$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2CD0468858BC11F091143F84C4F9AE02.roa File: 2CD0468858BC11F091143F84C4F9AE02.roa (raw, json) Hash identifier: 2wSEjvg2hcVsRKyxLfkMSqSYJ2yXitkEc93gJshZhVU= Subject key identifier: 83:9C:C1:26:2D:DA:AE:8F:FB:E1:0A:28:7A:00:69:E1:2C:F4:C7:B9 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1EE0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2CD0468858BC11F091143F84C4F9AE02.roa Signing time: Fri 04 Jul 2025 09:49:28 +0000 ROA not before: Fri 04 Jul 2025 09:49:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141841 IP address blocks: 165.101.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7904 (0x1ee0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 4 09:49:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6867a3a8-a13a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:dc:16:0d:16:91:c9:fe:b9:59:1f:63:04: c0:23:4d:d1:eb:8d:8b:da:5a:15:bf:f0:76:a3:bc: 31:af:0c:53:20:f4:d5:46:2a:ee:72:70:0f:de:0a: 2d:25:36:02:4b:c3:86:c4:5a:ec:fa:ca:b6:82:e5: 83:84:89:f1:3a:cf:af:9c:91:c2:cd:74:78:5a:20: b2:76:d6:83:6d:16:d0:4e:5c:01:97:dc:6b:a3:07: 4e:a4:59:3f:4c:8e:16:20:42:25:b4:1e:4c:2c:1b: 6c:b0:06:cb:dd:40:02:0d:8e:4d:cc:a4:c1:03:70: 1f:d4:6d:09:1a:bf:5c:0d:96:77:bf:9b:3e:63:5f: 51:0e:f4:ff:15:6d:a2:26:c4:f5:e4:99:0f:76:59: 27:e2:63:5b:b2:92:aa:d8:6f:80:8e:e4:a5:e9:63: fb:89:b7:25:dc:9a:4f:92:3a:b3:a9:19:1d:9e:45: f6:fb:b9:1a:b2:e1:79:70:5b:9c:95:56:74:05:dc: 97:48:9b:ba:90:fc:30:0d:c4:22:56:2c:a3:2a:93: 5b:06:a9:20:cc:84:05:5b:d4:18:ae:92:37:c4:38: 3d:cc:c3:77:9b:f0:d8:6a:7a:63:cd:51:37:89:b6: 1b:b7:15:37:0b:26:a4:96:f0:d4:1e:aa:75:96:a3: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:C1:26:2D:DA:AE:8F:FB:E1:0A:28:7A:00:69:E1:2C:F4:C7:B9 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2CD0468858BC11F091143F84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.96.0/24 Signature Algorithm: sha256WithRSAEncryption 16:cd:af:ad:f1:2a:4c:e6:1f:f2:b6:d9:ee:db:7d:06:b0:85: d0:2c:36:75:be:04:bf:94:27:07:23:50:1c:08:a8:c3:da:96: 05:8a:6a:94:ec:a5:54:2b:60:13:2a:03:0e:fa:fc:c8:7d:88: ce:3b:fb:47:d0:06:33:70:96:91:e5:ff:c5:ef:8f:3d:e9:ca: 28:70:a1:de:c6:00:c5:1e:ed:1f:df:1d:8b:c5:1e:3a:86:c0: a7:a1:52:79:0c:e6:bc:c8:dd:4d:2e:b5:6a:05:31:03:45:43: f4:ef:16:46:aa:e3:05:c9:dd:90:4a:51:4a:cd:0c:19:79:30: 4b:a1:ea:32:5b:d3:97:55:f9:24:36:73:40:08:9b:63:e7:e1: df:dc:99:58:db:20:d1:42:3b:25:36:ce:d9:18:aa:0b:56:aa: cc:fa:ea:fe:f6:7d:e1:f7:c2:ad:89:43:5c:a2:1d:c1:30:8f: 50:7d:b4:ed:4a:af:5d:7c:a4:38:0a:0a:5c:ee:1c:2a:fa:2e: fa:20:15:03:3d:a7:74:1b:1e:67:04:b6:ba:b5:8d:d3:21:37: 4d:9c:fa:24:db:24:c8:7d:07:4b:e4:96:fd:42:12:e1:f4:9e: ec:f4:15:8a:bc:7b:3e:fb:35:5a:fe:a4:cb:ec:3e:c9:43:e6: bb:8f:52:c7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzA0MDk0OTI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY3YTNhOC1hMTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BLcFg0Wkcn+uVkfYwTAI03R642L2loVv/B2o7wxrwxTIPTVRirucnAP3got JTYCS8OGxFrs+sq2guWDhInxOs+vnJHCzXR4WiCydtaDbRbQTlwBl9xrowdOpFk/ TI4WIEIltB5MLBtssAbL3UACDY5NzKTBA3Af1G0JGr9cDZZ3v5s+Y19RDvT/FW2i JsT15JkPdlkn4mNbspKq2G+AjuSl6WP7ibcl3JpPkjqzqRkdnkX2+7kasuF5cFuc lVZ0BdyXSJu6kPwwDcQiViyjKpNbBqkgzIQFW9QYrpI3xDg9zMN3m/DYanpjzVE3 ibYbtxU3CyaklvDUHqp1lqNt3wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIOcwSYt 2q6P++EKKHoAaeEs9Me5MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkNEMDQ2ODg1 OEJDMTFGMDkxMTQzRjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAClZWAwDQYJKoZIhvcNAQELBQADggEBABbNr63xKkzmH/K2 2e7bfQawhdAsNnW+BL+UJwcjUBwIqMPalgWKapTspVQrYBMqAw76/Mh9iM47+0fQ BjNwlpHl/8Xvjz3pyihwod7GAMUe7R/fHYvFHjqGwKehUnkM5rzI3U0utWoFMQNF Q/TvFkaq4wXJ3ZBKUUrNDBl5MEuh6jJb05dV+SQ2c0AIm2Pn4d/cmVjbINFCOyU2 ztkYqgtWqsz66v72feH3wq2JQ1yiHcEwj1B9tO1Kr118pDgKClzuHCr6LvogFQM9 p3QbHmcEtrq1jdMhN02c+iTbJMh9B0vklv1CEuH0nuz0FYq8ez77NVr+pMvsPslD 5ruPUsc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:45 2025 by rpki-client