$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/433D7F329DFB11F182A0F9F84611F970.roa File: 433D7F329DFB11F182A0F9F84611F970.roa (raw, json) Hash identifier: Vh82LjWF95YRu8icW2sMHhRyiyAX+YhC2NuKE1GoBWk= Subject key identifier: 63:92:57:42:B3:BB:6E:CE:96:61:D5:1C:A2:03:C1:88:7E:B5:C9:EB Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32AE Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/433D7F329DFB11F182A0F9F84611F970.roa Signing time: Sat 22 Aug 2026 07:29:52 +0000 ROA not before: Sat 22 Aug 2026 07:29:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141798 IP address blocks: 157.15.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12974 (0x32ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 22 07:29:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a894fef-2c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:95:4d:0b:12:39:15:a0:94:97:62:f9:64: 36:26:82:97:bf:9c:c6:50:59:b9:79:1a:8b:a7:34: da:28:e5:8f:cd:7e:f3:e5:23:4f:37:08:eb:18:ee: 88:40:99:78:79:68:1b:39:f6:7b:ba:c5:47:76:70: 1f:ff:ec:0b:5e:9e:cf:84:62:ff:61:1d:36:ad:72: 34:ce:bf:e8:85:17:8c:69:d0:75:d3:b4:f7:d7:b9: 72:44:4d:7e:47:eb:e1:07:65:54:5c:d2:c2:1c:60: 0f:fa:f9:fe:ac:83:cf:b0:a9:0c:58:3b:ef:79:13: 6f:20:3d:a4:3f:ea:ce:47:96:a8:3a:0b:2e:80:67: 44:a4:93:2c:88:49:6c:38:ee:26:2b:e9:80:bc:12: 55:32:52:f9:73:fc:3b:17:da:fd:ab:9d:4c:b3:91: 1b:2e:31:8d:6b:0e:ef:5f:ef:77:a7:2c:91:8c:aa: ed:d2:71:8d:10:4d:44:2e:db:f2:b9:3c:d1:6e:f5: d2:21:b7:a1:bf:44:04:d7:80:b8:f9:cf:a0:29:a2: 3a:5b:43:ae:c7:4a:71:09:af:7e:25:16:fb:80:9f: 24:b1:50:00:8c:e7:a8:ac:08:53:3e:2b:61:7d:fa: 7b:05:70:bf:f4:3d:dd:16:1f:0c:f7:63:9a:cc:92: af:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:92:57:42:B3:BB:6E:CE:96:61:D5:1C:A2:03:C1:88:7E:B5:C9:EB X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/433D7F329DFB11F182A0F9F84611F970.roa sbgp-ipAddrBlock: critical IPv4: 157.15.99.0/24 Signature Algorithm: sha256WithRSAEncryption 40:ff:2c:cd:83:1d:92:f1:b4:e5:29:cb:b9:3d:71:5a:ba:22: 70:37:67:7e:5e:3a:fe:44:c8:bc:82:48:88:2a:ed:df:61:eb: e0:cd:ad:3a:66:d3:fb:41:7f:1a:49:ab:42:c5:2f:78:c1:dd: 71:5f:80:c7:15:4d:b6:05:91:1b:6f:2a:3a:66:79:d3:3e:6e: 08:47:89:5b:05:21:9c:4c:15:46:13:32:25:e6:f6:c6:7e:c1: e0:20:58:e4:b9:45:59:19:78:5e:2a:ab:9b:97:01:f3:ad:94: c2:1f:92:9f:00:69:fc:3d:21:ac:17:59:31:fa:c3:67:f9:c0: a8:41:30:c1:26:a1:e2:0f:96:9b:ba:19:b2:09:f2:9c:b3:a6: 2e:ff:05:0b:bb:10:ef:3c:21:a7:c4:46:5a:94:c1:d0:07:6d: 1b:e5:f4:32:81:c1:a2:d6:0e:f6:14:69:33:44:70:58:24:c5: 0d:8f:ec:6e:05:39:03:f9:04:7f:9c:47:1c:56:3c:35:65:0f: 65:64:74:f1:2d:01:72:ad:9c:14:fc:d7:1a:ec:20:f1:1c:3b: ed:21:07:60:f5:34:96:a9:9e:ca:c1:38:77:cf:86:a2:d1:6e: 4a:6f:27:eb:9c:73:5a:c1:36:bb:6c:df:7f:fb:74:6b:4c:16: b7:f0:07:7a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwODIyMDcyOTUyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg5NGZlZi0yYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1qVTQsSORWglJdi+WQ2JoKXv5zGUFm5eRqLpzTaKOWPzX7z5SNPNwjrGO6I QJl4eWgbOfZ7usVHdnAf/+wLXp7PhGL/YR02rXI0zr/ohReMadB107T317lyRE1+ R+vhB2VUXNLCHGAP+vn+rIPPsKkMWDvveRNvID2kP+rOR5aoOgsugGdEpJMsiEls OO4mK+mAvBJVMlL5c/w7F9r9q51Ms5EbLjGNaw7vX+93pyyRjKrt0nGNEE1ELtvy uTzRbvXSIbehv0QE14C4+c+gKaI6W0Oux0pxCa9+JRb7gJ8ksVAAjOeorAhTPith ffp7BXC/9D3dFh8M92OazJKvmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGOSV0Kz u27OlmHVHKIDwYh+tcnrMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDMzRDdGMzI5 REZCMTFGMTgyQTBGOUY4NDYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnQ9jMA0GCSqGSIb3DQEBCwUAA4IBAQBA/yzNgx2S8bTlKcu5PXFa uiJwN2d+Xjr+RMi8gkiIKu3fYevgza06ZtP7QX8aSatCxS94wd1xX4DHFU22BZEb byo6ZnnTPm4IR4lbBSGcTBVGEzIl5vbGfsHgIFjkuUVZGXheKqublwHzrZTCH5Kf AGn8PSGsF1kx+sNn+cCoQTDBJqHiD5abuhmyCfKcs6Yu/wULuxDvPCGnxEZalMHQ B20b5fQygcGi1g72FGkzRHBYJMUNj+xuBTkD+QR/nEccVjw1ZQ9lZHTxLQFyrZwU /Nca7CDxHDvtIQdg9TSWqZ7KwTh3z4ai0W5KbyfrnHNawTa7bN9/+3RrTBa38Ad6 -----END CERTIFICATE-----Generated at Fri Sep 4 21:25:29 2026 by rpki-client