$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DCF86DE0A64711F18E5B194E5A11F970.roa File: DCF86DE0A64711F18E5B194E5A11F970.roa (raw, json) Hash identifier: hOhmpNN0ivxyX81/wXZ+1mbFZ6jBmITCB0SLwkMjPg8= Subject key identifier: 00:11:FA:1F:C6:47:21:7D:B4:B5:88:96:D0:00:75:28:B3:A1:A3:82 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32C8 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DCF86DE0A64711F18E5B194E5A11F970.roa Signing time: Tue 01 Sep 2026 20:58:21 +0000 ROA not before: Tue 01 Sep 2026 20:58:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154688 IP address blocks: 162.4.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13000 (0x32c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 1 20:58:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a973c6c-fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:0c:38:0d:91:09:ab:9f:b9:2f:d2:e5:e6: 49:3b:20:fb:51:5a:0d:f3:16:0e:66:13:69:9c:ca: d0:48:41:30:c2:77:b5:d6:3d:73:4d:cc:ad:3e:8c: b0:bb:cc:b9:fb:48:9e:ba:a4:d2:88:2a:11:0e:c4: 19:b4:84:2e:d6:3b:64:bc:08:83:c1:64:cf:0f:e1: f7:79:75:4d:e1:60:50:00:64:6c:c9:84:64:5f:b4: a2:13:c7:77:8b:14:f2:ad:75:b6:87:9a:b8:df:e4: 69:d8:16:f9:24:9c:9b:6a:9a:07:34:04:1a:44:40: 38:47:e0:aa:bc:89:be:8d:84:cb:3b:7a:21:1c:3f: cd:64:0b:a8:2c:31:18:7b:b8:97:57:4c:cd:8f:c9: 98:aa:3b:a4:3d:c3:ca:5e:85:c4:0a:79:af:54:ba: dd:92:13:c4:91:11:57:3e:76:f4:54:25:e2:f3:41: af:3d:17:66:ea:07:a6:6f:dd:6b:87:e8:0a:4a:e6: 9e:3d:b6:f2:95:31:d2:3d:85:86:20:a1:68:98:70: 16:59:e8:37:72:15:11:6b:f0:ef:54:c2:79:f1:72: 10:2d:4d:d1:9c:91:1c:b0:76:5f:9c:c0:42:65:f8: 5d:7c:08:af:8e:76:0f:1a:4c:8b:ea:8e:83:09:fe: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:FA:1F:C6:47:21:7D:B4:B5:88:96:D0:00:75:28:B3:A1:A3:82 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DCF86DE0A64711F18E5B194E5A11F970.roa sbgp-ipAddrBlock: critical IPv4: 162.4.156.0/23 Signature Algorithm: sha256WithRSAEncryption 12:03:f7:cc:14:83:c0:65:23:c0:69:b7:02:d2:f7:67:d6:5b: 18:09:99:9e:5e:8c:cb:f1:52:22:de:24:dd:2e:44:0a:b3:0a: 0e:dc:bd:ec:31:38:52:7b:45:54:92:25:72:d4:64:d4:57:23: f8:bd:64:37:27:bf:9d:3c:c5:98:95:70:8d:6a:09:8d:93:ad: ef:29:e1:2e:51:a0:74:e3:30:77:b1:4c:55:b3:99:fd:24:73: 07:c5:ee:16:1b:0f:57:13:30:da:18:3e:a0:ab:ef:00:65:6f: ea:46:98:34:1a:1f:3e:46:32:1f:14:77:16:03:aa:a8:fc:43: da:67:ff:f2:f1:6c:1d:aa:b5:aa:d9:27:6b:45:49:cc:4b:d1: 9b:32:54:b4:a6:ef:8b:62:bb:60:9c:be:28:05:47:21:a6:da: 2b:5c:45:f8:85:0f:20:9b:7e:df:59:f5:2c:d5:1f:2c:0f:5b: 77:47:f3:23:4d:ad:7e:22:99:1f:f6:0f:f9:23:81:f0:16:35: ac:44:bf:c0:d4:0c:56:4a:c0:6b:1c:f3:d8:d8:3e:86:bd:64: df:17:b1:59:c2:44:76:94:e8:e5:35:81:ff:26:5a:67:26:e8: 39:8e:c6:bb:75:a7:1c:a0:12:39:1b:f7:5a:fd:3a:74:82:d1: 5f:86:5b:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwOTAxMjA1ODIxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3M2M2Yy1mZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PQMOA2RCaufuS/S5eZJOyD7UVoN8xYOZhNpnMrQSEEwwne11j1zTcytPoyw u8y5+0ieuqTSiCoRDsQZtIQu1jtkvAiDwWTPD+H3eXVN4WBQAGRsyYRkX7SiE8d3 ixTyrXW2h5q43+Rp2Bb5JJybapoHNAQaREA4R+CqvIm+jYTLO3ohHD/NZAuoLDEY e7iXV0zNj8mYqjukPcPKXoXECnmvVLrdkhPEkRFXPnb0VCXi80GvPRdm6gemb91r h+gKSuaePbbylTHSPYWGIKFomHAWWeg3chURa/DvVMJ58XIQLU3RnJEcsHZfnMBC ZfhdfAivjnYPGkyL6o6DCf6ChwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAAR+h/G RyF9tLWIltAAdSizoaOCMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRENGODZERTBB NjQ3MTFGMThFNUIxOTRFNUExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBogScMA0GCSqGSIb3DQEBCwUAA4IBAQASA/fMFIPAZSPAabcC0vdn 1lsYCZmeXozL8VIi3iTdLkQKswoO3L3sMThSe0VUkiVy1GTUVyP4vWQ3J7+dPMWY lXCNagmNk63vKeEuUaB04zB3sUxVs5n9JHMHxe4WGw9XEzDaGD6gq+8AZW/qRpg0 Gh8+RjIfFHcWA6qo/EPaZ//y8WwdqrWq2SdrRUnMS9GbMlS0pu+LYrtgnL4oBUch ptorXEX4hQ8gm37fWfUs1R8sD1t3R/MjTa1+Ipkf9g/5I4HwFjWsRL/A1AxWSsBr HPPY2D6GvWTfF7FZwkR2lOjlNYH/JlpnJug5jsa7daccoBI5G/da/Tp0gtFfhlvZ -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:44 2026 by rpki-client