$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF1FAEE4C67611EF895EBA70C4F9AE02.roa File: BF1FAEE4C67611EF895EBA70C4F9AE02.roa (raw, json) Hash identifier: ggNakvy8lWQz3NP+ybbIcQOryTXRX0G+V55jyWIkj4Y= Subject key identifier: A4:1D:62:3E:07:9E:D3:D8:EB:B8:9C:DC:D4:58:FA:41:64:A4:40:BA Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30CB Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF1FAEE4C67611EF895EBA70C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:17:05 +0000 ROA not before: Mon 06 Jul 2026 16:17:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136308 IP address blocks: 161.248.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12491 (0x30cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:17:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd501-5c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:46:b8:22:66:f0:c7:d3:91:c0:f4:02:98: 03:a3:b6:7f:f4:02:73:cb:19:56:8b:1b:17:71:2c: 60:47:50:73:20:04:5a:ee:8a:c5:d7:ad:3c:50:04: 7c:32:17:b4:b5:5c:6b:21:55:de:19:95:fd:bf:71: 63:9e:91:fe:fd:a1:0a:d6:12:9b:58:e8:68:4c:e7: c1:0c:0b:3c:e2:6a:67:2c:e0:c2:c8:73:46:28:0d: e0:11:46:4c:1b:45:5d:ed:34:8f:72:db:df:d9:c5: 59:ed:30:8f:c6:ac:f1:55:5b:e0:6f:7d:38:74:47: bd:ad:27:98:f4:bc:ca:c4:e7:cf:68:39:2c:fe:7d: b6:a7:8d:28:93:ab:d4:5c:21:c2:96:2b:27:6d:c6: 11:db:4e:6d:88:1d:b3:c9:5f:b1:e2:8b:3e:42:e3: 22:2a:7c:a0:83:5a:b9:df:39:87:e0:94:e3:6b:f7: 63:c9:b9:d1:e9:16:1d:53:5f:9f:a7:1a:fa:ff:ce: 87:f2:b9:1a:17:3f:a7:7d:4f:23:80:f1:02:1c:36: 3d:bb:31:56:1f:ea:af:3e:9b:83:45:80:2a:94:d0: 37:69:20:b5:66:9b:2e:ed:ef:00:cd:b4:49:7b:7c: a4:1f:92:b3:82:7b:df:07:83:69:ca:3a:c8:e3:31: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1D:62:3E:07:9E:D3:D8:EB:B8:9C:DC:D4:58:FA:41:64:A4:40:BA X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF1FAEE4C67611EF895EBA70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.22.0/23 Signature Algorithm: sha256WithRSAEncryption 19:05:13:21:56:74:07:7c:8f:20:50:5b:51:90:de:c8:e2:82: ed:ee:f0:de:c3:ab:80:4f:3b:fa:e4:19:b5:dc:c2:c8:dc:3b: 5b:bf:1d:d4:95:30:37:f4:b3:5b:f4:b2:d0:1b:70:cd:38:3d: 58:b6:d7:ab:77:03:07:4a:34:d6:86:f0:35:d3:5e:2b:74:37: 17:df:00:25:a7:b6:0f:82:68:27:4b:49:c7:e2:f5:35:3a:2b: c2:5e:59:a1:18:64:58:83:57:2e:26:e1:18:cd:8c:7d:3e:d0: c7:af:33:c8:e7:c7:97:50:67:34:39:da:9a:45:8d:8d:6c:40: fe:43:fe:4f:96:08:9f:8e:35:85:79:13:2f:bc:50:1d:ba:e7: 2e:79:51:b0:27:90:7a:6c:c1:be:93:c9:d4:a6:25:96:92:d1: 9a:0d:80:03:f3:4d:d0:fd:ef:7f:94:04:60:91:20:1d:83:91: 79:de:b1:c6:77:02:9e:4f:16:79:13:ca:a2:77:b2:e2:72:ab: 7e:8a:b4:04:94:c6:f1:60:e2:c9:0d:e5:2d:f6:1b:a9:09:25: a0:a6:2f:b9:67:c0:46:89:05:4f:be:c9:5c:ef:be:c8:5e:97: 39:37:12:bf:0f:d9:40:42:cc:df:b5:1b:cb:18:60:90:6c:71: 7f:75:24:d8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNzA1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDUwMS01YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhhGuCJm8MfTkcD0ApgDo7Z/9AJzyxlWixsXcSxgR1BzIARa7orF1608UAR8 Mhe0tVxrIVXeGZX9v3FjnpH+/aEK1hKbWOhoTOfBDAs84mpnLODCyHNGKA3gEUZM G0Vd7TSPctvf2cVZ7TCPxqzxVVvgb304dEe9rSeY9LzKxOfPaDks/n22p40ok6vU XCHClisnbcYR205tiB2zyV+x4os+QuMiKnygg1q53zmH4JTja/djybnR6RYdU1+f pxr6/86H8rkaFz+nfU8jgPECHDY9uzFWH+qvPpuDRYAqlNA3aSC1Zpsu7e8AzbRJ e3ykH5KzgnvfB4NpyjrI4zGqhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKQdYj4H ntPY67ic3NRY+kFkpEC6MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkYxRkFFRTRD Njc2MTFFRjg5NUVCQTcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgWMA0GCSqGSIb3DQEBCwUAA4IBAQAZBRMhVnQHfI8gUFtRkN7I 4oLt7vDew6uATzv65Bm13MLI3Dtbvx3UlTA39LNb9LLQG3DNOD1YtterdwMHSjTW hvA1014rdDcX3wAlp7YPgmgnS0nH4vU1OivCXlmhGGRYg1cuJuEYzYx9PtDHrzPI 58eXUGc0OdqaRY2NbED+Q/5PlgifjjWFeRMvvFAduucueVGwJ5B6bMG+k8nUpiWW ktGaDYAD803Q/e9/lARgkSAdg5F53rHGdwKeTxZ5E8qid7Licqt+irQElMbxYOLJ DeUt9hupCSWgpi+5Z8BGiQVPvslc777IXpc5NxK/D9lAQszftRvLGGCQbHF/dSTY -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:52 2026 by rpki-client