$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa File: 1869BC5A45F811F096901E67C4F9AE02.roa (raw, json) Hash identifier: 3ukFJ11/QxiddkK4SxD6bd6HydM9XKORXG08+rsNvrA= Subject key identifier: E9:90:64:00:5A:E5:1D:01:E0:59:29:5C:EC:7C:AD:5F:12:74:8D:0A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31DC Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:26:05 +0000 ROA not before: Mon 06 Jul 2026 16:26:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153901 IP address blocks: 165.99.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12764 (0x31dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:26:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd71d-5eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:82:39:8b:52:1d:82:f1:69:56:f9:0c:d0: 07:be:b1:b1:19:90:44:f4:3c:de:fa:ce:06:bf:80: 1f:a2:a5:5f:7a:0f:3f:bf:62:70:3b:c3:a4:97:11: b5:76:bd:45:62:98:ed:e4:b5:0a:80:e7:28:06:90: 0f:a5:81:74:c6:c1:75:9d:1b:e1:a8:7a:1a:fe:ac: 4e:9f:c7:93:4a:5b:c4:21:33:84:66:f5:9e:4f:0a: 53:70:b9:b2:6a:f3:1d:6e:a3:f6:83:b3:35:cb:c9: 9b:be:74:91:88:fd:d3:86:10:ab:b3:c1:eb:12:57: e0:e5:b9:e7:f8:af:80:8d:d3:69:99:00:53:a5:85: 1f:bd:47:14:04:ad:f6:37:e8:21:ad:53:6b:ff:09: 2f:9d:ea:49:b9:7d:80:6c:39:ea:78:75:47:ca:f3: 37:9c:ba:6d:f1:12:84:15:57:2b:1e:08:cb:dd:e7: b3:a1:c1:d2:46:56:0d:e6:95:c9:33:02:1e:dc:63: 37:30:f7:79:b2:59:67:d0:31:88:13:2c:d3:ea:64: 56:66:00:27:ff:40:22:ee:8d:b7:e6:bc:fe:5a:04: e8:4d:d9:87:9d:d9:63:c8:bd:72:bc:f8:ed:b7:f7: 1f:88:cd:45:1c:71:fa:c6:e4:f0:01:cd:f5:69:a9: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:64:00:5A:E5:1D:01:E0:59:29:5C:EC:7C:AD:5F:12:74:8D:0A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.78.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:4b:9a:1a:0f:97:bc:bf:86:cc:a8:11:b5:c2:d6:e7:b1:4a: d4:36:cc:6f:41:8e:31:44:6c:78:63:06:5b:ef:1d:5d:dc:ec: 0e:cd:d7:21:65:bf:b4:00:12:93:de:04:1f:4a:24:92:26:d8: ee:06:cf:a0:f2:56:01:7a:10:16:ac:61:44:09:14:64:32:64: a0:37:e5:a5:8c:da:44:4a:cc:a1:1b:e9:54:75:fe:26:f9:bd: aa:ec:22:a3:25:61:58:f5:83:fd:4c:a6:ea:95:ba:ee:d2:9b: a7:69:19:e1:36:6c:c0:54:75:9a:e4:ca:95:42:22:d8:84:59: 2f:d1:77:6a:4b:ec:eb:5e:b1:d0:68:cf:2e:22:63:33:df:d6: 5a:82:db:fe:da:42:c1:ae:d7:fe:ba:98:00:60:9a:4c:6a:93: 39:24:bf:a0:32:f2:f8:c1:67:0b:a4:5c:c5:03:57:f1:88:5b: 0e:5b:08:bf:2e:ff:b7:47:35:09:3c:36:23:61:84:a9:23:31: 6a:72:b1:40:d2:c0:a0:40:2d:bc:ae:fa:05:aa:24:1a:eb:19: ae:a3:ea:ff:8d:ca:c7:2d:6f:a4:a5:81:7a:89:0d:1c:34:64: cc:e3:ec:27:01:0e:5f:d2:eb:09:e5:b8:73:72:e5:82:b7:26: f0:6c:eb:ab -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNjA1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDcxZC01ZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EKCOYtSHYLxaVb5DNAHvrGxGZBE9Dze+s4Gv4AfoqVfeg8/v2JwO8OklxG1 dr1FYpjt5LUKgOcoBpAPpYF0xsF1nRvhqHoa/qxOn8eTSlvEITOEZvWeTwpTcLmy avMdbqP2g7M1y8mbvnSRiP3ThhCrs8HrElfg5bnn+K+AjdNpmQBTpYUfvUcUBK32 N+ghrVNr/wkvnepJuX2AbDnqeHVHyvM3nLpt8RKEFVcrHgjL3eezocHSRlYN5pXJ MwIe3GM3MPd5slln0DGIEyzT6mRWZgAn/0Ai7o235rz+WgToTdmHndljyL1yvPjt t/cfiM1FHHH6xuTwAc31aakA5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOmQZABa 5R0B4FkpXOx8rV8SdI0KMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTg2OUJDNUE0 NUY4MTFGMDk2OTAxRTY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWNOMA0GCSqGSIb3DQEBCwUAA4IBAQA/S5oaD5e8v4bMqBG1wtbn sUrUNsxvQY4xRGx4YwZb7x1d3OwOzdchZb+0ABKT3gQfSiSSJtjuBs+g8lYBehAW rGFECRRkMmSgN+WljNpESsyhG+lUdf4m+b2q7CKjJWFY9YP9TKbqlbru0punaRnh NmzAVHWa5MqVQiLYhFkv0XdqS+zrXrHQaM8uImMz39Zagtv+2kLBrtf+upgAYJpM apM5JL+gMvL4wWcLpFzFA1fxiFsOWwi/Lv+3RzUJPDYjYYSpIzFqcrFA0sCgQC28 rvoFqiQa6xmuo+r/jcrHLW+kpYF6iQ0cNGTM4+wnAQ5f0usJ5bhzcuWCtybwbOur -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:32 2026 by rpki-client