$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B5FB5F258AA11F08DFC9113C4F9AE02.roa File: 2B5FB5F258AA11F08DFC9113C4F9AE02.roa (raw, json) Hash identifier: D0oehUpNJzW5yog57IXa6sD03lQ7KS/GFPwWzlg62DA= Subject key identifier: 0B:50:6C:14:C9:DD:77:1C:87:CB:BA:40:87:5F:AC:0B:96:5F:4E:B9 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3113 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B5FB5F258AA11F08DFC9113C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:19:27 +0000 ROA not before: Mon 06 Jul 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142520 IP address blocks: 165.101.110.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12563 (0x3113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd58f-a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:ff:f2:43:9c:b0:ad:9c:43:6c:14:7f:3c:77: 4f:d9:b1:6c:56:85:8b:f7:11:5d:3e:a2:0e:3b:97: 9d:97:94:ae:4f:38:40:09:e1:43:4a:ff:57:07:d0: d5:0a:44:f5:5d:32:4f:16:6f:c6:7d:a0:37:09:6e: bd:b5:3d:2e:15:ff:b5:7b:e1:97:3c:26:50:29:95: c7:f6:31:3a:e0:fd:40:e3:90:69:35:5a:6f:fc:68: b6:a2:e7:99:00:ef:06:41:a9:ba:3e:6a:b3:bd:41: dc:c9:ae:23:73:04:21:8d:6b:1b:ac:c1:0e:03:92: 82:42:11:6e:bd:e0:2e:c3:42:65:9a:83:9c:8c:80: 37:b9:38:a3:e3:55:83:0a:2f:aa:5d:69:23:e1:ab: 55:63:0b:6b:2d:d5:0b:1a:c7:b9:8f:a6:b8:7b:31: d8:dd:69:41:09:ed:1f:e5:8f:7e:04:f5:9c:a4:65: 7b:a6:e3:8d:ac:b4:b4:0e:85:aa:e7:6a:ed:93:8c: 99:f8:88:58:91:75:2c:9f:7d:9d:dd:a7:2f:f3:6b: c9:4e:67:4a:a6:a7:8d:4a:cd:f5:dd:95:6e:37:10: 08:38:9c:6e:89:a9:2d:74:1e:e1:b1:a0:08:b1:f6: 9a:c1:15:2c:ee:4f:0d:b6:09:f6:09:c4:38:cf:b1: e4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:50:6C:14:C9:DD:77:1C:87:CB:BA:40:87:5F:AC:0B:96:5F:4E:B9 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2B5FB5F258AA11F08DFC9113C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.110.0/23 Signature Algorithm: sha256WithRSAEncryption cd:b6:54:b1:82:c8:79:ef:fe:97:2c:0a:07:ee:f1:37:69:fe: 3b:51:4d:f4:79:17:be:37:4e:30:98:ca:25:a4:d1:d3:70:f0: 48:20:ba:99:46:a4:49:46:45:62:4d:d3:56:c8:e1:b8:1a:42: 6e:4e:fe:23:d7:b3:8d:d0:68:40:2f:d1:5f:e1:0f:26:c5:7e: 80:8e:8d:18:c3:e2:8e:a3:ab:29:81:f4:a0:d5:60:7e:6c:94: a2:06:ad:6c:ae:32:d7:c6:67:5e:4a:72:8e:60:c1:88:0c:47: 5f:93:3b:4b:bb:56:bc:ed:65:1b:c1:80:58:e2:e2:39:32:9d: d0:f1:03:31:9a:9e:09:3f:be:8d:f8:0c:9d:30:32:53:d1:f4: 7c:a6:c9:be:88:12:af:3b:a3:e4:34:8a:ff:75:03:cc:61:50: ed:db:32:07:e4:11:2c:8a:aa:3d:c4:7f:82:2d:e6:46:c5:a0: 7f:7f:c0:e5:29:1f:c7:71:de:93:43:08:b8:eb:14:9c:f5:85: ba:25:9d:74:e7:10:21:d1:62:09:76:22:c5:d8:75:be:9f:2c: 2e:d2:78:d5:00:35:bc:cb:19:dd:b4:94:72:bb:76:d3:a6:df: ee:f1:25:bf:a4:73:32:7b:8a:1d:00:1a:ab:1f:7a:53:eb:d1: 4b:af:f7:64 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDU4Zi1hNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/v/yQ5ywrZxDbBR/PHdP2bFsVoWL9xFdPqIOO5edl5SuTzhACeFDSv9XB9DV CkT1XTJPFm/GfaA3CW69tT0uFf+1e+GXPCZQKZXH9jE64P1A45BpNVpv/Gi2oueZ AO8GQam6PmqzvUHcya4jcwQhjWsbrMEOA5KCQhFuveAuw0JlmoOcjIA3uTij41WD Ci+qXWkj4atVYwtrLdULGse5j6a4ezHY3WlBCe0f5Y9+BPWcpGV7puONrLS0DoWq 52rtk4yZ+IhYkXUsn32d3acv82vJTmdKpqeNSs313ZVuNxAIOJxuiaktdB7hsaAI sfaawRUs7k8Ntgn2CcQ4z7Hk+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAtQbBTJ 3Xcch8u6QIdfrAuWX065MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkI1RkI1RjI1 OEFBMTFGMDhERkM5MTEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWVuMA0GCSqGSIb3DQEBCwUAA4IBAQDNtlSxgsh57/6XLAoH7vE3 af47UU30eRe+N04wmMolpNHTcPBIILqZRqRJRkViTdNWyOG4GkJuTv4j17ON0GhA L9Ff4Q8mxX6Ajo0Yw+KOo6spgfSg1WB+bJSiBq1srjLXxmdeSnKOYMGIDEdfkztL u1a87WUbwYBY4uI5Mp3Q8QMxmp4JP76N+AydMDJT0fR8psm+iBKvO6PkNIr/dQPM YVDt2zIH5BEsiqo9xH+CLeZGxaB/f8DlKR/Hcd6TQwi46xSc9YW6JZ105xAh0WIJ diLF2HW+nywu0njVADW8yxndtJRyu3bTpt/u8SW/pHMye4odABqrH3pT69FLr/dk -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:41 2026 by rpki-client