$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D2D33C94D97711EF8509CD86C4F9AE02.roa File: D2D33C94D97711EF8509CD86C4F9AE02.roa (raw, json) Hash identifier: 2LKVETB2CF8+cWfX24OHz52etuDiHpbc4riU30kt6mM= Subject key identifier: 78:71:4F:5C:87:6E:79:0D:52:C9:8E:F1:FA:91:3D:37:85:88:3B:71 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31CF Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D2D33C94D97711EF8509CD86C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:25:41 +0000 ROA not before: Mon 06 Jul 2026 16:25:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153288 IP address blocks: 161.248.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12751 (0x31cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:25:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd705-e2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1a:aa:9e:11:78:f7:89:fd:7e:e0:1b:93:64: 2c:32:ae:97:57:a1:b9:41:08:a5:a2:16:4d:d6:2f: 34:bb:ec:a1:89:0c:04:72:5a:00:33:6b:1b:c7:20: 82:89:6d:f9:97:40:1d:c6:70:4f:6b:40:56:6b:c1: 1c:8c:ab:c0:28:db:04:16:a6:dc:da:e0:d3:f5:05: 69:6c:b8:05:b7:f7:bc:cc:46:14:f5:04:af:21:52: 3a:51:5a:bc:b6:01:9d:66:94:79:a2:63:98:97:ed: 33:c1:85:e5:c3:10:ca:bb:e8:4e:60:60:4f:07:ee: cf:19:12:7f:ec:48:b2:52:15:ae:da:85:4e:db:79: 35:c2:26:ad:ab:74:2e:c9:da:0f:ed:88:09:ea:d0: ef:10:a2:b5:69:93:ee:89:fe:91:a0:bc:8e:2f:75: 17:9f:08:dd:e2:75:5e:d8:71:c8:8b:ae:9c:be:5c: d3:14:79:cd:32:af:11:6c:05:38:48:70:6f:8b:9b: a4:78:92:e1:9b:45:79:dc:8e:c6:87:c0:5b:64:cf: 9f:c3:e1:d7:07:3f:f7:f2:42:cb:2e:e9:bd:ad:c2: d7:29:d7:99:91:1e:04:bb:dc:c0:ee:bb:e9:50:e5: 84:03:4b:15:33:2e:d4:b1:1c:a8:7c:fa:fc:fc:b8: 89:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:71:4F:5C:87:6E:79:0D:52:C9:8E:F1:FA:91:3D:37:85:88:3B:71 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D2D33C94D97711EF8509CD86C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.105.0/24 Signature Algorithm: sha256WithRSAEncryption bf:00:d2:27:92:86:59:22:f8:79:58:0b:56:90:13:ef:70:f4: d8:da:7a:9d:9d:cf:e6:6a:61:76:21:cd:4c:ee:0b:c3:bd:fa: 4e:de:71:68:c5:4d:55:8e:1b:b2:7a:26:07:e7:4f:64:d3:f5: 0f:ef:b9:d8:e1:6d:4e:81:38:bf:8a:11:0c:2d:36:bc:40:76: 37:21:f6:60:36:37:13:f2:29:2d:bf:68:85:9a:66:71:db:aa: cc:59:21:a0:f7:84:72:28:34:15:46:9f:65:26:64:40:b4:54: 9a:ce:dd:e3:37:d4:5e:e0:54:78:30:f2:52:bb:c1:fb:a2:4f: 2d:db:3b:30:ec:78:4d:18:76:42:1c:77:c5:b2:0c:de:84:20: d1:07:01:dc:46:40:a2:ff:56:05:97:2a:5f:12:7b:b1:a8:71: 77:bd:a5:6c:54:be:8b:01:ce:c0:57:c2:e2:36:d6:d6:0c:e7: 1a:1a:d9:fc:c8:86:bb:bd:0e:3f:7b:98:d5:6e:6d:7a:46:53: 1b:95:27:22:80:4c:1f:68:fc:0c:13:af:b3:84:1e:a1:cc:eb: 45:4b:96:1e:c4:56:22:f7:1c:43:ae:e3:75:c5:78:2b:b3:10: c9:ad:79:60:b3:9b:e5:9c:b3:74:c0:19:0a:55:4b:e5:bb:49: 44:25:ed:dc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNTQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDcwNS1lMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjRqqnhF494n9fuAbk2QsMq6XV6G5QQilohZN1i80u+yhiQwEcloAM2sbxyCC iW35l0AdxnBPa0BWa8EcjKvAKNsEFqbc2uDT9QVpbLgFt/e8zEYU9QSvIVI6UVq8 tgGdZpR5omOYl+0zwYXlwxDKu+hOYGBPB+7PGRJ/7EiyUhWu2oVO23k1wiatq3Qu ydoP7YgJ6tDvEKK1aZPuif6RoLyOL3UXnwjd4nVe2HHIi66cvlzTFHnNMq8RbAU4 SHBvi5ukeJLhm0V53I7Gh8BbZM+fw+HXBz/38kLLLum9rcLXKdeZkR4Eu9zA7rvp UOWEA0sVMy7UsRyofPr8/LiJ9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHhxT1yH bnkNUsmO8fqRPTeFiDtxMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDJEMzNDOTRE OTc3MTFFRjg1MDlDRDg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofhpMA0GCSqGSIb3DQEBCwUAA4IBAQC/ANInkoZZIvh5WAtWkBPv cPTY2nqdnc/mamF2Ic1M7gvDvfpO3nFoxU1VjhuyeiYH509k0/UP77nY4W1OgTi/ ihEMLTa8QHY3IfZgNjcT8iktv2iFmmZx26rMWSGg94RyKDQVRp9lJmRAtFSazt3j N9Re4FR4MPJSu8H7ok8t2zsw7HhNGHZCHHfFsgzehCDRBwHcRkCi/1YFlypfEnux qHF3vaVsVL6LAc7AV8LiNtbWDOcaGtn8yIa7vQ4/e5jVbm16RlMblScigEwfaPwM E6+zhB6hzOtFS5YexFYi9xxDruN1xXgrsxDJrXlgs5vlnLN0wBkKVUvlu0lEJe3c -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:26 2026 by rpki-client