$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2DC38E365E2211F0B012AB85C4F9AE02.roa File: 2DC38E365E2211F0B012AB85C4F9AE02.roa (raw, json) Hash identifier: XuHGE5eWnEOrLFkcxFjdaZjVurl1cEOiu+i7xBldA/M= Subject key identifier: 65:10:0E:56:61:A4:F0:A6:24:19:BE:D8:49:9C:B9:93:48:33:31:45 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2FC7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2DC38E365E2211F0B012AB85C4F9AE02.roa Signing time: Sun 31 May 2026 16:28:44 +0000 ROA not before: Sun 31 May 2026 16:28:44 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 154043 IP address blocks: 165.101.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12231 (0x2fc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:28:44 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c61bc-9f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:1c:cc:2b:81:96:d5:d5:53:f3:82:68:40: b1:4a:d6:77:d6:ad:59:ba:f8:a2:5b:f1:a1:8c:ad: cb:70:e7:21:53:03:7c:9f:a2:31:ec:d5:7a:31:00: 6c:2e:63:61:8c:48:a5:d9:ed:0b:65:6b:7b:71:c0: d4:38:2b:c5:4c:39:bc:be:56:bc:02:4f:57:02:df: ab:39:1a:13:79:7a:ae:60:c6:d8:09:3e:34:48:5a: 11:eb:ce:93:f2:19:ab:bb:95:bc:f8:e3:4d:22:5f: 96:76:e4:23:0d:43:a2:4c:78:a5:dc:42:d6:35:c6: b2:20:2f:55:fe:dd:0d:67:18:e7:53:fd:d8:fb:fb: aa:ee:c4:c9:dc:e1:c8:28:46:15:46:6e:60:65:9d: 2e:5f:8e:61:c7:22:ef:7c:b1:9e:fa:cc:4b:13:0c: 0c:ee:77:35:d5:c7:b4:ca:7b:4d:ca:57:39:ca:5c: 55:7b:4c:d0:a8:0a:d2:94:f2:9a:88:75:4c:8d:db: 0b:66:e4:6f:02:d1:d3:54:27:4c:75:3b:26:a6:34: 0f:09:79:6f:3b:72:78:34:26:08:f6:d9:3d:b6:64: 51:0e:22:2b:35:16:99:f3:17:b7:a9:89:b3:a0:c6: 9a:5f:53:17:bc:59:01:db:43:59:48:95:dd:a3:17: b7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:0E:56:61:A4:F0:A6:24:19:BE:D8:49:9C:B9:93:48:33:31:45 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2DC38E365E2211F0B012AB85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.160.0/23 Signature Algorithm: sha256WithRSAEncryption a7:e1:21:57:46:81:3b:cb:1c:ae:9c:21:f4:cc:8c:52:7d:e9: 20:32:13:96:68:c8:b9:be:00:b2:b0:32:e6:38:d9:1e:57:78: d7:e1:f6:49:3f:08:67:41:00:7b:af:36:99:30:cb:9c:2b:38: 8d:63:c4:2b:7c:53:ca:a1:c6:5c:78:bc:f4:ca:12:e4:a7:2e: 1a:e9:14:0d:aa:e5:3f:26:94:20:5c:6b:4b:a5:31:02:aa:ae: af:74:8f:d1:89:01:04:f1:8d:14:da:6d:08:58:90:5c:1b:2e: 35:21:12:22:45:16:d8:a3:e1:96:09:61:b8:c9:24:1d:d8:8a: 2f:9a:fb:a3:b7:23:a5:80:38:3f:ac:23:5d:b6:88:2c:91:27: f5:2a:e4:09:41:a1:b2:ed:8f:08:04:e7:90:a3:be:1f:d7:af: a4:47:c8:1c:5e:89:22:32:81:bf:e8:44:b6:4d:3b:67:de:d1: 26:7e:30:c1:fe:f5:22:36:4f:56:95:ca:e3:c5:90:27:01:01: 46:c5:5f:47:82:16:74:5a:b5:3a:4b:dd:82:9d:d6:a8:5e:5e: b1:89:5d:5c:69:29:29:7a:2d:32:04:7c:e3:56:d5:73:2c:a5: 25:07:ca:36:e0:9d:1b:9f:c5:63:36:5f:b3:6c:6c:42:05:d8: ef:88:94:a0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICL8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyODQ0WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjFiYy05ZjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0kczCuBltXVU/OCaECxStZ31q1ZuviiW/GhjK3LcOchUwN8n6Ix7NV6MQBs LmNhjEil2e0LZWt7ccDUOCvFTDm8vla8Ak9XAt+rORoTeXquYMbYCT40SFoR686T 8hmru5W8+ONNIl+WduQjDUOiTHil3ELWNcayIC9V/t0NZxjnU/3Y+/uq7sTJ3OHI KEYVRm5gZZ0uX45hxyLvfLGe+sxLEwwM7nc11ce0yntNylc5ylxVe0zQqArSlPKa iHVMjdsLZuRvAtHTVCdMdTsmpjQPCXlvO3J4NCYI9tk9tmRRDiIrNRaZ8xe3qYmz oMaaX1MXvFkB20NZSJXdoxe3hwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGUQDlZh pPCmJBm+2EmcuZNIMzFFMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkRDMzhFMzY1 RTIyMTFGMEIwMTJBQjg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWWgMA0GCSqGSIb3DQEBCwUAA4IBAQCn4SFXRoE7yxyunCH0zIxS fekgMhOWaMi5vgCysDLmONkeV3jX4fZJPwhnQQB7rzaZMMucKziNY8QrfFPKocZc eLz0yhLkpy4a6RQNquU/JpQgXGtLpTECqq6vdI/RiQEE8Y0U2m0IWJBcGy41IRIi RRbYo+GWCWG4ySQd2IovmvujtyOlgDg/rCNdtogskSf1KuQJQaGy7Y8IBOeQo74f 16+kR8gcXokiMoG/6ES2TTtn3tEmfjDB/vUiNk9WlcrjxZAnAQFGxV9HghZ0WrU6 S92CndaoXl6xiV1caSkpei0yBHzjVtVzLKUlB8o24J0bn8VjNl+zbGxCBdjviJSg -----END CERTIFICATE-----Generated at Sat Jun 6 08:22:43 2026 by rpki-client