$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa File: D61B5A66480A11EF90444C33C4F9AE02.roa (raw, json) Hash identifier: CxvmHVwWBnoDTIGSgY64GDMb3KccVZKg7/8RzpU1hCM= Subject key identifier: E8:70:2A:BE:B3:64:60:AF:62:DE:E5:FF:8A:DE:97:4E:49:03:7E:D0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3223 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:28:30 +0000 ROA not before: Mon 06 Jul 2026 16:28:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17665 IP address blocks: 157.66.45.0/24 maxlen: 24 160.25.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12835 (0x3223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7ae-c1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:47:65:8c:fe:f6:0f:d4:8b:65:aa:d4:f3:92: d5:80:68:a7:42:fc:e4:8b:73:9e:b3:40:67:d9:5a: aa:47:48:b5:13:02:94:7f:35:b3:a3:39:88:9b:33: c9:f7:3b:43:64:55:23:7e:0f:43:69:4b:ed:28:03: f0:e9:62:0e:fb:0a:7b:36:70:1c:e3:aa:1b:05:68: cb:54:66:6d:11:12:bb:52:56:2b:53:cf:63:8c:e6: cd:d5:95:d6:35:d1:21:07:58:1d:2c:a3:59:f1:b3: ee:30:1c:ec:6e:23:a6:e1:64:41:f6:6c:76:7a:8f: 8d:80:ca:0b:ee:aa:30:8d:4a:5c:9a:36:1b:ec:45: 7a:2f:03:28:76:b0:a9:e9:10:c5:54:b2:94:34:a6: 63:e2:d2:09:cb:f9:01:4d:b0:20:59:e5:7d:2d:c1: 86:1f:7b:fc:26:29:de:e0:51:2e:c9:b4:7d:ae:0a: 65:e5:22:ce:01:f8:2e:c4:92:96:1f:10:f5:6d:ce: 95:48:cd:06:9b:a7:05:6f:b8:41:68:44:0b:a8:2c: 8a:80:d2:f4:93:b0:28:51:59:b4:27:b1:b1:40:57: 99:c9:1b:d2:ae:44:de:26:e6:a7:68:57:78:de:e2: 07:fe:ff:95:c1:94:4e:88:5c:a6:31:8b:d4:ff:fe: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:2A:BE:B3:64:60:AF:62:DE:E5:FF:8A:DE:97:4E:49:03:7E:D0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.45.0/24 160.25.30.0/23 Signature Algorithm: sha256WithRSAEncryption 83:47:e6:0d:81:79:81:1b:ab:ab:98:e0:67:75:e8:d4:bb:8a: 75:ef:76:a6:28:76:74:bf:0f:75:b4:d4:14:7c:0d:35:42:f3: 5f:9a:7e:da:89:61:13:b8:12:90:ec:1e:e8:54:85:24:09:03: 5d:e5:e3:68:55:7e:e0:85:ad:c2:5b:cd:29:e6:83:50:5e:ec: 30:a4:c6:53:23:e4:7d:50:ef:c6:e3:f7:cd:0e:d3:97:54:a5: 4c:ce:3c:1b:81:13:13:fa:f1:d1:0d:d8:69:28:6b:63:1d:ff: 7f:86:29:25:18:87:cf:b2:c9:f5:3e:81:72:c5:eb:7d:cf:dd: 6e:42:b0:56:96:da:5e:64:11:b0:aa:c0:b7:ca:b6:69:22:ea: cc:d2:af:bf:2e:94:76:3a:3a:c0:4d:ec:79:f0:8f:e3:94:36: 09:47:8d:59:1e:e8:f0:99:6d:57:7d:0a:85:36:d7:8f:d8:15: 23:84:37:30:27:b7:ce:1e:80:32:b5:e2:92:03:8e:e0:d7:95: 99:55:d8:7f:ff:21:43:c9:9f:03:f0:3a:9f:da:8e:ca:fc:fa: 5b:f0:45:29:ae:c9:2c:0a:d2:bf:ef:72:27:89:9d:eb:b5:d3: d4:9f:2a:ba:24:52:49:2e:59:14:1a:36:13:69:7e:82:6f:33: f0:e9:8b:f3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICMiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODMwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdhZS1jMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40dljP72D9SLZarU85LVgGinQvzki3Oes0Bn2VqqR0i1EwKUfzWzozmImzPJ 9ztDZFUjfg9DaUvtKAPw6WIO+wp7NnAc46obBWjLVGZtERK7UlYrU89jjObN1ZXW NdEhB1gdLKNZ8bPuMBzsbiOm4WRB9mx2eo+NgMoL7qowjUpcmjYb7EV6LwModrCp 6RDFVLKUNKZj4tIJy/kBTbAgWeV9LcGGH3v8Jine4FEuybR9rgpl5SLOAfguxJKW HxD1bc6VSM0Gm6cFb7hBaEQLqCyKgNL0k7AoUVm0J7GxQFeZyRvSrkTeJuanaFd4 3uIH/v+VwZROiFymMYvU//5SqQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOhwKr6z ZGCvYt7l/4rel05JA37QMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDYxQjVBNjY0 ODBBMTFFRjkwNDQ0QzMzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAnUItAwQBoBkeMA0GCSqGSIb3DQEBCwUAA4IBAQCDR+YNgXmBG6ur mOBndejUu4p173amKHZ0vw91tNQUfA01QvNfmn7aiWETuBKQ7B7oVIUkCQNd5eNo VX7gha3CW80p5oNQXuwwpMZTI+R9UO/G4/fNDtOXVKVMzjwbgRMT+vHRDdhpKGtj Hf9/hiklGIfPssn1PoFyxet9z91uQrBWltpeZBGwqsC3yrZpIurM0q+/LpR2OjrA Tex58I/jlDYJR41ZHujwmW1XfQqFNteP2BUjhDcwJ7fOHoAyteKSA47g15WZVdh/ /yFDyZ8D8Dqf2o7K/Ppb8EUprsksCtK/73IniZ3rtdPUnyq6JFJJLlkUGjYTaX6C bzPw6Yvz -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:27 2026 by rpki-client