$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2E1C8F4FC2211F085F4FE113C6F56BC.roa File: C2E1C8F4FC2211F085F4FE113C6F56BC.roa (raw, json) Hash identifier: A171JRSzXHVQWIJ/YEqzHksi/TUI0PN+DuQA1iTKGLU= Subject key identifier: 64:5D:F8:C5:3B:46:90:9E:D1:EF:EC:7A:32:ED:F1:4C:AA:9B:5C:F1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2D06 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2E1C8F4FC2211F085F4FE113C6F56BC.roa Signing time: Sun 01 Mar 2026 22:51:16 +0000 ROA not before: Wed 28 Jan 2026 08:24:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142176 IP address blocks: 192.232.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11526 (0x2d06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jan 28 08:24:28 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c2e4-ce80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:6b:47:ac:0f:64:3c:c2:17:97:a6:66:52: c7:33:6a:d2:19:2c:f9:a4:0b:4d:25:b7:a5:64:d9: c7:95:d4:8d:f1:33:01:7d:f5:a3:47:15:49:5a:05: 2d:81:a8:44:6f:96:c1:7b:7c:2d:fa:9b:2a:92:b6: db:b9:67:24:52:9f:41:6f:6f:97:08:67:2d:7f:1a: 35:72:21:ab:75:ae:27:23:26:6f:07:ce:d5:29:2d: d1:8c:1f:be:b4:ec:35:9b:09:a5:70:bc:e3:9c:30: 17:b3:5f:0e:68:b1:15:20:0f:74:8c:aa:c6:e1:fd: c0:66:68:60:6c:41:09:7e:dd:6c:b9:9d:60:d2:21: ca:62:9a:03:84:45:47:5d:e0:f3:dc:76:e2:ca:2d: 19:8d:80:dc:a1:4c:c6:71:2a:7d:10:6d:39:e4:79: 2c:9c:e5:4b:06:6a:71:d2:73:fd:f3:53:f3:29:dc: e1:a5:37:04:39:ac:b9:de:01:9f:99:1c:5b:e8:57: e1:fd:ed:44:0d:6e:41:26:c6:5e:ee:94:83:44:10: 0a:10:5d:6f:dc:10:24:ce:10:52:c3:d8:ba:69:33: 60:ba:f6:da:24:f2:ec:fd:13:38:ac:75:fa:38:c3: a1:a0:34:19:62:c5:63:b9:0d:37:c4:a5:08:39:2f: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:F8:C5:3B:46:90:9E:D1:EF:EC:7A:32:ED:F1:4C:AA:9B:5C:F1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2E1C8F4FC2211F085F4FE113C6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.232.40.0/23 Signature Algorithm: sha256WithRSAEncryption 19:9e:2a:81:02:74:60:59:9e:76:34:73:71:0d:65:d5:bf:b2: 4e:df:5b:9f:ba:0b:e1:1b:bc:4e:fc:b8:4c:92:59:c0:98:55: 9d:fd:99:8e:c6:61:66:12:1e:43:e1:28:95:bf:e0:fa:6d:3c: 60:15:55:a8:f5:d7:0f:8b:fe:68:59:5f:03:c1:92:c6:d0:77: 15:e9:f6:1d:33:af:d4:25:83:f7:c5:f1:c9:62:77:c3:d0:1e: 0d:65:95:bb:25:eb:b6:d9:e7:cd:94:13:ca:5d:79:e3:52:aa: 0a:bc:36:c6:bd:70:71:b9:bc:09:26:39:f6:47:05:ec:8e:65: 99:6f:e0:d2:36:07:5a:a9:f8:c7:b2:64:43:39:5f:91:03:18: 8d:7e:37:93:37:52:5f:b0:a2:b9:5b:a4:90:52:de:ef:5c:55: 06:dc:1f:f1:ed:42:c8:6d:75:ea:6c:14:6d:8c:03:f3:c9:76: 33:98:5d:90:a2:0f:54:23:35:8e:90:bb:f0:35:c5:13:ae:64: c5:14:26:b6:e2:f6:4f:d5:43:8b:b2:1e:c4:78:0d:03:66:67: a3:4d:42:11:f7:6f:c1:f6:3b:42:25:c3:cd:33:e5:21:aa:18: 15:32:0b:88:89:bf:56:60:e1:33:45:42:2d:28:f8:ac:0a:3c: 47:de:85:76 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwMTI4MDgyNDI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzJlNC1jZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYZrR6wPZDzCF5emZlLHM2rSGSz5pAtNJbelZNnHldSN8TMBffWjRxVJWgUt gahEb5bBe3wt+psqkrbbuWckUp9Bb2+XCGctfxo1ciGrda4nIyZvB87VKS3RjB++ tOw1mwmlcLzjnDAXs18OaLEVIA90jKrG4f3AZmhgbEEJft1suZ1g0iHKYpoDhEVH XeDz3Hbiyi0ZjYDcoUzGcSp9EG055HksnOVLBmpx0nP981PzKdzhpTcEOay53gGf mRxb6Ffh/e1EDW5BJsZe7pSDRBAKEF1v3BAkzhBSw9i6aTNguvbaJPLs/RM4rHX6 OMOhoDQZYsVjuQ03xKUIOS8OxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGRd+MU7 RpCe0e/sejLt8Uyqm1zxMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzJFMUM4RjRG QzIyMTFGMDg1RjRGRTExM0M2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBwOgoMA0GCSqGSIb3DQEBCwUAA4IBAQAZniqBAnRgWZ52NHNxDWXV v7JO31ufugvhG7xO/LhMklnAmFWd/ZmOxmFmEh5D4SiVv+D6bTxgFVWo9dcPi/5o WV8DwZLG0HcV6fYdM6/UJYP3xfHJYnfD0B4NZZW7Jeu22efNlBPKXXnjUqoKvDbG vXBxubwJJjn2RwXsjmWZb+DSNgdaqfjHsmRDOV+RAxiNfjeTN1JfsKK5W6SQUt7v XFUG3B/x7ULIbXXqbBRtjAPzyXYzmF2Qog9UIzWOkLvwNcUTrmTFFCa24vZP1UOL sh7EeA0DZmejTUIR92/B9jtCJcPNM+UhqhgVMguIib9WYOEzRUItKPisCjxH3oV2 -----END CERTIFICATE-----Generated at Mon Mar 2 16:59:25 2026 by rpki-client