$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa File: E66D1ADAC9AB11EF94E78272C4F9AE02.roa (raw, json) Hash identifier: BtS6+RVSCHab9j0FjTLkqEgGhYb7s+dbmhE8o5i4kU4= Subject key identifier: A5:26:B7:1A:EA:F5:B6:A9:BC:5F:7E:B9:FA:9A:D3:8A:D4:78:0F:AD Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30E7 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:18:00 +0000 ROA not before: Mon 06 Jul 2026 16:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138751 IP address blocks: 161.248.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12519 (0x30e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd538-bd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:44:ab:d1:4f:40:21:65:f8:3a:5c:72:d5: d1:61:f7:eb:10:23:6a:58:fa:ed:f0:e3:87:02:c3: 51:e3:b5:6c:93:50:7b:f8:17:21:83:4f:0c:da:08: aa:3c:6b:e1:17:86:db:f8:c5:ee:a8:f8:a4:99:45: 19:b0:e0:e8:d2:1f:bf:d9:68:7b:70:76:74:5b:d3: 80:59:da:ab:59:eb:8a:ce:ca:42:45:c1:6c:1f:9a: ee:a6:11:97:4b:dd:4a:19:39:6c:b7:c5:e0:56:40: 8d:2f:95:01:20:54:29:86:11:09:6e:2e:14:bb:90: 4f:de:4c:ec:f6:6f:e1:c0:1c:f4:60:32:d8:ba:00: 7f:69:fc:28:f9:07:03:7a:ef:75:b5:08:46:5e:f4: 4d:e7:a6:41:f7:ba:10:91:9f:1e:8e:64:f4:0a:43: 68:65:24:49:76:fc:9e:92:2e:87:f2:22:b2:5b:bf: c5:59:1e:77:40:61:aa:76:7b:09:03:12:23:f7:ef: d9:22:e9:e1:c4:b1:5c:34:2e:47:53:65:b7:29:8c: 5b:79:3c:8f:3c:a0:08:72:fd:03:6a:8b:d0:6b:ba: 9f:4a:f9:fa:2b:a4:1b:2f:45:fe:44:2c:bb:8b:36: 7c:60:7c:39:17:15:52:ca:07:69:7d:12:dd:19:ca: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:26:B7:1A:EA:F5:B6:A9:BC:5F:7E:B9:FA:9A:D3:8A:D4:78:0F:AD X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.68.0/23 Signature Algorithm: sha256WithRSAEncryption 28:f8:39:fa:2c:1e:96:cf:69:5f:7d:f5:12:03:11:4c:54:d0: 56:3e:dc:cb:a6:cf:7e:d6:9a:26:5b:49:66:bc:c5:22:fd:ec: 7b:5b:ce:97:89:1f:13:0e:f0:2d:25:cc:9c:b5:00:ec:70:fd: 58:17:a0:66:91:8f:29:e7:67:66:a3:25:d8:06:ae:4b:d1:df: a3:a3:b1:42:4a:fe:e1:07:59:83:4e:0f:1b:ad:cf:06:8c:a3: b5:ee:38:f7:86:97:0b:f6:8a:e5:99:b6:5e:54:28:b8:8b:a8: 88:20:e0:bb:06:f6:68:f7:a1:b8:7a:36:fa:2b:6e:cc:84:78: e8:c6:a9:6d:f6:e4:d8:db:f9:c3:39:37:3d:ef:62:e7:73:74: 03:19:ab:68:e7:18:af:f8:a8:45:f0:b9:5a:02:5b:1f:48:86: 53:03:70:dd:cb:61:a4:07:70:f3:08:82:3e:76:ae:83:15:70: a9:49:8e:8f:f0:5d:f5:68:3f:dd:0f:7a:27:42:38:ea:bf:11: 44:9b:58:24:80:78:a5:a8:79:0e:3f:e0:87:ff:16:ca:59:65: 58:46:6e:f6:d0:0d:4b:ae:0b:ff:1c:89:65:3e:e5:9c:f5:9e: 84:fc:4c:38:89:49:80:f2:51:ea:fc:53:ab:2a:84:6e:05:82: 0c:8c:78:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxODAwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDUzOC1iZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApddEq9FPQCFl+DpcctXRYffrECNqWPrt8OOHAsNR47Vsk1B7+Bchg08M2giq PGvhF4bb+MXuqPikmUUZsODo0h+/2Wh7cHZ0W9OAWdqrWeuKzspCRcFsH5ruphGX S91KGTlst8XgVkCNL5UBIFQphhEJbi4Uu5BP3kzs9m/hwBz0YDLYugB/afwo+QcD eu91tQhGXvRN56ZB97oQkZ8ejmT0CkNoZSRJdvyeki6H8iKyW7/FWR53QGGqdnsJ AxIj9+/ZIunhxLFcNC5HU2W3KYxbeTyPPKAIcv0DaovQa7qfSvn6K6QbL0X+RCy7 izZ8YHw5FxVSygdpfRLdGco1yQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKUmtxrq 9bapvF9+ufqa04rUeA+tMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRTY2RDFBREFD OUFCMTFFRjk0RTc4MjcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofhEMA0GCSqGSIb3DQEBCwUAA4IBAQAo+Dn6LB6Wz2lfffUSAxFM VNBWPtzLps9+1pomW0lmvMUi/ex7W86XiR8TDvAtJcyctQDscP1YF6BmkY8p52dm oyXYBq5L0d+jo7FCSv7hB1mDTg8brc8GjKO17jj3hpcL9orlmbZeVCi4i6iIIOC7 BvZo96G4ejb6K27MhHjoxqlt9uTY2/nDOTc972Lnc3QDGato5xiv+KhF8LlaAlsf SIZTA3Ddy2GkB3DzCII+dq6DFXCpSY6P8F31aD/dD3onQjjqvxFEm1gkgHilqHkO P+CH/xbKWWVYRm720A1Lrgv/HIllPuWc9Z6E/Ew4iUmA8lHq/FOrKoRuBYIMjHjo -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:04 2026 by rpki-client