$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa File: 0386A52403A911EF851C9E18C4F9AE02.roa (raw, json) Hash identifier: Y1VQcQO8MtcKidURPPe0DPQ93LVobw5YJB9o5wK9E8E= Subject key identifier: E9:2A:D6:76:13:B7:61:0F:94:B2:68:65:CF:0B:56:56:50:11:6F:3B Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31A1 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:24:10 +0000 ROA not before: Mon 06 Jul 2026 16:24:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152582 IP address blocks: 157.20.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12705 (0x31a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:24:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd6aa-479c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:8e:75:a8:99:66:9f:36:6f:1a:96:28:03: e5:5b:e1:54:ee:d9:39:b8:ed:0c:ff:ca:02:ed:9c: e7:77:65:f4:69:f1:a2:83:0f:8c:47:fd:7a:8f:65: f8:3e:ae:f5:e0:a1:30:25:c5:a2:2a:00:c0:ef:f4: cd:25:29:b4:8c:4b:c2:45:77:0b:e4:41:4d:82:e1: b8:1c:8b:cc:5c:6d:08:0b:fc:cd:dc:29:7d:9a:fd: 4e:d4:1f:8c:e5:37:13:10:ff:0a:27:10:8a:37:31: d7:91:5b:fc:c6:0b:5e:42:9d:b4:90:2f:6f:75:a9: 91:cf:c9:2a:c4:52:e3:6f:ca:dd:fd:67:49:c2:2f: 75:5c:ea:6e:3f:25:ba:4d:58:4b:f3:e3:a4:94:8d: 82:e9:f7:11:4c:62:6d:67:21:52:ff:56:ce:1a:71: 13:0a:0b:81:98:aa:73:99:b7:dc:7a:f1:d2:64:74: 20:e3:a9:61:42:34:f9:91:80:cd:f7:df:20:11:6f: be:0a:a2:7d:c8:cf:ba:31:0c:34:ae:53:86:2b:48: 0a:31:74:df:83:b9:f0:2c:9c:ba:a6:a5:39:5f:b4: cd:e4:f0:ce:83:de:88:c7:20:7c:ad:04:e6:5f:36: b3:e7:58:43:4e:0b:77:e0:bc:76:14:4c:d4:c6:ee: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2A:D6:76:13:B7:61:0F:94:B2:68:65:CF:0B:56:56:50:11:6F:3B X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.202.0/23 Signature Algorithm: sha256WithRSAEncryption ad:3b:b9:69:1e:6c:13:da:45:3a:84:0a:da:ea:0f:1b:e0:ff: 0f:88:56:23:c1:b3:fb:e2:0a:7b:2a:00:ce:40:e3:4a:be:c6: 58:d5:cc:be:85:74:86:37:18:51:d8:fd:08:dc:81:54:74:bb: b7:e1:8d:0a:2c:f1:cb:ac:61:83:c0:94:88:94:48:d1:05:b2: 2d:c1:7f:11:0d:7a:cd:be:9d:e9:9f:7a:f1:e1:0f:b1:1b:8a: 27:02:57:df:3a:e8:0b:f6:8f:0d:af:3a:06:b7:65:37:3a:85: 7b:05:16:d3:3d:53:dc:33:cf:30:9e:42:61:79:a5:3b:99:7d: 59:0c:f1:8f:58:95:df:57:d3:6b:e8:61:90:df:fc:2e:ae:00: 5d:2f:52:f8:a0:82:52:10:3a:fd:15:23:6f:03:9e:11:41:df: ff:7a:29:c3:da:00:05:84:95:75:3c:cd:d9:9f:07:46:85:fb: ea:88:4e:54:ea:fd:52:de:16:2b:da:4f:51:7c:95:08:46:da: 46:ed:f0:96:46:3a:5b:7b:63:89:38:42:04:3b:9e:06:cb:06: 33:80:d7:5e:33:73:66:b7:8f:a6:d1:fa:30:04:ad:65:78:d0: 0d:f0:d5:2f:62:54:0e:28:93:b2:ce:d0:67:7a:ee:97:2c:90: da:c3:8e:5e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNDEwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDZhYS00NzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA6OdaiZZp82bxqWKAPlW+FU7tk5uO0M/8oC7Zznd2X0afGigw+MR/16j2X4 Pq714KEwJcWiKgDA7/TNJSm0jEvCRXcL5EFNguG4HIvMXG0IC/zN3Cl9mv1O1B+M 5TcTEP8KJxCKNzHXkVv8xgteQp20kC9vdamRz8kqxFLjb8rd/WdJwi91XOpuPyW6 TVhL8+OklI2C6fcRTGJtZyFS/1bOGnETCguBmKpzmbfcevHSZHQg46lhQjT5kYDN 998gEW++CqJ9yM+6MQw0rlOGK0gKMXTfg7nwLJy6pqU5X7TN5PDOg96IxyB8rQTm Xzaz51hDTgt34Lx2FEzUxu5TWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOkq1nYT t2EPlLJoZc8LVlZQEW87MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDM4NkE1MjQw M0E5MTFFRjg1MUM5RTE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRTKMA0GCSqGSIb3DQEBCwUAA4IBAQCtO7lpHmwT2kU6hAra6g8b 4P8PiFYjwbP74gp7KgDOQONKvsZY1cy+hXSGNxhR2P0I3IFUdLu34Y0KLPHLrGGD wJSIlEjRBbItwX8RDXrNvp3pn3rx4Q+xG4onAlffOugL9o8NrzoGt2U3OoV7BRbT PVPcM88wnkJheaU7mX1ZDPGPWJXfV9Nr6GGQ3/wurgBdL1L4oIJSEDr9FSNvA54R Qd//einD2gAFhJV1PM3ZnwdGhfvqiE5U6v1S3hYr2k9RfJUIRtpG7fCWRjpbe2OJ OEIEO54GywYzgNdeM3Nmt4+m0fowBK1leNAN8NUvYlQOKJOyztBneu6XLJDaw45e -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:50 2026 by rpki-client