$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa File: 878F32CAA5C711F0A1CA3540C4F9AE02.roa (raw, json) Hash identifier: szL10TuxkQnDRvJAXBab2LU17UQOr8jwS/56FmcbiVQ= Subject key identifier: CA:B5:8D:F2:E8:2B:F1:90:1B:49:06:E9:10:9C:90:65:48:E1:8A:09 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31F0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:26:44 +0000 ROA not before: Mon 06 Jul 2026 16:26:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154027 IP address blocks: 165.101.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12784 (0x31f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:26:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd744-370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:13:ad:69:f6:45:13:b2:04:e2:20:ed:92:4c: 0e:93:9f:60:b5:48:19:70:5d:e5:64:b6:c1:67:0c: 0f:f5:7c:dc:29:a0:ba:a7:3d:c2:16:28:b5:0e:b9: 63:be:65:f9:43:19:c7:8f:4b:f7:3d:c4:78:fb:37: 87:c8:74:cc:54:0f:09:c7:6e:54:94:66:fc:bc:8a: b0:ef:21:49:04:eb:76:c0:62:be:d0:6e:d4:25:2c: 42:28:d2:d6:ce:70:e8:ad:58:21:f3:19:44:fc:7d: 22:16:bc:35:52:26:df:8c:f9:bb:c7:a9:ef:66:4b: 07:dd:d9:09:39:18:52:0f:d5:0d:65:6c:8e:df:16: ba:05:dc:ba:80:fb:5d:fa:64:6c:7f:6c:58:3c:bb: a6:65:01:41:f4:b2:4a:7c:d2:71:b8:ea:06:a3:c0: c7:5e:9a:64:01:49:29:6f:63:91:a5:36:d6:22:52: 7f:ae:f3:42:91:7a:af:33:f3:54:27:82:0e:07:32: 36:d4:6f:d9:18:0c:e3:22:d4:a3:37:e4:3c:a7:69: d5:24:3c:c1:69:86:cf:b6:b6:fa:2f:ee:e4:c3:85: 5b:9c:42:52:da:df:02:5e:b0:99:ac:2b:04:48:71: a5:70:d2:5b:c5:f9:b9:f1:44:34:4b:4a:ec:ea:09: 41:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B5:8D:F2:E8:2B:F1:90:1B:49:06:E9:10:9C:90:65:48:E1:8A:09 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/878F32CAA5C711F0A1CA3540C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.138.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:55:74:11:27:16:40:97:95:be:39:60:90:ce:8e:89:a2:7a: a3:e3:33:3d:3e:70:e6:f9:07:1f:d8:17:32:df:75:b8:9e:63: 17:75:bd:43:40:8f:9f:4f:68:62:03:58:39:2f:db:b9:e8:10: 6d:bf:07:b9:31:1f:d5:5e:a2:dd:be:50:e9:bb:08:57:7e:d3: 6e:c6:02:e9:23:8c:cd:1c:57:13:38:f6:f4:31:8f:de:e3:57: d0:07:1a:e3:91:28:ca:72:73:5f:c4:2b:d8:eb:73:f8:1f:b8: 13:73:d5:9e:c8:45:3a:f6:39:b9:e0:fd:2f:78:bc:02:7b:fa: 11:b5:a3:ff:95:2b:04:54:b7:37:f5:52:e2:6a:85:49:b6:72: a6:1e:bb:79:cd:23:3b:34:97:5d:7a:12:a0:3c:85:bf:ef:54: b0:3e:7a:95:a4:4e:b8:25:8b:8c:73:50:bb:42:78:29:40:6f: a6:97:81:46:46:a7:b9:d7:61:c1:c3:e3:1c:af:63:89:2b:8f: 84:11:aa:2b:c2:8c:cd:1c:ed:69:16:f6:fc:71:08:52:5d:f1: 7c:2b:cd:22:4e:39:ce:26:cf:2c:80:79:81:6e:81:3b:40:4a: 20:69:fc:79:0d:07:eb:61:c8:fb:71:30:e0:31:b9:b8:0e:aa: 3e:02:37:a9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNjQ0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc0NC0zNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hOtafZFE7IE4iDtkkwOk59gtUgZcF3lZLbBZwwP9XzcKaC6pz3CFii1Drlj vmX5QxnHj0v3PcR4+zeHyHTMVA8Jx25UlGb8vIqw7yFJBOt2wGK+0G7UJSxCKNLW znDorVgh8xlE/H0iFrw1UibfjPm7x6nvZksH3dkJORhSD9UNZWyO3xa6Bdy6gPtd +mRsf2xYPLumZQFB9LJKfNJxuOoGo8DHXppkAUkpb2ORpTbWIlJ/rvNCkXqvM/NU J4IOBzI21G/ZGAzjItSjN+Q8p2nVJDzBaYbPtrb6L+7kw4VbnEJS2t8CXrCZrCsE SHGlcNJbxfm58UQ0S0rs6glBcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMq1jfLo K/GQG0kG6RCckGVI4YoJMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvODc4RjMyQ0FB NUM3MTFGMEExQ0EzNTQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWWKMA0GCSqGSIb3DQEBCwUAA4IBAQAPVXQRJxZAl5W+OWCQzo6J onqj4zM9PnDm+Qcf2Bcy33W4nmMXdb1DQI+fT2hiA1g5L9u56BBtvwe5MR/VXqLd vlDpuwhXftNuxgLpI4zNHFcTOPb0MY/e41fQBxrjkSjKcnNfxCvY63P4H7gTc9We yEU69jm54P0veLwCe/oRtaP/lSsEVLc39VLiaoVJtnKmHrt5zSM7NJddehKgPIW/ 71SwPnqVpE64JYuMc1C7QngpQG+ml4FGRqe512HBw+Mcr2OJK4+EEaorwozNHO1p Fvb8cQhSXfF8K80iTjnOJs8sgHmBboE7QEogafx5DQfrYcj7cTDgMbm4Dqo+Ajep -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:35 2026 by rpki-client