$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa File: B341065EBDDE11EA9977C550C4F9AE02.roa (raw, json) Hash identifier: Dz7Rbc/3LUiO+CuK5o9dXydqyI4LZcJjPVl4YwYJyWk= Subject key identifier: 9E:7E:DE:A1:EA:B7:B9:E9:56:4B:BF:5B:80:30:A9:7A:66:10:A5:10 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 322D Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:28:49 +0000 ROA not before: Mon 06 Jul 2026 16:28:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55824 IP address blocks: 157.15.12.0/23 maxlen: 24 157.15.158.0/24 maxlen: 24 158.144.12.0/24 maxlen: 24 158.144.15.0/24 maxlen: 24 158.144.18.0/24 maxlen: 24 158.144.182.0/24 maxlen: 24 158.144.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12845 (0x322d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:28:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd7c1-797a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:a4:c7:95:f0:2f:21:52:88:cb:48:8b:6f: 8c:63:b6:ae:ca:72:5d:79:9b:37:38:01:36:6c:8c: 90:17:d6:7e:b2:4b:88:3e:97:33:34:57:15:26:55: d3:65:88:4c:f5:66:32:1f:3a:f4:20:f0:86:01:75: a2:41:d1:35:91:b3:b1:8a:9f:75:19:a8:c1:54:73: 2b:74:10:75:c6:f4:b6:46:59:a5:2b:69:4d:48:8a: e6:6b:e4:2a:f1:34:d7:6c:64:a5:c8:9d:5c:44:b2: c2:92:53:00:73:86:9e:ee:47:68:dd:84:3b:ea:f2: 87:ce:30:47:c2:20:7f:94:63:f3:b8:a5:a0:a4:ed: 09:dd:91:46:49:a4:e9:89:70:1c:1b:c3:08:4a:d9: ce:66:17:1f:f9:06:29:ff:eb:5b:a3:0a:ba:e9:e2: bb:5c:d9:e6:15:5e:a5:74:55:d7:a6:86:ec:9c:7c: ff:d5:1e:81:c9:a8:23:c1:7a:b1:7f:5b:c8:47:f5: 0b:f2:97:8a:b2:7c:79:ba:be:ff:3d:57:6b:79:e9: 27:a1:c6:a6:4c:65:4a:c6:9f:c1:cc:21:0c:e3:bf: ce:5f:4e:5e:15:b4:e7:16:9c:23:d3:b7:31:48:60: f5:e1:ce:04:91:6c:a3:fb:6d:a9:a6:17:47:58:cf: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7E:DE:A1:EA:B7:B9:E9:56:4B:BF:5B:80:30:A9:7A:66:10:A5:10 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.12.0/23 157.15.158.0/24 158.144.12.0/24 158.144.15.0/24 158.144.18.0/24 158.144.182.0/24 158.144.186.0/23 Signature Algorithm: sha256WithRSAEncryption 42:76:43:e4:f4:1d:f0:61:a3:8a:17:d5:a2:bb:f9:2c:31:de: 5a:5f:b0:d2:f1:8f:c7:0b:2c:db:ee:ac:74:f5:a9:3d:5d:f0: 4d:10:23:fb:ee:23:4e:85:7e:9b:0c:85:67:27:6a:78:f7:c4: 64:40:79:be:ff:3c:7a:2f:7a:c1:e2:66:08:0e:02:c5:3d:2f: 73:de:c5:18:61:33:87:d6:fc:de:5d:4f:87:9c:6b:c0:81:f9: 78:c9:8a:ef:b0:f4:7e:78:7a:18:c6:7c:26:c9:d6:30:57:ad: 40:05:71:ba:ed:f5:ee:b2:96:35:1a:4e:4b:61:36:9d:2a:8a: 66:22:b9:69:79:23:24:9f:87:4d:3f:ef:86:50:80:67:63:8c: 58:99:f1:ac:34:81:9f:b8:2e:67:06:6f:19:fd:7e:57:64:66: 8c:7c:85:9d:63:9d:a1:86:04:cf:bf:80:14:13:ce:91:4e:a7: 4c:77:2c:e0:5c:23:b8:f7:4e:19:d4:1a:82:a3:1e:40:a3:95: 75:65:9b:dd:e1:7b:12:d2:3a:e4:26:b3:09:e2:16:2d:43:98: 13:5c:1f:f8:78:c4:53:53:e2:57:76:19:d2:44:d7:aa:11:83: de:19:d0:7a:af:76:2c:3a:d4:27:02:36:fd:f0:5e:58:bd:0c: 6d:e9:d8:2a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICMi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyODQ5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDdjMS03OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2d2kx5XwLyFSiMtIi2+MY7auynJdeZs3OAE2bIyQF9Z+skuIPpczNFcVJlXT ZYhM9WYyHzr0IPCGAXWiQdE1kbOxip91GajBVHMrdBB1xvS2RlmlK2lNSIrma+Qq 8TTXbGSlyJ1cRLLCklMAc4ae7kdo3YQ76vKHzjBHwiB/lGPzuKWgpO0J3ZFGSaTp iXAcG8MIStnOZhcf+QYp/+tbowq66eK7XNnmFV6ldFXXpobsnHz/1R6ByagjwXqx f1vIR/UL8peKsnx5ur7/PVdreeknocamTGVKxp/BzCEM47/OX05eFbTnFpwj07cx SGD14c4EkWyj+22pphdHWM+VzwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFJ5+3qHq t7npVku/W4AwqXpmEKUQMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjM0MTA2NUVC RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQBnQ8MAwQAnQ+eAwQAnpAMAwQAnpAPAwQAnpASAwQAnpC2AwQBnpC6 MA0GCSqGSIb3DQEBCwUAA4IBAQBCdkPk9B3wYaOKF9Wiu/ksMd5aX7DS8Y/HCyzb 7qx09ak9XfBNECP77iNOhX6bDIVnJ2p498RkQHm+/zx6L3rB4mYIDgLFPS9z3sUY YTOH1vzeXU+HnGvAgfl4yYrvsPR+eHoYxnwmydYwV61ABXG67fXuspY1Gk5LYTad KopmIrlpeSMkn4dNP++GUIBnY4xYmfGsNIGfuC5nBm8Z/X5XZGaMfIWdY52hhgTP v4AUE86RTqdMdyzgXCO4904Z1BqCox5Ao5V1ZZvd4XsS0jrkJrMJ4hYtQ5gTXB/4 eMRTU+JXdhnSRNeqEYPeGdB6r3YsOtQnAjb98F5YvQxt6dgq -----END CERTIFICATE-----Generated at Tue Jul 21 14:52:55 2026 by rpki-client