$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa File: 0CF90768BDE011EAAEA46554C4F9AE02.roa (raw, json) Hash identifier: dlouYJ3uuZ8YXBF1Ui+Mhi+XDJkLpf9JHWUO8zaG/N8= Subject key identifier: BC:9A:15:C6:90:69:ED:40:F6:F0:F5:44:76:5B:04:21:67:60:C5:AB Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3234 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:29:03 +0000 ROA not before: Mon 06 Jul 2026 16:29:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9430 IP address blocks: 157.15.159.0/24 maxlen: 24 161.248.26.0/24 maxlen: 24 164.164.32.0/24 maxlen: 24 164.164.123.0/24 maxlen: 24 164.164.124.0/24 maxlen: 24 164.164.126.0/24 maxlen: 24 164.164.127.0/24 maxlen: 24 164.164.184.0/24 maxlen: 24 164.164.187.0/24 maxlen: 24 164.164.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12852 (0x3234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:29:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7ce-5d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:d5:af:01:24:11:95:c1:ea:d5:9f:ce:30: bb:5e:2d:63:e3:31:ee:e4:e6:9d:d3:74:03:54:4b: 84:88:96:ce:e8:a2:ba:9f:48:8f:9c:c5:45:65:c7: e6:ff:b2:7c:2b:16:f7:06:b2:1c:9a:3b:77:5c:b3: d3:73:3c:33:05:4e:2a:4f:22:fa:34:e8:c2:7a:04: 9f:5a:15:53:1e:f1:f8:22:39:23:71:05:c7:5a:75: e8:ba:b5:f0:5b:ad:0e:10:34:7c:b3:00:1d:1a:c0: 27:87:da:8a:08:d1:10:4b:d2:37:85:25:6f:07:fb: 0b:0d:bd:f2:cf:85:8f:de:df:c3:b0:23:3c:fd:82: a2:3a:ae:29:0f:af:6c:c3:c5:a6:ba:24:cb:e0:e1: 99:81:48:02:71:f8:0b:10:a5:19:39:2c:f2:34:fd: d8:8b:e9:82:52:b3:68:2b:c2:81:18:c6:81:0a:b1: 34:71:6b:63:86:49:be:97:f9:27:53:4a:16:7d:ca: a2:27:6f:50:a9:42:d2:d8:ae:5b:55:6c:b1:1b:1e: 8f:8c:ed:5d:05:9d:99:20:d1:17:2a:21:4f:71:44: 02:71:60:a6:a5:aa:f3:f9:45:a0:d3:4d:ba:13:72: ac:bc:f1:54:d1:9b:be:68:50:a8:ab:b6:53:40:31: ce:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9A:15:C6:90:69:ED:40:F6:F0:F5:44:76:5B:04:21:67:60:C5:AB X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0CF90768BDE011EAAEA46554C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.159.0/24 161.248.26.0/24 164.164.32.0/24 164.164.123.0-164.164.124.255 164.164.126.0/23 164.164.184.0/24 164.164.187.0/24 164.164.192.0/24 Signature Algorithm: sha256WithRSAEncryption 25:59:4a:fb:23:ef:cf:2e:15:b0:09:e6:22:60:83:d9:c2:cd: fc:5f:0e:3d:c7:16:63:d2:8b:78:aa:76:73:05:91:2e:6b:d2: e2:a4:88:34:5c:d2:7b:98:d7:22:62:eb:89:df:c4:01:57:89: b4:36:8f:90:73:12:2f:71:c1:9c:f6:75:46:58:df:63:95:88: 97:2f:c2:64:98:c9:8f:63:2c:ad:bf:b5:b1:ce:dc:81:e5:ae: 39:ea:d8:a7:1b:e2:8d:2d:d2:25:62:ef:4e:d9:60:f3:ea:f5: 35:65:aa:de:2e:39:8f:c2:c4:78:fd:38:07:c8:f1:91:4e:a5: 0f:37:ad:c9:ce:da:21:08:f5:91:79:4a:5a:a0:0b:62:d7:0c: 08:e0:d5:68:81:79:04:70:e9:52:eb:05:b1:13:eb:81:81:66: 3c:f7:03:10:83:61:fb:4d:b8:f2:95:78:12:76:30:24:98:82: d2:e2:47:88:c6:7c:66:49:2a:0c:18:28:6b:1f:a1:6d:67:26: 32:a2:f1:01:a1:bd:5f:4f:29:1c:ba:50:ec:cb:1b:fb:13:8b: 00:d8:d5:c7:67:80:df:11:35:7b:4f:a9:97:ff:43:19:45:c2: fa:47:af:c2:eb:98:f9:ce:9f:ae:d8:57:57:97:ae:d9:d7:2a: 3d:f9:6c:a2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICMjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyOTAzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdjZS01ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dTVrwEkEZXB6tWfzjC7Xi1j4zHu5Oad03QDVEuEiJbO6KK6n0iPnMVFZcfm /7J8Kxb3BrIcmjt3XLPTczwzBU4qTyL6NOjCegSfWhVTHvH4IjkjcQXHWnXourXw W60OEDR8swAdGsAnh9qKCNEQS9I3hSVvB/sLDb3yz4WP3t/DsCM8/YKiOq4pD69s w8WmuiTL4OGZgUgCcfgLEKUZOSzyNP3Yi+mCUrNoK8KBGMaBCrE0cWtjhkm+l/kn U0oWfcqiJ29QqULS2K5bVWyxGx6PjO1dBZ2ZINEXKiFPcUQCcWCmparz+UWg0026 E3KsvPFU0Zu+aFCoq7ZTQDHOcwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFLyaFcaQ ae1A9vD1RHZbBCFnYMWrMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMENGOTA3NjhC REUwMTFFQUFFQTQ2NTU0QzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQAnQ+fAwQAofgaAwQApKQgMAwDBACkpHsDBACkpHwDBAGkpH4DBACk pLgDBACkpLsDBACkpMAwDQYJKoZIhvcNAQELBQADggEBACVZSvsj788uFbAJ5iJg g9nCzfxfDj3HFmPSi3iqdnMFkS5r0uKkiDRc0nuY1yJi64nfxAFXibQ2j5BzEi9x wZz2dUZY32OViJcvwmSYyY9jLK2/tbHO3IHlrjnq2Kcb4o0t0iVi707ZYPPq9TVl qt4uOY/CxHj9OAfI8ZFOpQ83rcnO2iEI9ZF5SlqgC2LXDAjg1WiBeQRw6VLrBbET 64GBZjz3AxCDYftNuPKVeBJ2MCSYgtLiR4jGfGZJKgwYKGsfoW1nJjKi8QGhvV9P KRy6UOzLG/sTiwDY1cdngN8RNXtPqZf/QxlFwvpHr8LrmPnOn67YV1eXrtnXKj35 bKI= -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:51 2026 by rpki-client