$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F75F558EDEA11F0BDEA0A6B366F56BC.roa File: 8F75F558EDEA11F0BDEA0A6B366F56BC.roa (raw, json) Hash identifier: x4M6TKAjJlmrg4YKjvfh+r6MBdwwos3tcje/Nij8e1M= Subject key identifier: 17:22:8C:C5:42:96:21:A0:26:C0:55:81:55:83:16:95:D4:0C:5B:05 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F481 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F75F558EDEA11F0BDEA0A6B366F56BC.roa Signing time: Mon 06 Jul 2026 17:25:48 +0000 ROA not before: Mon 06 Jul 2026 17:25:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 148000 IP address blocks: 1.10.10.0/24 maxlen: 24 27.0.252.0/22 maxlen: 22 45.249.126.0/24 maxlen: 24 45.249.127.0/24 maxlen: 24 45.250.52.0/22 maxlen: 24 103.68.48.0/24 maxlen: 24 103.68.49.0/24 maxlen: 24 160.202.192.0/24 maxlen: 24 160.202.193.0/24 maxlen: 24 160.202.194.0/24 maxlen: 24 160.202.196.0/24 maxlen: 24 160.202.198.0/24 maxlen: 24 160.202.200.0/24 maxlen: 24 160.202.201.0/24 maxlen: 24 2001:de2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62593 (0xf481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:25:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be51c-ae88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:20:c3:58:5c:d6:e7:b2:74:17:1b:33:54: 23:30:50:c4:71:15:4e:c7:28:79:ce:40:95:10:37: 0b:8a:dd:52:22:8b:2c:98:3e:27:cc:2a:68:cb:1d: 90:d7:40:1e:5a:7a:b4:a2:c1:44:2a:48:59:28:98: 7a:0a:20:bc:6d:5d:5f:cd:d0:0c:a3:e8:94:4f:c5: 2b:ef:1b:90:6e:55:56:ba:f2:a9:f8:90:41:b6:0e: 88:71:5b:31:9b:9c:0f:26:89:78:00:8a:c6:a7:ec: fa:d0:0a:cf:d2:24:c4:cd:df:28:04:b9:a4:60:59: 4d:bb:11:c6:68:00:6c:82:86:56:c0:53:3d:02:ef: 28:94:4d:6b:81:2b:36:23:df:3f:14:a2:87:c0:0f: 7c:a7:73:0a:54:dd:eb:12:b0:29:27:37:2d:fa:1d: e1:49:e5:35:27:c2:45:94:02:c5:6d:93:bc:33:47: e0:fc:d8:a9:c7:14:4d:0d:57:b0:d4:83:bd:5d:9f: 00:6b:3b:5f:73:a5:24:21:7f:8c:91:7f:0d:42:ac: e4:af:de:ef:c0:71:e9:7a:d9:16:3a:13:e9:ee:f2: 73:39:45:f7:eb:03:a0:4e:30:d6:64:38:d0:e5:b3: dd:db:2a:56:b4:50:8b:3c:c3:3d:08:a4:31:9f:d1: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:22:8C:C5:42:96:21:A0:26:C0:55:81:55:83:16:95:D4:0C:5B:05 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8F75F558EDEA11F0BDEA0A6B366F56BC.roa sbgp-ipAddrBlock: critical IPv4: 1.10.10.0/24 27.0.252.0/22 45.249.126.0/23 45.250.52.0/22 103.68.48.0/23 160.202.192.0-160.202.194.255 160.202.196.0/24 160.202.198.0/24 160.202.200.0/23 IPv6: 2001:de2::/48 Signature Algorithm: sha256WithRSAEncryption 30:39:8f:74:7e:62:b7:d7:a9:50:f2:7d:42:b6:eb:a5:2c:57: 74:92:7f:ac:8f:33:96:51:59:73:a7:c9:0d:39:1c:78:b2:7f: 19:ff:ac:ee:67:8a:dc:6b:a2:fa:e6:01:98:96:dd:dd:52:75: 2e:bb:61:5e:44:fb:6e:7d:d2:a2:4a:19:5b:a6:b9:67:a6:7f: c1:93:5f:a7:56:92:b2:e0:8f:e1:e5:f1:0f:ba:5b:0c:c2:5d: 57:64:4e:ca:27:f6:42:11:fc:ae:71:b0:13:0f:03:bd:0d:0f: 74:93:0a:88:c9:84:e4:9d:4f:ef:b7:4a:fe:64:9d:95:88:1f: 05:8f:92:28:8b:8c:fc:a5:3e:17:bf:d3:83:ae:d2:d3:19:d9: e5:bf:80:87:b7:7a:ec:bd:c2:ba:b6:14:6b:9e:25:e9:c9:5f: 6b:d0:af:20:df:85:c7:71:78:1e:93:9e:b8:ee:88:1b:96:bd: 1b:97:38:08:f3:5d:4e:bc:30:20:bd:9f:d1:a4:f5:42:d5:cc: 3c:62:ca:16:f5:9c:91:59:7b:6c:7e:a8:13:f4:c8:44:85:ff: 33:e4:0e:bd:94:75:fb:58:af:ab:0a:38:27:ab:4e:b0:64:40: c3:47:3d:60:29:18:05:8a:9f:d6:ea:26:5c:a0:18:ee:08:82: 97:00:5d:dc -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIDAPSBMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MjU0OFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU1MWMtYWU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmLIMNYXNbnsnQXGzNUIzBQxHEVTscoec5AlRA3C4rdUiKLLJg+J8wqaMsd kNdAHlp6tKLBRCpIWSiYegogvG1dX83QDKPolE/FK+8bkG5VVrryqfiQQbYOiHFb MZucDyaJeACKxqfs+tAKz9IkxM3fKAS5pGBZTbsRxmgAbIKGVsBTPQLvKJRNa4Er NiPfPxSih8APfKdzClTd6xKwKSc3Lfod4UnlNSfCRZQCxW2TvDNH4PzYqccUTQ1X sNSDvV2fAGs7X3OlJCF/jJF/DUKs5K/e78Bx6XrZFjoT6e7yczlF9+sDoE4w1mQ4 0OWz3dsqVrRQizzDPQikMZ/RyrMCAwEAAaOCAqkwggKlMB0GA1UdDgQWBBQXIozF QpYhoCbAVYFVgxaV1AxbBTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhGNzVGNTU4 RURFQTExRjBCREVBMEE2QjM2NkY1NkJDLnJvYTBoBggrBgEFBQcBBwEB/wRZMFcw RAQCAAEwPgMEAAEKCgMEAhsA/AMEAS35fgMEAi36NAMEAWdEMDAMAwQGoMrAAwQA oMrCAwQAoMrEAwQAoMrGAwQBoMrIMA8EAgACMAkDBwAgAQ3iAAAwDQYJKoZIhvcN AQELBQADggEBADA5j3R+YrfXqVDyfUK266UsV3SSf6yPM5ZRWXOnyQ05HHiyfxn/ rO5nitxrovrmAZiW3d1SdS67YV5E+2590qJKGVumuWemf8GTX6dWkrLgj+Hl8Q+6 WwzCXVdkTson9kIR/K5xsBMPA70ND3STCojJhOSdT++3Sv5knZWIHwWPkiiLjPyl Phe/04Ou0tMZ2eW/gIe3euy9wrq2FGueJenJX2vQryDfhcdxeB6TnrjuiBuWvRuX OAjzXU68MCC9n9Gk9ULVzDxiyhb1nJFZe2x+qBP0yESF/zPkDr2UdftYr6sKOCer TrBkQMNHPWApGAWKn9bqJlygGO4IgpcAXdw= -----END CERTIFICATE-----Generated at Tue Jul 21 11:14:27 2026 by rpki-client