$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/A1E831AA623B11F0BEB49510C4F9AE02.roa File: A1E831AA623B11F0BEB49510C4F9AE02.roa (raw, json) Hash identifier: lW7fDVCe8bhLbHVbi9D8490xI/Aio6OMPBNi0xrKgHI= Subject key identifier: 88:AE:E4:A3:08:7E:39:6A:9E:57:02:80:C9:25:E1:6C:9E:32:75:DA Certificate issuer: /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Certificate serial: 02 Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/A1E831AA623B11F0BEB49510C4F9AE02.roa Signing time: Wed 16 Jul 2025 11:54:31 +0000 ROA not before: Wed 16 Jul 2025 11:54:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45773 IP address blocks: 165.101.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744 Validity Not Before: Jul 16 11:54:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=687792f6-24ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:8b:30:b0:68:8c:21:26:9e:cf:30:e2:09: 1b:00:9e:58:0e:32:ac:d6:19:05:d1:f5:eb:ec:2f: 29:59:e7:9c:c8:0a:59:a0:2c:ee:76:91:c4:45:bb: 14:6f:88:44:1f:4c:64:f7:e2:f9:0e:de:a9:b2:76: 8f:f0:d8:fe:9f:41:7b:be:cf:e7:10:1f:be:8c:af: 90:f0:d3:64:70:ec:bf:b0:0d:85:72:17:87:31:07: 50:2d:18:b1:98:4d:10:10:04:dd:c4:95:80:7d:d9: 8c:ff:eb:ca:5e:bf:ca:5f:06:d4:d1:23:53:51:22: 8d:55:70:ed:11:cb:b1:ab:c1:61:cc:1e:36:7f:9b: 2d:cb:4c:9b:5e:6d:2e:6f:3b:75:d0:e1:8f:8e:ed: 48:4d:32:1d:36:cb:ac:de:0f:55:71:8e:ee:92:a0: 57:9a:93:c7:b7:31:6c:45:41:a8:75:c9:49:9d:cd: b5:65:5f:8a:47:77:a4:0e:cd:3a:35:bd:8b:0b:03: 99:a2:3c:09:88:f4:8b:9b:65:16:72:99:6f:14:ce: b8:97:f5:83:be:b5:94:7b:32:c3:8f:03:71:dd:b3: 64:9b:2b:ec:30:c9:dd:ea:c3:02:b4:74:c5:6c:f8: 02:d7:c5:69:1d:42:07:e2:ee:33:2e:09:54:8b:41: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AE:E4:A3:08:7E:39:6A:9E:57:02:80:C9:25:E1:6C:9E:32:75:DA X509v3 Authority Key Identifier: keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/A1E831AA623B11F0BEB49510C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.126.0/23 Signature Algorithm: sha256WithRSAEncryption b4:c2:a1:15:77:03:6d:64:31:9f:c1:8c:ca:30:58:d2:34:c0: 95:eb:52:76:a7:a7:29:ac:e7:50:e2:ba:6f:49:3b:a2:53:78: 96:20:e0:88:23:13:46:7d:53:d9:d4:9f:8c:72:fc:71:bc:55: 01:54:50:30:df:0c:0f:18:b6:29:87:0f:3d:10:27:27:db:3c: 97:5c:6f:0d:44:94:bf:1f:66:3e:07:8e:c0:c4:8a:63:fb:6a: f0:e8:50:c5:9f:47:ac:52:a2:cd:8f:42:b6:cc:1c:ef:36:58: de:25:8f:b1:5b:e6:b6:bc:f2:ff:d0:93:e3:b4:5b:0e:75:02: da:6c:c1:54:51:7f:36:78:6d:39:d3:a8:f1:0f:c5:5c:3c:d3: 69:86:cd:da:47:c2:8c:e6:18:3e:66:96:56:b7:c5:c8:cd:a1: 6f:2f:e1:ca:4a:22:6d:13:d8:07:56:a3:12:08:70:f2:f1:22: 2a:fd:cc:f6:73:be:81:a3:fe:28:65:d5:92:ef:2e:5b:0c:15: be:d7:d7:ce:f2:f1:25:d0:88:b3:8c:87:40:a8:93:c2:47:bd: 79:83:3f:1d:b1:93:75:9b:eb:2b:ba:7e:ce:9f:bb:7f:7d:8e: 82:99:6e:32:4e:6e:d7:31:1e:12:a8:d5:04:03:77:36:62:98: 46:ff:bf:b3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTk1MTExMC8GA1UEBRMoMTVCQjgzNUREQjVGMjhCN0UzRjUxMjg4N0U1N0U5RkUz MTczODc0NDAeFw0yNTA3MTYxMTU0MzFaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Nzc5MmY2LTI0ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNooswsGiMISaezzDiCRsAnlgOMqzWGQXR9evsLylZ55zIClmgLO52kcRFuxRv iEQfTGT34vkO3qmydo/w2P6fQXu+z+cQH76Mr5Dw02Rw7L+wDYVyF4cxB1AtGLGY TRAQBN3ElYB92Yz/68pev8pfBtTRI1NRIo1VcO0Ry7GrwWHMHjZ/my3LTJtebS5v O3XQ4Y+O7UhNMh02y6zeD1Vxju6SoFeak8e3MWxFQah1yUmdzbVlX4pHd6QOzTo1 vYsLA5miPAmI9IubZRZymW8UzriX9YO+tZR7MsOPA3Hds2SbK+wwyd3qwwK0dMVs +ALXxWkdQgfi7jMuCVSLQULrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiK7kowh+ OWqeVwKAySXhbJ4yddowHwYDVR0jBBgwFoAUFbuDXdtfKLfj9RKIflfp/jFzh0Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFOTUxLzUxQkQ3RERBNjIz QTExRjBBN0UyNzYwQkM0RjlBRTAyL0ZidURYZHRmS0xmajlSS0lmbGZwX2pGemgw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmJ1RFhkdGZLTGZqOVJLSWZsZnBfakZ6aDBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTk1MS81MUJEN0REQTYyM0ExMUYwQTdFMjc2MEJDNEY5QUUwMi9BMUU4MzFBQTYy M0IxMUYwQkVCNDk1MTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVlfjANBgkqhkiG9w0BAQsFAAOCAQEAtMKhFXcDbWQxn8GM yjBY0jTAletSdqenKaznUOK6b0k7olN4liDgiCMTRn1T2dSfjHL8cbxVAVRQMN8M Dxi2KYcPPRAnJ9s8l1xvDUSUvx9mPgeOwMSKY/tq8OhQxZ9HrFKizY9Ctswc7zZY 3iWPsVvmtrzy/9CT47RbDnUC2mzBVFF/NnhtOdOo8Q/FXDzTaYbN2kfCjOYYPmaW VrfFyM2hby/hykoibRPYB1ajEghw8vEiKv3M9nO+gaP+KGXVku8uWwwVvtfXzvLx JdCIs4yHQKiTwke9eYM/HbGTdZvrK7p+zp+7f32OgpluMk5u1zEeEqjVBAN3NmKY Rv+/sw== -----END CERTIFICATE-----Generated at Sun Jul 20 22:53:23 2025 by rpki-client