$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa File: BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa (raw, json) Hash identifier: ztqL4312HXhwHAeeclXPW9PJqnyntsYBH9b2qa1cPno= Subject key identifier: F7:4F:88:E7:44:FB:A0:69:5F:FF:CA:7F:81:75:50:D5:FB:7A:D7:F5 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31D6 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:25:54 +0000 ROA not before: Mon 06 Jul 2026 16:25:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153299 IP address blocks: 161.248.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12758 (0x31d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:25:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd712-bf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:d2:de:fc:67:85:fd:7f:d2:38:82:95:24: a2:79:f5:ad:ab:88:c7:0a:05:e1:1b:52:de:7d:c7: 16:13:04:2d:33:c8:6e:9c:59:54:09:14:67:f4:37: 24:9b:2d:f8:87:07:06:d0:7c:58:27:67:6f:c9:90: 4c:01:83:2f:da:2b:bc:de:67:ee:cb:f2:21:b5:5b: ee:9c:34:ca:aa:be:79:19:a5:ca:35:d9:ab:e2:6e: 15:ab:9d:8b:22:7d:03:74:42:7e:42:e0:52:7f:4b: 52:bc:c1:a3:fc:cd:44:8c:8d:0f:26:b4:61:01:bf: 8a:bf:c4:cc:8c:2e:ab:e4:e2:ea:0c:eb:66:ef:fc: bc:5d:bb:ec:f8:9d:13:d5:b0:ba:79:bf:63:46:6e: 85:72:09:97:08:a5:d0:cb:a9:e6:e2:a7:c2:3e:43: 09:78:29:d6:91:76:24:68:d2:45:e6:f9:88:94:ff: b3:53:04:fe:8f:3c:89:2b:5d:58:33:a0:74:c6:de: fa:a6:7f:35:76:47:75:8b:f6:84:ad:4d:8c:f5:e9: b2:20:56:01:9e:df:e2:09:75:5b:f2:e8:f6:1b:ad: 49:e7:03:fd:5a:77:ea:79:ab:a5:38:55:e6:b7:de: f9:07:86:78:ae:50:b2:cb:b2:0e:a1:c1:4b:02:e9: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4F:88:E7:44:FB:A0:69:5F:FF:CA:7F:81:75:50:D5:FB:7A:D7:F5 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAC5F0A2D7EB11EF934BA95EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.230.0/23 Signature Algorithm: sha256WithRSAEncryption 88:f8:7f:73:36:50:55:97:64:52:0a:0e:80:18:ea:cf:02:85: c6:4d:bc:0a:bd:f8:19:64:10:f1:72:62:71:1b:2b:4d:7f:bd: 4e:9d:76:02:ec:90:93:c1:af:8a:7c:89:5d:32:09:25:66:67: 15:43:ad:56:9e:1a:2c:75:e9:e3:f4:2a:f3:81:f7:1e:25:6d: 87:5a:a6:8d:fa:8f:5b:9b:ed:a4:3e:71:6a:4e:4d:bb:05:72: 47:44:72:82:b8:73:9b:d2:25:3e:bc:b9:15:85:ef:c3:9d:5f: 10:cc:b1:84:2d:0b:04:e3:8e:89:36:cb:01:2f:89:b0:78:e1: a7:dc:45:82:2e:78:d7:82:47:cd:5b:12:08:33:12:44:98:6c: 25:88:36:91:fd:47:a8:34:bf:09:5f:32:2b:23:8e:f0:14:fa: bd:fe:17:bd:c8:c8:8c:87:3d:d1:6e:dc:bd:d5:bb:a0:a1:33: 81:ed:dc:2f:52:bd:cb:e9:15:c9:ff:8d:d1:b3:e4:fd:e2:3c: 73:62:91:7c:6b:cb:71:a5:70:9d:51:e7:88:6d:b8:98:8c:3a: cd:27:79:68:79:30:d1:c0:4c:e8:89:ca:4e:4d:be:17:5d:f8: 73:13:02:19:ed:a1:bb:dd:8a:35:f7:a4:00:2a:a0:8a:56:23: de:d6:c1:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNTU0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDcxMi1iZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoXS3vxnhf1/0jiClSSiefWtq4jHCgXhG1LefccWEwQtM8hunFlUCRRn9Dck my34hwcG0HxYJ2dvyZBMAYMv2iu83mfuy/IhtVvunDTKqr55GaXKNdmr4m4Vq52L In0DdEJ+QuBSf0tSvMGj/M1EjI0PJrRhAb+Kv8TMjC6r5OLqDOtm7/y8Xbvs+J0T 1bC6eb9jRm6FcgmXCKXQy6nm4qfCPkMJeCnWkXYkaNJF5vmIlP+zUwT+jzyJK11Y M6B0xt76pn81dkd1i/aErU2M9emyIFYBnt/iCXVb8uj2G61J5wP9WnfqeaulOFXm t975B4Z4rlCyy7IOocFLAulelQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPdPiOdE +6BpX//Kf4F1UNX7etf1MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkFDNUYwQTJE N0VCMTFFRjkzNEJBOTVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofjmMA0GCSqGSIb3DQEBCwUAA4IBAQCI+H9zNlBVl2RSCg6AGOrP AoXGTbwKvfgZZBDxcmJxGytNf71OnXYC7JCTwa+KfIldMgklZmcVQ61Wnhosdenj 9CrzgfceJW2HWqaN+o9bm+2kPnFqTk27BXJHRHKCuHOb0iU+vLkVhe/DnV8QzLGE LQsE446JNssBL4mweOGn3EWCLnjXgkfNWxIIMxJEmGwliDaR/UeoNL8JXzIrI47w FPq9/he9yMiMhz3Rbty91bugoTOB7dwvUr3L6RXJ/43Rs+T94jxzYpF8a8txpXCd UeeIbbiYjDrNJ3loeTDRwEzoicpOTb4XXfhzEwIZ7aG73Yo196QAKqCKViPe1sFG -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:06 2026 by rpki-client