$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EFAD391CA64611F1B3D9DBAD5911F970.roa File: EFAD391CA64611F1B3D9DBAD5911F970.roa (raw, json) Hash identifier: iCI/mQNUnDoo1OEHPDo7OGBMXVKn6raZgC6TbG117bc= Subject key identifier: 0C:03:48:AA:85:2C:40:41:7A:BB:FC:AD:AA:3E:71:3E:85:50:45:7F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32C6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EFAD391CA64611F1B3D9DBAD5911F970.roa Signing time: Tue 01 Sep 2026 20:51:42 +0000 ROA not before: Tue 01 Sep 2026 20:51:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135247 IP address blocks: 67.158.52.0/24 maxlen: 24 162.216.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12998 (0x32c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 1 20:51:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a973ade-3437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:dd:6a:c2:4c:be:45:6a:5b:fa:3c:12:55: 8c:bb:91:31:6b:be:7d:59:26:06:ae:81:57:d0:d3: 07:a4:d1:2c:7f:ad:e6:b6:cd:03:cd:59:a2:76:92: 5c:be:9c:fc:f7:e5:55:c6:53:f3:53:dd:98:a9:15: a9:00:00:0e:11:23:d9:f7:d7:1b:36:bd:18:81:18: 10:f5:d1:67:39:3d:46:f4:da:99:43:48:4f:d3:5f: 7c:ec:ac:5a:32:f0:61:08:06:f8:25:b0:a1:6c:a8: 06:e4:b8:90:00:98:92:34:14:73:94:d0:a7:fc:18: e5:60:a6:87:20:61:df:7c:b2:cf:03:34:26:1e:36: f7:dd:31:c3:00:48:45:cd:44:fe:93:30:e4:df:c7: be:8e:88:a3:b8:62:cd:bb:19:27:aa:66:2c:1c:cc: 4a:5b:75:a6:55:6e:b5:ed:94:ed:a5:80:ba:eb:b9: 7d:2c:6e:be:31:e6:2c:15:06:b7:0c:7e:61:13:3b: 18:b2:48:bc:cc:80:52:20:e5:53:a0:d9:79:86:32: c9:21:9e:ea:63:e6:9b:87:c1:64:75:41:3b:19:d7: ff:fb:a1:b2:78:d7:eb:85:98:d7:a9:98:38:77:64: 34:c7:88:95:58:91:3b:60:ce:d2:d9:44:e2:4f:c1: c3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:48:AA:85:2C:40:41:7A:BB:FC:AD:AA:3E:71:3E:85:50:45:7F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EFAD391CA64611F1B3D9DBAD5911F970.roa sbgp-ipAddrBlock: critical IPv4: 67.158.52.0/24 162.216.140.0/22 Signature Algorithm: sha256WithRSAEncryption ba:f0:94:66:88:ac:98:42:ec:7a:25:db:ba:2a:a3:5c:f7:14: 16:ca:45:03:1b:2b:e0:cd:ce:1c:bf:41:35:3d:c5:dc:3b:bf: eb:76:bf:7e:79:12:c2:ae:c0:c2:c7:57:b9:24:a7:6c:ae:3a: 5e:08:02:a4:d8:7f:24:a5:f3:71:17:f0:32:16:11:90:24:7d: 7b:dc:d1:21:3f:2d:bb:65:ac:42:ba:28:6a:7d:4b:39:00:44: d7:97:ab:08:10:0d:5f:e9:f6:b2:01:ed:2e:c7:55:ce:96:06: 06:92:c7:e4:f4:ef:61:10:4d:51:ba:ad:93:eb:88:9c:7e:0f: b1:c9:03:12:ac:3a:cd:2e:b9:b4:29:96:10:32:12:f0:cd:af: 02:e0:02:85:f3:37:e5:76:77:ad:d8:02:52:09:ff:55:12:93: 3b:d2:fe:b1:6b:6d:a9:64:b2:29:53:a4:23:7a:05:36:9c:9a: 5c:89:e8:fb:12:81:a4:a9:f1:1b:93:f5:8a:d4:8c:18:71:eb: c2:c8:f4:5d:d0:ec:bd:bd:51:8f:21:f8:c7:8c:53:3d:60:3e: d4:e4:aa:a0:0c:5b:55:b7:6d:e5:58:ab:aa:26:5a:cb:bd:09: df:78:5e:79:be:8d:0c:2c:5f:29:d4:39:1a:db:20:0e:c6:95: f6:bc:22:1d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICMsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwOTAxMjA1MTQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk3M2FkZS0zNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9jdasJMvkVqW/o8ElWMu5Exa759WSYGroFX0NMHpNEsf63mts0DzVmidpJc vpz89+VVxlPzU92YqRWpAAAOESPZ99cbNr0YgRgQ9dFnOT1G9NqZQ0hP01987Kxa MvBhCAb4JbChbKgG5LiQAJiSNBRzlNCn/BjlYKaHIGHffLLPAzQmHjb33THDAEhF zUT+kzDk38e+joijuGLNuxknqmYsHMxKW3WmVW617ZTtpYC667l9LG6+MeYsFQa3 DH5hEzsYski8zIBSIOVToNl5hjLJIZ7qY+abh8FkdUE7Gdf/+6GyeNfrhZjXqZg4 d2Q0x4iVWJE7YM7S2UTiT8HD/QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAwDSKqF LEBBerv8rao+cT6FUEV/MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUZBRDM5MUNB NjQ2MTFGMUIzRDlEQkFENTkxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAQ540AwQCotiMMA0GCSqGSIb3DQEBCwUAA4IBAQC68JRmiKyYQux6 Jdu6KqNc9xQWykUDGyvgzc4cv0E1PcXcO7/rdr9+eRLCrsDCx1e5JKdsrjpeCAKk 2H8kpfNxF/AyFhGQJH173NEhPy27ZaxCuihqfUs5AETXl6sIEA1f6fayAe0ux1XO lgYGksfk9O9hEE1Ruq2T64icfg+xyQMSrDrNLrm0KZYQMhLwza8C4AKF8zfldnet 2AJSCf9VEpM70v6xa22pZLIpU6QjegU2nJpciej7EoGkqfEbk/WK1IwYcevCyPRd 0Oy9vVGPIfjHjFM9YD7U5KqgDFtVt23lWKuqJlrLvQnfeF55vo0MLF8p1Dka2yAO xpX2vCId -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:32 2026 by rpki-client