$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa File: 9B016306CCAB11EEB89B362DC4F9AE02.roa (raw, json) Hash identifier: 4CfLWWdqsS4zwDvkZcKTyu2ekVIzf9fjUsYE+LgTYtA= Subject key identifier: 1C:EA:AD:B2:0B:A8:BB:2B:82:07:CE:DC:4E:33:4B:30:FD:AC:0A:5A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2F2D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa Signing time: Sun 31 May 2026 16:23:57 +0000 ROA not before: Sun 31 May 2026 16:23:57 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 151747 IP address blocks: 157.20.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Jun 2026 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12077 (0x2f2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:23:57 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c609c-573b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:d2:4d:2a:80:5b:38:68:23:88:88:7d:07: c2:85:02:04:d7:9c:bf:4d:9f:e9:6d:95:d3:4d:9c: 40:04:69:6e:da:d8:ee:80:84:e9:37:ba:ea:88:bb: a1:d2:f2:56:ce:f2:81:75:4e:d4:8e:56:c5:4a:36: 39:6f:81:f6:a6:77:0a:d8:a6:d4:7b:87:8d:b9:2d: c7:d0:fb:15:b5:c0:20:fd:be:bb:07:af:0d:88:8b: b3:dc:67:f7:32:d5:dc:77:32:fc:e3:86:85:d4:45: 06:e6:a2:37:d7:7b:36:0b:7a:79:2e:91:73:d8:ad: 7e:aa:7b:68:37:d9:1c:66:02:9f:da:91:7a:64:39: d4:23:ba:47:dc:25:01:69:dd:4e:18:fb:24:45:b5: 5e:1e:0d:f9:86:a7:32:5d:df:13:72:c0:07:a2:7c: 46:db:a9:21:2a:0c:5e:03:49:90:a2:cd:ba:f0:34: 51:bc:dc:4e:c2:64:b6:1d:df:6d:d6:60:34:24:3c: d1:67:fa:1d:e6:d8:0c:e9:8c:22:7a:70:90:45:c1: 7f:29:6c:7e:84:12:27:05:05:e4:ca:c3:25:04:08: b8:a6:3a:4a:98:a5:a2:0e:22:30:30:cd:e9:97:77: e4:74:03:83:60:28:74:9a:59:1a:66:d6:9f:e5:e6: f0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:AD:B2:0B:A8:BB:2B:82:07:CE:DC:4E:33:4B:30:FD:AC:0A:5A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.28.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:67:fb:10:af:4c:84:ef:8b:4c:94:74:73:c6:ee:42:54:3c: 42:0a:94:62:bb:1e:51:c4:f0:22:bd:a2:27:5d:0a:db:f6:71: f8:84:ea:f9:b5:3f:83:02:48:b7:7c:db:7e:25:dd:1e:59:fa: 46:05:be:38:08:52:6a:c8:18:14:85:65:fd:3e:ba:85:3b:9d: d9:b6:16:97:9b:1e:33:2a:ea:c7:2e:4f:5e:7c:5d:7d:89:55: a2:73:79:70:1f:06:18:c3:29:cf:48:a9:f9:b9:99:6b:2e:4b: 09:d7:c1:1c:37:c0:bd:05:d8:a0:48:85:16:b6:67:b7:6c:23: 90:6b:3f:da:7e:60:a6:f2:ad:17:fe:2d:39:02:ef:80:67:ff: 34:ff:d4:5d:42:11:4e:71:70:c0:1b:b6:4b:33:db:b7:3d:fd: f4:b2:dc:60:ca:aa:47:88:fc:03:c6:4f:27:6c:59:4f:a3:7e: 2c:a9:99:40:b2:90:ed:bb:df:d3:9f:e9:d3:1a:6f:f0:bb:82: 60:45:fd:80:61:67:48:44:13:78:c7:5a:94:e9:e8:89:92:6d: 0f:b4:94:b0:02:e1:fc:77:f4:ff:42:60:0c:89:3d:5b:b5:a6: e0:e5:40:a0:54:f6:c5:f9:68:a7:1e:7a:b1:4f:cb:c5:40:19: 88:de:3d:99 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyMzU3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjA5Yy01NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY7STSqAWzhoI4iIfQfChQIE15y/TZ/pbZXTTZxABGlu2tjugITpN7rqiLuh 0vJWzvKBdU7UjlbFSjY5b4H2pncK2KbUe4eNuS3H0PsVtcAg/b67B68NiIuz3Gf3 MtXcdzL844aF1EUG5qI313s2C3p5LpFz2K1+qntoN9kcZgKf2pF6ZDnUI7pH3CUB ad1OGPskRbVeHg35hqcyXd8TcsAHonxG26khKgxeA0mQos268DRRvNxOwmS2Hd9t 1mA0JDzRZ/od5tgM6YwienCQRcF/KWx+hBInBQXkysMlBAi4pjpKmKWiDiIwMM3p l3fkdAODYCh0mlkaZtaf5ebwfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBzqrbIL qLsrggfO3E4zSzD9rApaMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUIwMTYzMDZD Q0FCMTFFRUI4OUIzNjJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRQcMA0GCSqGSIb3DQEBCwUAA4IBAQAqZ/sQr0yE74tMlHRzxu5C VDxCCpRiux5RxPAivaInXQrb9nH4hOr5tT+DAki3fNt+Jd0eWfpGBb44CFJqyBgU hWX9PrqFO53ZthaXmx4zKurHLk9efF19iVWic3lwHwYYwynPSKn5uZlrLksJ18Ec N8C9BdigSIUWtme3bCOQaz/afmCm8q0X/i05Au+AZ/80/9RdQhFOcXDAG7ZLM9u3 Pf30stxgyqpHiPwDxk8nbFlPo34sqZlAspDtu9/Tn+nTGm/wu4JgRf2AYWdIRBN4 x1qU6eiJkm0PtJSwAuH8d/T/QmAMiT1btabg5UCgVPbF+WinHnqxT8vFQBmI3j2Z -----END CERTIFICATE-----Generated at Sat Jun 6 08:22:11 2026 by rpki-client