$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/AC4128B20ACC11F09AAE4838C4F9AE02.roa File: AC4128B20ACC11F09AAE4838C4F9AE02.roa (raw, json) Hash identifier: 0ghV1C45mavarvQtgurj2hP9chqtvYognV/ItX+To84= Subject key identifier: D5:24:40:99:FA:FD:A5:90:AC:D0:2F:72:47:AD:B1:41:39:19:1A:30 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3163 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/AC4128B20ACC11F09AAE4838C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:22:07 +0000 ROA not before: Mon 06 Jul 2026 16:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152494 IP address blocks: 157.66.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12643 (0x3163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd62f-2909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:87:a1:c3:9e:ca:99:4e:46:74:06:68:61:0a: 73:14:22:6b:53:2b:b1:0b:9a:b8:bf:7f:68:20:01: 8a:e5:09:26:d9:9a:0b:e5:b9:3e:89:ba:3d:a2:b3: 91:e7:56:47:6a:9a:5c:24:07:e9:ce:8e:11:93:94: 77:8f:3b:29:50:70:c4:b2:2a:b8:b1:2e:ba:1e:03: 85:1d:73:cb:d9:3d:08:71:39:4f:79:13:46:b4:e7: 34:df:e3:9f:6d:3a:16:9d:28:d9:b7:72:4c:1f:f3: 9f:a7:6a:58:5e:ea:32:de:10:6b:f6:4b:54:d8:b4: cf:14:d2:a7:74:72:e0:93:08:65:c4:38:6e:8d:3b: 56:5a:72:92:fa:b7:73:c8:a8:5e:7f:3d:da:3e:0c: 5f:0d:d5:bf:d6:45:6e:6d:20:34:a2:10:1b:04:20: 6f:69:64:1b:55:44:5c:a4:e6:fc:2b:1d:b5:7f:10: 1c:fa:48:be:4f:76:d3:ee:7c:bb:fd:9b:e2:1e:b2: a5:cc:21:76:a0:6c:b6:05:24:f5:2b:8a:9e:6b:01: 54:63:b0:33:05:51:26:1e:98:ef:6b:e8:91:85:e5: 9a:55:4b:9b:49:b9:5b:3f:0f:91:49:25:17:0c:f6: 24:9c:8d:d2:3d:fb:d5:9e:10:c9:e6:0c:4f:a5:fb: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:24:40:99:FA:FD:A5:90:AC:D0:2F:72:47:AD:B1:41:39:19:1A:30 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/AC4128B20ACC11F09AAE4838C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.44.0/23 Signature Algorithm: sha256WithRSAEncryption 63:bc:d9:3b:6d:f4:33:15:69:31:b3:df:74:63:5c:96:41:b5: b7:8f:55:4a:60:f9:99:fd:76:6d:00:4b:0d:86:cd:a0:26:4f: 08:70:16:be:fa:be:db:0b:ab:cc:3e:dc:07:b6:88:95:da:0b: a7:38:6a:57:21:ee:93:a5:3b:07:a6:1e:6d:cd:77:a4:62:77: 87:49:f0:fd:fe:be:cb:67:60:d3:76:fa:8e:aa:a2:a5:0c:ad: bf:d1:af:4d:a5:84:78:b0:90:d9:ad:a7:42:1a:30:bb:89:5f: 33:af:72:5f:3b:79:68:4a:86:8e:90:e2:4a:32:09:17:79:d1: 06:49:23:2c:6c:f9:57:9f:a8:9b:52:f0:54:66:15:15:6a:73: 69:99:4e:cd:a1:18:5c:f4:ff:82:51:4a:8e:5e:4f:dd:82:90: a5:00:c4:2b:04:5b:6e:55:31:67:bd:a0:60:2a:48:67:65:1e: 4a:ee:a9:a0:31:80:9f:b0:be:37:ef:0b:f3:7d:97:65:b5:e4: f6:a9:63:f8:a9:ab:a6:5c:30:cb:25:61:37:15:05:38:02:33: f5:95:b0:f7:eb:1c:2a:21:c2:37:8d:6a:73:69:b9:9d:aa:72: af:db:2a:e6:cb:d7:4b:c7:37:47:70:66:4f:89:60:98:07:d4: d8:3b:a5:8b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMjA3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDYyZi0yOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Yehw57KmU5GdAZoYQpzFCJrUyuxC5q4v39oIAGK5Qkm2ZoL5bk+ibo9orOR 51ZHappcJAfpzo4Rk5R3jzspUHDEsiq4sS66HgOFHXPL2T0IcTlPeRNGtOc03+Of bToWnSjZt3JMH/Ofp2pYXuoy3hBr9ktU2LTPFNKndHLgkwhlxDhujTtWWnKS+rdz yKhefz3aPgxfDdW/1kVubSA0ohAbBCBvaWQbVURcpOb8Kx21fxAc+ki+T3bT7ny7 /ZviHrKlzCF2oGy2BST1K4qeawFUY7AzBVEmHpjva+iRheWaVUubSblbPw+RSSUX DPYknI3SPfvVnhDJ5gxPpfvlQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNUkQJn6 /aWQrNAvcketsUE5GRowMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQUM0MTI4QjIw QUNDMTFGMDlBQUU0ODM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnUIsMA0GCSqGSIb3DQEBCwUAA4IBAQBjvNk7bfQzFWkxs990Y1yW QbW3j1VKYPmZ/XZtAEsNhs2gJk8IcBa++r7bC6vMPtwHtoiV2gunOGpXIe6TpTsH ph5tzXekYneHSfD9/r7LZ2DTdvqOqqKlDK2/0a9NpYR4sJDZradCGjC7iV8zr3Jf O3loSoaOkOJKMgkXedEGSSMsbPlXn6ibUvBUZhUVanNpmU7NoRhc9P+CUUqOXk/d gpClAMQrBFtuVTFnvaBgKkhnZR5K7qmgMYCfsL437wvzfZdlteT2qWP4qaumXDDL JWE3FQU4AjP1lbD36xwqIcI3jWpzabmdqnKv2yrmy9dLxzdHcGZPiWCYB9TYO6WL -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:56 2026 by rpki-client