$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa File: C19496A61E6711EFAF014F65C4F9AE02.roa (raw, json) Hash identifier: L7XkYaRqovxbm55llaoxBQsgrgR0U6q6Hyu6kZ+DQSg= Subject key identifier: B9:6D:B0:10:6B:AF:E6:82:F7:12:EF:C5:1D:3E:56:0F:32:D2:C1:D4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3135 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:20:34 +0000 ROA not before: Mon 06 Jul 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150593 IP address blocks: 157.66.44.0/23 maxlen: 24 160.19.35.0/24 maxlen: 24 160.25.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12597 (0x3135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd5d1-9354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:a3:8a:55:22:be:23:77:8c:f7:a4:17:3b: 4f:e5:a3:ba:6a:7f:e9:45:1a:2d:e7:a5:1b:7e:12: 7e:74:84:fb:54:90:a9:8a:6e:f5:78:1c:dd:d0:a2: 89:77:2b:40:43:a2:a1:e5:6e:f7:72:a8:76:a7:4a: c7:99:34:da:f4:fa:23:c0:b0:79:ac:b9:bf:1d:6b: 5e:9a:f3:a5:21:d1:c9:2d:05:20:b5:d5:70:08:cb: a0:ec:2b:89:f5:4d:46:34:44:7d:1d:86:3b:9f:83: 92:af:a6:25:37:b8:55:54:46:8d:ec:09:c4:85:85: 06:71:26:cd:3c:a5:77:30:c3:ce:bb:19:01:7d:b0: 6d:f0:ee:72:2a:d1:07:ac:ad:61:ff:e6:de:2b:70: be:69:e7:6a:c7:12:78:f3:cf:0a:88:a1:56:08:71: d7:4f:c4:5a:66:b7:14:39:6a:2e:f0:c8:07:67:09: 53:3d:00:b3:7b:02:00:40:99:d1:01:c5:7a:58:e9: f3:ae:15:84:55:21:9c:39:10:ed:4f:7d:f9:df:20: 84:d0:0f:1b:40:c8:95:66:0c:da:ed:6d:df:2c:c3: 47:99:46:60:2e:89:24:3a:85:7a:b4:2d:6c:0a:80: b7:68:21:8d:15:3d:17:34:68:4b:5a:15:23:65:e3: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6D:B0:10:6B:AF:E6:82:F7:12:EF:C5:1D:3E:56:0F:32:D2:C1:D4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.44.0/23 160.19.35.0/24 160.25.38.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:e9:12:e2:da:0f:9d:53:64:4a:81:29:e1:84:ac:fd:d4:d8: 89:88:5a:e6:af:9d:d3:2d:6f:c9:ff:c6:4a:5d:c4:3b:ec:4d: e6:d7:e1:bf:07:66:08:f3:4b:34:8d:73:70:66:83:43:4f:f0: 93:35:4c:db:67:0a:d6:e1:15:74:8c:20:54:ee:ee:6e:5b:e6: f9:32:53:7c:c1:fa:db:58:12:95:a4:8b:de:59:25:a0:ac:3b: 73:e7:80:46:83:ba:85:14:a3:54:b8:07:0c:c2:59:37:ef:62: d3:61:ed:46:ec:ab:ff:7a:f8:c7:95:82:89:94:6d:15:fc:46: 9c:f9:93:2f:f5:f0:02:2a:b7:01:1c:0e:fb:58:c0:75:6b:e3: f4:ba:61:69:e7:b9:0c:23:9e:89:d4:26:9b:b0:e8:a1:32:e1: 58:77:eb:ae:42:e4:36:7c:06:c3:21:97:0f:ec:08:1d:23:8b: 19:71:32:95:85:d3:96:2b:1c:96:4e:72:a8:b2:71:35:0c:96: 20:e4:2a:2a:b1:b4:ce:21:2e:95:80:b4:9d:d6:f7:6a:1a:1a: 3a:bc:49:05:8f:22:2d:bf:e9:ac:aa:5a:98:d4:d0:4f:ab:a1: c3:e5:1f:71:c1:0c:8b:c8:3a:53:de:ef:6e:96:ed:fa:26:cd: 03:e0:ef:13 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICMTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDVkMS05MzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kSjilUiviN3jPekFztP5aO6an/pRRot56UbfhJ+dIT7VJCpim71eBzd0KKJ dytAQ6Kh5W73cqh2p0rHmTTa9PojwLB5rLm/HWtemvOlIdHJLQUgtdVwCMug7CuJ 9U1GNER9HYY7n4OSr6YlN7hVVEaN7AnEhYUGcSbNPKV3MMPOuxkBfbBt8O5yKtEH rK1h/+beK3C+aedqxxJ4888KiKFWCHHXT8RaZrcUOWou8MgHZwlTPQCzewIAQJnR AcV6WOnzrhWEVSGcORDtT3353yCE0A8bQMiVZgza7W3fLMNHmUZgLokkOoV6tC1s CoC3aCGNFT0XNGhLWhUjZeOfHQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLltsBBr r+aC9xLvxR0+Vg8y0sHUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzE5NDk2QTYx RTY3MTFFRkFGMDE0RjY1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBnUIsAwQAoBMjAwQBoBkmMA0GCSqGSIb3DQEBCwUAA4IBAQBK6RLi 2g+dU2RKgSnhhKz91NiJiFrmr53TLW/J/8ZKXcQ77E3m1+G/B2YI80s0jXNwZoND T/CTNUzbZwrW4RV0jCBU7u5uW+b5MlN8wfrbWBKVpIveWSWgrDtz54BGg7qFFKNU uAcMwlk372LTYe1G7Kv/evjHlYKJlG0V/Eac+ZMv9fACKrcBHA77WMB1a+P0umFp 57kMI56J1CabsOihMuFYd+uuQuQ2fAbDIZcP7AgdI4sZcTKVhdOWKxyWTnKosnE1 DJYg5CoqsbTOIS6VgLSd1vdqGho6vEkFjyItv+msqlqY1NBPq6HD5R9xwQyLyDpT 3u9ulu36Js0D4O8T -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:29 2026 by rpki-client