$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa File: 971A75D21F4F11F096499929C4F9AE02.roa (raw, json) Hash identifier: WmPiwSrDxLK5Bx+m/J0s3niF4qkbTWdJ8WrwPkcDszg= Subject key identifier: 63:C0:FA:87:AD:F6:56:96:46:C7:99:AA:34:A3:92:EF:AF:87:2D:D8 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2EB9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa Signing time: Sun 31 May 2026 16:20:14 +0000 ROA not before: Sun 31 May 2026 16:20:14 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 138296 IP address blocks: 157.20.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11961 (0x2eb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:20:14 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c5fbe-eb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:e9:7f:87:ac:37:0f:b4:ea:16:d8:1b:fa: 37:aa:fe:7d:83:64:93:03:d4:f4:35:d6:49:75:71: 66:08:d8:1d:df:26:be:ce:d2:0a:58:55:d5:77:67: 64:06:c2:0d:bf:21:47:40:2b:52:38:27:e7:f1:0a: 4d:b1:fc:ce:2e:fb:95:df:95:04:47:ec:99:09:32: e0:9a:99:6b:6d:75:fa:bd:05:b5:74:2f:03:1f:90: 87:4d:6b:96:5a:26:7a:ca:03:be:d3:c3:1e:4b:7b: 0c:ff:9a:a6:d3:2a:58:b6:4f:1b:30:9c:52:af:1e: ec:08:c7:7e:e0:35:08:07:ba:fc:af:21:8b:f9:8d: 4a:dd:e1:80:45:a4:90:91:9a:c4:59:36:c9:22:d8: 9c:c8:c5:08:a0:de:b0:d7:61:e0:1f:30:f8:bb:5b: f4:5b:d1:b4:21:74:c7:73:78:f8:33:c3:c4:0c:17: 46:92:ca:a5:3a:94:f3:85:da:2c:05:8d:b6:ee:b8: 5d:fb:07:4e:66:40:08:60:2a:df:30:91:cc:08:7c: 62:fc:f1:83:12:be:8b:01:e5:7d:df:2d:db:7f:fb: ab:d9:09:7b:09:22:73:e3:5c:d8:a9:15:c6:b8:ea: e8:4e:f9:94:da:1b:ca:f9:83:4f:ef:46:ef:61:b8: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C0:FA:87:AD:F6:56:96:46:C7:99:AA:34:A3:92:EF:AF:87:2D:D8 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.86.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:70:0e:36:d4:1f:8c:40:b6:a1:21:a7:1e:ee:a4:18:9a:a5: e5:36:ca:be:7d:ab:8e:18:c8:1d:e4:84:8a:cf:db:cc:99:88: c3:12:e1:d6:fb:59:0a:b0:ae:69:13:05:17:8f:af:db:6e:fe: a2:81:fb:23:19:47:24:6f:21:6a:6b:94:34:e2:95:e0:07:15: 91:ea:d6:67:85:52:71:c6:e4:d4:4a:d1:a6:06:f7:c1:6d:d7: f6:e1:63:3e:8b:14:b1:ca:1f:63:55:00:d6:bd:45:e6:01:29: c7:af:0e:70:29:8f:bc:1d:cb:8b:57:cf:f8:f7:f2:e4:12:62: 1e:62:d0:19:18:1f:1b:f7:3d:a3:5d:82:4c:a4:ef:59:d7:b1: a6:5a:cb:43:9f:61:fc:53:a2:b2:95:e0:ee:9c:74:1b:ce:76: 59:d2:47:60:6f:e2:ec:70:31:54:aa:ae:f6:a3:c1:4d:57:f6: 7c:83:f4:37:1a:bf:c3:71:39:18:4b:ea:65:ff:f7:65:b4:b1: 9c:b2:80:a8:52:22:13:24:22:d4:b9:b7:bb:5f:18:35:a4:88: 02:14:e9:5a:db:10:6d:e8:63:3c:53:d2:d4:84:f4:be:70:38: c9:8e:84:21:57:f4:a4:ac:b4:58:85:6e:fb:b2:99:c4:9a:00: 78:5e:ea:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyMDE0WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNWZiZS1lYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cLpf4esNw+06hbYG/o3qv59g2STA9T0NdZJdXFmCNgd3ya+ztIKWFXVd2dk BsINvyFHQCtSOCfn8QpNsfzOLvuV35UER+yZCTLgmplrbXX6vQW1dC8DH5CHTWuW WiZ6ygO+08MeS3sM/5qm0ypYtk8bMJxSrx7sCMd+4DUIB7r8ryGL+Y1K3eGARaSQ kZrEWTbJIticyMUIoN6w12HgHzD4u1v0W9G0IXTHc3j4M8PEDBdGksqlOpTzhdos BY227rhd+wdOZkAIYCrfMJHMCHxi/PGDEr6LAeV93y3bf/ur2Ql7CSJz41zYqRXG uOroTvmU2hvK+YNP70bvYbi+/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGPA+oet 9laWRseZqjSjku+vhy3YMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTcxQTc1RDIx RjRGMTFGMDk2NDk5OTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRWMA0GCSqGSIb3DQEBCwUAA4IBAQAecA421B+MQLahIace7qQY mqXlNsq+fauOGMgd5ISKz9vMmYjDEuHW+1kKsK5pEwUXj6/bbv6igfsjGUckbyFq a5Q04pXgBxWR6tZnhVJxxuTUStGmBvfBbdf24WM+ixSxyh9jVQDWvUXmASnHrw5w KY+8HcuLV8/49/LkEmIeYtAZGB8b9z2jXYJMpO9Z17GmWstDn2H8U6KyleDunHQb znZZ0kdgb+LscDFUqq72o8FNV/Z8g/Q3Gr/DcTkYS+pl//dltLGcsoCoUiITJCLU ube7Xxg1pIgCFOla2xBt6GM8U9LUhPS+cDjJjoQhV/SkrLRYhW77spnEmgB4Xur1 -----END CERTIFICATE-----Generated at Sat Jun 6 09:39:32 2026 by rpki-client