$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3087831CCEF811EE920B0062C4F9AE02.roa File: 3087831CCEF811EE920B0062C4F9AE02.roa (raw, json) Hash identifier: Q3Su7GyyRbbAHZFXWTNtpRO83R5QoWa1Es2897NK+No= Subject key identifier: 05:7B:5E:EC:03:DC:0A:F4:5D:A5:A6:98:F7:9E:DD:73:BB:0D:4C:2D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32BA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3087831CCEF811EE920B0062C4F9AE02.roa Signing time: Fri 28 Aug 2026 10:16:42 +0000 ROA not before: Fri 28 Aug 2026 10:16:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140641 IP address blocks: 157.10.41.0/24 maxlen: 24 157.20.51.0/24 maxlen: 24 160.30.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12986 (0x32ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Aug 28 10:16:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a91600a-efca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:75:fa:62:5b:ac:b7:a3:c7:4d:38:df:2d:f5: 37:a4:05:ee:ab:d1:a8:4d:d8:ac:5a:3f:b1:1e:15: 48:c7:d2:64:49:f0:a3:eb:fb:d8:06:79:0d:20:57: c9:af:26:a3:54:9c:5c:ec:46:93:79:25:b0:15:ac: 37:4f:0e:4d:bd:7c:b8:44:c6:d4:c4:27:09:64:e5: 80:1c:cb:a7:8c:a4:01:f1:e1:d2:8e:38:05:43:f5: 17:69:ca:ae:f0:c7:12:06:3a:8c:97:59:7b:5d:a3: d2:b5:9b:b9:ab:2c:f5:aa:be:7d:21:26:62:b5:b4: d8:c8:21:97:a8:a0:85:e7:62:ce:1f:d8:fe:22:ec: de:74:9f:f7:0b:c5:77:1d:6f:83:85:4f:5d:39:a1: 7e:d4:7e:7b:34:08:27:be:63:0e:83:45:31:b7:8f: a7:37:a8:71:9a:f2:84:c5:2a:94:32:3d:55:bf:c5: 85:40:b6:30:13:7a:05:ce:78:a4:1e:b6:e6:44:d1: 01:17:5a:92:8d:69:e7:1a:ae:80:49:fd:43:30:f7: b7:7b:80:6e:05:d5:a7:09:3a:98:16:11:4d:4c:54: d9:66:23:aa:4a:4d:5b:42:9b:a0:ea:1e:0a:ea:37: e7:9c:5e:21:02:fd:95:e2:d3:7a:2a:40:43:6b:47: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7B:5E:EC:03:DC:0A:F4:5D:A5:A6:98:F7:9E:DD:73:BB:0D:4C:2D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3087831CCEF811EE920B0062C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.41.0/24 157.20.51.0/24 160.30.246.0/23 Signature Algorithm: sha256WithRSAEncryption c9:92:10:7d:46:ab:3c:e0:6f:9b:61:d4:95:3d:f6:b3:a3:11: 78:82:67:35:0f:96:1a:bc:96:c0:da:c8:11:90:40:5d:24:2f: 05:69:b5:3c:b1:78:22:e8:44:77:ed:93:f6:5a:8e:bb:5d:d6: 60:ea:45:f5:e5:d4:68:3c:f6:ad:b7:02:ca:9f:44:21:56:5d: 3b:e2:a5:ad:76:0f:dd:f4:89:56:a7:9c:da:a6:76:0b:ad:18: b5:75:34:8a:a3:48:ba:47:ae:ef:85:f3:98:36:66:55:01:41: d8:70:9b:42:8e:26:f6:9b:57:7e:09:5f:80:5f:da:67:15:ec: d0:3c:43:fc:fd:bb:56:4c:c3:87:65:95:6c:db:72:85:24:06: 86:d0:64:6d:4a:dc:a0:c1:0c:e1:bd:97:81:7c:c9:37:19:3f: e7:1c:45:cd:84:69:5a:9b:4b:12:51:f2:be:7f:93:cc:37:fc: f7:ad:92:c5:44:b4:2d:21:5d:c2:24:0b:6e:ea:3a:ca:89:8e: c6:4f:d1:37:74:ae:01:8a:50:a7:86:f5:9c:e7:93:4b:19:bb: 28:81:90:74:24:a1:1f:e9:b2:8f:ec:84:28:ef:45:b9:d2:99: 7a:87:8c:3a:92:88:e7:92:12:88:e9:f9:de:2d:0c:85:b6:77: 78:f9:a4:9d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICMrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwODI4MTAxNjQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxNjAwYS1lZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3X6Ylust6PHTTjfLfU3pAXuq9GoTdisWj+xHhVIx9JkSfCj6/vYBnkNIFfJ ryajVJxc7EaTeSWwFaw3Tw5NvXy4RMbUxCcJZOWAHMunjKQB8eHSjjgFQ/UXacqu 8McSBjqMl1l7XaPStZu5qyz1qr59ISZitbTYyCGXqKCF52LOH9j+IuzedJ/3C8V3 HW+DhU9dOaF+1H57NAgnvmMOg0Uxt4+nN6hxmvKExSqUMj1Vv8WFQLYwE3oFznik HrbmRNEBF1qSjWnnGq6ASf1DMPe3e4BuBdWnCTqYFhFNTFTZZiOqSk1bQpug6h4K 6jfnnF4hAv2V4tN6KkBDa0dLZQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAV7XuwD 3Ar0XaWmmPee3XO7DUwtMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzA4NzgzMUND RUY4MTFFRTkyMEIwMDYyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAnQopAwQAnRQzAwQBoB72MA0GCSqGSIb3DQEBCwUAA4IBAQDJkhB9 Rqs84G+bYdSVPfazoxF4gmc1D5YavJbA2sgRkEBdJC8FabU8sXgi6ER37ZP2Wo67 XdZg6kX15dRoPPattwLKn0QhVl074qWtdg/d9IlWp5zapnYLrRi1dTSKo0i6R67v hfOYNmZVAUHYcJtCjib2m1d+CV+AX9pnFezQPEP8/btWTMOHZZVs23KFJAaG0GRt StygwQzhvZeBfMk3GT/nHEXNhGlam0sSUfK+f5PMN/z3rZLFRLQtIV3CJAtu6jrK iY7GT9E3dK4BilCnhvWc55NLGbsogZB0JKEf6bKP7IQo70W50pl6h4w6kojnkhKI 6fneLQyFtnd4+aSd -----END CERTIFICATE-----Generated at Fri Sep 4 21:13:03 2026 by rpki-client