$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: GdqPLkJ4E7pdQxvn0EjBp2IupaVKXAY1YiP7PnbBtIc= Subject key identifier: 55:E1:D9:7E:73:AC:4B:D4:D6:83:60:AD:6A:9A:7B:15:DD:4B:7C:C4 Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 0207 Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa Signing time: Wed 17 Jun 2026 10:45:27 +0000 ROA not before: Wed 17 Jun 2026 10:45:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 36007 IP address blocks: 45.130.164.0/24 maxlen: 24 45.130.165.0/24 maxlen: 24 45.130.166.0/24 maxlen: 24 45.130.167.0/24 maxlen: 24 45.151.152.0/24 maxlen: 24 45.151.153.0/24 maxlen: 24 45.151.154.0/24 maxlen: 24 45.151.155.0/24 maxlen: 24 74.113.232.0/24 maxlen: 24 74.113.233.0/24 maxlen: 24 74.113.234.0/24 maxlen: 24 74.113.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Jun 17 10:45:27 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a327ac7-f48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:f6:c8:d8:7f:bd:72:9d:c4:70:3d:a6:14:a6: 1c:7f:0f:fe:87:a4:99:1f:82:bd:f2:09:88:c9:6b: 91:db:e3:e9:02:ac:ca:29:5d:70:00:c1:e8:a4:36: 82:ac:7e:8e:99:99:9a:23:c1:3c:27:0b:c5:17:79: a3:78:69:de:e8:fe:9d:e1:12:c2:98:3b:06:05:bb: dd:43:18:dd:2c:7d:cc:73:31:9e:3a:12:c1:d2:9e: 80:41:b8:80:e2:4f:ce:ab:fb:78:5d:86:b0:ad:b7: 89:29:30:fd:0d:f5:cd:86:7b:f8:ce:b0:05:8d:72: ea:cf:28:04:f0:65:ad:e3:60:16:71:cf:c1:dc:d1: b5:05:15:40:7a:ae:a0:d5:ed:1f:3c:f2:ef:0d:18: 11:95:5a:e8:fe:67:f3:f0:35:5f:44:ff:bb:b2:2e: aa:45:a2:7c:e0:b8:b2:b6:55:aa:36:87:02:d3:cb: 1c:13:55:6e:a4:1b:76:77:f9:5b:24:74:3d:5e:a8: 07:45:56:e8:5c:92:d0:50:1e:b6:9f:44:67:d3:54: cd:d7:20:3a:b3:5e:88:8d:e1:15:bc:a9:61:be:38: f9:eb:82:de:5c:ee:66:d8:27:97:2d:a7:77:3e:a5: b3:1d:1d:34:95:b6:59:8d:84:67:ef:3c:94:82:36: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E1:D9:7E:73:AC:4B:D4:D6:83:60:AD:6A:9A:7B:15:DD:4B:7C:C4 X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.130.164.0/22 45.151.152.0/22 74.113.232.0/22 Signature Algorithm: sha256WithRSAEncryption 45:9c:9d:8d:de:73:84:07:fc:4e:9d:ff:c2:a2:b2:88:55:e3: 22:ab:18:fe:9d:61:1c:d1:f7:f9:63:fe:7a:64:51:85:b8:87: a4:b7:05:de:67:2a:30:50:24:65:2b:3c:02:b3:bc:b4:de:03: 56:b3:26:86:77:69:b4:dd:d2:ec:e6:bd:a4:b7:aa:d5:26:cb: 21:a7:fb:1e:69:9e:ec:a4:0e:28:d1:dd:5d:a5:b9:bb:47:bd: 2f:b8:97:d6:e4:b3:3b:2d:46:b5:90:3c:b8:c8:fe:41:bc:8f: 43:e0:ca:ea:50:2e:20:8b:ba:98:8e:8f:5d:f0:db:a0:23:54: b3:46:ad:28:ce:04:61:18:7e:2d:a6:e5:f2:7f:2c:1b:3b:12: 75:ff:25:6f:ee:5a:8f:7e:65:83:58:f2:3c:ce:36:0d:27:3a: b3:23:92:fd:de:c6:fd:ae:03:32:79:b3:c0:2d:19:92:9f:e0: 19:91:57:a3:93:0f:41:66:6a:eb:6e:3c:08:ab:83:36:b1:ba: 15:35:c2:12:ca:43:46:87:16:d9:8c:49:1f:10:64:dd:a0:4c: 95:d9:68:ac:d3:9e:e1:e3:40:fd:9b:aa:a3:c1:eb:47:76:d0: d3:d1:5a:ad:17:c8:34:8c:6e:2f:1e:fa:bf:0a:3c:64:10:c9: fc:85:63:f1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjYwNjE3MTA0NTI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMyN2FjNy1mNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+vbI2H+9cp3EcD2mFKYcfw/+h6SZH4K98gmIyWuR2+PpAqzKKV1wAMHopDaC rH6OmZmaI8E8JwvFF3mjeGne6P6d4RLCmDsGBbvdQxjdLH3MczGeOhLB0p6AQbiA 4k/Oq/t4XYawrbeJKTD9DfXNhnv4zrAFjXLqzygE8GWt42AWcc/B3NG1BRVAeq6g 1e0fPPLvDRgRlVro/mfz8DVfRP+7si6qRaJ84LiytlWqNocC08scE1VupBt2d/lb JHQ9XqgHRVboXJLQUB62n0Rn01TN1yA6s16IjeEVvKlhvjj564LeXO5m2CeXLad3 PqWzHR00lbZZjYRn7zyUgjbswQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFXh2X5z rEvU1oNgrWqaexXdS3zEMB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMUU0QUJDOEM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCLYKkAwQCLZeYAwQCSnHoMA0GCSqGSIb3DQEBCwUAA4IBAQBFnJ2N 3nOEB/xOnf/CorKIVeMiqxj+nWEc0ff5Y/56ZFGFuIektwXeZyowUCRlKzwCs7y0 3gNWsyaGd2m03dLs5r2kt6rVJsshp/seaZ7spA4o0d1dpbm7R70vuJfW5LM7LUa1 kDy4yP5BvI9D4MrqUC4gi7qYjo9d8NugI1SzRq0ozgRhGH4tpuXyfywbOxJ1/yVv 7lqPfmWDWPI8zjYNJzqzI5L93sb9rgMyebPALRmSn+AZkVejkw9BZmrrbjwIq4M2 sboVNcISykNGhxbZjEkfEGTdoEyV2Wis057h40D9m6qjwetHdtDT0VqtF8g0jG4v Hvq/CjxkEMn8hWPx -----END CERTIFICATE-----Generated at Fri Jul 24 04:19:44 2026 by rpki-client