$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/32FF5EE2CBE911EE859B641DC4F9AE02.roa File: 32FF5EE2CBE911EE859B641DC4F9AE02.roa (raw, json) Hash identifier: wM3WCosIelPMRupP1qfXysOKt2liOmxaigVIVT0ZjcQ= Subject key identifier: E8:C5:3A:57:A9:F4:33:72:97:B8:91:1A:47:ED:D5:E9:F1:BB:03:66 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2EE9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/32FF5EE2CBE911EE859B641DC4F9AE02.roa Signing time: Sun 31 May 2026 16:21:47 +0000 ROA not before: Sun 31 May 2026 16:21:47 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 142477 IP address blocks: 157.20.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12009 (0x2ee9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:21:47 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c601b-21a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0e:b0:6f:18:2a:64:9c:b1:42:d9:e5:e7:6b: 47:1c:af:80:4b:16:6e:53:b0:f1:98:8c:78:97:33: dc:ee:a9:fd:0b:d8:e4:c2:28:b6:5b:4c:23:2f:21: e8:6b:ca:9d:00:26:dd:6f:8c:43:40:c2:8d:db:d3: ee:d6:61:90:a6:7a:6c:57:bd:a5:d1:7d:86:53:16: 1c:66:64:d3:fc:cf:69:c8:5c:8f:20:00:dc:65:0e: 55:3f:b4:6e:59:ad:91:6f:92:24:ad:08:9e:ef:b1: 55:ef:df:b9:18:2b:17:0d:52:b0:29:cf:95:d2:26: 43:b2:17:67:b5:77:5f:aa:69:2d:c5:3a:91:d7:a1: 89:4a:a2:9d:cc:8c:65:e8:38:9e:ae:98:68:b2:4d: 19:2a:a7:44:de:94:97:7e:0d:c0:10:c5:06:c6:65: 18:8d:cd:35:6e:e0:ef:60:13:a1:c3:95:6d:ec:2f: 13:38:05:2b:7c:aa:b1:b9:74:38:55:f9:3d:25:8e: e0:f4:fa:9e:7e:66:2c:e1:92:2d:ee:3a:2e:0e:05: de:57:a2:5a:d4:6e:e4:bb:8c:1b:e0:2d:d0:a3:75: b8:ff:bc:bf:e6:3a:b1:23:0f:b4:41:01:3d:53:cb: 1f:b8:4e:be:d0:53:0b:3b:fe:d2:23:78:34:79:16: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C5:3A:57:A9:F4:33:72:97:B8:91:1A:47:ED:D5:E9:F1:BB:03:66 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/32FF5EE2CBE911EE859B641DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.14.0/23 Signature Algorithm: sha256WithRSAEncryption 49:23:bd:07:e9:d3:9f:fd:dc:01:69:34:bc:c4:a3:78:89:c2: 0c:13:7a:2a:5b:7a:95:ac:f0:51:88:6f:c1:83:bc:3e:3f:2d: 2f:72:81:14:5e:b8:41:8f:c2:c1:bf:cf:d9:03:3a:ce:f1:ea: 76:88:8e:66:29:0e:27:e5:60:99:aa:50:c3:00:64:27:cf:cf: 3c:c5:09:26:d9:04:b8:69:c3:d9:b7:66:6d:0f:5a:59:0f:aa: 21:21:64:b2:1d:46:9e:44:53:cb:6e:5f:3c:ae:cd:33:7d:85: 78:14:6c:98:0a:d9:b7:4b:6a:a8:70:4f:e8:ca:26:87:d3:70: b5:98:46:84:92:4d:97:f3:63:b5:ec:20:7f:27:ab:47:89:86: a7:40:d3:96:2c:7d:d1:d7:22:32:0c:66:b3:e7:5b:14:67:ce: c5:55:d8:a1:e8:c1:37:10:52:f6:55:d1:c7:b8:58:f7:28:4f: f5:e6:37:ca:f2:a6:dc:64:2e:d6:09:01:01:9f:e2:7e:93:aa: 11:57:ce:ad:11:a4:e5:51:2b:dd:83:0c:70:09:ea:e7:17:4a: 70:13:e3:ce:24:86:eb:d4:ce:d5:80:30:e5:b4:b2:43:e2:bd: c9:b5:45:19:11:f1:36:c1:dd:64:01:a6:57:72:40:89:48:3b: d3:e8:ad:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyMTQ3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjAxYi0yMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Q6wbxgqZJyxQtnl52tHHK+ASxZuU7DxmIx4lzPc7qn9C9jkwii2W0wjLyHo a8qdACbdb4xDQMKN29Pu1mGQpnpsV72l0X2GUxYcZmTT/M9pyFyPIADcZQ5VP7Ru Wa2Rb5IkrQie77FV79+5GCsXDVKwKc+V0iZDshdntXdfqmktxTqR16GJSqKdzIxl 6Dierphosk0ZKqdE3pSXfg3AEMUGxmUYjc01buDvYBOhw5Vt7C8TOAUrfKqxuXQ4 Vfk9JY7g9PqefmYs4ZIt7jouDgXeV6Ja1G7ku4wb4C3Qo3W4/7y/5jqxIw+0QQE9 U8sfuE6+0FMLO/7SI3g0eRa1tQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOjFOlep 9DNyl7iRGkft1enxuwNmMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzJGRjVFRTJD QkU5MTFFRTg1OUI2NDFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRQOMA0GCSqGSIb3DQEBCwUAA4IBAQBJI70H6dOf/dwBaTS8xKN4 icIME3oqW3qVrPBRiG/Bg7w+Py0vcoEUXrhBj8LBv8/ZAzrO8ep2iI5mKQ4n5WCZ qlDDAGQnz888xQkm2QS4acPZt2ZtD1pZD6ohIWSyHUaeRFPLbl88rs0zfYV4FGyY Ctm3S2qocE/oyiaH03C1mEaEkk2X82O17CB/J6tHiYanQNOWLH3R1yIyDGaz51sU Z87FVdih6ME3EFL2VdHHuFj3KE/15jfK8qbcZC7WCQEBn+J+k6oRV86tEaTlUSvd gwxwCernF0pwE+POJIbr1M7VgDDltLJD4r3JtUUZEfE2wd1kAaZXckCJSDvT6K21 -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:16 2026 by rpki-client