$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C542CBDA6C4411EFA8DA2776C4F9AE02.roa File: C542CBDA6C4411EFA8DA2776C4F9AE02.roa (raw, json) Hash identifier: agB/1L2r9GSIC5CBOfSf9SAuoWoCAXqjr8eEj1AbvFw= Subject key identifier: F5:0B:4D:A4:DB:CA:53:10:92:37:98:54:17:54:BC:E8:1C:47:F7:EE Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: E707 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C542CBDA6C4411EFA8DA2776C4F9AE02.roa Signing time: Sun 31 May 2026 17:15:28 +0000 ROA not before: Sun 31 May 2026 17:15:28 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 141505 IP address blocks: 45.124.224.0/22 maxlen: 24 45.124.228.0/22 maxlen: 24 45.124.232.0/22 maxlen: 24 45.124.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 06:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59143 (0xe707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 31 17:15:28 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6cb0-0ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:73:3d:98:b4:03:90:aa:2c:85:0d:ad:d5: 67:f6:16:68:c8:79:76:06:d4:6c:97:d4:34:4b:58: e6:d3:2e:ec:b7:a1:67:98:57:42:48:7e:a9:16:c2: 13:94:bc:86:7d:e2:19:3f:cd:23:13:65:8d:22:ae: 9b:1c:f1:74:0f:55:10:99:f0:0f:b4:c0:f7:e2:cf: 7f:82:40:cd:44:27:b9:74:92:ca:af:a1:47:fa:3f: 34:a9:eb:4e:56:a4:d7:d5:c6:b8:86:0d:0a:da:23: 16:ef:46:d6:ad:3d:f6:6e:3b:6d:a8:67:e0:95:9c: 12:47:6e:ca:12:68:2d:d9:b6:fd:9d:61:69:06:02: 30:5d:7b:29:00:ba:b8:a1:f9:d9:be:e4:6b:4b:1f: 5a:ff:23:6e:e0:42:a1:58:3a:1d:d9:0e:ad:4b:77: c4:17:20:b1:7c:00:77:33:05:54:6a:1c:93:e9:90: 7a:19:64:0d:e5:0d:32:08:3c:14:2b:1f:b5:fb:ee: 2f:14:8e:46:f8:9b:a0:e8:f1:d2:27:10:60:5b:6c: 78:42:54:1c:b4:36:d9:57:7b:a8:87:f0:c1:19:00: 0c:0c:d2:11:86:70:6d:02:6b:c1:c6:08:55:b2:73: 36:cf:be:ff:c6:58:bd:81:78:13:6e:ce:96:d8:42: 76:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0B:4D:A4:DB:CA:53:10:92:37:98:54:17:54:BC:E8:1C:47:F7:EE X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C542CBDA6C4411EFA8DA2776C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.124.224.0/20 Signature Algorithm: sha256WithRSAEncryption af:03:5f:a1:84:b7:c0:be:6d:9d:8d:dc:7a:24:8b:f6:1e:27: 93:00:63:41:f9:fa:0f:91:1e:ab:49:4c:1b:59:cc:10:3c:84: 1f:71:1d:24:14:c4:33:89:85:96:c1:98:e0:25:2a:09:15:04: 43:51:3e:c3:a7:ee:c1:c6:05:ed:5f:36:db:bc:50:78:aa:c8: 50:5a:a1:be:2b:ab:9d:11:a2:90:e0:26:89:71:a7:8c:12:d5: bf:e8:ee:8b:f0:c2:b8:1d:11:6f:66:cb:fb:c1:9d:d9:e5:fe: 19:72:ea:bb:df:7c:ad:74:3d:bf:b1:39:d7:bc:05:2b:8a:db: e8:2d:d1:87:de:bc:2c:13:f7:f2:19:d9:fb:4b:d1:54:11:4a: eb:7a:a7:4e:0c:55:00:e1:ee:91:cf:a4:eb:b0:46:0d:3f:73: cb:60:7b:50:f4:2d:ed:81:00:4d:a5:68:0b:77:6f:75:59:60: 31:ca:bd:e6:56:f1:e5:c3:c7:da:50:59:4a:4e:94:7f:48:3a: a7:5c:24:3d:94:6e:90:2b:47:7b:da:b0:0e:31:53:e1:37:27: 76:28:3c:5c:b2:39:db:c1:4d:8e:fe:58:71:15:81:67:56:6f: 1e:ab:c7:95:00:d2:65:5b:89:50:57:44:60:ef:95:91:7a:f5: 77:03:32:25 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIDAOcHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDUzMTE3MTUyOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmExYzZjYjAtMGFlMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsacz2YtAOQqiyFDa3VZ/YWaMh5dgbUbJfUNEtY5tMu7LehZ5hXQkh+qRbC E5S8hn3iGT/NIxNljSKumxzxdA9VEJnwD7TA9+LPf4JAzUQnuXSSyq+hR/o/NKnr Tlak19XGuIYNCtojFu9G1q099m47bahn4JWcEkduyhJoLdm2/Z1haQYCMF17KQC6 uKH52b7ka0sfWv8jbuBCoVg6HdkOrUt3xBcgsXwAdzMFVGock+mQehlkDeUNMgg8 FCsftfvuLxSORviboOjx0icQYFtseEJUHLQ22Vd7qIfwwRkADAzSEYZwbQJrwcYI VbJzNs++/8ZYvYF4E27OlthCdqcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT1C02k 28pTEJI3mFQXVLzoHEf37jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M1NDJDQkRB NkM0NDExRUZBOERBMjc3NkM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBC184DANBgkqhkiG9w0BAQsFAAOCAQEArwNfoYS3wL5tnY3ceiSL 9h4nkwBjQfn6D5Eeq0lMG1nMEDyEH3EdJBTEM4mFlsGY4CUqCRUEQ1E+w6fuwcYF 7V8227xQeKrIUFqhviurnRGikOAmiXGnjBLVv+jui/DCuB0Rb2bL+8Gd2eX+GXLq u998rXQ9v7E517wFK4rb6C3Rh968LBP38hnZ+0vRVBFK63qnTgxVAOHukc+k67BG DT9zy2B7UPQt7YEATaVoC3dvdVlgMcq95lbx5cPH2lBZSk6Uf0g6p1wkPZRukCtH e9qwDjFT4Tcndig8XLI528FNjv5YcRWBZ1ZvHqvHlQDSZVuJUFdEYO+VkXr1dwMy JQ== -----END CERTIFICATE-----Generated at Thu Jun 4 09:04:57 2026 by rpki-client