$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3FA344E86EC11EF969C0A6DC4F9AE02.roa File: C3FA344E86EC11EF969C0A6DC4F9AE02.roa (raw, json) Hash identifier: cHUt4TYyx0g4iUOe/8aGD8K7hB7zxBMcPJvS5tyHLWY= Subject key identifier: CC:D1:AF:1C:74:07:51:8C:0A:DC:EF:D1:06:24:65:6A:75:3B:9C:E1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30C4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3FA344E86EC11EF969C0A6DC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:16:51 +0000 ROA not before: Mon 06 Jul 2026 16:16:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135802 IP address blocks: 160.187.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12484 (0x30c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:16:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd4f3-be1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:40:c0:1f:15:5c:cd:1b:0d:ea:ef:bb:70:13: 27:d5:2a:2a:61:c1:78:e3:93:5f:e3:09:ba:a1:2b: 38:15:e0:b1:8a:09:ef:d9:62:b1:3e:25:0b:9f:47: 93:e3:05:e6:ef:01:e8:6e:6d:a0:48:1e:cf:1a:a5: 39:b7:4a:ef:07:f1:2b:f8:25:89:c7:58:5e:c0:9e: 44:7f:a5:88:6c:48:4d:49:e0:06:c0:e3:42:39:e6: 06:4c:25:72:b9:00:29:1b:1e:64:8d:2d:06:1a:6e: 71:cc:3d:ba:4d:b1:d8:1b:31:3e:54:f6:3e:9a:50: d4:a0:72:0e:46:ae:ef:76:32:fb:ff:84:1d:81:67: 62:63:a9:5e:d8:9d:f8:b5:c9:54:c3:cf:9c:50:94: 56:47:3c:1f:26:10:55:59:33:e9:22:e4:1c:9d:64: 5a:93:50:9a:d7:3f:8c:80:11:70:a1:0d:30:eb:9d: 24:11:f3:ce:0c:39:07:85:e3:b7:c7:f1:84:25:1f: ae:e7:75:26:10:69:cf:50:28:b7:d3:68:de:ee:45: 1d:3a:ae:1b:6c:c3:69:39:c0:c7:17:51:c0:de:92: 12:d5:96:77:ea:e7:a8:86:3e:ee:79:36:34:c0:8a: ac:9e:be:c7:21:2f:20:33:73:35:55:ed:16:5a:fd: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D1:AF:1C:74:07:51:8C:0A:DC:EF:D1:06:24:65:6A:75:3B:9C:E1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C3FA344E86EC11EF969C0A6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.206.0/23 Signature Algorithm: sha256WithRSAEncryption b6:f9:4d:d9:df:06:63:cc:2b:f1:f5:5e:e1:ca:ea:07:44:70: 6d:19:aa:54:ca:89:a1:ac:f7:77:5f:70:42:65:d7:da:19:31: d1:35:ae:f8:3c:7a:c7:5a:37:9d:21:fb:33:f4:34:22:f7:02: 2d:95:41:0e:33:e3:ad:b0:af:8e:b5:6f:5b:ea:22:87:3f:cd: 73:62:7d:4d:34:f2:35:14:a2:5d:59:da:40:c5:15:1d:12:07: e4:f4:d8:48:2f:71:70:a2:eb:35:31:01:4a:fc:63:e9:87:23: b6:8a:f5:f6:f6:08:76:84:a3:e5:d4:ed:79:ad:38:19:f2:84: 6f:42:fa:a2:8c:27:d9:62:0b:36:2c:fa:87:1f:c1:cc:8d:53: a6:0c:89:b4:81:99:db:60:11:56:76:3c:1b:d2:cd:94:92:79: 3c:a2:97:d6:a5:ac:2e:0c:d2:36:1a:ed:a3:a2:dd:e6:3e:be: 52:ee:99:67:7f:b3:03:db:a5:c6:78:a5:54:f8:ce:78:f8:76: 9c:0e:28:e2:c2:cf:2f:61:85:2a:40:93:5f:ad:b4:01:b3:5f: c9:2a:04:d1:a3:31:d1:8e:60:71:b8:91:d3:b1:d0:5b:c3:9b: 99:ee:ed:b8:c5:e4:9b:8a:0f:1b:d2:09:f2:30:7c:b0:c8:64: 36:d0:d8:68 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNjUxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDRmMy1iZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UDAHxVczRsN6u+7cBMn1SoqYcF445Nf4wm6oSs4FeCxignv2WKxPiULn0eT 4wXm7wHobm2gSB7PGqU5t0rvB/Er+CWJx1hewJ5Ef6WIbEhNSeAGwONCOeYGTCVy uQApGx5kjS0GGm5xzD26TbHYGzE+VPY+mlDUoHIORq7vdjL7/4QdgWdiY6le2J34 tclUw8+cUJRWRzwfJhBVWTPpIuQcnWRak1Ca1z+MgBFwoQ0w650kEfPODDkHheO3 x/GEJR+u53UmEGnPUCi302je7kUdOq4bbMNpOcDHF1HA3pIS1ZZ36ueohj7ueTY0 wIqsnr7HIS8gM3M1Ve0WWv3AgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMzRrxx0 B1GMCtzv0QYkZWp1O5zhMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzNGQTM0NEU4 NkVDMTFFRjk2OUMwQTZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoLvOMA0GCSqGSIb3DQEBCwUAA4IBAQC2+U3Z3wZjzCvx9V7hyuoH RHBtGapUyomhrPd3X3BCZdfaGTHRNa74PHrHWjedIfsz9DQi9wItlUEOM+OtsK+O tW9b6iKHP81zYn1NNPI1FKJdWdpAxRUdEgfk9NhIL3Fwous1MQFK/GPphyO2ivX2 9gh2hKPl1O15rTgZ8oRvQvqijCfZYgs2LPqHH8HMjVOmDIm0gZnbYBFWdjwb0s2U knk8opfWpawuDNI2Gu2jot3mPr5S7plnf7MD26XGeKVU+M54+HacDijiws8vYYUq QJNfrbQBs1/JKgTRozHRjmBxuJHTsdBbw5uZ7u24xeSbig8b0gnyMHywyGQ20Nho -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:23 2026 by rpki-client