$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/CD4B9F72A7A311F1BB9A07DE4B11F970.roa File: CD4B9F72A7A311F1BB9A07DE4B11F970.roa (raw, json) Hash identifier: zWIuDWlTYenslwF/guKCoexbagcN5F6gVm8I3tB4OnE= Subject key identifier: 7D:6B:E2:54:71:31:4D:59:7C:E5:32:B5:75:06:88:32:A0:A0:DF:31 Certificate issuer: /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Certificate serial: 010B Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/CD4B9F72A7A311F1BB9A07DE4B11F970.roa Signing time: Thu 03 Sep 2026 14:28:59 +0000 ROA not before: Thu 03 Sep 2026 14:28:59 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 139904 IP address blocks: 165.99.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 06:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4 Validity Not Before: Sep 3 14:28:59 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a99842b-3a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:5a:60:3e:50:32:2a:ed:5d:15:3f:5c:7a: 3a:24:78:6c:90:a4:73:b4:5b:81:84:e5:9c:19:a6: 67:76:1f:87:23:12:16:83:08:ca:ce:05:91:ea:db: f0:88:f0:b7:b5:61:fa:36:6b:09:3a:ff:d1:fd:32: 99:f8:f1:ff:0e:3c:6e:69:e4:7b:7b:b5:b0:12:79: ac:36:b9:28:31:a7:8a:dd:65:40:5a:a2:97:98:e3: ba:e7:51:a0:1f:9d:76:ea:35:c3:5b:30:84:17:b6: 56:01:74:cf:f6:57:43:15:92:16:99:79:b2:ce:30: 9c:52:9c:67:eb:48:3f:40:0d:dc:ed:90:0a:ab:7b: 13:63:9a:6c:d9:36:4f:ee:3c:c1:05:3d:2b:16:f2: 82:48:9a:33:44:ab:c7:0a:63:64:f3:ce:1a:8e:eb: 27:f7:8a:87:97:57:68:19:74:f3:c2:c6:3b:e6:c5: 1b:43:d3:bd:54:1c:dc:eb:5b:28:2d:a7:83:af:b7: ac:3d:0d:0f:03:d4:c0:66:c0:47:20:7a:62:8d:7c: d8:b1:b2:d2:12:c4:da:0c:33:d8:4c:c6:da:a1:ec: 57:fe:49:57:15:7c:8d:b0:d5:e8:83:44:7e:17:8f: 1f:99:f7:76:eb:44:d3:ff:f2:a9:73:07:84:12:9c: 1a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6B:E2:54:71:31:4D:59:7C:E5:32:B5:75:06:88:32:A0:A0:DF:31 X509v3 Authority Key Identifier: keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/CD4B9F72A7A311F1BB9A07DE4B11F970.roa sbgp-ipAddrBlock: critical IPv4: 165.99.218.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0b:a9:0c:5d:0a:dd:68:4d:25:e4:b0:59:22:25:3c:7d:02: 57:ce:f6:29:5a:33:53:d4:51:b8:42:68:08:13:30:d5:b3:ee: 5a:d1:ee:77:66:5e:96:01:a8:e7:8a:0c:4c:30:54:d9:a3:ff: 6f:f0:9e:5d:61:84:61:8c:64:f9:5d:2c:20:c6:cd:a7:20:ef: d2:e4:38:17:47:b2:91:20:94:a1:3a:d6:2c:82:37:5e:db:65: 1f:64:0b:b3:56:1b:08:14:76:a4:0d:87:a4:5d:3f:2a:0c:a3: c1:88:f1:39:08:59:1e:34:a5:44:2a:99:82:59:61:c2:60:ea: 47:e7:7c:0b:ec:e8:c3:20:55:8f:25:a5:14:db:34:0b:c5:e9: e4:46:b3:cb:69:23:54:97:2f:9c:2f:b7:af:f1:13:29:4a:2f: c5:ea:36:1b:ec:fd:2b:c0:77:92:ef:63:b4:6c:d1:d0:d1:b2: d2:d4:28:74:ad:3e:d7:4c:c0:db:08:47:ab:42:3b:7c:98:a0: e7:01:4c:b9:0a:20:29:9f:18:50:20:13:63:cb:ec:da:6b:1c: d5:46:91:3e:a0:04:8e:76:fe:83:4a:43:24:de:3b:a2:bc:21: c0:c5:9e:8c:94:65:e0:7d:28:95:d4:10:43:c0:56:4e:cd:23: 7b:c3:b0:5f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0 MjkxOTU0QjQwHhcNMjYwOTAzMTQyODU5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5ODQyYi0zYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlPBaYD5QMirtXRU/XHo6JHhskKRztFuBhOWcGaZndh+HIxIWgwjKzgWR6tvw iPC3tWH6NmsJOv/R/TKZ+PH/DjxuaeR7e7WwEnmsNrkoMaeK3WVAWqKXmOO651Gg H5126jXDWzCEF7ZWAXTP9ldDFZIWmXmyzjCcUpxn60g/QA3c7ZAKq3sTY5ps2TZP 7jzBBT0rFvKCSJozRKvHCmNk884ajusn94qHl1doGXTzwsY75sUbQ9O9VBzc61so LaeDr7esPQ0PA9TAZsBHIHpijXzYsbLSEsTaDDPYTMbaoexX/klXFXyNsNXog0R+ F48fmfd260TT//KpcweEEpwauwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH1r4lRx MU1ZfOUytXUGiDKgoN8xMB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NURFNkMvNkJDMzc1QjA0M0Q0MTFGMDkwQjQ3NjY4QzRGOUFFMDIvQ0Q0QjlGNzJB N0EzMTFGMUJCOUEwN0RFNEIxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWPaMA0GCSqGSIb3DQEBCwUAA4IBAQBtC6kMXQrdaE0l5LBZIiU8 fQJXzvYpWjNT1FG4QmgIEzDVs+5a0e53Zl6WAajnigxMMFTZo/9v8J5dYYRhjGT5 XSwgxs2nIO/S5DgXR7KRIJShOtYsgjde22UfZAuzVhsIFHakDYekXT8qDKPBiPE5 CFkeNKVEKpmCWWHCYOpH53wL7OjDIFWPJaUU2zQLxenkRrPLaSNUly+cL7ev8RMp Si/F6jYb7P0rwHeS72O0bNHQ0bLS1Ch0rT7XTMDbCEerQjt8mKDnAUy5CiApnxhQ IBNjy+zaaxzVRpE+oASOdv6DSkMk3juivCHAxZ6MlGXgfSiV1BBDwFZOzSN7w7Bf -----END CERTIFICATE-----Generated at Sat Sep 5 16:10:54 2026 by rpki-client