$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB22834E782611F0A6A2FB3BC4F9AE02.roa File: CB22834E782611F0A6A2FB3BC4F9AE02.roa (raw, json) Hash identifier: 6vk8DA8LiUzG02bwIJouBF422sy8qmOxwx2h7exLArg= Subject key identifier: 0B:46:58:48:B4:A6:BF:85:36:BE:34:E5:5C:98:80:D3:D4:7C:5F:28 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: D9BE Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB22834E782611F0A6A2FB3BC4F9AE02.roa Signing time: Sun 01 Mar 2026 23:00:45 +0000 ROA not before: Wed 13 Aug 2025 09:37:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 154138 IP address blocks: 175.100.172.0/23 maxlen: 24 2402:22a0::/44 maxlen: 44 2402:22a0::/48 maxlen: 48 2402:22a0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55742 (0xd9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Aug 13 09:37:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c51d-c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:08:be:81:3a:98:ad:df:0d:50:43:31:aa: 8e:8a:09:12:83:96:8e:cc:ff:b3:9a:88:26:41:b2: 88:13:ba:54:f8:db:a2:4f:c6:3d:d4:36:64:cf:40: bd:b4:ed:d2:ce:10:ec:05:4d:e6:52:37:13:bb:33: 87:58:89:58:35:27:25:7a:c6:41:83:d7:c4:4c:e4: 2b:c9:88:01:1a:8e:af:dd:96:00:5c:f3:df:3c:6a: 76:cb:d8:90:04:13:65:f6:13:26:58:d5:55:46:0c: 4a:77:e5:71:41:fe:fa:b9:02:6e:b8:6f:c9:23:96: 05:8e:99:a7:74:a0:6d:a8:8b:8a:3b:26:2a:f8:ac: 22:ae:1a:5d:ad:f0:1a:c0:11:e5:3f:11:3d:8f:86: 93:46:c4:13:a5:90:e6:ac:e7:d4:7c:f7:a9:a4:2f: 28:d0:e6:20:81:ed:7d:cc:15:cf:6b:d2:68:82:be: 67:80:09:0e:2b:95:1a:3a:18:11:85:a6:40:5b:52: 3f:3f:15:7a:8d:73:25:5d:b9:5a:b6:c6:e9:f1:98: 62:0c:18:7e:c8:d0:b2:f6:4f:36:de:9f:58:26:7c: 51:de:77:9c:08:49:4f:87:b1:ec:68:47:3f:37:0c: f0:c7:5a:aa:29:8f:f9:59:df:00:22:6a:6a:2a:41: 26:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:46:58:48:B4:A6:BF:85:36:BE:34:E5:5C:98:80:D3:D4:7C:5F:28 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB22834E782611F0A6A2FB3BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 175.100.172.0/23 IPv6: 2402:22a0::/44 Signature Algorithm: sha256WithRSAEncryption b8:65:40:ed:e4:c1:fc:6d:1c:8f:5a:aa:65:1c:c2:bb:18:89: 31:74:0c:f6:a3:b9:9e:54:eb:ef:f1:6e:fc:a2:fd:10:6d:0e: 5d:48:bd:e6:ff:60:a1:7a:69:0d:e0:46:91:35:3f:8e:69:8f: 5e:b3:f2:63:23:bc:5f:3b:17:41:b5:64:35:6f:68:e1:89:82: 84:b9:6b:10:17:42:ce:b5:f8:a2:ce:e4:be:0b:a5:65:99:c3: 35:40:12:11:4a:29:7a:dc:e6:02:9f:ab:08:59:50:d3:d1:b0: 04:cc:bc:49:f9:4b:53:a5:09:71:e6:59:28:e1:bf:62:79:af: 9c:97:7c:97:61:23:68:9d:25:f7:1c:63:00:e2:85:78:49:86: ac:92:8f:1a:0e:ca:79:69:95:a3:e9:26:f9:d2:21:b0:58:d1: 94:ba:16:bf:88:fd:f5:b0:7f:0a:2e:69:6c:6e:ca:7b:99:80: 7a:c8:fd:b9:98:dd:6e:82:d3:d1:ae:d7:ad:ca:49:ab:ab:e6: da:e4:c7:7f:2f:7e:56:c7:5d:8d:f4:5a:a4:ae:30:71:25:db: 5a:3d:30:14:70:ea:70:63:05:03:d1:46:9e:3e:2a:a2:df:d7: f2:f8:b2:2b:83:5c:e2:c3:86:6c:50:09:74:55:94:f2:3b:9d: bf:e0:d6:10 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDANm+MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDgxMzA5MzcxNloXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM1MWQtYzcwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUHCL6BOpit3w1QQzGqjooJEoOWjsz/s5qIJkGyiBO6VPjbok/GPdQ2ZM9A vbTt0s4Q7AVN5lI3E7szh1iJWDUnJXrGQYPXxEzkK8mIARqOr92WAFzz3zxqdsvY kAQTZfYTJljVVUYMSnflcUH++rkCbrhvySOWBY6Zp3SgbaiLijsmKvisIq4aXa3w GsAR5T8RPY+Gk0bEE6WQ5qzn1Hz3qaQvKNDmIIHtfcwVz2vSaIK+Z4AJDiuVGjoY EYWmQFtSPz8Veo1zJV25WrbG6fGYYgwYfsjQsvZPNt6fWCZ8Ud53nAhJT4ex7GhH PzcM8MdaqimP+VnfACJqaipBJnUCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQLRlhI tKa/hTa+NOVcmIDT1HxfKDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCMjI4MzRF NzgyNjExRjBBNkEyRkIzQkM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAa9krDAPBAIAAjAJAwcEJAIioAAAMA0GCSqGSIb3DQEBCwUAA4IB AQC4ZUDt5MH8bRyPWqplHMK7GIkxdAz2o7meVOvv8W78ov0QbQ5dSL3m/2ChemkN 4EaRNT+OaY9es/JjI7xfOxdBtWQ1b2jhiYKEuWsQF0LOtfiizuS+C6VlmcM1QBIR Sil63OYCn6sIWVDT0bAEzLxJ+UtTpQlx5lko4b9iea+cl3yXYSNonSX3HGMA4oV4 SYasko8aDsp5aZWj6Sb50iGwWNGUuha/iP31sH8KLmlsbsp7mYB6yP25mN1ugtPR rtetykmrq+ba5Md/L35Wx12N9FqkrjBxJdtaPTAUcOpwYwUD0UaePiqi39fy+LIr g1ziw4ZsUAl0VZTyO52/4NYQ -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:16 2026 by rpki-client