$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa File: 24CD77AA968211EF8D4B2A1CC4F9AE02.roa (raw, json) Hash identifier: W772vCD5EVzY9kUCOA43g8q0JZ/gRmzEi8VamVZVGFg= Subject key identifier: 7F:10:7F:CA:37:E9:51:68:54:72:67:58:29:CC:6E:2E:33:4C:D2:83 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31B6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:24:51 +0000 ROA not before: Mon 06 Jul 2026 16:24:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153240 IP address blocks: 160.191.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12726 (0x31b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:24:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd6d3-d08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:84:b6:db:13:42:b4:96:fd:c0:28:fe:2b: 1b:00:3a:e8:f2:15:99:58:2a:64:b7:bb:e6:e2:e7: c5:67:51:71:bc:fd:f8:5e:ae:d0:84:9b:c6:31:60: 97:8d:7d:9c:eb:a4:8a:96:99:28:f2:fc:07:7e:1d: 3f:3d:eb:00:a3:b0:b8:56:64:fe:10:72:36:54:53: 49:61:86:47:39:07:0f:e1:37:77:e4:60:62:b0:e4: 96:f9:4e:41:5c:dd:f7:aa:1f:68:23:bb:21:8d:a0: 89:73:6c:b4:ac:8f:0b:69:ed:f1:ce:98:ea:43:78: 36:88:74:0f:42:0f:9e:58:20:38:d7:65:95:98:92: aa:67:03:b3:78:f3:23:c6:fb:9a:19:bc:cd:8e:8a: dc:45:28:b7:9c:d0:5a:7e:9f:e5:1c:96:23:53:62: 1c:1e:c7:e8:c2:2f:a0:ec:94:b1:09:c7:c5:8e:2d: bb:ae:6d:97:a4:ce:1f:08:0d:1b:63:b2:2d:74:28: f0:09:09:05:2a:3a:56:58:c6:e5:3d:93:a6:07:73: 09:12:f9:85:df:b6:4a:b7:38:02:8f:53:3f:e1:b9: ba:42:4d:42:0b:6e:88:5a:ea:3e:d3:02:3a:63:6d: b5:68:9a:21:b1:27:d2:b1:3e:05:13:bd:c5:50:b3: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:10:7F:CA:37:E9:51:68:54:72:67:58:29:CC:6E:2E:33:4C:D2:83 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/24CD77AA968211EF8D4B2A1CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.120.0/23 Signature Algorithm: sha256WithRSAEncryption ad:43:58:30:d0:9c:ad:18:5d:0a:b9:3d:83:58:b2:e3:5d:e1: 83:af:47:22:2c:23:2d:dd:0c:81:a4:6e:59:21:ef:66:c5:21: 69:13:fa:c0:83:e3:1b:b6:fe:1d:f0:57:64:5c:41:10:c2:30: d7:c6:d8:23:f8:5b:0e:a4:cb:1f:6a:df:67:a5:36:27:4f:fd: 51:53:36:95:32:a7:6e:4d:15:6d:99:59:6e:d6:69:cc:73:c8: 7c:b2:a4:5c:48:28:b3:5b:d1:fd:50:6e:7b:6c:35:ea:60:9e: 2b:34:10:6d:21:31:c1:2a:09:40:dd:33:48:74:6b:e2:5b:92: a0:04:ed:8c:9b:0f:cf:05:f7:ed:7b:46:8a:1a:c9:f8:cd:d7: 9a:8a:bf:df:63:08:15:cb:16:f0:d9:49:a4:8f:eb:e1:61:b3: 5d:1b:bf:d2:5b:42:16:b1:a3:a5:a4:f8:f8:c1:99:ac:42:5e: 61:14:6b:37:ad:0d:f7:5b:cb:a7:b7:46:33:a3:3c:9f:9b:5b: 0c:49:e6:06:a2:02:f3:e4:e6:7c:3d:41:73:b6:ff:38:ff:91: 61:ea:f7:1c:0d:35:e8:d7:9f:dc:50:95:0d:b9:cc:49:de:f4: b0:80:5c:79:50:4d:d8:fe:cb:fb:b8:de:b4:24:31:4c:40:76: c9:84:58:b4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNDUxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDZkMy1kMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpKEttsTQrSW/cAo/isbADro8hWZWCpkt7vm4ufFZ1FxvP34Xq7QhJvGMWCX jX2c66SKlpko8vwHfh0/PesAo7C4VmT+EHI2VFNJYYZHOQcP4Td35GBisOSW+U5B XN33qh9oI7shjaCJc2y0rI8Lae3xzpjqQ3g2iHQPQg+eWCA412WVmJKqZwOzePMj xvuaGbzNjorcRSi3nNBafp/lHJYjU2IcHsfowi+g7JSxCcfFji27rm2XpM4fCA0b Y7ItdCjwCQkFKjpWWMblPZOmB3MJEvmF37ZKtzgCj1M/4bm6Qk1CC26IWuo+0wI6 Y221aJohsSfSsT4FE73FULMx2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH8Qf8o3 6VFoVHJnWCnMbi4zTNKDMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjRDRDc3QUE5 NjgyMTFFRjhENEIyQTFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL94MA0GCSqGSIb3DQEBCwUAA4IBAQCtQ1gw0JytGF0KuT2DWLLj XeGDr0ciLCMt3QyBpG5ZIe9mxSFpE/rAg+Mbtv4d8FdkXEEQwjDXxtgj+FsOpMsf at9npTYnT/1RUzaVMqduTRVtmVlu1mnMc8h8sqRcSCizW9H9UG57bDXqYJ4rNBBt ITHBKglA3TNIdGviW5KgBO2Mmw/PBffte0aKGsn4zdeair/fYwgVyxbw2Umkj+vh YbNdG7/SW0IWsaOlpPj4wZmsQl5hFGs3rQ33W8unt0Yzozyfm1sMSeYGogLz5OZ8 PUFztv84/5Fh6vccDTXo15/cUJUNucxJ3vSwgFx5UE3Y/sv7uN60JDFMQHbJhFi0 -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:42 2026 by rpki-client