$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa File: 2B253FB4F5C911F0A1C4DE1F456F56BC.roa (raw, json) Hash identifier: cdV4MurdUacui5w+M6fa963m4Yyt/3LFkYgmkgtdS6g= Subject key identifier: DE:5A:57:AA:B1:2B:13:5B:54:14:DF:76:09:78:90:04:7B:77:EF:B7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 312F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa Signing time: Mon 06 Jul 2026 16:20:22 +0000 ROA not before: Mon 06 Jul 2026 16:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150045 IP address blocks: 192.58.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12591 (0x312f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd5c6-2365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:9d:55:1e:c1:85:db:ec:e7:a4:4f:63:98: 92:a5:c8:f1:5a:37:ec:cc:6c:df:1c:75:0d:ba:72: 75:c3:30:86:62:d6:94:35:6c:8e:25:52:c5:07:61: b3:d5:d0:e3:ee:a6:34:fb:ed:12:dc:4f:08:f3:c2: 74:38:69:7b:50:ec:fe:bd:b6:42:d2:0a:a6:e5:0b: f7:dc:6f:b0:f1:fc:d5:99:51:b1:e2:a9:74:3b:64: f8:d5:f9:73:3c:c9:21:62:25:88:d0:8a:99:06:6d: 2d:90:5f:bf:01:c5:f1:2e:20:e4:19:f7:01:db:23: 7d:20:f2:34:24:9d:ac:30:46:c8:58:73:a0:71:db: 23:80:e9:88:00:c1:49:7a:6e:2e:20:2e:94:d7:b4: 3e:2e:ad:b5:a8:f9:10:b8:14:de:80:92:79:ba:dc: 2e:69:1f:ce:d2:79:4d:fa:ce:9e:e9:5a:e7:58:d0: fa:4d:c3:a1:00:5e:76:64:c2:ee:95:ec:62:3c:dc: f3:5e:47:4d:71:b7:e0:15:71:f5:e3:4d:62:48:98: bd:3b:d1:1b:54:f7:73:74:c7:84:88:39:37:aa:e3: 42:07:da:ae:8f:5b:bc:df:00:bc:4e:2b:19:09:60: e9:97:ce:38:6a:4b:72:94:27:72:ec:ee:ba:6e:20: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:57:AA:B1:2B:13:5B:54:14:DF:76:09:78:90:04:7B:77:EF:B7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B253FB4F5C911F0A1C4DE1F456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.58.101.0/24 Signature Algorithm: sha256WithRSAEncryption c8:55:ae:d1:8c:99:a9:4c:22:47:d7:85:52:f3:53:86:be:f6: cd:59:04:b1:a3:64:03:39:70:aa:41:d4:5a:fe:96:75:03:f2: b1:77:33:98:75:ec:81:90:4c:ba:88:e9:8b:6f:58:d0:da:2d: a1:05:f7:b0:dc:ac:1d:00:7e:1c:48:28:76:a0:8e:57:fb:38: af:02:c4:55:6f:eb:7f:33:79:33:ee:8f:ab:6a:21:3c:69:e1: 15:52:ed:ec:da:93:c1:d4:a7:bf:25:5e:41:02:1f:83:ca:c3: bc:10:1f:e8:1c:94:4b:65:91:56:63:3d:a0:f7:18:7b:f2:f7: 96:67:b3:2f:b8:8e:c1:02:ba:98:04:72:30:46:bc:41:c6:5c: 58:cf:c3:5a:a7:03:a0:e1:ad:2d:02:b5:2e:7e:e6:6c:f8:d2: 04:bb:9b:56:d5:b6:e4:2d:a6:b3:89:0b:af:81:de:30:8f:9c: 8e:59:7c:79:f3:87:9a:d3:5d:7f:29:f6:84:01:f9:cf:bf:73: fe:a9:e2:b6:85:a9:ca:55:f7:97:60:66:e6:95:d8:3a:29:87: 59:55:75:ec:db:f7:67:6b:30:c7:a1:5c:6d:e5:13:1a:d5:23: 7b:32:b9:2d:12:76:3f:15:f3:ab:aa:c5:16:1c:61:85:d8:f2: 4d:62:ba:8a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMDIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDVjNi0yMzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdOdVR7Bhdvs56RPY5iSpcjxWjfszGzfHHUNunJ1wzCGYtaUNWyOJVLFB2Gz 1dDj7qY0++0S3E8I88J0OGl7UOz+vbZC0gqm5Qv33G+w8fzVmVGx4ql0O2T41flz PMkhYiWI0IqZBm0tkF+/AcXxLiDkGfcB2yN9IPI0JJ2sMEbIWHOgcdsjgOmIAMFJ em4uIC6U17Q+Lq21qPkQuBTegJJ5utwuaR/O0nlN+s6e6VrnWND6TcOhAF52ZMLu lexiPNzzXkdNcbfgFXH1401iSJi9O9EbVPdzdMeEiDk3quNCB9quj1u83wC8TisZ CWDpl844aktylCdy7O66biBa0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN5aV6qx KxNbVBTfdgl4kAR7d++3MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkIyNTNGQjRG NUM5MTFGMEExQzRERTFGNDU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwDplMA0GCSqGSIb3DQEBCwUAA4IBAQDIVa7RjJmpTCJH14VS81OG vvbNWQSxo2QDOXCqQdRa/pZ1A/KxdzOYdeyBkEy6iOmLb1jQ2i2hBfew3KwdAH4c SCh2oI5X+zivAsRVb+t/M3kz7o+raiE8aeEVUu3s2pPB1Ke/JV5BAh+DysO8EB/o HJRLZZFWYz2g9xh78veWZ7MvuI7BArqYBHIwRrxBxlxYz8NapwOg4a0tArUufuZs +NIEu5tW1bbkLaaziQuvgd4wj5yOWXx584ea011/KfaEAfnPv3P+qeK2hanKVfeX YGbmldg6KYdZVXXs2/dnazDHoVxt5RMa1SN7MrktEnY/FfOrqsUWHGGF2PJNYrqK -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:03 2026 by rpki-client