$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa File: CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa (raw, json) Hash identifier: MIgLlGv+90743Lpa+O00SE4Huy00tU+3pVQ2/UBE5T4= Subject key identifier: 2B:84:CB:BA:F1:57:B2:14:5E:D9:47:D7:90:C6:DA:2A:27:BB:DE:FD Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: F506 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa Signing time: Mon 06 Jul 2026 17:30:03 +0000 ROA not before: Mon 06 Jul 2026 17:30:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149600 IP address blocks: 45.249.241.0/24 maxlen: 24 45.250.0.0/24 maxlen: 24 45.250.1.0/24 maxlen: 24 45.250.2.0/24 maxlen: 24 45.250.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62726 (0xf506) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 6 17:30:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4be61b-8dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:dc:74:d1:1a:1e:e6:9b:0c:ce:7c:42:ca: 74:bb:89:0a:bc:f1:29:68:09:92:e2:e5:af:04:94: de:98:99:b7:91:2d:2a:7c:50:4d:af:6e:f3:bf:35: 48:b1:3c:42:4a:60:a7:e7:73:82:14:5c:e3:b6:da: aa:ee:1e:48:c1:70:1d:94:1a:cb:64:0c:52:a3:df: 93:cd:eb:5e:bf:73:14:e7:d0:20:58:85:46:10:17: e0:1a:9d:95:ed:d1:9a:0d:bb:3f:f0:a8:f2:d9:00: c7:fa:23:71:b8:2a:e1:bb:81:77:4e:c0:9c:c7:c2: fc:bb:a2:b2:e5:a5:ff:83:52:95:f3:a5:81:b2:d4: d5:15:9c:77:4a:f9:40:54:62:36:9c:27:6e:65:52: b5:0c:fa:31:43:28:1c:e3:f8:b6:48:3b:f2:a4:ce: 6a:45:b3:69:1e:34:1b:79:73:f4:11:54:9b:b8:6b: b8:40:16:b9:b0:a2:f3:4a:0e:42:f8:d7:cd:c7:41: 44:92:29:87:26:e8:da:83:77:41:b6:fd:39:85:69: 9a:88:c7:15:37:c0:ff:71:74:56:1f:3a:0a:e3:3a: 23:80:8c:a4:cb:0e:76:91:c5:7a:67:cb:4b:e8:5a: e2:1a:1a:d3:a8:c5:97:87:42:69:a3:a9:01:d3:f6: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:84:CB:BA:F1:57:B2:14:5E:D9:47:D7:90:C6:DA:2A:27:BB:DE:FD X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CAFE91C0D5BB11ECA8BE4666C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.249.241.0/24 45.250.0.0/22 Signature Algorithm: sha256WithRSAEncryption 78:82:a5:eb:d5:b5:ad:68:3a:eb:04:74:de:aa:21:e7:b6:3a: 0f:c3:b9:8c:4e:b6:5c:40:68:08:07:d4:0c:c2:8d:24:7b:42: f4:0f:70:43:3c:14:18:c2:7a:56:d0:78:00:55:3c:1f:ae:41: 8e:86:b8:b6:9f:7a:37:3f:b6:b3:6f:43:bf:df:d8:a7:3f:6c: 37:de:f5:82:78:dc:b4:bd:81:4c:b1:45:4a:5b:dd:be:97:c1: 29:c8:69:7d:6f:66:55:3f:be:6e:a7:76:0f:ed:6b:a6:12:d7: 04:15:6f:a5:ed:d4:f5:e7:c9:29:b5:71:35:09:4b:c0:35:0b: ee:ec:89:b9:b8:39:a7:2f:16:ec:94:7f:6e:d0:6d:cd:b5:e6: 31:4f:bc:2e:94:e1:96:d4:e5:bf:74:7b:d7:d0:fe:66:71:93: a2:18:4e:8a:bf:c1:48:5a:05:36:63:7d:73:c9:7c:ed:16:02: 99:2b:2f:dc:f7:9b:c0:e9:5c:17:14:08:33:62:df:f7:72:f9: a8:75:0a:ab:3e:f7:2e:4d:6a:39:84:50:14:ad:4d:33:0d:95: 8f:8e:64:1e:da:ad:ea:f5:91:37:6e:d8:98:16:af:91:44:d4: 1e:8e:11:79:f0:89:13:6d:fa:f1:97:87:05:6c:cb:59:db:73: 9b:4c:cb:9e -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIDAPUGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDcwNjE3MzAwM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNmE0YmU2MWItOGRkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpJ3HTRGh7mmwzOfELKdLuJCrzxKWgJkuLlrwSU3piZt5EtKnxQTa9u8781 SLE8Qkpgp+dzghRc47baqu4eSMFwHZQay2QMUqPfk83rXr9zFOfQIFiFRhAX4Bqd le3Rmg27P/Co8tkAx/ojcbgq4buBd07AnMfC/LuisuWl/4NSlfOlgbLU1RWcd0r5 QFRiNpwnbmVStQz6MUMoHOP4tkg78qTOakWzaR40G3lz9BFUm7hruEAWubCi80oO QvjXzcdBRJIphybo2oN3Qbb9OYVpmojHFTfA/3F0Vh86CuM6I4CMpMsOdpHFemfL S+ha4hoa06jFl4dCaaOpAdP2q8sCAwEAAaOCAmYwggJiMB0GA1UdDgQWBBQrhMu6 8VeyFF7ZR9eQxtoqJ7ve/TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NBRkU5MUMw RDVCQjExRUNBOEJFNDY2NkM0RjlBRTAyLnJvYTAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEAC358QMEAi36ADANBgkqhkiG9w0BAQsFAAOCAQEAeIKl69W1rWg6 6wR03qoh57Y6D8O5jE62XEBoCAfUDMKNJHtC9A9wQzwUGMJ6VtB4AFU8H65Bjoa4 tp96Nz+2s29Dv9/Ypz9sN971gnjctL2BTLFFSlvdvpfBKchpfW9mVT++bqd2D+1r phLXBBVvpe3U9efJKbVxNQlLwDUL7uyJubg5py8W7JR/btBtzbXmMU+8LpThltTl v3R719D+ZnGTohhOir/BSFoFNmN9c8l87RYCmSsv3PebwOlcFxQIM2Lf93L5qHUK qz73Lk1qOYRQFK1NMw2Vj45kHtqt6vWRN27YmBavkUTUHo4RefCJE2368ZeHBWzL Wdtzm0zLng== -----END CERTIFICATE-----Generated at Tue Jul 21 13:48:20 2026 by rpki-client