$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67421A14E1D811EE8E6B407CC4F9AE02.roa File: 67421A14E1D811EE8E6B407CC4F9AE02.roa (raw, json) Hash identifier: xYDYUbzpQiuCz2pT1zMF6QDu/RZRh73flVvCE+2jpac= Subject key identifier: B8:01:8A:C1:57:01:3E:20:F8:34:8D:32:0B:3B:CD:1A:5C:A6:DC:DE Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 31A0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67421A14E1D811EE8E6B407CC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:24:08 +0000 ROA not before: Mon 06 Jul 2026 16:24:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152581 IP address blocks: 157.20.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12704 (0x31a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:24:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd6a8-4128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:e8:f9:49:83:60:40:a9:39:bd:ed:34:bf: f9:33:cb:44:ea:a5:30:f1:d2:21:1b:97:d9:84:be: bf:3a:e8:26:18:10:40:aa:c0:db:2b:79:cf:62:24: e3:1d:aa:56:c9:b2:9a:76:55:d3:6e:74:9a:79:53: b3:a0:f1:ce:d7:10:b6:1d:1d:e2:b5:e1:2a:1e:4e: 62:96:f7:fc:26:55:67:ab:80:5c:30:4d:be:6f:e1: 66:31:70:c9:89:45:24:e6:88:dc:8c:67:90:51:20: 8f:60:03:5c:90:e4:64:63:8e:48:3a:2a:f6:8d:8c: 61:22:95:a7:ce:46:e0:20:c8:98:a3:ef:c3:08:15: 6a:94:de:b1:ff:dc:3b:ae:5a:41:73:61:72:a8:cc: 1e:3b:1e:a6:82:bb:fc:db:83:66:72:98:01:2a:7a: 37:17:24:6f:7a:22:4e:69:a5:8d:fa:05:ca:ba:92: 61:56:1b:2d:7c:6a:c8:ff:76:b4:63:1c:42:73:c4: 7d:43:e2:f9:64:06:e7:33:ee:c7:e5:63:29:5f:ac: f0:8f:76:41:3b:c3:c6:9f:a3:81:fa:6d:43:b7:22: 43:fd:63:02:b1:05:15:d1:8d:48:c9:69:24:56:2f: 86:41:bd:94:97:33:68:5f:1d:c3:2e:8d:e2:44:5d: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:01:8A:C1:57:01:3E:20:F8:34:8D:32:0B:3B:CD:1A:5C:A6:DC:DE X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67421A14E1D811EE8E6B407CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.186.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:b4:16:27:d6:81:49:ae:ba:5a:a3:8e:ba:08:05:f2:da:39: 44:77:fe:dd:84:59:b8:f0:3c:f9:75:2e:fb:f6:98:d8:5a:e5: 5e:1e:1a:a4:c1:8e:9c:86:00:da:8c:72:54:42:de:0a:4c:1a: a9:9a:2b:51:34:8c:7c:ea:f0:4f:e1:8e:3b:97:75:a3:5e:e1: 56:ca:d2:2c:a6:d2:75:f8:4e:29:43:91:1f:14:58:bb:25:5d: 80:98:02:d6:66:8d:f5:a5:df:99:31:a0:b3:a3:d9:03:3c:b1: da:79:f8:d9:9f:17:9f:e8:fd:91:df:e8:67:bc:bc:95:3f:71: b1:bf:f3:6e:32:df:4a:f2:ee:29:02:29:26:59:46:fd:b1:4a: ee:56:6a:72:43:01:28:d4:fd:38:53:38:83:12:4d:34:92:5c: 81:f6:88:c3:c2:0e:2b:02:95:55:66:36:ad:96:a7:a0:29:30: 75:af:52:ae:56:57:20:cf:0e:5d:2d:76:a4:96:87:38:4c:13: 02:d8:79:ff:4e:75:66:70:b7:c8:17:57:44:a5:1c:84:06:4c: b6:b6:97:8f:6d:77:f8:fc:d1:28:d7:bf:e2:7a:37:06:79:4c: 33:c3:e1:26:57:d1:08:5c:89:ca:8e:0d:22:23:97:1a:b5:63: 56:ad:92:6e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyNDA4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDZhOC00MTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0iDo+UmDYECpOb3tNL/5M8tE6qUw8dIhG5fZhL6/OugmGBBAqsDbK3nPYiTj HapWybKadlXTbnSaeVOzoPHO1xC2HR3iteEqHk5ilvf8JlVnq4BcME2+b+FmMXDJ iUUk5ojcjGeQUSCPYANckORkY45IOir2jYxhIpWnzkbgIMiYo+/DCBVqlN6x/9w7 rlpBc2FyqMweOx6mgrv824NmcpgBKno3FyRveiJOaaWN+gXKupJhVhstfGrI/3a0 YxxCc8R9Q+L5ZAbnM+7H5WMpX6zwj3ZBO8PGn6OB+m1DtyJD/WMCsQUV0Y1IyWkk Vi+GQb2UlzNoXx3DLo3iRF2gUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLgBisFX AT4g+DSNMgs7zRpcptzeMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjc0MjFBMTRF MUQ4MTFFRThFNkI0MDdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRS6MA0GCSqGSIb3DQEBCwUAA4IBAQCdtBYn1oFJrrpao466CAXy 2jlEd/7dhFm48Dz5dS779pjYWuVeHhqkwY6chgDajHJUQt4KTBqpmitRNIx86vBP 4Y47l3WjXuFWytIsptJ1+E4pQ5EfFFi7JV2AmALWZo31pd+ZMaCzo9kDPLHaefjZ nxef6P2R3+hnvLyVP3Gxv/NuMt9K8u4pAikmWUb9sUruVmpyQwEo1P04UziDEk00 klyB9ojDwg4rApVVZjatlqegKTB1r1KuVlcgzw5dLXakloc4TBMC2Hn/TnVmcLfI F1dEpRyEBky2tpePbXf4/NEo17/iejcGeUwzw+EmV9EIXInKjg0iI5catWNWrZJu -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:36 2026 by rpki-client