$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/5895821AB62611ECB410C81DC4F9AE02.roa File: 5895821AB62611ECB410C81DC4F9AE02.roa (raw, json) Hash identifier: t3Xie5IDxeCZBCdmI9sHWzRfklnVyurzehxhGsRDsok= Subject key identifier: 44:73:88:6C:2A:4A:17:BA:6C:BE:AA:2F:B8:EF:2E:E2:0E:CB:91:68 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0430 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/5895821AB62611ECB410C81DC4F9AE02.roa Signing time: Sun 15 Mar 2026 00:33:02 +0000 ROA not before: Sun 15 Mar 2026 00:33:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7582 IP address blocks: 161.64.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Mar 15 00:33:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b5fe3e-1cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5c:3c:ea:a5:30:26:13:82:5f:29:40:cb:e5: 1c:b2:03:3f:f2:b6:5d:b7:4d:a2:4a:cf:11:45:61: a2:f5:7c:ea:a5:6a:0c:2d:e8:98:7d:8a:8c:9f:f1: d6:1b:62:4c:24:f0:cc:8e:82:93:8b:26:cc:fa:e6: bb:f7:a1:17:7f:3c:71:b7:74:c0:78:52:07:dd:f7: d5:a6:de:20:5c:18:f6:66:4d:f5:68:e0:43:db:35: a4:6b:cc:a9:22:5d:0f:47:a8:5d:ab:78:a8:28:a5: c5:02:f8:30:7c:01:af:a2:00:19:07:b3:a7:bc:6b: c4:5c:a4:75:ab:21:1c:05:eb:f4:9b:99:fb:9e:1c: dc:07:3b:0f:0d:6f:64:03:7a:1a:ad:92:90:9c:01: a8:b9:65:db:62:34:52:da:a3:d5:3f:09:40:3a:eb: c9:b2:64:6e:95:8f:6e:59:cf:05:13:25:34:8f:72: 75:3f:ac:00:c3:4e:b4:7e:36:70:38:e3:1b:d2:ef: f4:8c:c4:be:6c:1b:92:03:c0:93:ae:18:28:a6:b1: 84:84:e1:e3:71:b9:7e:8f:4c:04:d7:81:ee:85:61: 0a:30:7e:68:8a:23:4f:1c:a9:39:1c:14:5e:d1:13: 60:6c:30:d9:be:02:7e:df:ad:f2:fe:3b:f5:75:46: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:73:88:6C:2A:4A:17:BA:6C:BE:AA:2F:B8:EF:2E:E2:0E:CB:91:68 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/5895821AB62611ECB410C81DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 20:6f:97:5a:f5:86:fd:e4:e1:42:af:ba:3d:d2:53:74:10:87: 1b:e5:37:c3:5e:0f:22:80:e3:11:40:a8:22:c7:0b:16:a3:c7: f0:18:ad:8f:20:3a:5a:32:ce:af:3e:fe:4b:2b:7d:0f:b3:fd: f4:46:5d:78:89:f1:44:4a:db:c5:c1:b4:1f:90:32:ac:b8:9d: 0e:4e:99:33:5f:94:80:f7:ec:66:65:da:54:99:b1:d5:ad:78: 70:08:62:6a:cf:58:53:98:94:61:73:de:88:d5:de:7b:5f:90: d0:1f:57:ce:52:37:15:7a:6a:2e:a6:82:70:4c:37:52:bc:03: 6a:2b:83:c2:ce:a8:d5:6f:92:f8:68:4e:bf:09:8b:dd:76:08: 04:cc:5f:35:86:19:b0:e8:b4:93:ed:ff:5f:c7:68:89:3a:99: 0e:8f:e0:84:51:4c:59:9b:2f:64:10:ff:d3:10:18:f8:a9:3e: 9d:3c:48:d5:27:b9:0d:cb:a9:1b:eb:7b:9d:e1:13:49:57:93: 3c:01:6e:1b:f2:b6:f7:99:1e:68:55:be:69:ae:a7:53:1d:5e: 43:d7:4d:79:d8:2c:5a:e3:7b:3b:ec:f7:9b:90:e0:93:9a:38: e5:38:e9:3c:ec:90:90:a7:6a:a0:00:2f:c5:56:ee:63:73:6f: 01:f8:30:05 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjYwMzE1MDAzMzAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1ZmUzZS0xY2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1w86qUwJhOCXylAy+UcsgM/8rZdt02iSs8RRWGi9XzqpWoMLeiYfYqMn/HW G2JMJPDMjoKTiybM+ua796EXfzxxt3TAeFIH3ffVpt4gXBj2Zk31aOBD2zWka8yp Il0PR6hdq3ioKKXFAvgwfAGvogAZB7OnvGvEXKR1qyEcBev0m5n7nhzcBzsPDW9k A3oarZKQnAGouWXbYjRS2qPVPwlAOuvJsmRulY9uWc8FEyU0j3J1P6wAw060fjZw OOMb0u/0jMS+bBuSA8CTrhgoprGEhOHjcbl+j0wE14HuhWEKMH5oiiNPHKk5HBRe 0RNgbDDZvgJ+363y/jv1dUavbQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFERziGwq She6bL6qL7jvLuIOy5FoMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FDRjEvODY4MzU1MDZBMDM5MTFFQzhBMUYxQzIzQzRGOUFFMDIvNTg5NTgyMUFC NjI2MTFFQ0I0MTBDODFEQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAoUAwDQYJKoZIhvcNAQELBQADggEBACBvl1r1hv3k4UKvuj3SU3QQ hxvlN8NeDyKA4xFAqCLHCxajx/AYrY8gOloyzq8+/ksrfQ+z/fRGXXiJ8URK28XB tB+QMqy4nQ5OmTNflID37GZl2lSZsdWteHAIYmrPWFOYlGFz3ojV3ntfkNAfV85S NxV6ai6mgnBMN1K8A2org8LOqNVvkvhoTr8Ji912CATMXzWGGbDotJPt/1/HaIk6 mQ6P4IRRTFmbL2QQ/9MQGPipPp08SNUnuQ3LqRvre53hE0lXkzwBbhvytveZHmhV vmmup1MdXkPXTXnYLFrjezvs95uQ4JOaOOU46TzskJCnaqAAL8VW7mNzbwH4MAU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:46 2026 by rpki-client