$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa File: 8F1CEB52CFB011EEB0D03629C4F9AE02.roa (raw, json) Hash identifier: uZMw95Cn/nbDzSilA03i/5+j93TmXyApbW5iKFX6J5Y= Subject key identifier: 80:A6:01:7E:19:F7:D9:3B:ED:57:23:36:02:FE:FF:A5:F7:26:92:17 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 3125 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:20:02 +0000 ROA not before: Mon 06 Jul 2026 16:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149537 IP address blocks: 157.20.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12581 (0x3125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd5b2-86a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:13:31:ee:76:a1:de:d5:8e:9a:d5:7f:53: a1:4c:4f:91:72:8d:6d:76:96:e0:52:18:4b:ed:da: de:b7:cc:0e:c2:cc:aa:c7:ca:4c:51:06:84:e6:eb: 60:fc:43:ee:6d:8c:28:a6:42:fa:5d:1c:85:77:b5: 36:86:f0:f4:6f:a0:7f:ad:69:b5:58:92:0f:48:b8: d7:52:92:e8:6b:1b:d4:45:4c:0a:db:1b:60:dc:44: 54:7e:f0:24:fb:39:3d:67:2c:df:25:fb:f5:17:13: d2:f6:64:51:59:f8:2b:c7:93:f6:f5:59:b8:54:4f: de:24:7c:c7:36:89:95:5e:c4:0e:60:b8:4e:94:bb: 8c:e6:e9:f6:23:f0:98:d5:ef:2c:2f:26:ce:27:54: 8e:94:35:f6:c5:7c:47:3b:fc:87:2a:c0:94:3b:75: b8:a4:6c:d5:03:5b:46:25:72:71:25:3e:44:dd:9d: 4d:29:9d:70:69:6c:16:e6:1d:2f:43:d1:93:81:b0: 8f:fe:be:da:33:9b:1d:c4:ba:73:0a:4c:ef:88:6b: f8:a0:7b:98:f4:c4:21:88:f9:45:e0:23:1b:c7:2a: 82:01:da:38:10:0b:14:25:71:4e:73:b8:4e:79:a4: 93:5f:1a:ff:25:2b:e2:36:38:ab:d3:db:2b:59:71: 8f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A6:01:7E:19:F7:D9:3B:ED:57:23:36:02:FE:FF:A5:F7:26:92:17 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.51.0/24 Signature Algorithm: sha256WithRSAEncryption ae:86:52:5b:28:0d:09:b4:d8:5c:20:2b:d5:c8:76:15:b2:06: a9:8b:8a:68:0a:d3:a5:fb:be:11:f7:26:bb:80:5a:9d:69:16: 16:dc:81:5b:35:77:b0:c2:6e:36:62:36:c3:74:c9:9c:e5:27: 27:a2:19:17:b3:dc:b3:71:44:11:37:fe:ac:51:80:56:c8:62: 72:62:2d:f6:1e:2b:5f:04:05:05:60:93:3b:9f:67:cf:a2:0e: 0b:a8:4d:5e:f4:a8:11:51:95:7d:d0:5e:09:3b:6f:ca:1b:34: 42:6f:5c:c0:11:62:10:09:8b:15:7f:91:53:84:39:7e:f6:ec: 75:4f:a0:99:31:8f:54:33:09:df:52:ba:21:ae:76:ec:ef:dd: dc:d7:96:c5:2e:77:72:6f:71:42:0f:77:a1:7a:78:10:4f:0a: a5:c4:1d:a4:d0:f8:20:a7:83:fe:f7:6d:e3:88:ea:41:14:2d: 74:d7:2c:28:7b:7a:e6:ee:68:58:82:e4:26:5f:a9:99:89:d2: 3c:cc:f9:2f:93:1a:1e:7f:84:d8:af:f7:43:a3:c2:f2:2d:3b: 67:0d:b6:8f:a2:17:29:02:c8:70:ea:d8:bf:99:fc:f0:e9:fc: 5f:95:8d:00:52:98:2d:19:c7:f3:d4:fc:a9:47:1c:55:a6:35: 3a:e4:24:49 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMDAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDViMi04NmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEQTMe52od7VjprVf1OhTE+Rco1tdpbgUhhL7dret8wOwsyqx8pMUQaE5utg /EPubYwopkL6XRyFd7U2hvD0b6B/rWm1WJIPSLjXUpLoaxvURUwK2xtg3ERUfvAk +zk9ZyzfJfv1FxPS9mRRWfgrx5P29Vm4VE/eJHzHNomVXsQOYLhOlLuM5un2I/CY 1e8sLybOJ1SOlDX2xXxHO/yHKsCUO3W4pGzVA1tGJXJxJT5E3Z1NKZ1waWwW5h0v Q9GTgbCP/r7aM5sdxLpzCkzviGv4oHuY9MQhiPlF4CMbxyqCAdo4EAsUJXFOc7hO eaSTXxr/JSviNjir09srWXGP7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFICmAX4Z 99k77VcjNgL+/6X3JpIXMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEYxQ0VCNTJD RkIwMTFFRUIwRDAzNjI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnRQzMA0GCSqGSIb3DQEBCwUAA4IBAQCuhlJbKA0JtNhcICvVyHYV sgapi4poCtOl+74R9ya7gFqdaRYW3IFbNXewwm42YjbDdMmc5ScnohkXs9yzcUQR N/6sUYBWyGJyYi32HitfBAUFYJM7n2fPog4LqE1e9KgRUZV90F4JO2/KGzRCb1zA EWIQCYsVf5FThDl+9ux1T6CZMY9UMwnfUrohrnbs793c15bFLndyb3FCD3ehengQ TwqlxB2k0Pggp4P+923jiOpBFC101ywoe3rm7mhYguQmX6mZidI8zPkvkxoef4TY r/dDo8LyLTtnDbaPohcpAshw6ti/mfzw6fxflY0AUpgtGcfz1PypRxxVpjU65CRJ -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:35 2026 by rpki-client