$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/2518C04062E011F08D04F42EC4F9AE02.roa File: 2518C04062E011F08D04F42EC4F9AE02.roa (raw, json) Hash identifier: rrBoaZeZAYohnofQuu333DPGl97BqUXv9lxtd9Vptcg= Subject key identifier: 8B:3B:19:9D:72:5E:5F:61:B4:27:2E:72:A0:13:44:90:57:33:89:40 Certificate issuer: /CN=A919CE1D/serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Certificate serial: 76 Authority key identifier: 36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/2518C04062E011F08D04F42EC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:11:38 +0000 ROA not before: Thu 17 Jul 2025 07:32:08 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 141433 IP address blocks: 165.101.214.0/23 maxlen: 23 165.101.214.0/24 maxlen: 24 165.101.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CE1D, serialNumber=36622F9900B46AADFCD05464F10D42B130625176 Validity Not Before: Jul 17 07:32:08 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3e6aa-c340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6e:62:64:b8:71:92:3d:90:5d:69:82:18:cd: eb:24:2e:bf:81:80:e8:7c:a6:4c:03:3a:3f:2d:ec: 3e:bd:45:00:4e:ac:74:a0:82:70:df:10:18:11:40: d4:81:2f:4e:e4:c6:97:a3:dc:e7:26:65:7c:88:a6: d3:cc:67:79:a9:20:42:28:94:23:0c:07:f7:e1:6a: f4:5b:7a:56:21:6d:36:fb:35:09:91:7b:d1:d2:34: 03:2f:13:cb:b8:b4:95:f4:51:89:b2:b5:0b:14:2e: 9d:ad:92:62:6c:37:d9:a1:e3:d9:b7:a9:40:53:c8: 21:48:96:39:3f:f1:80:88:c3:eb:68:07:da:41:05: 1b:ff:62:9c:dd:bd:31:e9:39:4c:7a:59:28:12:47: d9:57:51:8d:98:59:16:c5:cd:28:28:13:de:2f:5b: a3:27:9e:23:76:c2:a9:13:a3:c0:d3:ec:06:0f:c5: 90:a2:01:fc:2a:40:16:aa:de:d1:8a:29:71:a6:99: 4f:4b:36:d9:63:3f:84:94:6f:d2:38:b0:44:d3:db: 6c:db:5e:39:52:0e:05:90:b1:f5:06:d5:c9:4c:a1: 93:7f:0b:ba:15:61:08:95:ba:e5:77:78:c7:fc:af: b0:87:a8:4a:65:db:a3:a3:ef:c7:cc:ac:c9:f8:a7: f0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:19:9D:72:5E:5F:61:B4:27:2E:72:A0:13:44:90:57:33:89:40 X509v3 Authority Key Identifier: keyid:36:62:2F:99:00:B4:6A:AD:FC:D0:54:64:F1:0D:42:B1:30:62:51:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/NmIvmQC0aq380FRk8Q1CsTBiUXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NmIvmQC0aq380FRk8Q1CsTBiUXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/B548DBE262DF11F0A1E37E0EC4F9AE02/2518C04062E011F08D04F42EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.214.0/23 Signature Algorithm: sha256WithRSAEncryption 42:53:ce:58:1c:b6:94:ca:18:40:55:01:fe:22:1c:3b:6f:18: ed:ec:0d:8c:f2:0a:ae:b1:8d:47:1b:f4:a7:8a:90:50:81:59: 97:fa:a3:d2:67:39:84:da:6f:46:a0:81:54:23:55:9a:1e:d3: 31:97:5c:bc:dd:83:a5:52:9f:e2:e5:66:25:89:e9:17:da:9d: 87:5e:8b:92:19:ff:e6:38:1e:88:45:82:c2:71:6e:8c:72:9e: a7:d9:60:1c:a9:e4:d4:a1:a5:3e:7b:65:84:2e:2e:49:a1:ef: 09:bf:2e:b4:b0:14:e5:26:dd:e4:bb:71:8c:7d:a4:ce:c1:b7: eb:a6:26:0f:d3:fa:07:0b:30:92:ce:25:e0:fc:0b:cb:43:a3: 98:fb:92:05:00:f4:d6:d2:33:19:a8:a3:2a:b6:3a:99:b4:77: 1e:ca:9b:f9:41:f7:81:1e:99:41:be:9b:fb:73:ee:0d:21:0c: 07:7f:ec:e0:64:67:11:b4:aa:16:8a:fc:de:c4:96:d4:24:75: f5:fd:3b:cb:6c:d6:d9:7c:c6:60:01:d1:e8:e1:ed:f2:d7:a9: 70:5f:78:00:dc:da:d6:5c:0f:9b:56:0b:36:5a:9e:81:df:34: eb:ff:af:3d:25:0e:da:06:5f:31:c7:c0:58:75:9d:20:b7:f5: 96:7e:a5:7f -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Q0UxRDExMC8GA1UEBRMoMzY2MjJGOTkwMEI0NkFBREZDRDA1NDY0RjEwRDQyQjEz MDYyNTE3NjAeFw0yNTA3MTcwNzMyMDhaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNmFhLWMzNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5bmJkuHGSPZBdaYIYzeskLr+BgOh8pkwDOj8t7D69RQBOrHSggnDfEBgRQNSB L07kxpej3OcmZXyIptPMZ3mpIEIolCMMB/fhavRbelYhbTb7NQmRe9HSNAMvE8u4 tJX0UYmytQsULp2tkmJsN9mh49m3qUBTyCFIljk/8YCIw+toB9pBBRv/YpzdvTHp OUx6WSgSR9lXUY2YWRbFzSgoE94vW6MnniN2wqkTo8DT7AYPxZCiAfwqQBaq3tGK KXGmmU9LNtljP4SUb9I4sETT22zbXjlSDgWQsfUG1clMoZN/C7oVYQiVuuV3eMf8 r7CHqEpl26Oj78fMrMn4p/CbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUizsZnXJe X2G0Jy5yoBNEkFcziUAwHwYDVR0jBBgwFoAUNmIvmQC0aq380FRk8Q1CsTBiUXYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDRTFEL0I1NDhEQkUyNjJE RjExRjBBMUUzN0UwRUM0RjlBRTAyL05tSXZtUUMwYXEzODBGUms4UTFDc1RCaVVY WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTm1Jdm1RQzBhcTM4MEZSazhRMUNzVEJpVVhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0UxRC9CNTQ4REJFMjYyREYxMUYwQTFFMzdFMEVDNEY5QUUwMi8yNTE4QzA0MDYy RTAxMUYwOEQwNEY0MkVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGlZdYwDQYJKoZIhvcNAQELBQADggEBAEJTzlgctpTKGEBVAf4iHDtv GO3sDYzyCq6xjUcb9KeKkFCBWZf6o9JnOYTab0aggVQjVZoe0zGXXLzdg6VSn+Ll ZiWJ6RfanYdei5IZ/+Y4HohFgsJxboxynqfZYByp5NShpT57ZYQuLkmh7wm/LrSw FOUm3eS7cYx9pM7Bt+umJg/T+gcLMJLOJeD8C8tDo5j7kgUA9NbSMxmooyq2Opm0 dx7Km/lB94EemUG+m/tz7g0hDAd/7OBkZxG0qhaK/N7EltQkdfX9O8ts1tl8xmAB 0ejh7fLXqXBfeADc2tZcD5tWCzZanoHfNOv/rz0lDtoGXzHHwFh1nSC39ZZ+pX8= -----END CERTIFICATE-----Generated at Mon Mar 2 23:24:02 2026 by rpki-client