$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa File: C1ECF984D07411F0B0B35C27C4F9AE02.roa (raw, json) Hash identifier: /yZQPTsxHkvk4ctloKc7UIVchuakTDwnSbZlJ8wAP38= Subject key identifier: CC:FC:58:09:20:67:43:42:6F:CC:B2:A1:81:E6:29:13:75:2F:94:DB Certificate issuer: /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Certificate serial: 02F0 Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa Signing time: Mon 06 Jul 2026 20:06:14 +0000 ROA not before: Mon 06 Jul 2026 20:06:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 46606 IP address blocks: 65.254.64.0/19 maxlen: 24 66.116.128.0/18 maxlen: 24 216.10.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761 Validity Not Before: Jul 6 20:06:14 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a4c0ab6-13c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:89:e9:fd:22:ca:b5:b9:da:61:4b:31:6b: 8e:c9:1e:3e:e4:5b:17:6f:19:ba:d9:2e:a6:53:b6: 86:9b:8f:32:8f:c8:df:6a:eb:b8:58:97:04:8a:ba: c5:f2:45:d8:c1:73:aa:cb:41:c5:db:9e:b1:ac:25: 05:39:87:6b:59:de:9f:11:0b:f4:d9:0b:42:61:8b: 31:41:b7:43:53:d7:60:35:bb:1c:0c:60:97:f7:4c: 08:21:1c:a3:d3:01:92:be:c2:b5:84:54:f9:24:6a: b2:e8:fd:95:30:32:fa:f7:10:ca:24:03:87:e9:60: 51:ed:b9:93:8a:ed:0e:7b:8c:3f:ea:5a:be:12:f2: c6:54:43:f7:b5:ca:7a:bf:9c:0c:6f:6f:30:25:b4: 1c:80:74:fe:3d:ff:92:db:42:e8:7e:c2:a5:90:bb: 31:ac:b3:32:df:c0:a7:e6:2e:bc:f9:a2:54:15:b7: b7:fb:8c:bd:e3:94:23:ac:58:be:63:23:0e:de:a5: c6:69:c0:3b:af:10:de:83:a1:9c:5d:c4:12:e4:c9: cc:3c:93:12:be:67:a9:37:59:02:f7:e0:a2:c8:1b: 10:be:7a:41:1c:d0:f7:67:19:1b:be:65:e0:03:48: 04:20:58:e5:5d:a7:24:01:12:e6:2e:25:78:f2:62: 58:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FC:58:09:20:67:43:42:6F:CC:B2:A1:81:E6:29:13:75:2F:94:DB X509v3 Authority Key Identifier: keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/C1ECF984D07411F0B0B35C27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 65.254.64.0/19 66.116.128.0/18 216.10.240.0/20 Signature Algorithm: sha256WithRSAEncryption 8d:6b:eb:02:81:6d:30:46:0e:08:bf:f6:af:e3:10:3a:31:24: f7:0d:df:a5:f2:65:d9:b5:69:33:59:59:e5:a8:41:97:1e:ed: 6a:28:36:7e:1c:a8:fe:81:4c:87:5f:bb:1c:f1:76:90:68:04: 51:36:aa:00:6d:6a:5e:c7:dd:b5:d7:ad:d1:2b:b8:34:dc:5d: d9:ca:44:ae:fa:e8:5b:63:f7:e9:21:49:db:18:81:00:0d:ca: 91:e0:8f:f4:ba:0c:80:cd:bb:e0:b1:72:f4:77:df:b1:87:79: 5a:f7:96:8e:2a:a6:5b:37:fa:ef:6f:2f:a9:44:88:15:14:0a: cf:48:15:57:e7:e2:a1:53:fe:5d:76:ae:96:34:c2:51:10:1b: b9:54:02:4a:b7:f7:54:40:cc:ec:53:5b:28:02:c7:dd:c7:bc: bd:0a:c0:48:8b:01:d0:49:bc:02:41:b3:d6:b8:b5:81:ea:c5: 75:18:75:97:14:9e:37:80:2a:45:2b:f5:c8:64:ac:cc:92:48: 1e:5e:b9:22:89:1b:86:b8:00:01:aa:53:db:31:b6:f4:3b:c0: 22:05:ae:e6:22:51:ae:5e:50:04:42:20:87:28:a9:3a:4c:c7: 56:17:cc:53:b6:c9:e9:63:20:ca:30:ec:dd:66:67:78:e8:4c: a5:ca:c6:a0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB RTdEQ0M3NjEwHhcNMjYwNzA2MjAwNjE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjMGFiNi0xM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtR2J6f0iyrW52mFLMWuOyR4+5FsXbxm62S6mU7aGm48yj8jfauu4WJcEirrF 8kXYwXOqy0HF256xrCUFOYdrWd6fEQv02QtCYYsxQbdDU9dgNbscDGCX90wIIRyj 0wGSvsK1hFT5JGqy6P2VMDL69xDKJAOH6WBR7bmTiu0Oe4w/6lq+EvLGVEP3tcp6 v5wMb28wJbQcgHT+Pf+S20LofsKlkLsxrLMy38Cn5i68+aJUFbe3+4y945QjrFi+ YyMO3qXGacA7rxDeg6GcXcQS5MnMPJMSvmepN1kC9+CiyBsQvnpBHND3ZxkbvmXg A0gEIFjlXackARLmLiV48mJYAQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMz8WAkg Z0NCb8yyoYHmKRN1L5TbMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4 MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvQzFFQ0Y5ODRE MDc0MTFGMEIwQjM1QzI3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQFQf5AAwQGQnSAAwQE2ArwMA0GCSqGSIb3DQEBCwUAA4IBAQCNa+sC gW0wRg4Iv/av4xA6MST3Dd+l8mXZtWkzWVnlqEGXHu1qKDZ+HKj+gUyHX7sc8XaQ aARRNqoAbWpex921163RK7g03F3ZykSu+uhbY/fpIUnbGIEADcqR4I/0ugyAzbvg sXL0d9+xh3la95aOKqZbN/rvby+pRIgVFArPSBVX5+KhU/5ddq6WNMJREBu5VAJK t/dUQMzsU1soAsfdx7y9CsBIiwHQSbwCQbPWuLWB6sV1GHWXFJ43gCpFK/XIZKzM kkgeXrkiiRuGuAABqlPbMbb0O8AiBa7mIlGuXlAEQiCHKKk6TMdWF8xTtsnpYyDK MOzdZmd46Eylysag -----END CERTIFICATE-----Generated at Fri Jul 24 03:01:29 2026 by rpki-client