$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: eMoNWFAjlk42wYo90tOjaYJfYKyeXSPXFsOpwUhELOQ= Subject key identifier: 1D:0F:35:2C:AE:45:82:A9:84:8C:9D:54:0A:68:C4:87:D4:65:6C:A7 Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 01C8 Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:55:55 +0000 ROA not before: Sat 06 Sep 2025 15:49:40 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36007 IP address blocks: 45.130.164.0/24 maxlen: 24 45.130.165.0/24 maxlen: 24 45.130.166.0/24 maxlen: 24 45.130.167.0/24 maxlen: 24 45.151.152.0/24 maxlen: 24 45.151.153.0/24 maxlen: 24 45.151.154.0/24 maxlen: 24 45.151.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 22:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Sep 6 15:49:40 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a40d2b-3feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:74:bf:40:9b:21:ba:9e:a4:92:fd:fb:ec: 92:d6:2b:c5:42:f1:c6:3b:c4:2c:27:1f:1e:12:8a: 01:c7:ca:e8:53:82:15:43:d8:de:91:7b:02:a6:94: a1:8d:1e:5f:94:2e:2a:59:75:b7:4a:4b:89:c6:b3: 2f:28:14:88:2a:18:a3:86:5e:59:2e:60:97:ba:ed: 1d:2d:64:db:90:b9:a5:d8:12:ea:e6:ae:00:90:d6: 6e:6c:ea:58:0f:46:6a:13:7b:68:71:6b:50:63:c9: 06:1d:f8:fb:78:22:4a:13:9d:13:30:71:37:bc:76: 69:6a:c3:d3:19:38:6a:ea:24:a2:b6:e1:14:7a:03: b2:5d:d4:af:d6:2d:89:fb:1f:0f:19:94:33:0d:36: 64:07:0a:c2:83:80:5d:f8:fe:1a:c8:56:d5:af:0e: eb:12:00:88:ba:d3:bc:60:11:cb:cc:cb:f2:84:ff: 89:3b:58:ab:85:bc:a3:d3:0d:33:ea:ac:da:41:c2: 4c:6c:83:eb:c0:a0:2a:85:70:bf:70:67:3f:48:2c: e1:6a:4a:50:8f:a0:9b:ae:9e:29:96:98:45:6e:8c: a5:4e:27:e9:c9:17:76:32:ef:cc:97:cb:01:fa:70: 8e:d6:6a:bb:26:5e:0f:a2:b3:a5:51:60:76:0b:5d: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0F:35:2C:AE:45:82:A9:84:8C:9D:54:0A:68:C4:87:D4:65:6C:A7 X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.130.164.0/22 45.151.152.0/22 Signature Algorithm: sha256WithRSAEncryption 60:ff:f5:56:a7:f6:ea:b2:f2:b4:0d:24:75:31:e9:f2:ba:8e: 07:be:ed:7e:51:2b:af:e4:9e:ed:6f:a8:fb:81:b1:2c:31:2a: f1:11:db:59:2e:ac:14:e4:f8:42:ac:74:f2:09:96:e3:79:a9: 95:76:d0:f5:24:1c:9c:1f:11:9d:9f:ae:d5:68:58:a4:ed:36: 78:15:f6:0f:31:04:4a:e6:b0:de:ee:39:3b:ff:8a:8f:90:ec: a1:35:f0:4d:bd:e9:3b:ca:46:30:6e:39:9b:8a:ee:36:c3:a8: 52:98:2c:41:4e:f2:05:b4:32:43:11:d1:e5:8b:6e:ff:82:7a: 89:0c:db:25:69:37:ba:b1:7e:fd:41:42:e3:74:bb:8e:d4:6d: 25:c4:12:7b:a7:f9:ae:63:65:62:f6:2b:89:8e:4f:c9:1c:22: 14:3a:da:e1:7d:db:0a:6b:5e:4d:01:40:be:57:70:33:85:bd: 2f:20:a6:4b:9f:ca:43:29:1d:45:48:da:24:3b:fc:96:aa:89: b5:31:3f:51:79:0c:7b:0e:49:81:48:58:f4:9b:96:1d:08:8b: 18:89:45:fe:db:de:fa:20:83:d2:92:aa:a1:d7:29:67:78:1f: 65:98:d4:70:f9:98:51:8a:b0:9f:61:bb:4f:37:dd:74:f6:34: f8:e9:0f:46 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjUwOTA2MTU0OTQwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGQyYi0zZmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpt0v0CbIbqepJL9++yS1ivFQvHGO8QsJx8eEooBx8roU4IVQ9jekXsCppSh jR5flC4qWXW3SkuJxrMvKBSIKhijhl5ZLmCXuu0dLWTbkLml2BLq5q4AkNZubOpY D0ZqE3tocWtQY8kGHfj7eCJKE50TMHE3vHZpasPTGThq6iSituEUegOyXdSv1i2J +x8PGZQzDTZkBwrCg4Bd+P4ayFbVrw7rEgCIutO8YBHLzMvyhP+JO1irhbyj0w0z 6qzaQcJMbIPrwKAqhXC/cGc/SCzhakpQj6Cbrp4plphFboylTifpyRd2Mu/Ml8sB +nCO1mq7Jl4PorOlUWB2C12W5QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB0PNSyu RYKphIydVApoxIfUZWynMB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMUU0QUJDOEM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLYKkAwQCLZeYMA0GCSqGSIb3DQEBCwUAA4IBAQBg//VWp/bqsvK0 DSR1Menyuo4Hvu1+USuv5J7tb6j7gbEsMSrxEdtZLqwU5PhCrHTyCZbjeamVdtD1 JBycHxGdn67VaFik7TZ4FfYPMQRK5rDe7jk7/4qPkOyhNfBNvek7ykYwbjmbiu42 w6hSmCxBTvIFtDJDEdHli27/gnqJDNslaTe6sX79QULjdLuO1G0lxBJ7p/muY2Vi 9iuJjk/JHCIUOtrhfdsKa15NAUC+V3Azhb0vIKZLn8pDKR1FSNokO/yWqom1MT9R eQx7DkmBSFj0m5YdCIsYiUX+2976IIPSkqqh1ylneB9lmNRw+ZhRirCfYbtPN910 9jT46Q9G -----END CERTIFICATE-----Generated at Fri Mar 13 08:43:45 2026 by rpki-client