$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa File: D17C6B0E070311EBB4EE7D80C4F9AE02.roa (raw, json) Hash identifier: OFl81ka24tz5PB5KToNhphLzC68gWw2qsSsV3xXdPHE= Subject key identifier: 9B:0B:C9:F2:22:0B:BB:81:6D:59:7E:22:92:20:64:ED:44:BC:37:CB Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C66 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:47:34 +0000 ROA not before: Thu 08 May 2025 15:55:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17439 IP address blocks: 142.79.224.0/19 maxlen: 24 157.10.41.0/24 maxlen: 24 159.117.144.0/20 maxlen: 24 168.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11366 (0x2c66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c206-ddae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:de:b6:27:0c:b8:67:80:3a:cb:64:fe:00: 81:da:d2:f9:68:f4:03:36:ee:bb:d1:0f:2a:f1:f2: a1:f0:b1:d7:6f:02:e2:fc:80:b1:dc:7e:04:3f:ab: 64:7b:7a:b8:9f:d8:8f:c7:4f:4c:66:f5:5d:33:eb: 17:2f:76:87:02:3f:32:81:39:09:8d:69:60:07:19: 19:0f:17:20:1c:35:28:8a:1c:2d:a5:90:67:6c:5f: 20:41:6a:e9:c8:95:f6:ec:02:1a:d0:e0:fa:88:df: cf:13:1f:3f:69:fd:90:a4:a1:c0:a6:4c:27:7a:96: b5:5f:26:72:c2:05:4e:98:09:5e:e9:67:5d:97:67: 34:fd:a5:37:f8:5b:b8:68:8c:63:de:ce:7a:56:88: bd:aa:c8:51:54:28:3e:80:44:c3:1a:61:3c:a2:24: 74:cf:6f:2b:0c:18:ee:a5:2f:a9:fb:07:c6:2b:1a: af:ba:3f:6d:4e:13:21:40:12:41:44:79:5e:26:b1: 2a:95:c2:f4:ea:16:19:59:ac:c9:a1:af:77:81:40: f7:d3:4f:28:eb:81:1a:3b:94:0b:3b:2f:05:0f:97: 85:0f:a9:aa:52:7d:b0:6c:f8:cd:17:e0:c0:e1:b0: 1d:7e:cd:5a:79:52:4f:fc:d6:c1:39:aa:ee:b5:e6: 50:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0B:C9:F2:22:0B:BB:81:6D:59:7E:22:92:20:64:ED:44:BC:37:CB X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 142.79.224.0/19 157.10.41.0/24 159.117.144.0/20 168.220.224.0/19 Signature Algorithm: sha256WithRSAEncryption 03:1f:c5:28:1e:03:8a:c4:a5:cb:ff:30:6f:95:8f:ad:81:64: 3c:ea:09:9c:aa:ab:a6:e8:ea:a4:4c:52:d5:ee:64:43:65:16: 89:3a:a5:d4:7f:b2:49:32:3e:00:30:a3:37:54:61:fb:a9:c7: 80:58:04:e3:97:ef:fe:c7:f6:e4:7a:28:ca:27:c2:69:42:4a: a1:7a:c6:95:c1:29:5e:83:14:71:51:4e:32:c6:d0:52:da:17: 05:64:1e:8d:61:49:f2:45:59:b2:f5:29:2d:93:f3:ec:6e:d8: e9:d8:5d:dd:f9:86:f3:5a:44:82:f6:64:21:70:ac:b1:6a:3b: cd:b1:46:f8:4b:13:da:69:9a:68:1a:d1:ce:f5:11:a6:7f:c5: a5:08:5b:82:13:cf:75:99:6a:c9:07:d2:9a:e8:5e:17:e2:6b: 50:0b:d3:15:02:f5:d1:2e:05:25:0d:cd:1a:2a:9b:35:56:d3: 12:4e:59:ff:9e:da:84:2c:94:c1:5e:5e:b5:9e:c3:67:84:a2: be:87:a6:36:fd:53:d9:6f:1d:3f:02:5e:70:08:38:fd:7c:82: 03:b4:20:f5:27:2e:71:4b:65:0f:4b:5f:32:f8:6d:54:50:fc: fa:ab:99:f1:cf:d6:ed:7d:a0:2c:48:75:1f:ec:9e:db:5f:0b: 43:c1:33:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICLGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzIwNi1kZGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/LeticMuGeAOstk/gCB2tL5aPQDNu670Q8q8fKh8LHXbwLi/ICx3H4EP6tk e3q4n9iPx09MZvVdM+sXL3aHAj8ygTkJjWlgBxkZDxcgHDUoihwtpZBnbF8gQWrp yJX27AIa0OD6iN/PEx8/af2QpKHApkwnepa1XyZywgVOmAle6Wddl2c0/aU3+Fu4 aIxj3s56Voi9qshRVCg+gETDGmE8oiR0z28rDBjupS+p+wfGKxqvuj9tThMhQBJB RHleJrEqlcL06hYZWazJoa93gUD3008o64EaO5QLOy8FD5eFD6mqUn2wbPjNF+DA 4bAdfs1aeVJP/NbBOaruteZQ2wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFJsLyfIi C7uBbVl+IpIgZO1EvDfLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDE3QzZCMEUw NzAzMTFFQkI0RUU3RDgwQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQFjk/gAwQAnQopAwQEn3WQAwQFqNzgMA0GCSqGSIb3DQEBCwUAA4IB AQADH8UoHgOKxKXL/zBvlY+tgWQ86gmcqqum6OqkTFLV7mRDZRaJOqXUf7JJMj4A MKM3VGH7qceAWATjl+/+x/bkeijKJ8JpQkqhesaVwSlegxRxUU4yxtBS2hcFZB6N YUnyRVmy9Sktk/Psbtjp2F3d+YbzWkSC9mQhcKyxajvNsUb4SxPaaZpoGtHO9RGm f8WlCFuCE891mWrJB9Ka6F4X4mtQC9MVAvXRLgUlDc0aKps1VtMSTln/ntqELJTB Xl61nsNnhKK+h6Y2/VPZbx0/Al5wCDj9fIIDtCD1Jy5xS2UPS18y+G1UUPz6q5nx z9btfaAsSHUf7J7bXwtDwTNL -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:22 2026 by rpki-client