$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa File: 5535DEF8DE2311EFA15D0950C4F9AE02.roa (raw, json) Hash identifier: tk/q9neoB+FkKEnC9fcPLhC/J60pYt7oNz63pQJ4+cg= Subject key identifier: DF:A0:30:E9:B7:30:58:B0:CF:A4:8B:68:9B:CA:29:FE:A2:04:3C:25 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30A9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:15:56 +0000 ROA not before: Mon 06 Jul 2026 16:15:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134320 IP address blocks: 157.20.196.0/24 maxlen: 24 157.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12457 (0x30a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:15:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd4bc-a3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:ba:d4:b4:45:b3:a5:2d:c8:ea:e4:da:55: 47:ba:07:a5:05:a1:99:f7:5e:92:22:d1:dc:d9:88: 24:b1:8e:7e:f0:f3:ac:05:32:df:8d:9d:55:a4:15: 8d:f5:1f:63:cb:9e:c9:e9:c5:1d:47:f6:b3:f0:1e: 27:7b:46:d9:40:9e:e4:c8:40:30:77:a6:d0:b2:27: 44:64:51:2d:4d:a6:7a:46:30:23:63:d3:ee:62:dd: 3b:a6:a5:40:e7:68:5d:b4:0f:16:5b:f6:80:74:18: 6d:7e:5e:87:f4:1f:3e:d2:4b:ab:95:76:c1:c9:35: 1d:7c:2d:18:66:f8:5b:e7:15:47:ac:18:ec:d4:b2: 0c:43:c8:1d:13:77:e1:6d:95:cd:9a:b7:36:66:58: 62:0d:67:36:32:d3:1c:04:0c:d3:13:4b:aa:a6:29: 6e:94:ac:7f:f3:ec:62:92:76:81:8b:4d:cb:95:08: eb:e8:70:9a:77:0b:eb:db:da:9a:2b:8c:88:93:c1: 1b:67:b1:79:90:5e:ae:a4:89:84:6a:6a:63:79:4a: eb:25:13:63:2f:46:eb:a4:f4:88:f5:0e:0c:19:c8: 07:02:3f:40:ee:73:db:3b:bd:b1:6a:94:10:a6:29: 3a:7b:e6:c4:4c:25:3d:06:da:fb:cf:77:7b:18:cc: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A0:30:E9:B7:30:58:B0:CF:A4:8B:68:9B:CA:29:FE:A2:04:3C:25 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.196.0/23 Signature Algorithm: sha256WithRSAEncryption 97:95:7a:a8:90:ca:f4:b5:c2:0a:c6:7e:b7:d4:ca:0c:b3:4c: 99:dc:62:49:bb:e4:d1:4e:08:14:a3:0f:d5:f1:1d:46:07:32: dc:51:10:51:f0:ff:16:63:84:15:16:b7:58:8a:18:fe:dc:5c: d1:2e:99:2f:d8:e5:17:8f:88:44:ef:0e:da:1e:c6:09:15:be: 87:87:6b:6c:a9:aa:3d:3a:62:0a:9c:9b:fb:aa:95:38:f7:fe: 1e:a6:68:be:76:f9:31:da:10:db:65:6d:52:c7:b5:94:93:47: 34:59:d0:a1:86:9b:5c:82:26:bd:3d:60:f6:fc:12:87:66:25: 46:6d:6f:be:7f:a1:f2:f4:d5:ec:20:8e:80:fe:5a:5f:75:80: b3:8c:97:86:2b:42:e4:59:37:87:6a:c6:48:90:07:e8:3a:e3: 08:19:81:74:75:ea:82:d7:0e:f3:47:22:46:5d:a0:89:e4:b1: f9:b6:2e:5c:23:c9:05:a3:39:be:05:19:41:b6:94:ce:c4:1b: b1:60:8f:1e:bf:ba:b9:dd:0d:5f:10:a7:03:3e:49:db:a2:a7: 06:21:90:a3:a8:c5:ba:62:45:c6:a1:6c:e3:f1:45:1d:88:ab: 24:e7:c6:89:cc:27:67:39:d4:10:1e:f4:0c:a4:ee:ab:9c:08: f4:78:56:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNTU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDRiYy1hM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lq61LRFs6UtyOrk2lVHugelBaGZ916SItHc2YgksY5+8POsBTLfjZ1VpBWN 9R9jy57J6cUdR/az8B4ne0bZQJ7kyEAwd6bQsidEZFEtTaZ6RjAjY9PuYt07pqVA 52hdtA8WW/aAdBhtfl6H9B8+0kurlXbByTUdfC0YZvhb5xVHrBjs1LIMQ8gdE3fh bZXNmrc2ZlhiDWc2MtMcBAzTE0uqpilulKx/8+xiknaBi03LlQjr6HCadwvr29qa K4yIk8EbZ7F5kF6upImEampjeUrrJRNjL0brpPSI9Q4MGcgHAj9A7nPbO72xapQQ pik6e+bETCU9Btr7z3d7GMyF0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN+gMOm3 MFiwz6SLaJvKKf6iBDwlMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTUzNURFRjhE RTIzMTFFRkExNUQwOTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRTEMA0GCSqGSIb3DQEBCwUAA4IBAQCXlXqokMr0tcIKxn631MoM s0yZ3GJJu+TRTggUow/V8R1GBzLcURBR8P8WY4QVFrdYihj+3FzRLpkv2OUXj4hE 7w7aHsYJFb6Hh2tsqao9OmIKnJv7qpU49/4epmi+dvkx2hDbZW1Sx7WUk0c0WdCh hptcgia9PWD2/BKHZiVGbW++f6Hy9NXsII6A/lpfdYCzjJeGK0LkWTeHasZIkAfo OuMIGYF0deqC1w7zRyJGXaCJ5LH5ti5cI8kFozm+BRlBtpTOxBuxYI8ev7q53Q1f EKcDPknboqcGIZCjqMW6YkXGoWzj8UUdiKsk58aJzCdnOdQQHvQMpO6rnAj0eFZp -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:51 2026 by rpki-client