$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A1559E0E88B11F0B04EFFE64E6F56BC.roa File: 4A1559E0E88B11F0B04EFFE64E6F56BC.roa (raw, json) Hash identifier: YWelFYYZ79jtUzLc3LxgmNFpffJBRAC4VyAn9Jydd50= Subject key identifier: 7C:C0:4B:0D:5C:3A:82:C7:44:06:64:A0:CE:33:EC:C1:40:49:3D:E7 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3226 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A1559E0E88B11F0B04EFFE64E6F56BC.roa Signing time: Mon 06 Jul 2026 16:28:35 +0000 ROA not before: Mon 06 Jul 2026 16:28:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24186 IP address blocks: 144.16.0.0/18 maxlen: 24 144.16.192.0/18 maxlen: 24 158.144.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12838 (0x3226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7b3-3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:bd:72:5c:3e:32:8e:d9:bb:b8:29:80:29: ba:51:09:58:bf:f6:21:52:95:22:8e:22:ed:a8:27: fd:d4:c7:2c:1d:70:19:31:7e:8c:fb:88:12:31:28: d0:f0:d0:47:1d:89:2b:d9:b1:8a:ac:12:88:78:0f: a5:83:c3:87:5b:aa:1a:e9:cc:94:33:2a:b4:0f:98: e1:6e:73:65:d7:10:88:fb:1e:7a:a1:f5:c8:19:3d: f5:29:8a:55:98:94:c9:37:48:b4:f7:c7:60:98:4a: 75:cc:04:9c:e0:51:36:16:ea:9f:13:14:d1:c8:7a: 17:1a:96:ca:62:a8:73:01:8a:b9:18:a5:97:85:cb: ac:6b:7d:29:4d:cd:19:73:f5:11:62:4b:5e:c6:6b: 8b:88:88:ef:25:92:ea:77:9c:23:91:63:27:2a:b5: ca:3b:19:08:99:7f:76:06:02:47:25:94:1a:6d:f2: ff:4f:73:57:b1:fe:3f:49:b9:10:b8:6a:9c:ad:29: f9:ef:10:7d:46:0b:b6:fb:93:62:2d:ca:f2:9b:2c: a0:40:e9:fd:8b:25:aa:2c:08:90:c9:cb:19:0b:d0: b8:86:ee:ae:6b:11:65:85:70:e8:1f:85:61:aa:f3: f7:42:df:25:67:1f:da:9a:3d:9b:59:cb:cd:7e:66: 90:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:4B:0D:5C:3A:82:C7:44:06:64:A0:CE:33:EC:C1:40:49:3D:E7 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4A1559E0E88B11F0B04EFFE64E6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 144.16.0.0/18 144.16.192.0/18 158.144.186.0/23 Signature Algorithm: sha256WithRSAEncryption bd:d4:a3:cc:18:03:72:0d:a3:b7:f5:54:62:19:cd:01:5e:33: 68:1d:c0:52:b7:60:cc:3b:f1:d7:bf:ec:d2:84:25:f0:9f:6d: f2:5f:c5:db:f3:85:ab:fc:01:86:e2:2c:98:31:f1:57:b9:c9: ad:d8:95:b2:1c:b0:ff:fb:17:ba:5e:e4:41:41:b9:02:3a:b3: c5:5f:b0:63:44:58:e1:dc:97:b6:c4:77:a6:a0:0f:fd:ef:66: 66:82:63:55:fb:c9:d5:0e:25:54:71:65:05:9f:67:0a:5b:39: 01:25:17:29:db:b0:e6:0e:73:6e:8c:1c:16:3f:6c:68:39:a9: f5:05:96:df:4e:4f:c3:1c:f1:c5:7e:5c:fd:0f:3a:8b:95:8e: 54:27:27:d1:50:59:00:9a:43:2d:a2:c9:bb:6b:12:dc:f5:53: dd:d5:91:a7:37:01:29:b5:cf:aa:87:86:15:2c:c0:93:db:fd: 83:44:3b:9b:60:a9:f5:c7:86:fa:8a:06:2a:a0:f6:e6:6c:79: 64:63:84:4d:89:56:9c:05:e9:1f:59:36:cc:6a:f6:5a:1b:31: 24:18:02:95:8d:6e:14:cb:8b:84:dc:0c:92:ea:16:ee:df:81: 70:08:d0:b0:79:70:26:a1:34:a4:da:ed:b5:b5:ac:af:4f:0c: ad:9f:6e:a2 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICMiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODM1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdiMy0zNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY29clw+Mo7Zu7gpgCm6UQlYv/YhUpUijiLtqCf91McsHXAZMX6M+4gSMSjQ 8NBHHYkr2bGKrBKIeA+lg8OHW6oa6cyUMyq0D5jhbnNl1xCI+x56ofXIGT31KYpV mJTJN0i098dgmEp1zASc4FE2FuqfExTRyHoXGpbKYqhzAYq5GKWXhcusa30pTc0Z c/URYktexmuLiIjvJZLqd5wjkWMnKrXKOxkImX92BgJHJZQabfL/T3NXsf4/SbkQ uGqcrSn57xB9Rgu2+5NiLcrymyygQOn9iyWqLAiQycsZC9C4hu6uaxFlhXDoH4Vh qvP3Qt8lZx/amj2bWcvNfmaQawIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHzASw1c OoLHRAZkoM4z7MFAST3nMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEExNTU5RTBF ODhCMTFGMEIwNEVGRkU2NEU2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQGkBAAAwQGkBDAAwQBnpC6MA0GCSqGSIb3DQEBCwUAA4IBAQC91KPM GANyDaO39VRiGc0BXjNoHcBSt2DMO/HXv+zShCXwn23yX8Xb84Wr/AGG4iyYMfFX ucmt2JWyHLD/+xe6XuRBQbkCOrPFX7BjRFjh3Je2xHemoA/972ZmgmNV+8nVDiVU cWUFn2cKWzkBJRcp27DmDnNujBwWP2xoOan1BZbfTk/DHPHFflz9DzqLlY5UJyfR UFkAmkMtosm7axLc9VPd1ZGnNwEptc+qh4YVLMCT2/2DRDubYKn1x4b6igYqoPbm bHlkY4RNiVacBekfWTbMavZaGzEkGAKVjW4Uy4uE3AyS6hbu34FwCNCweXAmoTSk 2u21tayvTwytn26i -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:57 2026 by rpki-client