CA:7F:0E:4B:DB:C8:C4:4A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.18.0/23 Signature Algorithm: sha256WithRSAEncryption b9:5a:ce:06:4b:ff:ea:02:6d:a0:98:53:d1:b9:ac:68:b6:0c: d0:c7:be:ee:a1:82:56:e7:4e:da:b3:e1:15:b0:85:34:7f:f7: c6:05:3f:5e:b1:0b:d0:98:79:b2:bc:ef:c0:25:f0:e0:fa:7f: f7:c0:37:1d:1e:c3:5d:0c:d6:55:74:de:54:1d:f6:b4:e1:4c: f2:7e:93:00:0c:98:6c:85:3b:dd:10:ca:7d:b6:fb:77:44:6a: 6b:ac:a8:60:5b:bd:39:f8:f0:82:24:41:dd:55:7f:5b:67:c1: e4:9f:b9:6d:1c:92:cd:c5:d0:d2:61:30:87:8b:db:fa:86:26: c4:cc:e2:c9:da:cf:29:03:17:b9:d4:96:45:1c:8c:ce:e1:de: 54:31:8c:d9:ff:4d:8a:d4:50:e8:ce:9f:ca:7f:9a:1c:31:34: 2e:cd:ee:60:7e:2d:62:97:8a:6c:5c:cd:67:53:3c:2a:b6:e1: 6d:e2:ed:3c:23:b2:a4:e1:da:6e:dc:9a:d9:7f:62:ca:a9:f9: 68:8a:d9:b3:bc:d1:58:52:f9:85:8e:22:17:d8:ac:31:d3:dd: ce:a5:28:3d:1d:da:91:bc:84:1f:5e:1d:10:06:44:1f:94:bc: 4b:63:a3:38:e0:1b:59:f9:60:e9:73:b0:2a:00:2a:bf:53:0c: f6:6b:b4:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzFmYS00MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bzW5QRo9xBYgdXBH3buNkWzzRjcZDalEI5X1Q5ynvJeJD3EctelQ8QEO9fl P1jRaaPgZDm1lZWgxRSwenKEKWhi++K9YSq10hVfLolCWBU6gWHGOkb654FImmwY pKQrqR4qz2baeMa1MUg8eDIur/UMc1V+dSvVDII+Ts0n97f3GbJTp9p1WxZpUw0V 6HafOTTY7CisD/N0Vju6J2WOoplayg/kmi4Sgaa26g4labCz8douoIqBn6C2U2C/ GBvXdnQgFfLC8KgA/DA4NVI1uw5uMySg7ERtDbjSafDa+XhXv11Q8UvOq5GVJM4j QYwKp+hvzI9zoc/n/par1QyxRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJntk9VP eI6R7Z5KOMp/DkvbyMRKMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODY1MUEyMDRF QUMzMTFFRjk4OTEyNjI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgSMA0GCSqGSIb3DQEBCwUAA4IBAQC5Ws4GS//qAm2gmFPRuaxo tgzQx77uoYJW507as+EVsIU0f/fGBT9esQvQmHmyvO/AJfDg+n/3wDcdHsNdDNZV dN5UHfa04UzyfpMADJhshTvdEMp9tvt3RGprrKhgW705+PCCJEHdVX9bZ8Hkn7lt HJLNxdDSYTCHi9v6hibEzOLJ2s8pAxe51JZFHIzO4d5UMYzZ/02K1FDozp/Kf5oc MTQuze5gfi1il4psXM1nUzwqtuFt4u08I7Kk4dpu3JrZf2LKqfloitmzvNFYUvmF jiIX2Kwx093OpSg9HdqRvIQfXh0QBkQflLxLY6M44BtZ+WDpc7AqACq/Uwz2a7SI -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:03 2026 by rpki-client