$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3C88E5A2ED4B11F085214245506F56BC.roa File: 3C88E5A2ED4B11F085214245506F56BC.roa (raw, json) Hash identifier: 2ro1xjf5WoNV4/OtcBdNyIla8oLL/qRMH/gqCnUqxP8= Subject key identifier: 42:0E:70:75:02:8C:5E:1A:E7:25:FF:33:62:1B:E6:25:12:11:50:E5 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 322B Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3C88E5A2ED4B11F085214245506F56BC.roa Signing time: Mon 06 Jul 2026 16:28:45 +0000 ROA not before: Mon 06 Jul 2026 16:28:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55470 IP address blocks: 165.99.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12843 (0x322b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7bc-c9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:04:94:d3:23:e5:77:db:3c:60:b2:a8:d9: c4:6d:2c:d2:b5:05:42:bc:ba:17:e7:a4:0e:17:6e: 76:1b:92:14:53:6e:f2:8a:31:fa:bf:c1:b2:74:c3: 5e:25:08:9e:60:a9:95:60:f9:f7:c4:07:72:8e:4a: e8:96:2e:78:ce:cb:4c:16:cd:03:a6:95:f0:e3:e8: 59:c5:82:dd:85:94:5f:8e:c0:c5:42:b7:b0:d8:f5: 1f:7c:a8:9e:53:f1:7d:e8:34:e9:c5:a7:28:8c:53: d6:71:85:39:48:5d:ab:32:3a:30:fd:9d:c8:91:ab: 81:2b:4f:eb:e1:bd:83:a3:65:f3:b5:63:8b:b3:88: 2f:a6:0d:2d:d5:57:9a:79:98:52:1a:07:48:33:38: 22:b3:16:bc:3b:3f:fd:08:20:67:b4:09:ea:90:0e: 70:2e:ce:ce:b7:1c:40:3e:1a:4d:4b:f5:ff:4b:73: c0:91:8c:d8:52:62:e2:14:59:c4:7c:e7:b5:35:1e: 8c:f9:d0:81:b2:26:72:9f:13:0d:34:ce:34:31:00: 38:52:db:49:5b:e0:f2:4e:47:75:b1:ce:61:fa:79: 4c:27:c6:4f:1d:db:0d:63:46:9d:d0:06:b6:f7:83: 8d:ca:d4:d7:8d:ae:9e:05:48:45:dd:fd:6c:7b:18: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:70:75:02:8C:5E:1A:E7:25:FF:33:62:1B:E6:25:12:11:50:E5 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3C88E5A2ED4B11F085214245506F56BC.roa sbgp-ipAddrBlock: critical IPv4: 165.99.253.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:4d:21:6b:25:03:ec:09:fe:52:eb:94:a9:af:47:60:73:3a: ee:aa:48:20:d3:5a:53:4a:b0:53:c1:ba:97:e4:15:38:6c:77: 3d:48:ef:5a:fd:27:42:44:f1:fd:b6:b5:cf:34:5d:6e:da:a9: df:0a:11:a3:b7:f1:2d:e1:d1:c0:8f:31:d2:18:d5:db:57:55: 56:fc:a5:ce:19:08:5a:83:58:e3:17:a5:ee:8b:18:a3:c4:48: 1b:82:5c:14:6a:b4:7d:6c:3f:c4:ad:3b:0a:f0:4d:6c:58:89: 5d:f2:89:4f:cc:25:4d:ae:53:4d:46:94:a3:b7:9e:16:f1:4b: 6b:4a:90:54:30:22:7a:1b:cd:3c:63:98:b4:dd:9b:99:29:99: 96:9f:4c:ef:33:3f:b2:f9:d7:5f:ee:c3:c2:a1:ab:37:03:f2: fc:ed:05:1a:74:aa:24:df:b6:78:84:ef:5b:4c:03:fb:d4:b2: 9c:86:ec:e9:58:2c:64:9b:2b:cb:b5:25:d5:0b:1a:40:4d:ed: c0:98:ea:4c:05:bd:93:e6:03:e5:1b:b2:16:6d:ee:20:c1:b6: 87:59:bb:e8:98:48:4e:3e:46:f3:b2:a5:49:47:0b:28:ce:8f: 79:d1:8a:ce:22:c8:b1:8c:14:fb:2e:a9:f6:99:18:be:59:9f: 7e:57:c0:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdiYy1jOWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVgElNMj5XfbPGCyqNnEbSzStQVCvLoX56QOF252G5IUU27yijH6v8GydMNe JQieYKmVYPn3xAdyjkroli54zstMFs0DppXw4+hZxYLdhZRfjsDFQrew2PUffKie U/F96DTpxacojFPWcYU5SF2rMjow/Z3IkauBK0/r4b2Do2XztWOLs4gvpg0t1Vea eZhSGgdIMzgisxa8Oz/9CCBntAnqkA5wLs7OtxxAPhpNS/X/S3PAkYzYUmLiFFnE fOe1NR6M+dCBsiZynxMNNM40MQA4UttJW+DyTkd1sc5h+nlMJ8ZPHdsNY0ad0Aa2 94ONytTXja6eBUhF3f1sexjDCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEIOcHUC jF4a5yX/M2Ib5iUSEVDlMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0M4OEU1QTJF RDRCMTFGMDg1MjE0MjQ1NTA2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWP9MA0GCSqGSIb3DQEBCwUAA4IBAQAtTSFrJQPsCf5S65Spr0dg czruqkgg01pTSrBTwbqX5BU4bHc9SO9a/SdCRPH9trXPNF1u2qnfChGjt/Et4dHA jzHSGNXbV1VW/KXOGQhag1jjF6XuixijxEgbglwUarR9bD/ErTsK8E1sWIld8olP zCVNrlNNRpSjt54W8UtrSpBUMCJ6G808Y5i03ZuZKZmWn0zvMz+y+ddf7sPCoas3 A/L87QUadKok37Z4hO9bTAP71LKchuzpWCxkmyvLtSXVCxpATe3AmOpMBb2T5gPl G7IWbe4gwbaHWbvomEhOPkbzsqVJRwsozo950YrOIsixjBT7Lqn2mRi+WZ9+V8Ae -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:27 2026 by rpki-client