$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CDCF164CCBF711EF850FAC39C4F9AE02.roa File: CDCF164CCBF711EF850FAC39C4F9AE02.roa (raw, json) Hash identifier: gh3W8X4cDaIR5QUiKLfYU4e5560ZkM5WfQHtAcuGxbY= Subject key identifier: CC:56:D8:EB:1E:EF:76:56:A7:36:E4:22:68:93:A8:D4:F9:60:69:27 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2F48 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CDCF164CCBF711EF850FAC39C4F9AE02.roa Signing time: Sun 31 May 2026 16:24:49 +0000 ROA not before: Sun 31 May 2026 16:24:49 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 152509 IP address blocks: 160.25.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12104 (0x2f48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:24:49 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c60d1-4127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:71:af:52:10:aa:fd:c9:0b:2f:44:53:67: 06:d8:da:89:91:c6:39:e1:6d:a7:5e:9d:bf:97:dd: f6:b7:89:75:ae:3b:1b:f0:2b:f1:de:69:86:77:78: ea:39:68:7d:c0:78:af:9a:46:e7:c8:13:de:c4:3b: 4f:e3:c9:f9:93:d8:ae:ff:5d:a9:32:3b:1a:46:15: ea:9f:f9:11:bf:f9:51:68:a0:dc:02:09:c8:6b:94: 4a:bd:1e:0f:69:7b:7f:0b:22:91:70:b7:14:7f:b1: be:fe:22:4c:d6:3e:64:4e:28:7d:fa:06:07:62:ea: 06:40:ee:9e:f6:fd:3f:84:6f:89:3e:60:c3:e6:a4: 51:00:6a:23:7f:2d:15:13:1d:66:09:be:79:27:bd: 1f:75:af:88:c1:05:49:63:d9:51:58:dd:bd:03:76: f6:0f:88:a4:de:73:13:4b:92:5c:a4:42:72:59:49: 40:b2:dc:38:1b:e6:08:06:da:f1:53:cb:cb:96:38: 59:0f:e6:da:56:eb:12:e8:46:ff:e3:31:7b:2d:fc: 07:5a:a8:66:53:cc:cb:39:51:d3:73:c6:7a:c2:e7: c5:ab:d9:ec:91:aa:bb:66:e2:3a:3d:9f:c4:16:41: 3e:d7:b5:02:e9:c1:52:b7:6f:df:c8:2b:cc:88:25: fd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:56:D8:EB:1E:EF:76:56:A7:36:E4:22:68:93:A8:D4:F9:60:69:27 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CDCF164CCBF711EF850FAC39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.192.0/23 Signature Algorithm: sha256WithRSAEncryption 89:c5:d2:5a:9e:22:2e:88:1a:ad:58:ab:86:c4:ec:31:37:14: 72:80:fc:14:4b:36:d8:10:9a:14:cf:82:29:af:3a:9b:fe:32: 6d:25:42:a7:c2:8f:9e:5e:13:cd:3c:31:d2:f1:48:87:e2:dc: 19:a1:e2:57:e8:5b:3a:0d:6f:1c:86:31:b8:2e:49:01:55:8f: 2c:3b:9f:26:97:b2:27:4b:72:b5:d2:24:8a:4c:2c:4d:33:52: c0:70:8b:ec:3c:30:f5:44:33:0f:9c:34:ff:47:a5:45:2d:69: 76:e3:45:8e:40:a2:5b:e5:c6:c5:fa:91:f7:34:a1:74:8c:65: 87:93:6f:c7:5e:34:4b:12:a1:fd:c0:bd:f9:bf:d4:d0:71:40: 7b:d3:18:2a:72:76:6b:95:52:fb:d2:01:0b:76:63:63:48:70: ea:45:01:51:a8:01:8c:80:63:cc:56:d1:d9:fa:6a:ef:d1:68: 17:7f:04:19:b1:43:6b:a5:ae:ad:5f:6a:bf:e4:16:31:d2:dc: db:09:40:c2:de:49:83:35:b4:5a:1b:a6:28:db:26:d5:a8:50: d2:ab:68:ad:9c:b6:70:92:b1:c7:71:3b:e7:54:27:aa:06:1e: c9:43:b5:fe:90:8b:a5:cb:1f:b6:62:0a:f8:95:c5:45:32:22: 5a:72:0c:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICL0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyNDQ5WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjBkMS00MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXZxr1IQqv3JCy9EU2cG2NqJkcY54W2nXp2/l932t4l1rjsb8Cvx3mmGd3jq OWh9wHivmkbnyBPexDtP48n5k9iu/12pMjsaRhXqn/kRv/lRaKDcAgnIa5RKvR4P aXt/CyKRcLcUf7G+/iJM1j5kTih9+gYHYuoGQO6e9v0/hG+JPmDD5qRRAGojfy0V Ex1mCb55J70fda+IwQVJY9lRWN29A3b2D4ik3nMTS5JcpEJyWUlAstw4G+YIBtrx U8vLljhZD+baVusS6Eb/4zF7LfwHWqhmU8zLOVHTc8Z6wufFq9nskaq7ZuI6PZ/E FkE+17UC6cFSt2/fyCvMiCX9UQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMxW2Ose 73ZWpzbkImiTqNT5YGknMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0RDRjE2NEND QkY3MTFFRjg1MEZBQzM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnAMA0GCSqGSIb3DQEBCwUAA4IBAQCJxdJaniIuiBqtWKuGxOwx NxRygPwUSzbYEJoUz4Iprzqb/jJtJUKnwo+eXhPNPDHS8UiH4twZoeJX6Fs6DW8c hjG4LkkBVY8sO58ml7InS3K10iSKTCxNM1LAcIvsPDD1RDMPnDT/R6VFLWl240WO QKJb5cbF+pH3NKF0jGWHk2/HXjRLEqH9wL35v9TQcUB70xgqcnZrlVL70gELdmNj SHDqRQFRqAGMgGPMVtHZ+mrv0WgXfwQZsUNrpa6tX2q/5BYx0tzbCUDC3kmDNbRa G6Yo2ybVqFDSq2itnLZwkrHHcTvnVCeqBh7JQ7X+kIulyx+2Ygr4lcVFMiJacgyw -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:18 2026 by rpki-client