$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa File: 0C21BBAC373711F08FA9BD3DC4F9AE02.roa (raw, json) Hash identifier: ebgtTFO3AasXytfvPXSreDrm4OT7z/0UktQfKH8cIZU= Subject key identifier: 65:14:7E:92:36:10:12:FA:34:F0:CB:5D:92:48:44:4B:99:DE:DA:77 Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 02EE Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa Signing time: Mon 06 Jul 2026 20:06:11 +0000 ROA not before: Mon 06 Jul 2026 20:06:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 31898 IP address blocks: 65.254.64.0/19 maxlen: 24 66.116.192.0/18 maxlen: 24 216.10.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 750 (0x2ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Jul 6 20:06:10 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a4c0ab2-f28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:70:23:b7:b1:d3:ab:c9:24:c4:e3:bc:e1: f0:36:af:03:f9:8b:0a:33:98:c6:b1:4f:9c:00:bc: 54:ec:67:2e:39:db:c7:6d:8f:2e:ed:17:ec:a0:bb: e5:48:53:61:05:01:07:ff:35:d2:30:a1:0a:e9:6b: 22:7a:2f:d3:36:80:58:ce:75:d1:09:8f:0b:79:43: 77:e2:53:4d:a1:46:f0:23:bb:47:e1:5a:42:6b:ce: fd:08:fd:6d:e9:a7:fa:02:d8:77:66:56:5d:a5:e9: b4:3d:54:16:a1:4f:69:51:1f:c2:69:99:3e:04:26: d6:a0:21:1f:90:dd:ec:3c:1a:cf:ca:5d:04:4b:a2: ca:bc:f5:1d:59:ec:3f:73:4a:67:0b:62:d7:79:c7: 11:cb:0d:ca:14:17:1b:49:c5:f0:a8:b4:c1:b5:9f: 4a:75:3b:f8:e5:c2:b7:c3:62:f6:30:fe:a0:48:6c: b2:28:b5:d9:ff:ff:9b:c6:b8:be:41:33:b0:9a:68: 7a:33:c1:08:62:ee:a1:93:7c:f3:06:99:5a:14:30: 9b:42:c9:6b:6c:f9:8d:f9:36:10:62:b2:2a:0b:f1: 26:52:1f:86:30:0e:99:0f:73:f4:45:04:78:75:9d: b1:c5:e1:df:55:d2:77:7c:9a:dc:b0:30:b0:68:5b: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:14:7E:92:36:10:12:FA:34:F0:CB:5D:92:48:44:4B:99:DE:DA:77 X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/0C21BBAC373711F08FA9BD3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 65.254.64.0/19 66.116.192.0/18 216.10.240.0/20 Signature Algorithm: sha256WithRSAEncryption 01:c8:14:08:a0:f8:d0:87:cd:8e:49:f3:50:a9:21:95:54:1c: 40:3d:a2:4b:14:bf:b1:cc:0e:f6:ac:db:0b:6f:54:3e:0f:c8: fb:1a:9d:e6:9c:ce:ff:6f:f7:7b:3d:a9:d1:fa:06:4e:20:ce: f5:7f:7f:75:b7:c4:8f:8e:d0:87:35:1a:0b:66:1b:72:54:a5: 14:fb:12:7c:d6:9c:54:fa:75:31:b6:5f:76:67:0f:dd:f0:94: a2:34:42:56:e6:0a:ca:fa:22:3b:ad:aa:38:52:68:c6:9a:c3: 61:e0:9d:b3:a5:67:5b:5b:0e:84:6a:b7:c2:5c:d1:6c:fa:ca: a5:6d:06:3f:c6:94:c0:66:39:9b:eb:69:9f:82:9e:23:c4:10: e6:c7:cf:49:1d:2f:ed:ee:cf:35:e8:4f:92:cc:06:46:c0:a8: b7:5b:f1:f3:c6:a8:f5:34:52:d6:a7:d4:45:bc:39:0f:9c:90: af:9f:22:e3:b6:9f:dd:0c:7e:5e:28:9e:56:ec:c0:6a:b1:2e: 43:4a:de:f9:0f:8c:49:b3:c8:e1:a0:3c:16:fe:6b:c8:16:ef: e7:ea:ec:3d:7e:bd:9b:93:38:7f:69:8f:b6:fd:9d:b4:62:95: 22:14:f2:23:d9:a0:34:09:75:09:3f:79:a7:ee:67:eb:9a:f9: a5:7a:8e:d7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjYwNzA2MjAwNjEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjMGFiMi1mMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoARwI7ex06vJJMTjvOHwNq8D+YsKM5jGsU+cALxU7GcuOdvHbY8u7RfsoLvl SFNhBQEH/zXSMKEK6Wsiei/TNoBYznXRCY8LeUN34lNNoUbwI7tH4VpCa879CP1t 6af6Ath3ZlZdpem0PVQWoU9pUR/CaZk+BCbWoCEfkN3sPBrPyl0ES6LKvPUdWew/ c0pnC2LXeccRyw3KFBcbScXwqLTBtZ9KdTv45cK3w2L2MP6gSGyyKLXZ//+bxri+ QTOwmmh6M8EIYu6hk3zzBplaFDCbQslrbPmN+TYQYrIqC/EmUh+GMA6ZD3P0RQR4 dZ2xxeHfVdJ3fJrcsDCwaFsV9wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGUUfpI2 EBL6NPDLXZJIREuZ3tp3MB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvMEMyMUJCQUMz NzM3MTFGMDhGQTlCRDNEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFQf5AAwQGQnTAAwQE2ArwMA0GCSqGSIb3DQEBCwUAA4IBAQAByBQI oPjQh82OSfNQqSGVVBxAPaJLFL+xzA72rNsLb1Q+D8j7Gp3mnM7/b/d7PanR+gZO IM71f391t8SPjtCHNRoLZhtyVKUU+xJ81pxU+nUxtl92Zw/d8JSiNEJW5grK+iI7 rao4UmjGmsNh4J2zpWdbWw6EarfCXNFs+sqlbQY/xpTAZjmb62mfgp4jxBDmx89J HS/t7s816E+SzAZGwKi3W/Hzxqj1NFLWp9RFvDkPnJCvnyLjtp/dDH5eKJ5W7MBq sS5DSt75D4xJs8jhoDwW/mvIFu/n6uw9fr2bkzh/aY+2/Z20YpUiFPIj2aA0CXUJ P3mn7mfrmvmleo7X -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:17 2026 by rpki-client