$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5E2DFFA0F30411EE9E863142C4F9AE02.roa File: 5E2DFFA0F30411EE9E863142C4F9AE02.roa (raw, json) Hash identifier: 5FN8amHawZ/IhOPtF0IPD2ErTGZJ4MSAAYqs5532Ahs= Subject key identifier: 75:2D:E7:FD:36:A8:7D:35:E8:9E:21:B5:A8:66:AE:15:FF:75:32:CA Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3229 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5E2DFFA0F30411EE9E863142C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:28:41 +0000 ROA not before: Mon 06 Jul 2026 16:28:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45536 IP address blocks: 157.20.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12841 (0x3229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7b9-7d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:ba:cb:1c:29:46:24:f5:6f:9c:a4:38:a6: 57:ef:4b:a4:3b:79:ba:8e:52:dc:fa:6a:0f:fb:86: 74:16:6f:bb:4c:44:9b:23:62:47:33:36:a7:b9:ea: 12:3b:70:55:20:25:00:25:05:54:a9:18:6e:61:4d: 2a:90:0d:ed:9d:46:6e:27:ef:05:07:40:49:35:17: 1e:14:94:ba:cf:a6:e2:d8:af:3b:2f:59:17:07:2c: 22:6d:0c:ef:df:fa:02:99:2e:61:ac:48:5d:0c:9a: f4:00:4c:c5:df:25:b3:cb:53:af:15:8a:24:fd:4d: 45:b6:03:d5:7a:07:79:d9:12:0a:1e:20:7e:58:9c: c4:be:03:8c:0e:a5:d9:21:c4:92:c3:86:7a:cb:2c: 13:dc:04:43:da:53:a0:c7:85:bd:b8:69:f7:37:36: 08:9d:48:8e:e9:88:31:d2:d9:33:65:57:9d:7c:86: 80:d8:80:4f:36:f0:3e:3a:1c:e0:b8:9b:00:3d:7c: 78:e3:73:f1:da:b8:aa:a3:fd:f5:17:5a:21:81:6c: e1:96:08:4f:35:9d:0b:86:b6:ab:7b:df:56:9b:b5: 39:19:2a:0b:1d:5f:30:51:66:0b:f1:8a:95:d6:fe: e2:9e:dd:a0:7b:95:a6:94:d4:aa:af:ce:e5:56:5e: d1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2D:E7:FD:36:A8:7D:35:E8:9E:21:B5:A8:66:AE:15:FF:75:32:CA X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5E2DFFA0F30411EE9E863142C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.226.0/23 Signature Algorithm: sha256WithRSAEncryption 01:a3:ea:be:fc:f0:c4:c4:76:3e:a9:f7:85:44:a3:12:d7:8c: 2a:b8:5e:91:03:95:db:86:8d:5b:25:da:42:04:1d:ec:83:c7: b4:f9:b1:7f:fc:8a:86:c7:e1:da:7c:ad:6c:e9:55:ff:70:0c: f8:d7:37:59:87:52:c2:ee:43:f7:86:61:14:ad:c0:21:9b:b7: 67:37:dc:12:6a:1f:6f:68:ea:19:23:0a:35:df:6f:52:d3:1e: 79:fd:bd:98:72:64:b7:0b:e8:83:81:f1:45:83:5d:5f:6a:70: 76:5d:f4:0f:4e:f1:9e:f0:4b:05:2f:10:56:43:09:69:2b:5d: 9d:df:2f:3f:0f:b2:5f:64:e6:f9:04:cb:3e:bd:7b:59:72:33: 3b:7e:b6:e6:24:a4:23:ed:1d:3a:ef:f2:0b:d6:a0:0c:7f:59: d6:22:82:23:fd:7d:83:5c:41:de:7d:0e:50:38:ac:2c:65:a3: 8e:7a:c6:12:6c:08:db:00:27:b5:f3:75:5d:3d:2a:e0:cf:ca: f6:bf:32:8b:ed:2b:48:6c:11:15:e2:60:b1:a7:bd:5a:79:29: e2:38:6c:f7:c1:db:a3:7e:e8:c1:32:ec:f4:b2:5c:81:74:ea: 55:60:9c:22:04:83:c8:a7:f1:6b:1a:04:ed:a3:97:c3:1f:30: 18:26:72:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdiOS03ZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6S6yxwpRiT1b5ykOKZX70ukO3m6jlLc+moP+4Z0Fm+7TESbI2JHMzanueoS O3BVICUAJQVUqRhuYU0qkA3tnUZuJ+8FB0BJNRceFJS6z6bi2K87L1kXBywibQzv 3/oCmS5hrEhdDJr0AEzF3yWzy1OvFYok/U1FtgPVegd52RIKHiB+WJzEvgOMDqXZ IcSSw4Z6yywT3ARD2lOgx4W9uGn3NzYInUiO6Ygx0tkzZVedfIaA2IBPNvA+Ohzg uJsAPXx443Px2riqo/31F1ohgWzhlghPNZ0Lhrare99Wm7U5GSoLHV8wUWYL8YqV 1v7int2ge5WmlNSqr87lVl7RQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHUt5/02 qH016J4htahmrhX/dTLKMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUUyREZGQTBG MzA0MTFFRTlFODYzMTQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRTiMA0GCSqGSIb3DQEBCwUAA4IBAQABo+q+/PDExHY+qfeFRKMS 14wquF6RA5Xbho1bJdpCBB3sg8e0+bF//IqGx+HafK1s6VX/cAz41zdZh1LC7kP3 hmEUrcAhm7dnN9wSah9vaOoZIwo1329S0x55/b2YcmS3C+iDgfFFg11fanB2XfQP TvGe8EsFLxBWQwlpK12d3y8/D7JfZOb5BMs+vXtZcjM7frbmJKQj7R067/IL1qAM f1nWIoIj/X2DXEHefQ5QOKwsZaOOesYSbAjbACe183VdPSrgz8r2vzKL7StIbBEV 4mCxp71aeSniOGz3wdujfujBMuz0slyBdOpVYJwiBIPIp/FrGgTto5fDHzAYJnJj -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:24 2026 by rpki-client