$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa File: 878F32CAA5C711F0A1CA3540C4F9AE02.roa (raw, json) Hash identifier: Pf9slqeKaB5/tz0pQnyV5YpQpkxWmtRseuTy4WHIEY4= Subject key identifier: 3E:79:A4:C0:AC:01:55:D5:92:73:A7:E7:B7:A2:AA:93:CC:BE:87:36 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CBF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:49:39 +0000 ROA not before: Fri 10 Oct 2025 10:54:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154027 IP address blocks: 165.101.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11455 (0x2cbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Oct 10 10:54:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c282-0afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ad:99:bc:fe:50:a1:30:13:e6:67:c3:f7:69: 32:82:f5:16:96:ac:04:0e:86:34:76:00:84:ab:5b: cd:3e:27:bb:30:19:57:44:0d:53:e9:b9:ff:a5:06: 6e:25:27:ac:3e:b1:d2:27:b4:7a:50:f0:56:26:61: 2d:e8:5d:43:4f:14:8f:4e:6b:68:19:cb:ac:83:d6: d9:c0:69:37:d6:c9:f0:2e:c3:6e:ed:24:e6:57:a1: b8:d6:86:2c:59:a9:be:79:de:9d:84:47:91:d6:a8: 64:86:03:e5:72:5c:07:30:ad:ad:84:d1:70:6d:d8: 85:31:fc:6e:79:7a:93:ed:09:c0:73:6e:b4:69:05: 56:53:25:0b:61:9c:30:77:e2:5f:3e:fe:b1:ce:e3: 52:b0:9e:4d:70:27:3d:0e:fb:66:cf:f1:df:43:d8: 83:11:c0:5f:f6:44:00:be:9f:ab:e9:98:d5:b9:08: 62:7f:bd:cf:e2:85:67:d5:64:57:4a:48:be:96:bc: 2a:27:61:b3:63:8c:02:38:c4:8a:d9:3b:8e:03:23: d8:eb:f1:31:9b:2f:65:31:01:8d:a4:f7:6e:cf:14: aa:2d:c8:e0:31:0a:9b:d6:b9:53:9e:2d:13:f9:1e: 94:b3:47:d5:d5:50:c3:6e:94:35:90:e5:66:91:a4: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:79:A4:C0:AC:01:55:D5:92:73:A7:E7:B7:A2:AA:93:CC:BE:87:36 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.138.0/23 Signature Algorithm: sha256WithRSAEncryption 97:2f:ba:7b:cf:be:60:3b:bd:aa:d2:2c:1a:ad:32:22:62:d1: 41:e3:fa:c1:52:f3:99:81:c0:32:d7:e6:66:d8:3b:83:02:f6: d4:29:fe:3f:6e:0e:2a:6b:ac:33:53:d4:62:4e:87:e3:50:c6: ee:4d:10:ea:d2:06:d2:d2:da:16:4a:08:3b:7c:4b:c5:7f:1c: e8:81:13:2a:43:5b:f9:e2:85:e9:f3:77:de:b7:b9:31:8b:ae: 57:3c:cf:fe:3d:09:78:ac:41:4c:c3:1e:3a:8c:25:81:c3:5d: 9b:cb:1d:e5:07:ac:46:9a:e7:bd:cd:80:4b:8c:c9:b9:2c:e8: 83:8e:a7:99:12:1d:46:98:d4:78:ff:dc:0c:02:f7:9d:8b:9d: d6:43:a2:eb:64:6c:33:24:af:56:cb:dc:c0:ed:28:12:2b:2f: b3:6e:75:22:55:10:a2:48:8b:31:33:ce:52:d8:48:cf:fd:1e: 99:c0:95:7f:ba:13:df:b7:14:42:6c:b1:8c:81:00:7c:61:0c: ca:0d:af:2d:02:09:de:f2:62:57:74:c6:74:d1:03:bf:ad:21: b9:32:93:8f:74:c1:6e:3d:43:ec:43:bc:34:50:78:3d:ca:fa: 48:e4:f6:d2:14:58:f6:d6:73:72:42:e7:7f:33:12:37:56:ab: 57:a4:25:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMDEwMTA1NDQ0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI4Mi0wYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoa2ZvP5QoTAT5mfD92kygvUWlqwEDoY0dgCEq1vNPie7MBlXRA1T6bn/pQZu JSesPrHSJ7R6UPBWJmEt6F1DTxSPTmtoGcusg9bZwGk31snwLsNu7STmV6G41oYs Wam+ed6dhEeR1qhkhgPlclwHMK2thNFwbdiFMfxueXqT7QnAc260aQVWUyULYZww d+JfPv6xzuNSsJ5NcCc9Dvtmz/HfQ9iDEcBf9kQAvp+r6ZjVuQhif73P4oVn1WRX Ski+lrwqJ2GzY4wCOMSK2TuOAyPY6/Exmy9lMQGNpPduzxSqLcjgMQqb1rlTni0T +R6Us0fV1VDDbpQ1kOVmkaQxYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD55pMCs AVXVknOn57eiqpPMvoc2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODc4RjMyQ0FB NUM3MTFGMEExQ0EzNTQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWWKMA0GCSqGSIb3DQEBCwUAA4IBAQCXL7p7z75gO72q0iwarTIi YtFB4/rBUvOZgcAy1+Zm2DuDAvbUKf4/bg4qa6wzU9RiTofjUMbuTRDq0gbS0toW Sgg7fEvFfxzogRMqQ1v54oXp83fet7kxi65XPM/+PQl4rEFMwx46jCWBw12byx3l B6xGmue9zYBLjMm5LOiDjqeZEh1GmNR4/9wMAvedi53WQ6LrZGwzJK9Wy9zA7SgS Ky+zbnUiVRCiSIsxM85S2EjP/R6ZwJV/uhPftxRCbLGMgQB8YQzKDa8tAgne8mJX dMZ00QO/rSG5MpOPdMFuPUPsQ7w0UHg9yvpI5PbSFFj21nNyQud/MxI3VqtXpCVO -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:25 2026 by rpki-client