$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/ACFE803469E911F0A7D42F68C4F9AE02.roa File: ACFE803469E911F0A7D42F68C4F9AE02.roa (raw, json) Hash identifier: +DP6MilESaiHYhOyYqOuZcz5QFs57aj6iwKoYbBinoQ= Subject key identifier: 9C:11:8C:C9:83:3E:46:97:3E:1D:8C:81:47:CC:6F:E6:F5:75:D1:50 Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF Certificate serial: 72 Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/ACFE803469E911F0A7D42F68C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:12:40 +0000 ROA not before: Sat 26 Jul 2025 06:28:00 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 154062 IP address blocks: 165.101.216.0/23 maxlen: 23 165.101.216.0/24 maxlen: 24 165.101.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF Validity Not Before: Jul 26 06:28:00 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3e6e8-e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:9b:a8:0a:a3:be:e3:ef:97:45:bd:90:68: c8:56:7b:61:b7:23:53:9a:31:0a:57:d5:59:eb:1b: d7:3e:5e:9d:5b:11:88:33:85:8b:38:b1:c2:d1:e8: ee:bf:9d:bd:b5:22:32:08:38:99:08:0e:73:b9:5a: 7d:3f:f5:5a:1b:af:ad:b9:ac:3e:ea:07:ac:56:95: 25:5e:0d:b1:2b:bc:93:a3:fd:40:32:80:af:f8:e0: 03:ff:e4:20:6b:12:bc:9c:b2:91:73:42:9c:d4:38: 3f:33:85:59:df:e1:c3:11:6b:cb:d2:28:b9:2d:d4: b1:9d:b8:38:f5:72:84:9e:89:78:42:0c:55:c7:90: 33:a0:9a:3f:91:0c:4e:33:7d:9e:71:e5:6b:be:16: a5:30:29:a8:5b:9f:d0:09:4f:aa:2a:2d:cf:df:5f: c6:d9:77:48:5d:dd:b0:b2:ce:33:50:ab:81:cc:43: f0:0d:96:f3:84:3a:7f:65:29:d2:91:ba:21:94:cd: 55:c2:ba:d8:a6:80:fc:d7:30:54:66:b4:4b:91:57: 8d:e6:b9:67:1e:fe:9d:2b:b1:2e:3f:da:24:eb:f0: ca:bc:f8:8f:6e:7a:08:6c:e0:0e:df:a9:7e:36:15: 75:5c:0e:98:af:01:bd:9b:80:2f:aa:f9:53:62:fa: dd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:11:8C:C9:83:3E:46:97:3E:1D:8C:81:47:CC:6F:E6:F5:75:D1:50 X509v3 Authority Key Identifier: keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/ACFE803469E911F0A7D42F68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.216.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:0d:88:40:59:d2:bd:f1:df:1e:2d:a3:77:6b:57:a5:fa:20: 68:0d:b5:f7:f9:99:8c:56:b3:51:76:40:b2:6b:0f:1f:9f:87: 38:de:f7:93:56:2d:91:67:37:50:d3:e0:12:e0:c5:8e:8c:85: bc:c4:62:4c:8a:a2:ed:5e:94:2f:01:81:c8:33:40:29:09:e8: 90:3b:70:07:68:f6:54:9e:1d:9f:58:ba:f9:a5:b9:bd:50:a4: 2e:72:37:ca:46:a7:90:80:e3:45:19:05:5e:54:da:34:03:46: ee:3f:a1:37:18:4e:57:17:49:f4:4b:c9:9b:f7:0f:d9:88:14: 97:e0:43:b4:f8:63:a6:e5:2c:77:1c:2f:64:46:3e:d7:8c:19: e6:d9:bb:15:88:45:52:79:cf:85:f1:48:f4:0f:cc:bf:dd:47: 53:f5:10:06:28:2a:bd:5c:86:03:86:26:5b:e0:fc:47:48:02: f4:3e:9b:73:b0:95:dc:de:63:3f:20:d9:59:22:b3:05:be:ab: f6:e9:97:11:a4:1a:ff:cc:d2:f9:84:bb:f1:eb:82:dc:a5:23: 1d:0b:f9:48:6a:1c:fa:23:89:8f:b0:40:3d:d1:69:c2:ea:d9: 5f:5f:6f:96:a7:fd:5a:76:79:3d:59:39:63:25:1b:60:8b:01: 63:8b:2f:3e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoRDFFQzE5N0JEQjBEOTUxOTM4RDFFRUY1NDk2QTExQUND QTAyODhFRjAeFw0yNTA3MjYwNjI4MDBaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNmU4LWUwYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7pJuoCqO+4++XRb2QaMhWe2G3I1OaMQpX1VnrG9c+Xp1bEYgzhYs4scLR6O6/ nb21IjIIOJkIDnO5Wn0/9Vobr625rD7qB6xWlSVeDbErvJOj/UAygK/44AP/5CBr ErycspFzQpzUOD8zhVnf4cMRa8vSKLkt1LGduDj1coSeiXhCDFXHkDOgmj+RDE4z fZ5x5Wu+FqUwKahbn9AJT6oqLc/fX8bZd0hd3bCyzjNQq4HMQ/ANlvOEOn9lKdKR uiGUzVXCutimgPzXMFRmtEuRV43muWce/p0rsS4/2iTr8Mq8+I9ueghs4A7fqX42 FXVcDpivAb2bgC+q+VNi+t33AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUnBGMyYM+ Rpc+HYyBR8xv5vV10VAwHwYDVR0jBBgwFoAU0ewZe9sNlRk40e71SWoRrMoCiO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzI5NTRENjJBNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyLzBld1plOXNObFJrNDBlNzFTV29Sck1vQ2lP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGV3WmU5c05sUms0MGU3MVNXb1JyTW9DaU84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkRDMC8yOTU0RDYyQTY5RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9BQ0ZFODAzNDY5 RTkxMUYwQTdENDJGNjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGlZdgwDQYJKoZIhvcNAQELBQADggEBAAoNiEBZ0r3x3x4to3drV6X6 IGgNtff5mYxWs1F2QLJrDx+fhzje95NWLZFnN1DT4BLgxY6MhbzEYkyKou1elC8B gcgzQCkJ6JA7cAdo9lSeHZ9Yuvmlub1QpC5yN8pGp5CA40UZBV5U2jQDRu4/oTcY TlcXSfRLyZv3D9mIFJfgQ7T4Y6blLHccL2RGPteMGebZuxWIRVJ5z4XxSPQPzL/d R1P1EAYoKr1chgOGJlvg/EdIAvQ+m3OwldzeYz8g2VkiswW+q/bplxGkGv/M0vmE u/HrgtylIx0L+UhqHPojiY+wQD3RacLq2V9fb5an/Vp2eT1ZOWMlG2CLAWOLLz4= -----END CERTIFICATE-----Generated at Mon Mar 2 07:27:55 2026 by rpki-client