$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/959B4FA2469A11F08B2A7F37C4F9AE02.roa File: 959B4FA2469A11F08B2A7F37C4F9AE02.roa (raw, json) Hash identifier: K1oaGoSgD8Q+Hoe6UCTYRrymZdwYIhkmuFEOHmSNUL4= Subject key identifier: 8C:D1:40:76:22:69:A6:4A:A8:26:42:1F:4A:3D:16:D5:15:3C:1C:A2 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31E4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/959B4FA2469A11F08B2A7F37C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:26:20 +0000 ROA not before: Mon 06 Jul 2026 16:26:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153949 IP address blocks: 165.99.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12772 (0x31e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:26:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd72c-b3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:b3:d1:ed:4f:1e:77:ae:68:e3:c0:71:8e: 8b:42:c3:8b:de:3b:cf:60:5f:b3:6b:2f:fb:35:c4: c7:1c:65:7d:57:be:d9:ee:6d:9d:4e:dd:56:84:ea: 60:f2:44:d9:96:17:40:12:f5:9b:41:e1:dd:b6:f9: 83:87:7a:b9:db:8c:ad:5c:0f:3d:eb:8a:ce:2d:30: 82:6c:81:1e:dd:cd:d6:74:98:69:01:ca:fb:91:e7: 99:66:1c:6a:27:a0:c5:1d:ae:3c:cc:6c:bd:ca:c0: 1c:2d:de:f8:88:7c:a9:13:77:e4:47:eb:1f:d9:0f: 1b:85:1c:4b:cb:1d:b9:e1:e3:87:a9:b8:22:f0:4e: 97:ce:39:42:83:2a:9e:7e:1f:23:8a:da:c1:db:6b: f5:d4:99:ba:66:ea:b0:6a:99:a8:e8:46:3e:4a:03: 4c:77:d4:48:18:92:04:ad:3c:f4:64:59:cc:0e:bd: f9:08:15:e0:57:26:69:7a:88:04:41:22:67:63:02: d0:c8:73:12:41:1b:6b:e0:6f:91:88:9e:6f:a0:7b: d9:05:29:07:a5:e4:3f:64:1d:b5:ae:51:43:46:01: 42:f9:cc:a2:b8:c5:9f:80:b2:18:be:1c:d1:ba:15: 65:09:3d:a1:95:9b:43:82:0c:dc:64:3a:09:dd:58: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D1:40:76:22:69:A6:4A:A8:26:42:1F:4A:3D:16:D5:15:3C:1C:A2 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/959B4FA2469A11F08B2A7F37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.210.0/23 Signature Algorithm: sha256WithRSAEncryption 85:92:1b:71:f7:11:0e:13:de:cf:af:0e:8a:e9:e0:18:f0:2f: e3:d9:65:57:dd:f7:f3:55:42:20:aa:94:27:54:00:51:b7:c7: b8:58:db:79:1b:41:05:a9:9c:52:4f:c6:f3:55:3b:36:27:21: 4e:c5:bd:b3:ea:bd:7a:00:ad:6b:13:4d:51:09:b9:8c:93:00: 3c:75:d7:c0:52:07:77:8b:06:b3:66:3a:5d:8a:0d:6b:04:62: 32:8b:05:67:25:af:e9:50:63:f5:7e:fc:9b:87:99:ac:64:ce: a4:b0:2e:0a:d0:2b:8e:3b:08:73:2e:2c:fb:b2:18:86:08:15: 83:ad:36:dc:49:d4:02:f2:3a:07:f2:b6:ba:e2:4f:04:60:4d: a9:42:00:7d:5b:ab:81:d4:5f:5b:38:d7:71:13:ed:61:79:cb: c2:01:c9:47:2a:d9:e6:85:f7:e6:60:5a:38:c8:2f:c2:59:8f: ff:19:03:27:cb:3d:70:d3:2e:27:08:84:22:c2:e7:a9:7a:68: de:b9:84:4a:25:eb:12:fa:cd:49:1e:b9:bc:90:7f:16:1b:9c: 81:e2:ac:2c:43:c6:f6:db:e5:8d:4d:ec:ce:4c:00:ca:52:b2: cf:24:b8:2d:31:43:3f:47:c7:d3:81:da:16:e6:5d:35:6c:4e: 92:6d:d2:87 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNjIwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDcyYy1iM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswiz0e1PHneuaOPAcY6LQsOL3jvPYF+zay/7NcTHHGV9V77Z7m2dTt1WhOpg 8kTZlhdAEvWbQeHdtvmDh3q524ytXA8964rOLTCCbIEe3c3WdJhpAcr7keeZZhxq J6DFHa48zGy9ysAcLd74iHypE3fkR+sf2Q8bhRxLyx254eOHqbgi8E6XzjlCgyqe fh8jitrB22v11Jm6Zuqwapmo6EY+SgNMd9RIGJIErTz0ZFnMDr35CBXgVyZpeogE QSJnYwLQyHMSQRtr4G+RiJ5voHvZBSkHpeQ/ZB21rlFDRgFC+cyiuMWfgLIYvhzR uhVlCT2hlZtDggzcZDoJ3Vi0lQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIzRQHYi aaZKqCZCH0o9FtUVPByiMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTU5QjRGQTI0 NjlBMTFGMDhCMkE3RjM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWPSMA0GCSqGSIb3DQEBCwUAA4IBAQCFkhtx9xEOE97Prw6K6eAY 8C/j2WVX3ffzVUIgqpQnVABRt8e4WNt5G0EFqZxST8bzVTs2JyFOxb2z6r16AK1r E01RCbmMkwA8ddfAUgd3iwazZjpdig1rBGIyiwVnJa/pUGP1fvybh5msZM6ksC4K 0CuOOwhzLiz7shiGCBWDrTbcSdQC8joH8ra64k8EYE2pQgB9W6uB1F9bONdxE+1h ecvCAclHKtnmhffmYFo4yC/CWY//GQMnyz1w0y4nCIQiwuepemjeuYRKJesS+s1J Hrm8kH8WG5yB4qwsQ8b22+WNTezOTADKUrLPJLgtMUM/R8fTgdoW5l01bE6SbdKH -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:24 2026 by rpki-client