$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/4FB5C8F4C43D11EE973ADE48C4F9AE02.roa File: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (raw, json) Hash identifier: w85ShfVmSSazA40BnYySK0taMWm3Jht1Z+WUVvSZtWM= Subject key identifier: A9:EA:7B:A2:EF:5C:C1:39:83:5F:F3:6A:49:2B:AB:FA:5D:B6:6B:F6 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: 018D Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/4FB5C8F4C43D11EE973ADE48C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:25:26 +0000 ROA not before: Fri 27 Feb 2026 04:23:08 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152455 IP address blocks: 157.15.114.0/23 maxlen: 23 157.15.114.0/24 maxlen: 24 157.15.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: Feb 27 04:23:08 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a61c66-0804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:d5:f0:88:20:e5:24:08:50:4f:a8:c4:aa: 95:91:8b:85:77:16:ad:0a:27:10:7c:a5:d7:cc:55: ec:b0:af:22:3f:0d:f8:24:36:d7:1a:3a:cd:fc:54: 30:44:fa:cc:cd:78:a6:98:79:18:52:3b:e6:5c:6d: 1f:42:44:fb:cd:e7:6d:83:b2:29:1e:e1:de:62:0c: 68:c9:0a:16:8a:8d:50:d6:52:a7:6b:f7:a8:47:2a: 0d:ab:90:03:35:27:01:1a:8b:82:da:cf:77:00:ef: a0:80:e1:2d:b4:1e:ed:54:cc:41:b7:bd:be:80:46: 4f:86:19:8b:1d:79:0f:02:8b:4f:23:e4:48:d8:51: 6f:df:93:4e:2b:6f:56:1e:a9:fa:77:37:b7:97:73: b7:c8:07:bb:d7:6c:9b:c3:bb:d1:31:20:75:c1:e4: b3:ce:d7:20:10:b3:ad:49:03:7b:a1:d2:20:c4:a2: 67:3b:45:4c:ca:59:d5:8b:57:71:0f:ff:54:e1:99: f7:e3:7b:4e:e9:2d:57:5b:76:be:c8:50:cc:eb:7e: 7b:f5:85:ce:e9:c1:13:11:7f:0d:65:c1:9d:22:1a: 35:15:67:b6:b5:17:fb:bf:4b:8b:3c:5d:45:18:1c: f6:98:58:d5:eb:88:b9:e4:d5:35:8b:6f:a3:d2:a8: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EA:7B:A2:EF:5C:C1:39:83:5F:F3:6A:49:2B:AB:FA:5D:B6:6B:F6 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/4FB5C8F4C43D11EE973ADE48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.114.0/23 Signature Algorithm: sha256WithRSAEncryption 16:d9:da:20:7b:38:d2:1a:0f:1d:49:a1:15:a8:95:d9:ae:2b: 00:c6:70:cf:28:69:d6:63:b2:bd:a3:14:51:b9:74:96:d0:c2: c5:f7:29:96:64:6f:9f:6a:5e:1c:e4:fe:69:40:ee:33:8d:37: 49:35:f4:61:15:f5:b5:a6:38:a3:12:eb:e1:a5:a6:56:0c:5a: f1:57:9c:23:5e:bf:a2:41:89:f3:3a:71:1b:ba:4f:9d:de:98: 24:b4:89:02:4e:5c:f0:03:de:af:8d:5d:83:2d:47:20:08:35: 90:a8:39:a8:f9:25:f6:4c:ea:38:b6:1e:14:f3:10:7f:94:87: 4b:f2:24:25:8a:1d:75:8b:45:54:31:66:e0:f0:de:04:a4:e3: 16:77:ca:23:8e:6f:56:ea:de:0a:f2:90:06:ef:f2:5d:85:c7: 5a:47:76:47:59:0e:70:54:b1:5d:72:a3:33:11:77:19:d9:e0: db:cc:c7:a5:10:bc:aa:82:4a:86:09:22:6a:a5:00:3e:69:34: 34:09:f2:d6:da:cb:99:8e:ce:a8:fa:58:09:27:18:f0:4e:3b: d3:1a:53:30:ef:97:97:5c:55:4d:c3:85:c7:54:26:ff:47:95: cb:7c:b6:c6:8b:95:c0:51:c3:85:d1:4d:75:00:f5:65:0f:56: 9e:45:1f:44 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjYwMjI3MDQyMzA4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWM2Ni0wODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a7V8Igg5SQIUE+oxKqVkYuFdxatCicQfKXXzFXssK8iPw34JDbXGjrN/FQw RPrMzXimmHkYUjvmXG0fQkT7zedtg7IpHuHeYgxoyQoWio1Q1lKna/eoRyoNq5AD NScBGouC2s93AO+ggOEttB7tVMxBt72+gEZPhhmLHXkPAotPI+RI2FFv35NOK29W Hqn6dze3l3O3yAe712ybw7vRMSB1weSzztcgELOtSQN7odIgxKJnO0VMylnVi1dx D/9U4Zn343tO6S1XW3a+yFDM63579YXO6cETEX8NZcGdIho1FWe2tRf7v0uLPF1F GBz2mFjV64i55NU1i2+j0qgtLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKnqe6Lv XME5g1/zakkrq/pdtmv2MB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkMyQjkvMzA2Njk5Q0FDMkEyMTFFRTkxRDk1MzVDQzRGOUFFMDIvNEZCNUM4RjRD NDNEMTFFRTk3M0FERTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ9yMA0GCSqGSIb3DQEBCwUAA4IBAQAW2dogezjSGg8dSaEVqJXZ risAxnDPKGnWY7K9oxRRuXSW0MLF9ymWZG+fal4c5P5pQO4zjTdJNfRhFfW1pjij EuvhpaZWDFrxV5wjXr+iQYnzOnEbuk+d3pgktIkCTlzwA96vjV2DLUcgCDWQqDmo +SX2TOo4th4U8xB/lIdL8iQlih11i0VUMWbg8N4EpOMWd8ojjm9W6t4K8pAG7/Jd hcdaR3ZHWQ5wVLFdcqMzEXcZ2eDbzMelELyqgkqGCSJqpQA+aTQ0CfLW2suZjs6o +lgJJxjwTjvTGlMw75eXXFVNw4XHVCb/R5XLfLbGi5XAUcOF0U11APVlD1aeRR9E -----END CERTIFICATE-----Generated at Wed Mar 4 09:46:29 2026 by rpki-client