$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa File: 971A75D21F4F11F096499929C4F9AE02.roa (raw, json) Hash identifier: HpmPInKFAuR9uuOOEwcDiriih3x+q9YyQCpiEiOy88k= Subject key identifier: 4A:12:17:71:70:10:1A:4A:16:94:58:A5:59:6D:3C:50:50:4B:26:C5 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30E0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:17:47 +0000 ROA not before: Mon 06 Jul 2026 16:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138296 IP address blocks: 157.20.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12512 (0x30e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd52b-fa05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:9f:1a:62:9a:53:2d:3f:5d:d0:52:6a:f8: cb:69:8d:76:f0:7a:88:cf:ae:11:dc:04:1b:1a:6b: cd:ee:4f:14:b3:62:a2:41:07:67:95:20:72:49:d3: 75:d4:ad:80:25:ff:8e:94:41:ef:c6:0b:c1:19:3f: 51:59:d3:f1:47:d5:ce:ae:65:43:c4:cd:2a:b0:eb: 16:6d:1d:3b:fb:b2:03:ad:c9:9b:05:21:9c:23:6c: 78:4f:e8:ad:ac:fc:52:ee:ad:bc:a3:4e:44:2e:99: e2:c2:29:5d:a1:47:ee:06:b0:8e:51:97:22:8e:9b: c3:0e:e5:d0:e0:b2:0a:d2:fc:ef:c3:1d:52:94:d6: 1e:4e:ee:fd:df:37:cf:18:18:52:7d:7c:a5:e6:45: 9f:f3:c8:84:3e:34:92:e0:9e:ce:d5:45:80:7d:e6: e2:d7:01:27:f4:a4:05:1c:e6:52:19:2e:98:83:8a: 6f:72:0d:60:9c:f8:84:fd:ba:3b:3a:83:2a:c2:6b: b1:f9:1f:0b:0b:8a:e0:c9:e8:a9:73:59:44:1c:72: b6:06:e4:42:72:16:c0:6b:71:bf:12:4c:8c:aa:3c: 5a:00:cc:c6:d1:54:b3:ca:7b:45:f8:d1:6a:7a:0b: 39:15:3f:c8:4a:72:06:91:8e:9f:57:99:50:cf:50: f7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:12:17:71:70:10:1A:4A:16:94:58:A5:59:6D:3C:50:50:4B:26:C5 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.86.0/23 Signature Algorithm: sha256WithRSAEncryption 29:0f:cf:d5:d7:d2:9d:78:da:3c:f6:b4:84:79:1f:23:d5:af: 7e:ac:b6:9c:e1:92:d8:41:d7:cf:ef:58:b7:c4:d5:ba:8e:c3: b6:64:04:58:71:aa:60:9f:b4:d2:6c:32:18:28:1a:36:d5:ba: 5b:43:62:2d:2d:08:09:4b:e2:a5:93:ff:f8:25:bf:04:30:c2: e9:a4:9d:67:92:02:f8:ad:c0:4e:b9:ae:44:9e:80:d1:7f:ba: 8f:1c:58:48:61:de:9f:6d:e0:c6:51:4d:62:c3:a4:42:3b:cc: 5f:12:ca:6e:9d:fa:80:1d:89:bf:dd:86:59:d8:f4:2f:1e:76: 58:67:5e:b5:b9:35:5a:af:16:d7:c6:c2:12:b1:9c:c4:be:59: 82:5d:3c:20:37:4a:33:0c:e9:d4:2d:59:96:e3:56:d6:2b:19: 15:53:3d:5f:b8:b0:92:88:f2:7d:80:de:98:4d:6d:2a:11:1e: d8:7c:c2:ef:a9:55:91:86:37:96:17:ce:a9:6b:64:32:25:f6: ee:46:6c:94:f7:3f:1d:a0:82:cf:3d:7c:b5:4e:de:89:a7:5e: 78:b9:6c:96:65:6f:9e:a3:2b:f5:31:5a:c5:f7:a9:e4:49:87: 32:d9:3c:f5:39:22:c4:9b:13:f4:d3:9e:6e:c3:f4:78:f2:f9: 14:2e:c1:38 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDUyYi1mYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDmfGmKaUy0/XdBSavjLaY128HqIz64R3AQbGmvN7k8Us2KiQQdnlSBySdN1 1K2AJf+OlEHvxgvBGT9RWdPxR9XOrmVDxM0qsOsWbR07+7IDrcmbBSGcI2x4T+it rPxS7q28o05ELpniwildoUfuBrCOUZcijpvDDuXQ4LIK0vzvwx1SlNYeTu793zfP GBhSfXyl5kWf88iEPjSS4J7O1UWAfebi1wEn9KQFHOZSGS6Yg4pvcg1gnPiE/bo7 OoMqwmux+R8LC4rgyeipc1lEHHK2BuRCchbAa3G/EkyMqjxaAMzG0VSzyntF+NFq egs5FT/ISnIGkY6fV5lQz1D3owIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEoSF3Fw EBpKFpRYpVltPFBQSybFMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTcxQTc1RDIx RjRGMTFGMDk2NDk5OTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRWMA0GCSqGSIb3DQEBCwUAA4IBAQApD8/V19KdeNo89rSEeR8j 1a9+rLac4ZLYQdfP71i3xNW6jsO2ZARYcapgn7TSbDIYKBo21bpbQ2ItLQgJS+Kl k//4Jb8EMMLppJ1nkgL4rcBOua5EnoDRf7qPHFhIYd6fbeDGUU1iw6RCO8xfEspu nfqAHYm/3YZZ2PQvHnZYZ161uTVarxbXxsISsZzEvlmCXTwgN0ozDOnULVmW41bW KxkVUz1fuLCSiPJ9gN6YTW0qER7YfMLvqVWRhjeWF86pa2QyJfbuRmyU9z8doILP PXy1Tt6Jp154uWyWZW+eoyv1MVrF96nkSYcy2Tz1OSLEmxP0055uw/R48vkULsE4 -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:34 2026 by rpki-client