$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/05CCDC6A4F1511EF9EC25A61C4F9AE02.roa File: 05CCDC6A4F1511EF9EC25A61C4F9AE02.roa (raw, json) Hash identifier: yCJGpLlNZA1sT6BjGa7sPk3aRJ/V+o8wVvGWRi4uO5I= Subject key identifier: 67:05:17:0F:BA:C0:C7:6C:5B:06:D5:58:26:9F:D3:AD:F3:1F:CE:7E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30F0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/05CCDC6A4F1511EF9EC25A61C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:18:18 +0000 ROA not before: Mon 06 Jul 2026 16:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139555 IP address blocks: 157.66.152.0/23 maxlen: 24 160.30.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12528 (0x30f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd54a-b404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:ec:09:37:e1:52:55:ab:e1:85:43:2c:f1: e4:49:9c:2f:38:c6:5b:75:3b:67:2b:cf:bc:d9:e0: c1:e5:73:fc:cc:9b:92:b3:c5:2b:31:4b:00:8e:80: 9b:6a:11:1c:b7:7d:7d:ea:f3:35:6a:b1:99:28:88: 3d:e5:ee:ba:7a:d1:03:e6:62:89:12:79:a4:68:a9: 30:e4:3f:24:af:83:1c:e1:99:a7:97:04:de:e0:db: 96:a0:4f:07:99:29:a8:1c:b3:5d:fb:d0:33:f3:d4: a6:d5:ac:89:76:55:59:81:8c:77:08:7f:ce:56:01: 0f:c5:b3:85:0d:49:ab:ac:b3:a8:e5:dc:a8:66:1e: 40:01:a2:1a:e8:1a:c4:f6:bf:97:d2:74:64:36:f8: bf:f4:84:6d:14:e7:13:d2:d7:aa:b5:ea:66:2d:2a: 2d:b0:da:2b:b5:31:37:23:2f:4d:47:7e:54:e2:88: ec:34:41:ae:65:3c:99:ce:f7:33:4c:69:de:35:e1: 0f:17:26:02:b3:69:22:e2:c0:e1:52:41:77:ac:23: 71:40:3d:e9:b8:54:46:71:37:99:a8:aa:f3:d5:34: be:37:6b:49:f2:f4:d6:fa:5f:61:b0:a9:ab:ec:3c: 5c:76:6d:58:5c:8b:83:f3:57:07:f9:20:24:be:36: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:05:17:0F:BA:C0:C7:6C:5B:06:D5:58:26:9F:D3:AD:F3:1F:CE:7E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/05CCDC6A4F1511EF9EC25A61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.152.0/23 160.30.38.0/23 Signature Algorithm: sha256WithRSAEncryption 31:c3:9b:14:99:e5:8f:f9:5b:6e:a4:41:6f:5a:76:cb:72:c4: e7:3e:3f:6b:78:84:43:fe:a1:45:79:75:65:65:ce:9a:80:33: a9:2f:d3:1c:e4:57:51:3a:f7:8d:78:41:ed:78:e2:8e:bc:87: 46:9c:7b:1e:7e:57:02:e0:72:b0:88:7e:c7:3d:ca:5b:be:84: 67:ab:6e:bd:cf:84:9e:24:86:cc:63:6c:d4:2e:a2:e6:97:d5: 55:c7:94:db:98:f5:dd:77:a0:65:fe:e1:c1:04:88:59:80:a6: d6:62:4c:ea:57:8c:fa:e5:b3:09:ac:2d:de:77:cd:25:29:1e: 4a:ba:a2:c0:02:45:97:8a:96:71:50:ff:dc:fe:e0:7d:f2:f2: 40:87:b6:b8:9b:78:0a:92:29:81:71:81:c5:cf:ac:28:b4:39: a7:66:e6:4a:2a:c4:6e:96:e9:d1:b0:39:5e:a4:b3:d0:25:a9: 49:ca:99:97:3f:4f:cc:ab:30:5c:4e:cb:7a:ba:40:c6:de:83: cb:35:fb:45:d5:cd:47:e3:a6:e5:88:7e:02:9b:a5:b2:01:8d: 62:cb:c9:22:a1:b5:68:dd:c0:29:b0:2d:ed:94:ca:b4:de:21: d1:c9:ef:8b:a6:ca:3f:33:f3:05:bf:c3:3c:53:04:18:fa:5e: 0d:31:0e:1b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICMPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxODE4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDU0YS1iNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqovsCTfhUlWr4YVDLPHkSZwvOMZbdTtnK8+82eDB5XP8zJuSs8UrMUsAjoCb ahEct3196vM1arGZKIg95e66etED5mKJEnmkaKkw5D8kr4Mc4ZmnlwTe4NuWoE8H mSmoHLNd+9Az89Sm1ayJdlVZgYx3CH/OVgEPxbOFDUmrrLOo5dyoZh5AAaIa6BrE 9r+X0nRkNvi/9IRtFOcT0teqtepmLSotsNortTE3Iy9NR35U4ojsNEGuZTyZzvcz TGneNeEPFyYCs2ki4sDhUkF3rCNxQD3puFRGcTeZqKrz1TS+N2tJ8vTW+l9hsKmr 7Dxcdm1YXIuD81cH+SAkvjYt8QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGcFFw+6 wMdsWwbVWCaf063zH85+MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDVDQ0RDNkE0 RjE1MTFFRjlFQzI1QTYxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBnUKYAwQBoB4mMA0GCSqGSIb3DQEBCwUAA4IBAQAxw5sUmeWP+Vtu pEFvWnbLcsTnPj9reIRD/qFFeXVlZc6agDOpL9Mc5FdROveNeEHteOKOvIdGnHse flcC4HKwiH7HPcpbvoRnq269z4SeJIbMY2zULqLml9VVx5TbmPXdd6Bl/uHBBIhZ gKbWYkzqV4z65bMJrC3ed80lKR5KuqLAAkWXipZxUP/c/uB98vJAh7a4m3gKkimB cYHFz6wotDmnZuZKKsRulunRsDlepLPQJalJypmXP0/MqzBcTst6ukDG3oPLNftF 1c1H46bliH4Cm6WyAY1iy8kiobVo3cApsC3tlMq03iHRye+Lpso/M/MFv8M8UwQY +l4NMQ4b -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:58 2026 by rpki-client