$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2520E06EDC4911EEA18D6172C4F9AE02.roa File: 2520E06EDC4911EEA18D6172C4F9AE02.roa (raw, json) Hash identifier: s7yZY1N/FkG8aLdNQMp0FZcC9dmF00tGGNtKh05pFrM= Subject key identifier: 78:D1:6F:DA:A6:2D:1C:31:9E:05:EE:3E:A8:DE:60:E9:BF:4A:4B:C4 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 315D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2520E06EDC4911EEA18D6172C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:21:53 +0000 ROA not before: Mon 06 Jul 2026 16:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152484 IP address blocks: 157.20.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12637 (0x315d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd621-0b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:f5:f5:73:08:82:8f:7a:35:c3:d6:29:6c: c1:e0:15:17:5d:1a:e5:14:39:e7:7d:17:08:25:5a: b9:37:10:96:df:5c:ea:a9:12:10:d6:93:24:40:fa: bb:5e:ee:53:ca:31:c2:39:50:c6:70:54:a3:b2:3a: 8c:14:f0:90:b4:f6:5f:d1:b1:96:03:13:fc:5b:06: b8:ec:27:9d:0b:6d:73:cf:48:f0:b8:6d:26:34:99: ea:46:35:f6:3f:04:69:d5:7d:2b:cc:85:3b:f7:8e: ef:cb:3c:10:55:49:b8:64:66:a3:d6:6c:59:d7:fc: 2e:99:3c:93:c5:2d:3b:21:87:a9:54:7b:77:c5:00: c6:f3:9b:18:42:da:9a:9a:9f:5a:bb:56:02:92:21: fc:d8:78:d8:dc:ff:f0:d2:a8:fe:39:44:ad:b9:39: da:8d:b6:04:02:22:da:15:71:9e:74:3d:91:19:1d: 6e:34:7e:46:b9:11:48:e4:c1:90:81:19:00:06:15: 76:08:ff:db:19:ff:83:45:9d:9b:22:5f:d6:27:90: 0d:d7:08:df:e6:f5:53:6a:da:3f:f6:e9:31:16:93: b9:a4:95:76:a8:45:92:b2:17:b8:47:2e:1a:f7:5a: 57:97:0a:1b:68:19:a0:c0:f2:a8:c3:fe:95:31:81: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D1:6F:DA:A6:2D:1C:31:9E:05:EE:3E:A8:DE:60:E9:BF:4A:4B:C4 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2520E06EDC4911EEA18D6172C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.180.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:94:31:97:09:7c:7f:26:20:da:01:d7:39:66:b6:4f:5b:e3: 0e:eb:b4:4f:86:64:50:74:ed:80:8b:a3:09:f9:f5:bd:30:22: 4c:56:db:97:19:f1:dd:c4:fb:25:14:dd:8d:ca:4e:90:7b:1c: c2:ba:0b:f1:ea:12:cd:79:5f:ad:14:50:39:72:53:df:21:69: be:f2:2a:3a:d5:d2:f0:da:e9:e1:e4:5c:83:0e:f3:d2:cd:de: 95:d1:c2:5e:7e:63:96:18:31:cb:09:d2:c7:44:cd:d4:a9:bc: 10:e7:79:04:99:bd:1d:4e:86:12:30:28:93:da:07:6b:83:fb: 3c:40:08:79:b1:75:c2:0f:c2:72:c8:c0:1b:d8:58:bc:01:45: 3f:fc:4c:0e:82:de:f6:e7:a4:fd:e0:b4:1d:e2:37:72:d7:2d: 17:9b:6e:3f:06:4d:9f:5f:3a:13:25:da:f4:63:b1:49:f6:f7: 6e:c9:a0:19:df:8d:45:e7:f5:36:f4:9e:c2:83:94:59:55:2f: 85:a7:51:20:20:93:1c:93:19:7b:0f:64:6e:7b:b9:c0:cb:72: a7:95:9f:71:96:b9:09:f0:e8:ff:45:77:91:c9:c3:92:f4:ca: af:67:0e:40:e8:ce:b8:bb:88:5f:58:bf:7f:3d:a3:9f:34:b6: b0:0d:f3:f7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMTUzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDYyMS0wYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7T19XMIgo96NcPWKWzB4BUXXRrlFDnnfRcIJVq5NxCW31zqqRIQ1pMkQPq7 Xu5TyjHCOVDGcFSjsjqMFPCQtPZf0bGWAxP8Wwa47CedC21zz0jwuG0mNJnqRjX2 PwRp1X0rzIU7947vyzwQVUm4ZGaj1mxZ1/wumTyTxS07IYepVHt3xQDG85sYQtqa mp9au1YCkiH82HjY3P/w0qj+OUStuTnajbYEAiLaFXGedD2RGR1uNH5GuRFI5MGQ gRkABhV2CP/bGf+DRZ2bIl/WJ5AN1wjf5vVTato/9ukxFpO5pJV2qEWSshe4Ry4a 91pXlwobaBmgwPKow/6VMYHyzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHjRb9qm LRwxngXuPqjeYOm/SkvEMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjUyMEUwNkVE QzQ5MTFFRUExOEQ2MTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRS0MA0GCSqGSIb3DQEBCwUAA4IBAQBPlDGXCXx/JiDaAdc5ZrZP W+MO67RPhmRQdO2Ai6MJ+fW9MCJMVtuXGfHdxPslFN2Nyk6QexzCugvx6hLNeV+t FFA5clPfIWm+8io61dLw2unh5FyDDvPSzd6V0cJefmOWGDHLCdLHRM3UqbwQ53kE mb0dToYSMCiT2gdrg/s8QAh5sXXCD8JyyMAb2Fi8AUU//EwOgt7256T94LQd4jdy 1y0Xm24/Bk2fXzoTJdr0Y7FJ9vduyaAZ341F5/U29J7Cg5RZVS+Fp1EgIJMckxl7 D2Rue7nAy3KnlZ9xlrkJ8Oj/RXeRycOS9MqvZw5A6M64u4hfWL9/PaOfNLawDfP3 -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:05 2026 by rpki-client