$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF20DEA0767511F0A9F58113C4F9AE02.roa File: FF20DEA0767511F0A9F58113C4F9AE02.roa (raw, json) Hash identifier: NWxxDAhUGWPKqnp1uHMk+bUHjVZe0xb50pvp9POsEW0= Subject key identifier: 91:AA:1D:84:4E:36:E2:EF:8A:73:04:DB:E1:FE:5D:31:0B:A3:DE:40 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31FE Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF20DEA0767511F0A9F58113C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:27:11 +0000 ROA not before: Mon 06 Jul 2026 16:27:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154108 IP address blocks: 192.172.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12798 (0x31fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:27:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd75f-2ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:43:a4:0e:5f:24:9c:4b:c4:8f:cb:11:60: 6c:b3:2a:26:45:af:eb:b7:6b:65:3e:74:b7:18:d1: cd:0a:3c:2a:5f:73:aa:65:70:e6:f7:a1:9d:d6:47: cd:02:9f:d9:26:11:2b:c7:ca:11:d6:22:da:a5:12: 78:88:8c:5f:f1:e1:e6:2e:b3:07:13:b9:2f:70:7c: a2:76:54:db:88:e0:61:7a:34:b2:f6:7d:52:1c:e3: 62:88:9b:39:47:97:61:17:9a:c6:2c:6f:04:16:9d: 5d:16:06:78:80:3c:3b:cf:ca:46:6b:5a:d5:54:63: ae:c0:2d:dd:f1:17:18:bc:1c:5d:fb:fc:a7:b0:cc: 69:ec:93:4e:e2:21:a8:af:52:2d:3e:b3:2c:2b:ed: 11:60:9b:e3:a7:6f:10:b3:ea:a1:fa:54:85:20:c2: 98:94:3e:0f:5f:73:70:0e:77:40:4c:f0:c5:f9:16: b7:74:2d:a9:cd:78:3d:d6:d6:53:56:08:bf:39:67: d5:dc:2d:c2:be:d5:d2:cd:6e:3a:d7:3b:c8:da:96: 76:6d:bf:00:d6:dc:c5:80:41:9d:28:5d:d6:55:cd: ff:7d:b1:d5:ad:8e:a0:56:6b:c2:0a:a4:1b:86:87: 63:fc:15:de:3b:0e:2b:49:13:5d:5d:e4:e8:9e:11: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AA:1D:84:4E:36:E2:EF:8A:73:04:DB:E1:FE:5D:31:0B:A3:DE:40 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF20DEA0767511F0A9F58113C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.172.245.0/24 Signature Algorithm: sha256WithRSAEncryption 31:fd:d2:2a:0e:36:49:0e:9d:e6:1c:b1:02:e9:e9:75:c3:0c: 47:57:0e:f8:aa:5d:b2:86:12:fe:e0:3c:69:dd:34:7f:24:e3: 37:4c:53:86:b8:6f:9b:ab:80:3d:18:58:14:2c:7b:f4:5b:9a: e8:d1:44:5f:fd:bb:2d:f3:9a:67:ba:8b:7e:f7:b3:e9:85:41: 49:f0:fe:fe:44:c6:a9:70:dd:0e:81:4f:86:94:b9:9c:de:09: 63:93:6b:0a:5a:84:83:7a:9a:71:39:83:91:b9:d8:60:4c:26: 0b:8d:59:ee:62:63:39:49:7d:99:83:b4:60:57:c4:c5:20:f8: 01:fc:a4:db:5a:03:94:99:f1:a5:7d:6b:97:a4:45:39:c3:66: 9d:05:a2:89:fd:02:48:0f:1b:2e:58:c6:1c:dd:27:5f:16:e1: a5:11:e9:71:e4:23:b9:4b:70:01:82:35:e0:b3:6f:8d:43:30: 48:06:db:0c:31:22:fc:96:79:a8:0f:98:e7:f1:07:96:14:9e: 01:14:81:13:82:e7:d2:e8:ba:e4:89:79:5a:8f:cd:79:aa:01: 85:da:61:21:70:77:3b:ae:fe:48:9b:50:90:e5:aa:8f:88:ea: 7a:8b:fb:b3:b8:06:3a:cc:02:86:7c:40:f3:a7:40:25:44:75: 03:be:e8:90 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNzExWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDc1Zi0yYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlpDpA5fJJxLxI/LEWBssyomRa/rt2tlPnS3GNHNCjwqX3OqZXDm96Gd1kfN Ap/ZJhErx8oR1iLapRJ4iIxf8eHmLrMHE7kvcHyidlTbiOBhejSy9n1SHONiiJs5 R5dhF5rGLG8EFp1dFgZ4gDw7z8pGa1rVVGOuwC3d8RcYvBxd+/ynsMxp7JNO4iGo r1ItPrMsK+0RYJvjp28Qs+qh+lSFIMKYlD4PX3NwDndATPDF+Ra3dC2pzXg91tZT Vgi/OWfV3C3CvtXSzW461zvI2pZ2bb8A1tzFgEGdKF3WVc3/fbHVrY6gVmvCCqQb hodj/BXeOw4rSRNdXeTonhEcwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJGqHYRO NuLvinME2+H+XTELo95AMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkYyMERFQTA3 Njc1MTFGMEE5RjU4MTEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwKz1MA0GCSqGSIb3DQEBCwUAA4IBAQAx/dIqDjZJDp3mHLEC6el1 wwxHVw74ql2yhhL+4Dxp3TR/JOM3TFOGuG+bq4A9GFgULHv0W5ro0URf/bst85pn uot+97PphUFJ8P7+RMapcN0OgU+GlLmc3gljk2sKWoSDeppxOYORudhgTCYLjVnu YmM5SX2Zg7RgV8TFIPgB/KTbWgOUmfGlfWuXpEU5w2adBaKJ/QJIDxsuWMYc3Sdf FuGlEelx5CO5S3ABgjXgs2+NQzBIBtsMMSL8lnmoD5jn8QeWFJ4BFIETgufS6Lrk iXlaj815qgGF2mEhcHc7rv5Im1CQ5aqPiOp6i/uzuAY6zAKGfEDzp0AlRHUDvuiQ -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:26 2026 by rpki-client