$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa File: D17C6B0E070311EBB4EE7D80C4F9AE02.roa (raw, json) Hash identifier: OJaTajEUwtKGeGD+MO8kGMwkRcx3NmFtCiVfgLSTwjY= Subject key identifier: 4C:09:FB:43:8F:84:04:80:FC:75:BB:AB:B9:85:95:D4:F4:CA:37:D4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3222 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:28:28 +0000 ROA not before: Mon 06 Jul 2026 16:28:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17439 IP address blocks: 142.79.224.0/19 maxlen: 24 157.10.41.0/24 maxlen: 24 159.117.144.0/20 maxlen: 24 168.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12834 (0x3222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7ac-a85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b1:a5:97:a7:67:ed:11:06:67:22:b1:6a:33: 24:82:b6:70:a5:5d:6f:00:df:b0:49:7f:7c:34:0d: 75:2b:16:71:95:20:7c:ac:46:a3:9b:e5:e6:e7:c8: 2f:86:1d:0a:e3:6f:f4:fb:c4:11:16:5a:6c:54:e2: a9:dc:5b:8a:bd:5a:3e:2c:ab:9d:09:56:58:d7:66: 66:59:86:85:cd:b7:98:ac:ab:43:49:c3:f1:8a:1f: 74:3e:24:03:67:4b:d1:54:bb:07:21:a0:97:58:cc: fd:eb:96:e7:8a:b0:bd:70:1b:8a:b8:fc:aa:b2:36: f2:a9:59:df:70:8f:08:a6:79:2b:e4:1c:e6:43:09: 97:1e:e7:52:f6:2f:af:c4:24:21:5e:4b:dd:b6:33: 8c:b4:0c:a4:c1:4a:0f:17:2a:2a:d0:8b:fd:65:1f: ff:c9:49:17:f0:80:60:8d:25:2e:ad:27:78:cc:84: 80:16:d5:fb:83:d7:71:07:7b:fd:4b:32:f1:2a:86: 97:0f:8f:3d:71:19:f5:a8:60:38:44:91:50:39:f3: ae:49:da:e6:20:31:94:a8:a5:db:33:40:cf:40:a1: 6a:1e:ef:50:a2:a5:39:e5:86:61:c2:7e:8c:12:75: 7e:71:36:0a:e5:f9:b8:6f:72:7e:0d:58:02:08:dd: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:09:FB:43:8F:84:04:80:FC:75:BB:AB:B9:85:95:D4:F4:CA:37:D4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D17C6B0E070311EBB4EE7D80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 142.79.224.0/19 157.10.41.0/24 159.117.144.0/20 168.220.224.0/19 Signature Algorithm: sha256WithRSAEncryption 6b:e3:0a:e4:55:c7:78:4b:32:b3:71:54:da:89:5b:5c:cd:72: ab:02:8b:1a:89:50:1d:2a:5f:c8:a2:ff:a2:87:7b:c6:1d:a9: b7:ae:92:8c:d8:46:95:8a:fc:c5:4c:7f:00:72:36:3e:2f:a7: fe:99:a3:1a:cd:1b:2e:af:4d:42:40:48:1e:dd:23:53:cb:dc: fb:00:a7:6d:f5:44:87:c9:ea:9c:ed:26:ab:a6:09:61:50:15: 5b:bc:c2:e5:10:8e:f0:dd:c2:a0:e9:ac:17:08:1b:6c:ff:ce: ea:cf:0a:1e:5c:6c:42:af:8f:d5:62:c5:5a:a8:e4:29:f1:77: 4c:53:0e:c2:59:f7:83:d2:60:9c:81:18:ae:83:08:22:b3:29: fd:1f:62:38:de:cd:2d:e2:05:09:35:45:e5:92:d2:39:0c:ac: 4a:6c:5f:96:7e:6f:b2:c6:a7:73:90:1a:d5:a2:1c:f8:43:f8: 13:b0:96:5d:48:44:aa:28:ef:7c:30:0d:84:9d:d4:87:a1:48: 7e:6f:c4:2d:f5:37:00:5e:72:0b:96:f0:45:97:01:d5:1b:93: a0:ae:fa:fb:73:ca:5d:e1:85:a9:f3:40:c6:43:11:fb:c3:88: d3:e9:f8:fd:e0:62:d7:09:05:19:8d:b9:e3:80:04:53:80:c7: 13:44:b3:4b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICMiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODI4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdhYy1hODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrGll6dn7REGZyKxajMkgrZwpV1vAN+wSX98NA11KxZxlSB8rEajm+Xm58gv hh0K42/0+8QRFlpsVOKp3FuKvVo+LKudCVZY12ZmWYaFzbeYrKtDScPxih90PiQD Z0vRVLsHIaCXWMz965bnirC9cBuKuPyqsjbyqVnfcI8Ipnkr5BzmQwmXHudS9i+v xCQhXkvdtjOMtAykwUoPFyoq0Iv9ZR//yUkX8IBgjSUurSd4zISAFtX7g9dxB3v9 SzLxKoaXD489cRn1qGA4RJFQOfOuSdrmIDGUqKXbM0DPQKFqHu9QoqU55YZhwn6M EnV+cTYK5fm4b3J+DVgCCN2xVwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFEwJ+0OP hASA/HW7q7mFldT0yjfUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDE3QzZCMEUw NzAzMTFFQkI0RUU3RDgwQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQFjk/gAwQAnQopAwQEn3WQAwQFqNzgMA0GCSqGSIb3DQEBCwUAA4IB AQBr4wrkVcd4SzKzcVTaiVtczXKrAosaiVAdKl/Iov+ih3vGHam3rpKM2EaVivzF TH8AcjY+L6f+maMazRsur01CQEge3SNTy9z7AKdt9USHyeqc7SarpglhUBVbvMLl EI7w3cKg6awXCBts/87qzwoeXGxCr4/VYsVaqOQp8XdMUw7CWfeD0mCcgRiugwgi syn9H2I43s0t4gUJNUXlktI5DKxKbF+Wfm+yxqdzkBrVohz4Q/gTsJZdSESqKO98 MA2EndSHoUh+b8Qt9TcAXnILlvBFlwHVG5Ogrvr7c8pd4YWp80DGQxH7w4jT6fj9 4GLXCQUZjbnjgARTgMcTRLNL -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:28 2026 by rpki-client