$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa File: 971A75D21F4F11F096499929C4F9AE02.roa (raw, json) Hash identifier: n7SUdk/X+BrK2vYO8GEEm6dCWuLolpLUt2b4HpFfMBU= Subject key identifier: CB:C2:34:C8:DF:CA:76:64:16:73:87:08:6E:DE:D4:6D:C7:26:5F:6A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BBD Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:43:24 +0000 ROA not before: Thu 08 May 2025 15:52:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138296 IP address blocks: 157.20.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11197 (0x2bbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c10c-7d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:54:63:c8:fd:f0:4b:21:15:9e:2c:ee:65: 7b:4a:ba:d2:be:62:b3:b9:12:f7:a6:51:82:8b:b8: ab:45:ac:45:65:95:fd:42:e9:57:f5:bb:9e:5f:0f: ac:50:09:94:2f:81:27:cd:b8:25:57:53:c7:40:25: 9e:0f:b9:24:57:95:c7:cc:a5:cb:57:7a:d8:56:0d: bb:4c:6e:75:98:a4:19:6c:a5:1d:8f:63:f3:e6:51: 43:33:c9:51:d1:12:62:d0:60:3f:e7:4a:23:89:56: be:b9:1b:0c:0d:45:49:fc:94:ba:c2:e5:dd:6d:81: 44:bf:d6:4e:ac:a3:ff:98:8a:cb:cb:43:f7:64:c3: b2:c2:b7:c0:33:82:15:6b:6c:ed:37:81:11:3c:0e: 81:51:54:8f:85:5d:d1:12:60:de:0a:b7:85:49:f9: e1:50:db:8c:b2:74:8c:75:95:de:bf:b2:1f:99:5a: 97:70:7e:06:44:80:7b:0d:2d:4f:cb:84:cb:37:c7: 3b:88:69:10:a2:e7:44:f5:3e:6a:b7:78:73:ee:5e: ca:04:b4:85:f9:92:c8:6e:9e:a4:41:ba:da:58:63: 09:b4:75:92:80:d8:ba:e5:f0:89:6e:df:91:7d:19: 1b:d7:78:f5:d6:fe:19:0a:82:60:99:2d:3c:2c:56: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C2:34:C8:DF:CA:76:64:16:73:87:08:6E:DE:D4:6D:C7:26:5F:6A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.86.0/23 Signature Algorithm: sha256WithRSAEncryption 34:0d:a4:e1:18:57:71:8b:99:e7:8e:1d:2d:c8:1e:7b:34:e9: 48:d3:de:04:95:73:82:ef:0e:11:13:58:19:1a:4e:17:b2:8c: 07:5d:5e:37:59:3c:a0:d6:73:8d:74:50:eb:d9:86:ca:06:9f: 88:07:87:83:60:95:b1:50:68:4b:64:4a:cb:06:4a:d9:45:1c: ca:cb:08:98:d3:83:93:79:65:69:68:b9:be:ba:9f:15:97:e1: 42:32:24:76:5c:81:fd:84:21:d6:6a:f2:8c:a5:76:96:44:7c: 49:ec:2d:a8:13:6c:51:6d:af:bd:c3:a3:bc:1f:6c:41:f4:07: c0:9f:f5:62:d8:f0:c4:19:04:fd:dc:1b:25:f2:b4:58:96:5d: f9:2b:51:2f:45:20:be:42:a4:75:54:ef:b8:08:54:46:9b:7f: 6d:a6:c5:5e:76:19:5f:05:85:48:9b:02:b2:e3:83:94:b6:d9: a1:ba:28:ce:0e:d1:e6:1f:91:79:54:93:9f:01:3d:96:45:25: 1a:8c:87:7c:c9:a2:67:19:db:de:33:85:ca:8d:d9:6a:f1:87: a8:46:03:b9:3e:64:1f:97:08:d1:3e:37:1b:59:ba:53:b5:03: 1c:c7:25:cf:ab:6b:98:5f:72:fa:66:f5:2e:57:95:09:9b:5c: 8e:67:4f:aa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzEwYy03ZDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSlUY8j98EshFZ4s7mV7SrrSvmKzuRL3plGCi7irRaxFZZX9QulX9bueXw+s UAmUL4EnzbglV1PHQCWeD7kkV5XHzKXLV3rYVg27TG51mKQZbKUdj2Pz5lFDM8lR 0RJi0GA/50ojiVa+uRsMDUVJ/JS6wuXdbYFEv9ZOrKP/mIrLy0P3ZMOywrfAM4IV a2ztN4ERPA6BUVSPhV3REmDeCreFSfnhUNuMsnSMdZXev7IfmVqXcH4GRIB7DS1P y4TLN8c7iGkQoudE9T5qt3hz7l7KBLSF+ZLIbp6kQbraWGMJtHWSgNi65fCJbt+R fRkb13j11v4ZCoJgmS08LFaGLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMvCNMjf ynZkFnOHCG7e1G3HJl9qMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTcxQTc1RDIx RjRGMTFGMDk2NDk5OTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRWMA0GCSqGSIb3DQEBCwUAA4IBAQA0DaThGFdxi5nnjh0tyB57 NOlI094ElXOC7w4RE1gZGk4XsowHXV43WTyg1nONdFDr2YbKBp+IB4eDYJWxUGhL ZErLBkrZRRzKywiY04OTeWVpaLm+up8Vl+FCMiR2XIH9hCHWavKMpXaWRHxJ7C2o E2xRba+9w6O8H2xB9AfAn/Vi2PDEGQT93Bsl8rRYll35K1EvRSC+QqR1VO+4CFRG m39tpsVedhlfBYVImwKy44OUttmhuijODtHmH5F5VJOfAT2WRSUajId8yaJnGdve M4XKjdlq8YeoRgO5PmQflwjRPjcbWbpTtQMcxyXPq2uYX3L6ZvUuV5UJm1yOZ0+q -----END CERTIFICATE-----Generated at Sat Mar 7 19:32:49 2026 by rpki-client