$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8475C7C86E0511F1BDCA774E68A30FBC.roa File: 8475C7C86E0511F1BDCA774E68A30FBC.roa (raw, json) Hash identifier: eJLnLyWjGWPrxgE1gpPB7w2hXtizW+Tr8JwHgUzSdXM= Subject key identifier: BB:52:4C:6C:A0:61:8A:57:65:DD:12:1A:86:8A:AD:BF:08:C5:95:0C Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 321A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8475C7C86E0511F1BDCA774E68A30FBC.roa Signing time: Mon 06 Jul 2026 16:28:13 +0000 ROA not before: Mon 06 Jul 2026 16:28:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154644 IP address blocks: 162.4.14.0/24 maxlen: 24 162.4.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12826 (0x321a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd79d-1fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:64:80:4b:74:43:1f:9b:1b:59:8b:85:42: 9f:d2:b3:3a:3d:a9:aa:b1:b3:be:88:d4:9a:30:08: c0:c1:1a:20:cc:66:db:57:76:ed:98:b5:67:13:d9: aa:cb:08:a4:26:b1:4e:a3:6c:4b:45:a8:bf:7d:09: 4e:ea:48:0c:b0:df:4a:54:4a:0a:2d:89:e4:bd:b9: f5:38:6f:68:9a:03:5c:cd:68:99:da:7a:63:40:67: b4:17:00:05:03:4f:26:47:37:d3:70:50:46:b2:29: ca:da:98:e0:73:c1:c1:0f:20:1f:7f:73:59:7a:7b: 9f:c7:14:97:b2:08:43:28:14:e3:b2:c7:be:68:60: 42:5c:91:2f:15:eb:60:61:a2:f9:42:c4:a6:73:c6: c1:fc:55:77:1d:c9:fb:77:58:cb:bf:90:30:30:81: e2:62:a4:97:d6:11:06:cc:ee:19:fd:2f:87:e0:5d: dc:8b:36:86:29:0a:d9:e8:75:e4:f2:21:a1:55:0e: a9:81:e7:91:69:fb:99:87:f0:77:28:4b:68:a8:17: 5d:64:6b:c7:57:4a:03:ed:14:81:c1:38:4c:c8:84: 2a:90:38:7b:a3:c8:73:86:70:69:4b:71:0f:57:d9: f1:54:11:da:08:fb:30:9f:8d:6d:fd:cc:81:e1:75: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:52:4C:6C:A0:61:8A:57:65:DD:12:1A:86:8A:AD:BF:08:C5:95:0C X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8475C7C86E0511F1BDCA774E68A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 162.4.14.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:33:47:c7:d5:37:d6:12:a9:f7:7c:c6:16:72:38:03:a4:24: 39:41:31:27:e7:dc:12:58:64:b3:eb:44:99:b2:e6:bf:68:c2: fd:f3:63:69:d1:73:5f:bb:7c:80:f8:6f:96:cb:98:cb:0c:24: 95:51:8b:e7:36:c3:80:6a:08:49:22:ec:c1:ff:ed:cd:33:7f: 9a:b8:2d:85:76:51:d5:0f:2b:fb:f7:bf:3b:06:39:d0:81:bc: 00:4a:a7:cf:93:1b:d8:b4:eb:6d:08:7e:4d:95:ad:14:2f:63: de:bf:9e:7d:67:05:c9:f5:f1:56:c2:f5:28:78:5a:6d:b5:4f: d6:bb:c6:00:cc:30:fb:42:89:de:33:87:ff:a4:92:b2:7d:33: 5c:a1:c3:06:07:ab:06:1c:b4:60:23:cf:e3:29:ba:27:0b:c6: 79:ba:01:d3:66:22:9e:73:58:b6:d5:8b:41:73:5a:32:cd:c0: f5:3e:f2:10:f4:5c:d8:29:ef:44:e7:d1:c0:f8:68:d1:c3:cc: fe:e7:73:81:cc:f7:fe:47:9b:12:f2:6f:d3:11:2d:b5:67:89: f0:c2:91:56:0c:e2:17:ea:a5:f7:24:2a:2c:c6:75:e5:16:bb: c9:ec:ca:b5:a2:79:83:65:fb:c8:45:c1:cc:6c:2c:d1:1c:97: 84:4d:9d:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODEzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc5ZC0xZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGBkgEt0Qx+bG1mLhUKf0rM6PamqsbO+iNSaMAjAwRogzGbbV3btmLVnE9mq ywikJrFOo2xLRai/fQlO6kgMsN9KVEoKLYnkvbn1OG9omgNczWiZ2npjQGe0FwAF A08mRzfTcFBGsinK2pjgc8HBDyAff3NZenufxxSXsghDKBTjsse+aGBCXJEvFetg YaL5QsSmc8bB/FV3Hcn7d1jLv5AwMIHiYqSX1hEGzO4Z/S+H4F3cizaGKQrZ6HXk 8iGhVQ6pgeeRafuZh/B3KEtoqBddZGvHV0oD7RSBwThMyIQqkDh7o8hzhnBpS3EP V9nxVBHaCPswn41t/cyB4XWCNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLtSTGyg YYpXZd0SGoaKrb8IxZUMMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODQ3NUM3Qzg2 RTA1MTFGMUJEQ0E3NzRFNjhBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBogQOMA0GCSqGSIb3DQEBCwUAA4IBAQB6M0fH1TfWEqn3fMYWcjgD pCQ5QTEn59wSWGSz60SZsua/aML982Np0XNfu3yA+G+Wy5jLDCSVUYvnNsOAaghJ IuzB/+3NM3+auC2FdlHVDyv79787BjnQgbwASqfPkxvYtOttCH5Nla0UL2Pev559 ZwXJ9fFWwvUoeFpttU/Wu8YAzDD7QoneM4f/pJKyfTNcocMGB6sGHLRgI8/jKbon C8Z5ugHTZiKec1i21YtBc1oyzcD1PvIQ9FzYKe9E59HA+GjRw8z+53OBzPf+R5sS 8m/TES21Z4nwwpFWDOIX6qX3JCosxnXlFrvJ7Mq1onmDZfvIRcHMbCzRHJeETZ1j -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:05 2026 by rpki-client