$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa File: 8651A204EAC311EF98912624C4F9AE02.roa (raw, json) Hash identifier: 2wSkRhp5QhLwsUYZqQWJPe2/0nRNj1pfa9trPFRClMY= Subject key identifier: 81:E0:EC:FC:D1:95:62:34:7D:34:9C:50:09:D0:48:C8:95:CC:65:48 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31CE Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:25:39 +0000 ROA not before: Mon 06 Jul 2026 16:25:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153284 IP address blocks: 161.248.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12750 (0x31ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:25:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd703-f808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5f:91:3e:d0:3b:f4:d6:0f:f2:75:fd:b1:b3: 8f:51:8f:5b:f3:71:d5:50:c8:12:3b:9e:8d:f8:01: 4d:fc:07:e1:9f:4a:66:4d:ab:4f:35:06:02:a6:bf: 1f:ca:04:ee:98:b4:a7:fc:96:3a:f4:e4:96:43:ea: ea:91:46:be:d4:5d:23:b6:e7:e5:61:7e:b6:7d:2b: 65:53:db:e1:32:51:fa:52:62:94:9a:46:b6:b0:4b: b2:d6:95:d6:6c:34:bb:82:3c:4b:da:15:62:d6:65: b4:8d:15:bf:e5:cf:00:02:3f:27:fd:ce:33:a1:d1: ee:bf:09:c3:c7:98:f7:a6:d7:4f:9c:6a:10:93:40: 17:e8:9d:7c:11:0c:cc:f6:14:89:24:08:93:05:63: d7:cd:46:54:86:84:14:f8:15:ab:a2:b7:7f:df:4e: 87:ce:d6:71:e6:1b:5e:5d:27:bc:e0:57:e5:ac:7d: ad:d3:ed:fc:6e:cd:61:b9:7a:4a:d4:57:97:e6:59: 14:d3:03:a5:1a:e2:38:7a:fc:71:bf:2f:f0:02:af: 74:5b:8c:97:33:3c:72:38:bf:36:6e:03:b7:67:93: 7f:aa:48:59:d2:19:df:f8:c3:f7:7a:1f:36:30:53: 6a:6a:48:00:cc:85:26:e0:56:a0:28:11:d8:1a:76: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E0:EC:FC:D1:95:62:34:7D:34:9C:50:09:D0:48:C8:95:CC:65:48 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8651A204EAC311EF98912624C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.18.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:d9:fe:f7:cc:95:98:c0:8d:48:96:49:81:ec:4f:91:c8:d7: 48:4f:8f:8f:e1:c7:9e:73:15:b9:73:64:81:af:cf:ff:a4:29: 7a:57:a4:94:d1:1c:22:62:d3:bd:26:28:01:18:43:54:57:ef: 7a:47:b9:ed:3b:60:a8:9b:b1:e6:53:e8:40:30:40:c8:cf:07: 2b:fd:61:e6:51:db:da:ea:a2:08:ac:c8:e7:69:12:0e:c6:c5: 63:40:b5:7c:24:14:27:ee:34:e0:0a:af:0a:b5:68:1f:9d:56: 71:71:2d:19:a8:f9:a8:4e:24:a6:74:3a:d6:7b:09:5a:3f:15: c2:96:98:e5:12:34:1d:cf:7d:eb:3c:c8:2e:20:6a:d6:4f:0d: e6:d0:62:e0:ef:31:c1:37:d8:d1:c5:3e:8d:3a:6e:c8:28:29: f4:a9:9b:92:9d:07:68:1a:88:b5:9e:81:66:ba:c0:03:e5:23: d1:4a:cb:fe:ca:93:c3:9e:7f:64:b8:19:db:b7:fe:7f:44:53: f8:ac:9f:2b:72:be:5f:68:e9:11:68:c3:b2:99:3a:68:41:de: 66:80:b9:a2:25:1e:43:da:93:0b:d4:08:c2:31:90:49:8d:ed: 23:2d:54:83:8e:39:d9:ab:d3:de:e3:28:82:81:db:91:18:35: 8d:8e:77:0f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNTM5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDcwMy1mODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7l+RPtA79NYP8nX9sbOPUY9b83HVUMgSO56N+AFN/Afhn0pmTatPNQYCpr8f ygTumLSn/JY69OSWQ+rqkUa+1F0jtuflYX62fStlU9vhMlH6UmKUmka2sEuy1pXW bDS7gjxL2hVi1mW0jRW/5c8AAj8n/c4zodHuvwnDx5j3ptdPnGoQk0AX6J18EQzM 9hSJJAiTBWPXzUZUhoQU+BWrord/306HztZx5hteXSe84FflrH2t0+38bs1huXpK 1FeX5lkU0wOlGuI4evxxvy/wAq90W4yXMzxyOL82bgO3Z5N/qkhZ0hnf+MP3eh82 MFNqakgAzIUm4FagKBHYGnYx9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIHg7PzR lWI0fTScUAnQSMiVzGVIMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODY1MUEyMDRF QUMzMTFFRjk4OTEyNjI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgSMA0GCSqGSIb3DQEBCwUAA4IBAQBr2f73zJWYwI1IlkmB7E+R yNdIT4+P4ceecxW5c2SBr8//pCl6V6SU0RwiYtO9JigBGENUV+96R7ntO2Com7Hm U+hAMEDIzwcr/WHmUdva6qIIrMjnaRIOxsVjQLV8JBQn7jTgCq8KtWgfnVZxcS0Z qPmoTiSmdDrWewlaPxXClpjlEjQdz33rPMguIGrWTw3m0GLg7zHBN9jRxT6NOm7I KCn0qZuSnQdoGoi1noFmusAD5SPRSsv+ypPDnn9kuBnbt/5/RFP4rJ8rcr5faOkR aMOymTpoQd5mgLmiJR5D2pML1AjCMZBJje0jLVSDjjnZq9Pe4yiCgduRGDWNjncP -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:50 2026 by rpki-client