$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/047F7A68A6C811F1ACB287EC4211F970.roa File: 047F7A68A6C811F1ACB287EC4211F970.roa (raw, json) Hash identifier: PhN7z9F7tH0g5wgRBr0tYjGqGpayFbjJwUJxXjy1dU8= Subject key identifier: AB:E7:92:9B:FA:73:83:3E:AA:D9:95:65:8D:AA:FD:A3:54:12:E0:D2 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32DB Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/047F7A68A6C811F1ACB287EC4211F970.roa Signing time: Wed 02 Sep 2026 16:03:34 +0000 ROA not before: Wed 02 Sep 2026 16:03:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151734 IP address blocks: 138.252.200.0/23 maxlen: 24 157.15.202.0/23 maxlen: 24 157.20.211.0/24 maxlen: 24 160.22.108.0/23 maxlen: 24 168.220.234.0/24 maxlen: 24 168.220.237.0/24 maxlen: 24 168.220.245.0/24 maxlen: 24 168.220.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13019 (0x32db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 2 16:03:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a9848d6-879b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4a:bc:b1:ea:8a:48:7a:f9:1a:44:aa:2c:2c: a5:20:ea:f6:2f:76:d2:81:41:6d:ae:e8:cb:36:73: bf:5c:b1:74:c2:46:f2:94:e0:56:d2:dc:19:42:16: 38:fa:ce:36:14:9b:c2:3c:f8:f0:c3:18:b4:0f:a2: 17:9a:36:f0:59:00:8b:0d:0c:47:4f:c6:9c:cc:a7: c4:f9:2a:ab:83:1c:ee:aa:db:44:18:18:fa:7b:8f: bc:3c:50:2d:4b:cd:1f:b7:c9:59:7b:59:2f:a2:77: 18:83:75:53:70:54:b0:71:46:a3:11:dc:f4:ef:0e: 03:02:78:da:81:3a:88:ee:8c:9c:84:a7:5a:21:af: 76:72:0d:de:cb:24:70:84:66:d9:94:45:56:88:36: 2c:ec:b4:75:0d:52:20:91:91:33:cb:37:49:80:1f: c5:7a:34:a0:e7:af:f1:10:68:3a:17:a9:54:34:c8: 34:28:b5:1e:a7:44:6a:0e:36:34:49:06:e2:c2:7e: db:e3:9c:f3:2d:85:e7:83:c5:7b:18:30:c8:94:f6: 93:41:f3:ac:6b:67:85:48:7b:07:16:fe:9c:c8:c7: c6:c6:b3:8b:6d:9d:a5:83:58:dc:03:fe:d8:b7:95: 5c:55:5d:74:77:48:e5:44:9a:d1:72:99:4d:b8:20: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:92:9B:FA:73:83:3E:AA:D9:95:65:8D:AA:FD:A3:54:12:E0:D2 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/047F7A68A6C811F1ACB287EC4211F970.roa sbgp-ipAddrBlock: critical IPv4: 138.252.200.0/23 157.15.202.0/23 157.20.211.0/24 160.22.108.0/23 168.220.234.0/24 168.220.237.0/24 168.220.245.0/24 168.220.248.0/24 Signature Algorithm: sha256WithRSAEncryption 16:6b:6a:e9:a9:c9:fc:48:0a:d5:b9:1a:d6:26:07:b5:a1:4e: 2b:66:8e:67:81:a0:0f:1f:a0:f4:da:92:ab:9c:99:f1:2c:e7: 29:48:f8:42:6a:26:57:72:29:50:9f:d6:96:3b:9e:ed:4c:d5: a5:8e:25:17:72:ab:28:bd:71:51:ef:07:d3:d1:df:0c:42:a6: b8:74:3e:d9:1f:03:49:a0:c8:81:a1:dd:af:c4:6f:df:ae:cc: 82:76:14:e1:ab:38:23:21:4d:49:d1:f2:ce:3f:85:c7:01:96: 30:ca:0a:a8:f6:d2:24:ac:7f:ee:fe:6c:6d:87:e3:f7:af:aa: 64:73:0f:af:87:cb:b3:11:83:e7:a8:ca:ad:65:4d:c9:00:5b: a1:1b:5a:5f:e7:24:9b:20:44:23:94:70:3d:28:13:4b:04:b6: 91:a0:e0:a1:bc:45:cc:9f:db:c1:3e:1e:8a:ef:a8:a3:f3:06: 27:77:24:83:86:ac:4e:80:ef:2f:2e:8f:fc:15:7b:a1:c2:f5: ca:4b:85:78:bc:b4:63:55:39:34:d9:38:67:18:8f:aa:72:3f: 42:fe:4c:a5:fe:28:1a:3d:26:d8:dc:47:ee:91:b7:8e:30:49: cf:80:71:6d:47:ae:72:16:91:22:8f:8c:47:0e:92:fc:19:10: c6:65:ac:43 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICMtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwOTAyMTYwMzM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4NDhkNi04NzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Uq8seqKSHr5GkSqLCylIOr2L3bSgUFtrujLNnO/XLF0wkbylOBW0twZQhY4 +s42FJvCPPjwwxi0D6IXmjbwWQCLDQxHT8aczKfE+SqrgxzuqttEGBj6e4+8PFAt S80ft8lZe1kvoncYg3VTcFSwcUajEdz07w4DAnjagTqI7oychKdaIa92cg3eyyRw hGbZlEVWiDYs7LR1DVIgkZEzyzdJgB/FejSg56/xEGg6F6lUNMg0KLUep0RqDjY0 SQbiwn7b45zzLYXng8V7GDDIlPaTQfOsa2eFSHsHFv6cyMfGxrOLbZ2lg1jcA/7Y t5VcVV10d0jlRJrRcplNuCA25QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFKvnkpv6 c4M+qtmVZY2q/aNUEuDSMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDQ3RjdBNjhB NkM4MTFGMUFDQjI4N0VDNDIxMUY5NzAucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQBivzIAwQBnQ/KAwQAnRTTAwQBoBZsAwQAqNzqAwQAqNztAwQAqNz1 AwQAqNz4MA0GCSqGSIb3DQEBCwUAA4IBAQAWa2rpqcn8SArVuRrWJge1oU4rZo5n gaAPH6D02pKrnJnxLOcpSPhCaiZXcilQn9aWO57tTNWljiUXcqsovXFR7wfT0d8M Qqa4dD7ZHwNJoMiBod2vxG/frsyCdhThqzgjIU1J0fLOP4XHAZYwygqo9tIkrH/u /mxth+P3r6pkcw+vh8uzEYPnqMqtZU3JAFuhG1pf5ySbIEQjlHA9KBNLBLaRoOCh vEXMn9vBPh6K76ij8wYndySDhqxOgO8vLo/8FXuhwvXKS4V4vLRjVTk02ThnGI+q cj9C/kyl/igaPSbY3EfukbeOMEnPgHFtR65yFpEij4xHDpL8GRDGZaxD -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:34 2026 by rpki-client