$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa File: 8C4B0B6E7CB411EF83786972C4F9AE02.roa (raw, json) Hash identifier: ++CaCGpbQ5b72TxoX7dbST4I8/7DH/DCoG6orS5Q05I= Subject key identifier: 6D:41:56:4F:D7:15:55:CC:49:33:C4:E7:21:F7:F4:98:E8:DF:33:C3 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3127 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:20:07 +0000 ROA not before: Mon 06 Jul 2026 16:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149557 IP address blocks: 160.187.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12583 (0x3127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd5b6-e236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:e0:93:85:50:11:06:33:18:88:ad:23:df: 01:63:95:6f:7d:b0:1b:ca:07:ef:ae:da:32:8b:6e: 36:52:97:88:e6:fa:b2:c9:54:bb:7e:d0:95:22:bf: 61:a5:09:96:c2:ad:e6:81:78:37:49:0d:a1:7d:57: 69:a6:71:9c:b3:46:09:b6:0a:87:3d:41:96:6b:f1: 37:f3:06:8b:fe:ab:6b:51:ec:9a:36:2f:e6:d6:aa: a5:64:3e:88:49:e4:7b:68:55:92:e2:7d:10:bd:ee: bf:f6:99:2f:d1:bf:5a:9a:f0:00:e7:a4:dd:e4:ca: 6a:a1:29:f4:f0:63:de:dc:99:d6:6f:e7:9f:f9:72: 21:60:24:d3:6a:2f:0a:54:75:f9:25:13:6f:b2:22: 28:6f:88:9e:af:25:f0:20:27:9b:36:52:c5:5b:5c: 15:99:f9:73:d4:31:d5:3e:e9:6f:2d:54:c0:b9:2b: 19:71:9c:87:86:15:4d:5d:4d:ae:41:dd:9f:b1:d2: 9a:38:03:9b:6c:26:13:be:4f:43:dc:74:a0:f4:17: c7:27:31:32:17:11:b6:0b:60:5a:90:f4:99:c1:e2: 3d:64:bd:ca:6b:d6:fb:ba:63:84:c7:d4:be:32:e5: e5:08:d7:b6:1f:09:34:85:31:23:70:2c:67:da:db: 4b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:41:56:4F:D7:15:55:CC:49:33:C4:E7:21:F7:F4:98:E8:DF:33:C3 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8C4B0B6E7CB411EF83786972C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.48.0/24 Signature Algorithm: sha256WithRSAEncryption c0:36:d2:fb:8c:52:64:ae:26:b9:0f:89:75:f9:4d:25:de:76: cf:26:24:df:12:4b:4c:b7:21:6d:be:f3:17:2e:15:35:4e:47: a3:d7:f2:d5:8b:c1:8d:ee:27:29:46:7d:d8:dd:d0:77:0b:a9: d0:9a:f2:ec:a9:39:2f:15:85:66:45:c9:c4:7d:bd:a6:4d:c0: c2:8e:03:a0:43:3c:b0:3d:27:a7:99:02:94:f1:12:2d:cf:4d: 0f:8a:b6:a4:b0:56:76:d4:50:b8:7a:30:12:98:e8:71:86:61: 27:9a:3a:f5:85:de:46:4a:d3:a9:8e:3a:d0:fc:dc:8a:6c:e9: 0e:c9:a2:a7:71:51:ee:2d:2d:02:cb:dc:e4:15:90:89:dc:50: 14:60:a4:a3:bd:f1:05:d7:0e:1e:a2:6f:1f:fe:c8:c0:39:32: 1d:e3:be:20:86:46:59:1d:20:aa:61:d5:20:d9:16:87:39:71: c2:e2:0c:c5:85:3e:c4:cb:4a:0a:4f:f1:c2:bc:6b:2e:4d:c7: 79:16:f5:14:c5:03:00:5c:ff:84:62:a5:51:71:61:7e:3a:ed: 16:b1:16:cc:ef:cb:21:c7:6d:ef:b6:99:eb:32:39:30:d6:3d: 01:f8:14:c2:ff:cb:54:2c:f0:35:9e:21:a1:3c:f5:19:ec:b1: 92:66:43:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMDA3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDViNi1lMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6vgk4VQEQYzGIitI98BY5VvfbAbygfvrtoyi242UpeI5vqyyVS7ftCVIr9h pQmWwq3mgXg3SQ2hfVdppnGcs0YJtgqHPUGWa/E38waL/qtrUeyaNi/m1qqlZD6I SeR7aFWS4n0Qve6/9pkv0b9amvAA56Td5MpqoSn08GPe3JnWb+ef+XIhYCTTai8K VHX5JRNvsiIob4ieryXwICebNlLFW1wVmflz1DHVPulvLVTAuSsZcZyHhhVNXU2u Qd2fsdKaOAObbCYTvk9D3HSg9BfHJzEyFxG2C2BakPSZweI9ZL3Ka9b7umOEx9S+ MuXlCNe2Hwk0hTEjcCxn2ttLXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG1BVk/X FVXMSTPE5yH39Jjo3zPDMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEM0QjBCNkU3 Q0I0MTFFRjgzNzg2OTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoLswMA0GCSqGSIb3DQEBCwUAA4IBAQDANtL7jFJkria5D4l1+U0l 3nbPJiTfEktMtyFtvvMXLhU1Tkej1/LVi8GN7icpRn3Y3dB3C6nQmvLsqTkvFYVm RcnEfb2mTcDCjgOgQzywPSenmQKU8RItz00PiraksFZ21FC4ejASmOhxhmEnmjr1 hd5GStOpjjrQ/NyKbOkOyaKncVHuLS0Cy9zkFZCJ3FAUYKSjvfEF1w4eom8f/sjA OTId474ghkZZHSCqYdUg2RaHOXHC4gzFhT7Ey0oKT/HCvGsuTcd5FvUUxQMAXP+E YqVRcWF+Ou0WsRbM78shx23vtpnrMjkw1j0B+BTC/8tULPA1niGhPPUZ7LGSZkMj -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:30 2026 by rpki-client