$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa File: 3BC0C42E814E11EFBDAC5230C4F9AE02.roa (raw, json) Hash identifier: vZtqMUkL90/f7ae3JpFgMEE0mgTdKjPFvWQRvYG/T6c= Subject key identifier: BD:E3:9D:21:3A:E5:35:E0:14:14:8C:B0:BF:18:DF:22:DA:E3:31:80 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3132 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:20:28 +0000 ROA not before: Mon 06 Jul 2026 16:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150577 IP address blocks: 160.25.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12594 (0x3132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd5cc-c0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:8a:c8:b1:2a:86:5e:10:ce:c7:66:d4:34: e6:4b:5f:32:48:af:dd:b5:09:63:1b:0f:93:b0:39: ee:fd:73:cf:48:94:65:1c:47:8d:85:66:a5:0b:18: 4d:66:e8:b2:2a:8b:18:43:06:71:30:b9:ea:2c:fc: f1:5d:e0:76:c4:e1:bb:69:57:aa:a0:98:ad:db:67: cb:5f:e8:ed:80:04:19:96:af:e9:c5:a6:0e:dc:d9: 90:18:59:e3:17:64:5e:c3:6e:ed:25:c5:d4:b7:6d: 83:0c:d4:03:1a:43:86:21:b1:92:cb:03:8d:af:51: 69:79:dc:27:80:1d:aa:ec:3a:d5:e3:d2:94:bd:63: 6c:86:d0:08:19:f8:51:10:ea:c9:09:2d:b7:82:b2: 2c:df:b0:bc:6e:7c:b5:19:a6:45:08:ff:5c:3e:4b: de:c6:de:b9:be:23:6c:8a:c1:e4:50:21:6a:23:bc: ed:15:0d:06:55:00:84:bd:61:b7:6e:9c:44:6d:88: d8:7f:3e:11:c1:9b:fa:4f:f6:1a:7e:70:f3:1a:28: 01:a7:54:27:ec:f5:73:08:5c:fa:08:53:93:8f:2c: ad:00:9b:ac:82:4a:b9:52:1e:be:6e:e3:80:14:bd: 02:e6:4a:3c:6d:fe:9b:3b:e8:1b:83:fe:25:0a:ed: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:9D:21:3A:E5:35:E0:14:14:8C:B0:BF:18:DF:22:DA:E3:31:80 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.172.0/24 Signature Algorithm: sha256WithRSAEncryption b6:76:6a:0a:2b:2c:45:4f:63:db:76:28:fe:91:54:84:74:ab: f9:0d:e7:8d:e4:0d:18:8d:c7:cf:6b:c7:ea:7a:d6:3f:12:26: 08:80:7b:b9:7d:d5:15:bc:01:de:ca:5d:91:bd:8f:e7:9d:60: a3:9d:4a:05:c8:1a:55:ec:d3:82:ba:64:d7:18:05:36:25:3b: ee:d5:d4:cb:d4:b5:ce:95:de:ff:84:5f:1c:15:aa:7b:72:73: 35:bc:34:56:e0:82:8e:ca:a9:b7:af:44:41:63:68:73:41:68: 3c:6b:f8:8a:69:66:44:91:f6:46:34:da:f8:81:51:cf:2d:00: b9:12:f5:c7:f5:f2:f2:53:1b:bd:a8:f0:98:9d:cc:c2:5c:62: 97:92:2f:ef:e2:05:aa:7e:44:42:3a:35:a2:78:58:fe:d2:76: 8a:cc:7a:10:96:f1:f3:2c:e4:2e:a0:70:d3:63:93:33:38:66: 67:16:ff:af:4c:9c:af:97:d5:09:a6:81:af:00:c2:4b:88:9b: 71:92:78:f3:56:6b:93:93:96:20:82:48:d0:2d:e6:44:55:e6: 3b:71:d6:5f:23:da:4a:c5:2a:37:77:d1:91:31:6d:cb:73:d8: 35:60:5a:95:e3:27:ba:44:d1:7a:90:e4:89:b4:0c:5e:2f:34: 12:72:04:bd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMDI4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDVjYy1jMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySqKyLEqhl4Qzsdm1DTmS18ySK/dtQljGw+TsDnu/XPPSJRlHEeNhWalCxhN ZuiyKosYQwZxMLnqLPzxXeB2xOG7aVeqoJit22fLX+jtgAQZlq/pxaYO3NmQGFnj F2Rew27tJcXUt22DDNQDGkOGIbGSywONr1FpedwngB2q7DrV49KUvWNshtAIGfhR EOrJCS23grIs37C8bny1GaZFCP9cPkvext65viNsisHkUCFqI7ztFQ0GVQCEvWG3 bpxEbYjYfz4RwZv6T/YafnDzGigBp1Qn7PVzCFz6CFOTjyytAJusgkq5Uh6+buOA FL0C5ko8bf6bO+gbg/4lCu0LLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL3jnSE6 5TXgFBSMsL8Y3yLa4zGAMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0JDMEM0MkU4 MTRFMTFFRkJEQUM1MjMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBmsMA0GCSqGSIb3DQEBCwUAA4IBAQC2dmoKKyxFT2Pbdij+kVSE dKv5DeeN5A0YjcfPa8fqetY/EiYIgHu5fdUVvAHeyl2RvY/nnWCjnUoFyBpV7NOC umTXGAU2JTvu1dTL1LXOld7/hF8cFap7cnM1vDRW4IKOyqm3r0RBY2hzQWg8a/iK aWZEkfZGNNr4gVHPLQC5EvXH9fLyUxu9qPCYnczCXGKXki/v4gWqfkRCOjWieFj+ 0naKzHoQlvHzLOQuoHDTY5MzOGZnFv+vTJyvl9UJpoGvAMJLiJtxknjzVmuTk5Yg gkjQLeZEVeY7cdZfI9pKxSo3d9GRMW3Lc9g1YFqV4ye6RNF6kOSJtAxeLzQScgS9 -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:34 2026 by rpki-client