$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/959B4FA2469A11F08B2A7F37C4F9AE02.roa File: 959B4FA2469A11F08B2A7F37C4F9AE02.roa (raw, json) Hash identifier: YofggKDeIrzSgqWJpoVmAk4KAhnA28WCA6PixBMJVqk= Subject key identifier: DC:E4:62:00:6A:1C:87:E7:7C:72:1E:DD:07:F8:70:0D:47:86:00:87 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C85 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/959B4FA2469A11F08B2A7F37C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:48:18 +0000 ROA not before: Wed 11 Jun 2025 08:03:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153949 IP address blocks: 165.99.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11397 (0x2c85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jun 11 08:03:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c232-f52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e2:9b:6e:e6:20:2a:62:30:30:71:cb:76:ee: 0c:91:35:ca:06:f1:d8:04:1c:6d:e1:4f:f1:7d:2e: d4:64:90:97:2e:f8:61:5b:13:89:29:8a:e1:87:15: bd:f4:ec:cd:60:c2:a4:87:74:7b:8e:11:88:62:f7: d5:75:19:ef:6d:39:c0:7b:fb:30:b4:7a:9b:6f:f5: 5c:d1:ab:85:9f:92:fe:92:34:ef:ea:b2:71:04:42: 1c:e2:ca:ec:07:8e:7a:72:e1:fb:2d:c5:53:0d:34: 00:cc:00:2e:f2:bd:7e:fc:5e:c5:15:c3:df:1a:61: d6:27:1a:7d:19:26:96:06:0a:81:4f:08:02:86:cc: 11:2f:e6:e0:9e:13:0e:0f:df:0c:1a:3e:bd:40:8e: cd:77:ca:15:6c:fd:80:42:5c:8f:60:de:0b:20:4b: 05:13:69:23:f2:d6:de:78:58:79:4f:92:5a:be:a5: fb:7d:b4:87:1c:9b:61:b9:8e:38:de:db:20:a7:18: ef:27:4d:f3:b1:46:2d:ac:2e:8c:24:f3:c5:15:12: af:fa:eb:8e:cf:da:29:a4:63:43:fb:f8:7e:d3:cc: 0c:cf:13:ea:c2:c6:b3:99:3c:de:90:9e:0d:fa:1b: ae:b0:61:10:1d:e6:fb:82:11:e5:14:78:e9:49:e1: ae:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:62:00:6A:1C:87:E7:7C:72:1E:DD:07:F8:70:0D:47:86:00:87 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/959B4FA2469A11F08B2A7F37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.210.0/23 Signature Algorithm: sha256WithRSAEncryption 63:a8:9e:1c:12:f7:98:34:a9:ae:36:ee:6a:b7:ee:e9:2a:9f: 55:ec:28:54:62:79:d6:79:51:5c:90:75:0e:e8:e6:0a:c0:df: a4:10:2a:b0:23:61:8c:1f:f2:11:f2:fd:16:9a:45:8d:e9:a1: f4:12:9b:6e:6b:cf:43:39:b7:f6:93:51:27:6e:99:b7:12:cb: e6:db:ea:ff:13:75:43:d1:4f:eb:0e:4c:42:6c:de:44:a0:d3: 7f:5c:ed:6d:dc:d1:67:7a:52:82:33:eb:5f:5f:4e:42:a0:51: 9d:91:e2:6d:9a:00:ff:52:cd:05:f2:68:44:73:80:a3:77:4b: 39:f1:98:12:44:52:2a:4b:ac:f2:8b:8c:59:a4:32:9a:3f:fe: a9:f7:5f:26:31:db:a3:d9:de:cf:d9:95:2b:8e:3f:c6:79:b8: 56:1a:e2:7f:56:62:87:62:17:9c:8e:34:9a:5c:1c:c5:37:57: 11:15:d8:07:f3:65:a6:71:eb:8c:a3:eb:da:20:58:dd:aa:9a: 37:5f:0f:b3:fa:4f:07:26:bf:13:ec:bd:03:61:33:88:b4:07: 41:34:6b:d1:96:b2:39:07:f3:af:55:6b:a0:f0:5e:54:c3:a2: c7:78:d5:4a:99:09:6a:01:3b:16:ef:49:c6:5b:d2:60:63:d3: 9d:29:fc:47 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNjExMDgwMzQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzIzMi1mNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OKbbuYgKmIwMHHLdu4MkTXKBvHYBBxt4U/xfS7UZJCXLvhhWxOJKYrhhxW9 9OzNYMKkh3R7jhGIYvfVdRnvbTnAe/swtHqbb/Vc0auFn5L+kjTv6rJxBEIc4srs B456cuH7LcVTDTQAzAAu8r1+/F7FFcPfGmHWJxp9GSaWBgqBTwgChswRL+bgnhMO D98MGj69QI7Nd8oVbP2AQlyPYN4LIEsFE2kj8tbeeFh5T5JavqX7fbSHHJthuY44 3tsgpxjvJ03zsUYtrC6MJPPFFRKv+uuOz9oppGND+/h+08wMzxPqwsazmTzekJ4N +huusGEQHeb7ghHlFHjpSeGuawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNzkYgBq HIfnfHIe3Qf4cA1HhgCHMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTU5QjRGQTI0 NjlBMTFGMDhCMkE3RjM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWPSMA0GCSqGSIb3DQEBCwUAA4IBAQBjqJ4cEveYNKmuNu5qt+7p Kp9V7ChUYnnWeVFckHUO6OYKwN+kECqwI2GMH/IR8v0WmkWN6aH0Eptua89DObf2 k1Enbpm3Esvm2+r/E3VD0U/rDkxCbN5EoNN/XO1t3NFnelKCM+tfX05CoFGdkeJt mgD/Us0F8mhEc4Cjd0s58ZgSRFIqS6zyi4xZpDKaP/6p918mMduj2d7P2ZUrjj/G ebhWGuJ/VmKHYhecjjSaXBzFN1cRFdgH82WmceuMo+vaIFjdqpo3Xw+z+k8HJr8T 7L0DYTOItAdBNGvRlrI5B/OvVWug8F5Uw6LHeNVKmQlqATsW70nGW9JgY9OdKfxH -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:38 2026 by rpki-client