$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa File: 7B6334003D2C11F0A30B5E63C4F9AE02.roa (raw, json) Hash identifier: y93cxNt9N2ZelELzpqSGL/ILC6Sem2FwlmBL4t5cW8M= Subject key identifier: 64:35:33:29:A9:76:90:A2:51:BD:4F:F5:95:09:7C:F7:B0:9D:79:8B Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3169 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:22:19 +0000 ROA not before: Mon 06 Jul 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152500 IP address blocks: 157.20.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12649 (0x3169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd63b-f5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:97:d4:8d:0c:e3:91:89:ea:9f:dc:ff:1e: 60:bf:31:9b:84:6c:0a:91:28:02:a4:17:1d:26:ff: 8a:d3:db:ee:0f:44:6a:64:84:ca:1c:c7:b7:cf:88: 9b:4e:85:82:35:26:0e:2b:79:e4:66:28:55:16:03: 90:b8:a4:f0:d9:36:e1:58:b0:3a:24:19:ef:a6:1f: cf:78:42:e3:f0:33:4b:37:e2:c7:b0:47:e6:c6:e2: f8:a9:35:94:3f:94:23:22:82:35:26:8c:62:57:5c: 4f:9f:18:f5:2d:96:67:e0:f0:dd:12:ee:25:8a:12: 35:35:88:08:1d:32:a1:24:e0:a2:72:6d:78:57:11: 2d:63:c9:84:4f:0a:38:a1:35:d3:b9:bb:5b:4e:38: 72:de:51:f4:c9:1f:5b:48:74:25:9d:4a:89:c7:fa: 06:98:22:6f:53:e8:b6:18:8f:f2:30:e2:52:b2:51: 1d:20:5f:e4:39:47:3a:26:54:7f:63:7a:ec:e0:82: 86:01:65:3e:a5:49:df:c6:4d:4e:34:19:8d:0a:47: 5b:af:10:81:cd:d8:18:31:4b:65:53:6e:9f:dd:a5: b3:4c:5c:c8:a7:32:c3:4f:3f:ca:c0:f1:fd:62:ae: 5d:1b:68:fa:fb:d7:56:aa:81:04:2c:8f:39:c0:22: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:35:33:29:A9:76:90:A2:51:BD:4F:F5:95:09:7C:F7:B0:9D:79:8B X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.84.0/23 Signature Algorithm: sha256WithRSAEncryption c4:14:33:3d:d6:9c:76:48:cf:e6:08:cf:1b:0f:30:4c:1d:02: da:07:da:9a:18:10:bc:bc:4e:65:9f:8c:f8:6a:85:5a:7d:47: 68:79:7c:45:e4:94:e7:5b:46:3f:8e:92:a0:a3:c0:d1:d1:26: dc:74:b1:cb:d7:06:b6:5a:91:28:3c:72:be:79:78:93:8b:83: e3:d8:ce:9b:87:7e:ad:34:74:00:ec:f4:7c:c4:48:87:3b:7d: 0b:00:06:2b:ad:af:a5:50:44:7a:c6:eb:dd:34:da:2d:44:1d: 24:22:01:88:87:98:94:20:2c:a3:68:8c:38:01:90:fb:fa:58: c9:9a:3d:09:e3:81:51:08:43:2f:3a:41:99:70:f3:95:c8:6a: 60:a6:c4:f7:6f:2c:b1:7e:71:27:54:a1:ef:ed:35:bd:40:23: 78:30:e8:23:87:f3:50:b7:98:f8:b8:df:bc:1c:99:3d:9e:b7: 2d:bf:c2:24:1e:a0:43:23:17:ad:9e:0d:6a:3d:3f:f3:fa:6e: 11:8d:40:f4:bd:a1:ca:8d:00:64:91:d4:91:e0:b8:05:10:e3: 6b:49:d9:90:ac:77:de:ad:5d:da:4c:36:64:72:cd:a1:68:16: 34:ee:f8:3f:6d:95:e8:a6:03:21:0a:7a:b7:2a:8e:18:b1:4a: e7:ad:d5:c8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDYzYi1mNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5+X1I0M45GJ6p/c/x5gvzGbhGwKkSgCpBcdJv+K09vuD0RqZITKHMe3z4ib ToWCNSYOK3nkZihVFgOQuKTw2TbhWLA6JBnvph/PeELj8DNLN+LHsEfmxuL4qTWU P5QjIoI1JoxiV1xPnxj1LZZn4PDdEu4lihI1NYgIHTKhJOCicm14VxEtY8mETwo4 oTXTubtbTjhy3lH0yR9bSHQlnUqJx/oGmCJvU+i2GI/yMOJSslEdIF/kOUc6JlR/ Y3rs4IKGAWU+pUnfxk1ONBmNCkdbrxCBzdgYMUtlU26f3aWzTFzIpzLDTz/KwPH9 Yq5dG2j6+9dWqoEELI85wCL58wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGQ1Mymp dpCiUb1P9ZUJfPewnXmLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0I2MzM0MDAz RDJDMTFGMEEzMEI1RTYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRUMA0GCSqGSIb3DQEBCwUAA4IBAQDEFDM91px2SM/mCM8bDzBM HQLaB9qaGBC8vE5ln4z4aoVafUdoeXxF5JTnW0Y/jpKgo8DR0SbcdLHL1wa2WpEo PHK+eXiTi4Pj2M6bh36tNHQA7PR8xEiHO30LAAYrra+lUER6xuvdNNotRB0kIgGI h5iUICyjaIw4AZD7+ljJmj0J44FRCEMvOkGZcPOVyGpgpsT3byyxfnEnVKHv7TW9 QCN4MOgjh/NQt5j4uN+8HJk9nrctv8IkHqBDIxetng1qPT/z+m4RjUD0vaHKjQBk kdSR4LgFEONrSdmQrHferV3aTDZkcs2haBY07vg/bZXopgMhCnq3Ko4YsUrnrdXI -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:28 2026 by rpki-client