$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8EF40956C6C311F0BC8D5768C4F9AE02.roa File: 8EF40956C6C311F0BC8D5768C4F9AE02.roa (raw, json) Hash identifier: Dk1MW5AU6rbpUr4kwnYlB5FFVjx640H5w0Hr3879dzE= Subject key identifier: 62:61:2F:E2:FA:61:CA:2B:C1:3E:29:23:3B:76:A1:6D:B5:1F:E2:5A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CD3 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8EF40956C6C311F0BC8D5768C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:50:06 +0000 ROA not before: Fri 21 Nov 2025 10:19:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134303 IP address blocks: 160.25.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11475 (0x2cd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 21 10:19:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c29d-3ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a5:d4:41:32:b4:fe:5b:ba:d8:ea:4c:16:a3: e3:47:f6:72:0d:b1:80:5d:63:21:1f:31:1f:9c:dd: 3c:d6:dd:49:a7:2c:1e:b2:d4:9b:b5:1b:bc:8e:8d: ff:39:56:d6:5f:0e:72:d4:c8:3d:6c:19:0e:b0:c9: 42:11:48:e6:ef:0f:3d:01:0f:b2:91:c9:0c:69:7f: 6d:36:66:05:c0:16:d6:c7:67:ff:2b:f4:f3:01:90: 88:2a:7f:c6:9c:76:f7:6e:b7:ec:ab:54:0e:f4:a8: 98:f7:e1:f9:6d:8e:3a:1c:f8:d4:2e:9e:5c:11:11: bf:7e:9f:d1:0c:8e:d1:a1:b5:90:27:36:7b:eb:bd: 4f:21:27:74:da:74:96:3d:73:05:51:7e:89:24:8a: 3d:02:bc:74:12:0e:f4:9b:25:04:6b:62:1d:f6:fe: ae:5d:3e:35:48:67:27:d5:1c:22:d6:30:b3:98:a2: 15:65:bb:c1:3b:2e:6e:44:bb:6b:37:35:29:87:ad: 63:cb:08:96:9a:33:4f:cf:71:78:cb:8a:59:06:f6: 73:c1:f9:a5:c6:11:c1:dd:05:68:13:2e:37:01:dc: 1c:39:7d:4a:32:c7:25:81:1e:65:78:a3:9f:07:fb: f8:24:34:fe:12:90:2b:b1:22:31:4a:2d:7b:66:a0: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:61:2F:E2:FA:61:CA:2B:C1:3E:29:23:3B:76:A1:6D:B5:1F:E2:5A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8EF40956C6C311F0BC8D5768C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.110.0/24 Signature Algorithm: sha256WithRSAEncryption 48:66:a5:98:e1:51:95:51:6c:65:15:c0:d4:98:04:19:8d:50: 44:d5:d7:31:2d:6e:c5:ac:e6:28:e8:72:64:a6:f0:a3:65:f7: cb:ff:07:c9:0c:da:3e:ef:4e:7f:0e:41:d7:86:3e:d2:c9:59: f2:ae:84:70:ff:4b:6b:36:64:45:38:e5:50:fd:43:72:ba:50: 8d:c1:4e:36:a6:42:a8:39:d9:6e:c3:e9:5b:5d:bf:02:b5:f9: 72:3e:fb:29:29:ec:1b:44:86:b9:ae:07:b6:14:01:bc:c2:60: 45:7a:c7:1f:18:37:31:ad:90:a6:ee:95:ff:d9:ac:a3:90:39: 0b:a0:dc:4e:ac:a8:bd:7c:4f:04:98:67:b0:b8:36:16:5f:0f: 5e:75:ff:2d:8b:d6:42:c5:ff:e7:eb:3f:ae:35:f3:dc:4a:8e: bb:64:b8:91:07:67:56:fb:1c:2a:a2:6f:02:38:7e:7d:7d:56: 9a:b4:fe:51:5b:65:57:b6:38:93:cb:e6:b2:41:6a:96:5a:7a: 74:a2:b1:1c:34:ee:91:ed:8a:db:a4:69:67:49:35:d9:f6:c2: 55:cc:d6:46:9c:07:1e:7b:86:91:d1:e1:5e:05:80:72:2b:94: 4d:de:b3:44:39:33:ab:99:b0:b7:9c:3e:e3:8f:d1:fe:3a:85: 85:16:43:11 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMTIxMTAxOTI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI5ZC0zZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7qXUQTK0/lu62OpMFqPjR/ZyDbGAXWMhHzEfnN081t1JpywestSbtRu8jo3/ OVbWXw5y1Mg9bBkOsMlCEUjm7w89AQ+ykckMaX9tNmYFwBbWx2f/K/TzAZCIKn/G nHb3brfsq1QO9KiY9+H5bY46HPjULp5cERG/fp/RDI7RobWQJzZ7671PISd02nSW PXMFUX6JJIo9Arx0Eg70myUEa2Id9v6uXT41SGcn1Rwi1jCzmKIVZbvBOy5uRLtr NzUph61jywiWmjNPz3F4y4pZBvZzwfmlxhHB3QVoEy43AdwcOX1KMsclgR5leKOf B/v4JDT+EpArsSIxSi17ZqC2AQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGJhL+L6 YcorwT4pIzt2oW21H+JaMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEVGNDA5NTZD NkMzMTFGMEJDOEQ1NzY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBluMA0GCSqGSIb3DQEBCwUAA4IBAQBIZqWY4VGVUWxlFcDUmAQZ jVBE1dcxLW7FrOYo6HJkpvCjZffL/wfJDNo+705/DkHXhj7SyVnyroRw/0trNmRF OOVQ/UNyulCNwU42pkKoOdluw+lbXb8CtflyPvspKewbRIa5rge2FAG8wmBFescf GDcxrZCm7pX/2ayjkDkLoNxOrKi9fE8EmGewuDYWXw9edf8ti9ZCxf/n6z+uNfPc So67ZLiRB2dW+xwqom8COH59fVaatP5RW2VXtjiTy+ayQWqWWnp0orEcNO6R7Yrb pGlnSTXZ9sJVzNZGnAcee4aR0eFeBYByK5RN3rNEOTOrmbC3nD7jj9H+OoWFFkMR -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:21 2026 by rpki-client