$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/ACFE803469E911F0A7D42F68C4F9AE02.roa File: ACFE803469E911F0A7D42F68C4F9AE02.roa (raw, json) Hash identifier: 7U1ooFwrB/LJ/dMkaCl0Dxvjr9/wpWqYBD503j+PR1E= Subject key identifier: 07:34:32:47:19:99:AA:AC:B4:DE:19:0C:B8:EF:D8:56:E1:C9:76:6D Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF Certificate serial: D0 Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/ACFE803469E911F0A7D42F68C4F9AE02.roa Signing time: Thu 27 Aug 2026 06:58:10 +0000 ROA not before: Thu 27 Aug 2026 06:58:10 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 154062 IP address blocks: 165.101.216.0/23 maxlen: 23 165.101.216.0/24 maxlen: 24 165.101.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF Validity Not Before: Aug 27 06:58:10 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a8fe002-c09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:6b:80:75:31:b4:0f:4e:ce:28:df:51:1c: 2c:e1:4a:2b:cc:d5:41:a5:9b:56:a3:8f:20:f4:de: c0:fc:8a:4c:4c:e2:5f:ae:a5:19:b5:32:e1:45:54: e7:71:12:02:54:b1:86:67:a2:8b:4f:ac:e9:6f:89: 1e:b7:b1:a7:17:28:0a:e6:94:75:f7:ce:1e:54:fc: d9:05:92:d5:0f:8b:60:dc:04:d7:de:34:b2:03:d3: f0:e6:5c:7b:e7:68:d8:ae:1c:06:43:a4:e9:7d:6d: 79:b5:cc:10:88:af:9d:c3:29:d4:ea:95:11:59:2d: 79:61:54:1f:98:a3:51:c3:c2:94:a7:ec:97:e3:c2: 0c:c3:4e:31:21:7b:35:2d:dd:1b:10:33:ab:10:73: e1:60:b9:c8:53:f9:ee:cc:0a:d4:83:d7:bc:ac:42: fc:52:ec:f6:73:17:75:a3:5f:ab:0d:f0:ff:4d:44: a3:16:d9:cd:6c:76:2e:86:2a:a9:ac:c1:bf:9f:4b: 52:5b:b6:df:9a:eb:c8:eb:bb:bd:5f:58:2e:00:84: 3b:aa:9e:b5:67:2d:0b:02:05:1e:54:42:a6:1b:b8: 75:dd:f2:55:3a:e9:9b:b0:8a:32:89:24:61:ad:8d: 0d:b5:d6:8a:06:17:7f:cd:64:32:d1:f9:be:8a:c5: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:32:47:19:99:AA:AC:B4:DE:19:0C:B8:EF:D8:56:E1:C9:76:6D X509v3 Authority Key Identifier: keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/ACFE803469E911F0A7D42F68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.216.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:f1:7c:6b:56:04:fb:6f:c4:bb:8b:3a:f8:72:21:17:4e:3e: 80:81:99:a1:e7:dd:67:86:d6:b5:46:1a:4b:18:65:4b:c8:f1: 47:d4:45:1a:aa:ad:e0:16:55:12:0f:64:7c:b4:8d:d5:92:0d: fb:56:a5:2b:8d:bf:2b:2f:c5:d5:ca:93:48:76:c1:6f:90:79: 87:78:84:34:c3:13:b8:3e:47:fd:68:eb:10:33:b6:17:6c:82: e3:39:a8:71:32:6c:d8:2a:32:6d:9c:8d:89:ca:3b:1c:94:e8: e3:63:5b:fa:d5:25:47:09:16:ad:c5:01:25:da:20:db:08:90: e4:f7:5b:e0:e1:f9:cc:a7:be:96:d7:5a:20:98:35:5e:a6:de: 55:44:ff:fd:b0:26:26:dc:17:85:5c:f6:90:d4:e1:9d:bd:cb: be:0d:4a:13:81:31:4e:4a:05:da:87:da:01:f9:8e:d2:23:e3: 51:50:f2:ba:a3:3f:6e:92:85:f5:0f:f5:67:59:62:f9:04:d8: f3:6c:b8:ca:21:69:3c:f9:1e:1f:e2:1c:50:8e:0a:a5:95:83: 31:95:22:71:0f:d5:40:6a:cb:1f:f5:b9:45:e1:11:3a:32:4b: a8:b9:40:43:44:23:17:5d:fe:12:c6:91:ae:87:e8:94:04:3b: e1:11:d5:68 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZEQzAxMTAvBgNVBAUTKEQxRUMxOTdCREIwRDk1MTkzOEQxRUVGNTQ5NkExMUFD Q0EwMjg4RUYwHhcNMjYwODI3MDY1ODEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmZTAwMi1jMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/9rgHUxtA9OzijfURws4UorzNVBpZtWo48g9N7A/IpMTOJfrqUZtTLhRVTn cRICVLGGZ6KLT6zpb4ket7GnFygK5pR1984eVPzZBZLVD4tg3ATX3jSyA9Pw5lx7 52jYrhwGQ6TpfW15tcwQiK+dwynU6pURWS15YVQfmKNRw8KUp+yX48IMw04xIXs1 Ld0bEDOrEHPhYLnIU/nuzArUg9e8rEL8Uuz2cxd1o1+rDfD/TUSjFtnNbHYuhiqp rMG/n0tSW7bfmuvI67u9X1guAIQ7qp61Zy0LAgUeVEKmG7h13fJVOumbsIoyiSRh rY0NtdaKBhd/zWQy0fm+isV+TQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAc0MkcZ maqstN4ZDLjv2FbhyXZtMB8GA1UdIwQYMBaAFNHsGXvbDZUZONHu9UlqEazKAojv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkRDMC8yOTU0RDYyQTY5 RTkxMUYwODFCNjVCNjdDNEY5QUUwMi8wZXdaZTlzTmxSazQwZTcxU1dvUnJNb0Np TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBld1plOXNObFJrNDBlNzFTV29Sck1vQ2lPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUZEQzAvMjk1NEQ2MkE2OUU5MTFGMDgxQjY1QjY3QzRGOUFFMDIvQUNGRTgwMzQ2 OUU5MTFGMEE3RDQyRjY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWXYMA0GCSqGSIb3DQEBCwUAA4IBAQBq8XxrVgT7b8S7izr4ciEX Tj6AgZmh591nhta1RhpLGGVLyPFH1EUaqq3gFlUSD2R8tI3Vkg37VqUrjb8rL8XV ypNIdsFvkHmHeIQ0wxO4Pkf9aOsQM7YXbILjOahxMmzYKjJtnI2JyjsclOjjY1v6 1SVHCRatxQEl2iDbCJDk91vg4fnMp76W11ogmDVept5VRP/9sCYm3BeFXPaQ1OGd vcu+DUoTgTFOSgXah9oB+Y7SI+NRUPK6oz9ukoX1D/VnWWL5BNjzbLjKIWk8+R4f 4hxQjgqllYMxlSJxD9VAassf9blF4RE6MkuouUBDRCMXXf4SxpGuh+iUBDvhEdVo -----END CERTIFICATE-----Generated at Tue Sep 22 10:51:45 2026 by rpki-client