$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa File: B341065EBDDE11EA9977C550C4F9AE02.roa (raw, json) Hash identifier: Fy3myfGRRVEKsXRjb+5k2tkiJwg00aSoDznxHLPo8pE= Subject key identifier: D8:42:F1:86:DC:93:EB:6A:EE:90:F0:D4:31:D3:57:BE:1D:C8:82:38 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32B5 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa Signing time: Thu 27 Aug 2026 07:20:03 +0000 ROA not before: Thu 27 Aug 2026 07:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55824 IP address blocks: 144.16.112.0/24 maxlen: 24 157.15.12.0/23 maxlen: 24 157.15.158.0/24 maxlen: 24 158.144.12.0/24 maxlen: 24 158.144.15.0/24 maxlen: 24 158.144.18.0/24 maxlen: 24 158.144.182.0/24 maxlen: 24 158.144.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12981 (0x32b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 27 07:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a8fe523-64c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cc:04:44:6f:b8:5f:ed:4f:a5:9c:6f:ac:0a: 80:9d:cc:93:7a:63:29:d5:df:3a:1a:c9:55:17:11: a0:03:0b:ce:21:63:63:c4:2d:84:32:c4:b0:56:bd: 7a:31:3a:c7:a2:d6:8f:aa:ac:af:14:db:fd:1e:28: 44:70:be:54:db:9f:43:1a:ab:78:c5:b9:c5:c2:43: 4b:68:70:f8:6f:c8:3b:80:0e:39:a0:7a:c7:f1:ed: 3d:72:3d:1b:da:23:c4:bb:a9:01:3c:d0:e4:bc:15: 67:d2:b1:3e:32:6b:93:4f:05:22:35:ea:bd:8b:29: d0:6a:be:f0:82:9b:2b:4b:80:d8:fd:35:b4:52:f3: f1:b6:a7:9d:b1:75:c8:8e:c7:1e:82:51:47:74:e8: be:c1:8f:c9:39:26:bb:74:77:c3:09:4a:a1:cb:93: c0:fc:5f:ef:95:c5:30:73:f3:7c:84:09:55:ed:63: 1f:f9:5d:1e:68:89:97:b8:e3:f3:13:54:f2:74:af: 9c:e3:02:ad:b8:c5:0c:3a:9c:0c:34:2b:2d:2a:4d: 0e:57:3e:b4:bf:79:25:59:01:d1:07:50:c1:fd:70: 39:2b:63:dc:4e:22:54:c2:df:7d:6e:cc:0c:c8:fa: 85:15:c6:fe:d3:1a:67:6d:43:e1:04:51:be:e5:2a: 5c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:F1:86:DC:93:EB:6A:EE:90:F0:D4:31:D3:57:BE:1D:C8:82:38 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.16.112.0/24 157.15.12.0/23 157.15.158.0/24 158.144.12.0/24 158.144.15.0/24 158.144.18.0/24 158.144.182.0/24 158.144.186.0/23 Signature Algorithm: sha256WithRSAEncryption 70:2f:15:f4:e4:58:65:53:85:f4:fd:5d:2d:9b:bb:06:cb:e2: f9:f5:b6:3a:c1:b2:ed:bb:02:50:d4:db:07:da:6b:5c:28:b4: af:d7:45:f0:51:c3:14:c9:40:0c:3f:2d:79:eb:19:58:8e:5c: 86:d6:62:57:85:05:18:27:1c:a2:2d:5d:ee:66:5d:9a:9f:c4: 62:7f:fc:7b:f6:b7:77:a5:55:17:ec:18:e9:e7:97:59:51:99: ad:22:29:2f:9d:c0:49:c4:ad:0c:3c:b4:5c:f6:c5:b4:c7:e3: 12:3d:e7:92:39:cb:42:0b:64:91:50:1b:5b:0f:1e:5c:6b:20: 8e:a9:c6:3e:e6:f5:b7:58:83:12:5c:36:d6:2b:7d:14:1e:4b: 66:9d:be:c5:bf:1e:0d:71:e6:a1:16:8c:72:68:40:29:8e:7e: 40:e8:cd:1c:39:14:e4:4c:af:4d:5e:f2:4d:88:d5:c0:2e:31: da:74:8f:3f:f2:a4:ba:67:9b:59:a6:0e:00:43:c5:6f:e9:20: 69:99:90:d5:0a:a3:eb:81:47:43:b5:ca:0e:35:b1:c6:2c:38: 45:e1:79:86:f6:37:ce:2c:46:d7:5d:c4:bd:ed:d3:c6:65:b0: c4:aa:c7:1e:67:d2:3f:83:bd:39:e6:26:21:c1:92:e4:83:1b: d9:8c:52:13 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICMrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwODI3MDcyMDAzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmZTUyMy02NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMwERG+4X+1PpZxvrAqAncyTemMp1d86GslVFxGgAwvOIWNjxC2EMsSwVr16 MTrHotaPqqyvFNv9HihEcL5U259DGqt4xbnFwkNLaHD4b8g7gA45oHrH8e09cj0b 2iPEu6kBPNDkvBVn0rE+MmuTTwUiNeq9iynQar7wgpsrS4DY/TW0UvPxtqedsXXI jsceglFHdOi+wY/JOSa7dHfDCUqhy5PA/F/vlcUwc/N8hAlV7WMf+V0eaImXuOPz E1TydK+c4wKtuMUMOpwMNCstKk0OVz60v3klWQHRB1DB/XA5K2PcTiJUwt99bswM yPqFFcb+0xpnbUPhBFG+5SpcAwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNhC8Ybc k+tq7pDw1DHTV74dyII4MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjM0MTA2NUVC RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQAkBBwAwQBnQ8MAwQAnQ+eAwQAnpAMAwQAnpAPAwQAnpASAwQAnpC2 AwQBnpC6MA0GCSqGSIb3DQEBCwUAA4IBAQBwLxX05FhlU4X0/V0tm7sGy+L59bY6 wbLtuwJQ1NsH2mtcKLSv10XwUcMUyUAMPy156xlYjlyG1mJXhQUYJxyiLV3uZl2a n8Rif/x79rd3pVUX7Bjp55dZUZmtIikvncBJxK0MPLRc9sW0x+MSPeeSOctCC2SR UBtbDx5cayCOqcY+5vW3WIMSXDbWK30UHktmnb7Fvx4NceahFoxyaEApjn5A6M0c ORTkTK9NXvJNiNXALjHadI8/8qS6Z5tZpg4AQ8Vv6SBpmZDVCqPrgUdDtcoONbHG LDhF4XmG9jfOLEbXXcS97dPGZbDEqsceZ9I/g7055iYhwZLkgxvZjFIT -----END CERTIFICATE-----Generated at Sat Sep 5 05:32:11 2026 by rpki-client