$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5A858AC4A7511F08509A969C4F9AE02.roa File: A5A858AC4A7511F08509A969C4F9AE02.roa (raw, json) Hash identifier: tf65CbCBEu8gFYAmDNHpvP7qphb6rJ6RJtzwNqKz4wM= Subject key identifier: 72:2F:30:7B:2E:8E:F1:EB:5B:13:EA:07:27:4E:4C:BF:E8:2C:45:6F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F6B8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5A858AC4A7511F08509A969C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:44:24 +0000 ROA not before: Mon 06 Jul 2026 17:44:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153724 IP address blocks: 163.223.168.0/23 maxlen: 24 2001:df5:45c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63160 (0xf6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:44:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be978-e5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:8f:b8:cf:65:62:13:ef:99:4d:a7:d8:60: e1:e8:e1:dd:5e:b6:2b:7b:cd:db:ef:67:3a:b3:c3: 44:da:5d:8f:e7:30:33:eb:e6:16:c5:9c:20:f0:e5: 84:cd:fa:ef:cf:bf:61:5b:06:7f:a4:9f:5e:6b:7a: e2:24:52:d8:59:db:83:de:f2:73:d3:39:16:4a:b9: 67:52:53:c7:57:57:23:c6:52:f8:fd:20:16:5f:f0: e2:49:45:98:13:ab:62:56:cb:fc:3d:0d:20:94:7e: 79:85:29:99:26:17:d4:77:80:18:85:e4:c4:46:14: e6:d1:fa:75:e5:19:e1:c2:98:7b:c2:83:81:49:36: e5:5b:c6:b9:14:73:ae:f0:ad:10:6e:a2:ef:4d:21: c5:ac:5c:91:ac:31:f2:83:d7:ad:4f:e9:f9:ec:14: 1b:5e:93:28:05:94:88:43:eb:ee:42:d3:a5:54:40: 92:57:ef:80:86:32:d3:2a:4e:21:67:08:7f:08:73: c6:f1:9f:fd:9f:ef:20:db:6a:71:30:f1:20:34:33: b3:dc:99:41:e1:39:97:59:06:b1:85:7b:59:71:1a: cd:c1:17:65:9a:64:7a:57:f0:2a:71:fe:b1:9e:d4: 33:3a:2a:0f:a2:6d:b5:fe:bc:2a:17:38:7f:db:bc: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2F:30:7B:2E:8E:F1:EB:5B:13:EA:07:27:4E:4C:BF:E8:2C:45:6F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A5A858AC4A7511F08509A969C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.168.0/23 IPv6: 2001:df5:45c0::/48 Signature Algorithm: sha256WithRSAEncryption 8a:24:35:11:a9:41:4b:30:e2:e7:5c:14:ef:2b:2b:0e:c9:ea: 14:7a:e9:cd:e1:5b:27:7d:c3:d5:02:13:04:a0:56:9d:6d:20: 51:3a:11:75:bb:c4:56:8f:23:7a:16:ad:32:e6:72:36:f1:d7: f8:93:51:17:25:f0:0b:14:5b:41:09:0a:23:a5:23:ab:30:89: 13:e2:f1:9f:60:10:ea:50:34:b6:1f:53:1f:db:93:b1:5b:18: 9d:da:96:a8:5d:fe:80:c2:f8:83:61:d0:ca:11:23:55:13:d3: a4:53:23:e6:a9:7b:1b:75:59:f2:b5:dc:c9:94:d3:19:49:48: a5:48:f1:cb:d0:a9:3a:78:79:ea:de:5e:6f:f5:94:fe:56:0b: 32:fd:02:27:cd:0e:63:c8:23:a3:46:6d:97:f6:dd:b7:ad:d7: f3:b0:4e:be:83:15:aa:a5:28:17:31:24:6a:ac:d5:d6:4d:68: ca:59:75:3f:7e:d3:b9:e2:3a:3c:f4:a7:8e:25:de:d5:f9:58: 86:c7:54:43:fc:9c:95:77:ea:d4:ea:cb:d1:aa:d2:e5:1f:9d: a7:f1:bb:0d:3a:c3:6a:68:81:f5:68:6a:fa:16:5b:37:a5:76: 9c:21:b5:62:0c:9b:6a:0e:63:f5:f1:0e:a1:40:e7:4c:94:3d: 12:23:ba:6f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIDAPa4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3NDQyNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU5NzgtZTVjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/Bj7jPZWIT75lNp9hg4ejh3V62K3vN2+9nOrPDRNpdj+cwM+vmFsWcIPDl hM3678+/YVsGf6SfXmt64iRS2Fnbg97yc9M5Fkq5Z1JTx1dXI8ZS+P0gFl/w4klF mBOrYlbL/D0NIJR+eYUpmSYX1HeAGIXkxEYU5tH6deUZ4cKYe8KDgUk25VvGuRRz rvCtEG6i700hxaxckawx8oPXrU/p+ewUG16TKAWUiEPr7kLTpVRAklfvgIYy0ypO IWcIfwhzxvGf/Z/vINtqcTDxIDQzs9yZQeE5l1kGsYV7WXEazcEXZZpkelfwKnH+ sZ7UMzoqD6Jttf68Khc4f9u8EpECAwEAAaOCAnEwggJtMB0GA1UdDgQWBBRyLzB7 Lo7x61sT6gcnTky/6CxFbzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E1QTg1OEFD NEE3NTExRjA4NTA5QTk2OUM0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w DAQCAAEwBgMEAaPfqDAPBAIAAjAJAwcAIAEN9UXAMA0GCSqGSIb3DQEBCwUAA4IB AQCKJDURqUFLMOLnXBTvKysOyeoUeunN4VsnfcPVAhMEoFadbSBROhF1u8RWjyN6 Fq0y5nI28df4k1EXJfALFFtBCQojpSOrMIkT4vGfYBDqUDS2H1Mf25OxWxid2pao Xf6AwviDYdDKESNVE9OkUyPmqXsbdVnytdzJlNMZSUilSPHL0Kk6eHnq3l5v9ZT+ Vgsy/QInzQ5jyCOjRm2X9t23rdfzsE6+gxWqpSgXMSRqrNXWTWjKWXU/ftO54jo8 9KeOJd7V+ViGx1RD/JyVd+rU6svRqtLlH52n8bsNOsNqaIH1aGr6Fls3pXacIbVi DJtqDmP18Q6hQOdMlD0SI7pv -----END CERTIFICATE-----Generated at Tue Jul 21 13:48:21 2026 by rpki-client