$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B0260988BDDE11EA9977C550C4F9AE02.roa File: B0260988BDDE11EA9977C550C4F9AE02.roa (raw, json) Hash identifier: ZYGQBxCnYaPG2cRtInPt6Ycjvgz8h3lTUJpHoq/Pvgg= Subject key identifier: FE:58:4F:10:CC:54:B3:3B:9C:2C:15:61:6A:EF:2A:15:EC:FF:0F:E1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2E67 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B0260988BDDE11EA9977C550C4F9AE02.roa Signing time: Sun 31 May 2026 16:17:35 +0000 ROA not before: Sun 31 May 2026 16:17:35 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 132524 IP address blocks: 158.144.0.0/21 maxlen: 24 158.144.8.0/23 maxlen: 24 158.144.10.0/24 maxlen: 24 158.144.21.0/24 maxlen: 24 158.144.22.0/23 maxlen: 24 158.144.24.0/24 maxlen: 24 158.144.26.0/23 maxlen: 24 158.144.28.0/22 maxlen: 24 158.144.32.0/21 maxlen: 24 158.144.40.0/23 maxlen: 24 158.144.47.0/24 maxlen: 24 158.144.48.0/20 maxlen: 24 158.144.64.0/18 maxlen: 24 158.144.128.0/19 maxlen: 24 158.144.160.0/22 maxlen: 24 158.144.184.0/24 maxlen: 24 158.144.192.0/24 maxlen: 24 158.144.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11879 (0x2e67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:17:35 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c5f1f-03db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:57:0d:fa:7f:44:31:d5:ad:5d:87:92:a3: 5d:64:3e:ea:27:ba:e3:18:dc:48:15:b7:df:ca:c6: 4d:57:2a:44:78:53:d9:1e:ef:e5:1a:2e:1a:8d:06: e6:2c:87:74:57:d3:b4:51:fb:89:98:fb:6a:f4:2f: 0a:43:0f:7e:1b:34:4b:04:2f:e6:40:19:64:ed:4a: e4:2f:5a:77:85:8a:af:d9:54:92:27:96:af:0f:89: f2:6b:03:07:d9:ae:5f:06:2e:9d:bd:63:68:02:3d: ed:a2:0e:35:5c:80:83:18:2a:62:2d:78:03:4d:17: e2:0d:4d:7b:aa:5e:8c:a1:30:87:a9:af:be:56:a9: 15:61:ba:16:fe:7e:91:b3:3f:93:55:a9:e5:fc:75: 81:58:2d:b1:29:71:bb:03:26:dc:7a:80:ea:08:81: b8:98:82:96:18:66:ca:8f:90:02:ad:6a:f3:b9:27: 98:20:d6:bc:0b:64:1b:16:3b:9c:82:5f:2c:ba:75: d1:cd:e1:3a:17:3e:9b:fd:69:eb:5c:da:a8:26:db: 87:53:0b:17:38:11:b0:fe:27:17:43:59:cc:2b:ed: 73:ec:21:7a:37:9c:cb:99:cf:e2:81:a0:8a:59:cc: 3b:5f:01:51:de:34:29:2b:9b:50:3b:46:1f:a2:74: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:58:4F:10:CC:54:B3:3B:9C:2C:15:61:6A:EF:2A:15:EC:FF:0F:E1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B0260988BDDE11EA9977C550C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 158.144.0.0-158.144.10.255 158.144.21.0-158.144.24.255 158.144.26.0-158.144.41.255 158.144.47.0-158.144.163.255 158.144.184.0/24 158.144.192.0/24 158.144.200.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:13:36:82:1c:0e:cf:ad:53:82:2f:df:5b:71:b0:dc:e3:cd: 69:00:e5:5d:57:18:57:b4:49:e4:de:a9:ef:13:db:f2:fb:49: bc:30:69:f2:11:a7:2b:5f:2b:86:0e:d9:28:ad:f1:af:ff:6c: 40:9e:c2:b8:06:43:41:90:ba:2d:b3:e9:aa:12:75:6d:07:ce: 43:c1:a4:5c:ac:a1:1f:23:39:56:a8:76:cf:82:ad:cc:7e:a7: 07:c4:69:8b:4a:fe:ca:ca:10:52:61:5b:cf:f0:50:f4:c6:cf: d0:8b:29:22:ac:c6:b5:1a:e8:65:f8:41:9d:ad:57:41:3d:da: 60:1a:1a:1e:1b:8a:b9:ab:f4:79:49:81:77:06:aa:3e:34:5a: dc:f1:ed:51:0e:50:67:85:97:21:f3:63:e9:7f:44:86:0f:6a: 51:7d:77:79:30:30:29:35:0f:8f:a5:f2:62:75:22:f9:3d:2a: f7:5a:b7:8b:a4:61:a0:ae:6a:6c:b5:de:53:3f:3c:61:62:68: 7f:5e:a5:b8:75:7c:3b:a7:df:53:4a:67:ba:11:ea:76:e4:61: 69:90:a2:74:a8:d8:39:7b:90:ca:43:bf:c1:02:16:ca:35:97: a8:ec:6e:f2:83:98:cd:83:0e:c8:ed:39:41:a2:04:df:7a:59: a0:e7:5d:22 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICLmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYxNzM1WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNWYxZi0wM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz71XDfp/RDHVrV2HkqNdZD7qJ7rjGNxIFbffysZNVypEeFPZHu/lGi4ajQbm LId0V9O0UfuJmPtq9C8KQw9+GzRLBC/mQBlk7UrkL1p3hYqv2VSSJ5avD4nyawMH 2a5fBi6dvWNoAj3tog41XICDGCpiLXgDTRfiDU17ql6MoTCHqa++VqkVYboW/n6R sz+TVanl/HWBWC2xKXG7AybceoDqCIG4mIKWGGbKj5ACrWrzuSeYINa8C2QbFjuc gl8sunXRzeE6Fz6b/WnrXNqoJtuHUwsXOBGw/icXQ1nMK+1z7CF6N5zLmc/igaCK Wcw7XwFR3jQpK5tQO0YfonSCqQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFP5YTxDM VLM7nCwVYWrvKhXs/w/hMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjAyNjA5ODhC RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMGIGCCsGAQUFBwEHAQH/BFMwUTBP BAIAATBJMAsDAwSekAMEAJ6QCjAMAwQAnpAVAwQAnpAYMAwDBAGekBoDBAGekCgw DAMEAJ6QLwMEAp6QoAMEAJ6QuAMEAJ6QwAMEAp6QyDANBgkqhkiG9w0BAQsFAAOC AQEALBM2ghwOz61Tgi/fW3Gw3OPNaQDlXVcYV7RJ5N6p7xPb8vtJvDBp8hGnK18r hg7ZKK3xr/9sQJ7CuAZDQZC6LbPpqhJ1bQfOQ8GkXKyhHyM5Vqh2z4KtzH6nB8Rp i0r+ysoQUmFbz/BQ9MbP0IspIqzGtRroZfhBna1XQT3aYBoaHhuKuav0eUmBdwaq PjRa3PHtUQ5QZ4WXIfNj6X9Ehg9qUX13eTAwKTUPj6XyYnUi+T0q91q3i6RhoK5q bLXeUz88YWJof16luHV8O6ffU0pnuhHqduRhaZCidKjYOXuQykO/wQIWyjWXqOxu 8oOYzYMOyO05QaIE33pZoOddIg== -----END CERTIFICATE-----Generated at Sat Jun 6 09:45:57 2026 by rpki-client