$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D74300A41D1211F1BF2912330A3D8C67.roa File: D74300A41D1211F1BF2912330A3D8C67.roa (raw, json) Hash identifier: VEUF7h76Kok4IB8K33Pcvx6MP45Ft40FCLW80zrUixo= Subject key identifier: 2E:23:07:B2:EB:6C:14:E9:49:DB:82:9B:50:E9:80:28:FE:D3:A2:9D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2F10 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D74300A41D1211F1BF2912330A3D8C67.roa Signing time: Sun 31 May 2026 16:23:03 +0000 ROA not before: Sun 31 May 2026 16:23:03 +0000 ROA not after: Thu 01 Oct 2026 00:00:00 +0000 asID: 151089 IP address blocks: 157.20.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Jun 2026 09:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12048 (0x2f10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 31 16:23:03 2026 GMT Not After : Oct 1 00:00:00 2026 GMT Subject: CN=6a1c6067-954b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:12:8a:39:2b:5c:1b:ca:12:1f:b8:b9:9e: c7:68:f1:6d:cb:5a:86:21:cf:9f:90:29:95:cd:6f: 89:2b:21:1d:49:3f:f6:ba:02:ac:61:80:4c:8d:b9: c7:b5:e4:1b:60:fa:98:d1:8b:df:f5:02:c9:1b:36: 18:f7:87:28:dd:71:6f:75:c5:1e:a8:c6:e8:eb:7d: ed:87:db:9e:96:3d:f9:dc:5e:f9:d3:d0:4b:67:a0: 7e:79:b2:c2:96:d5:99:b0:ee:62:35:cb:7a:9c:c1: 55:b7:4a:c3:bd:c4:90:06:10:be:cd:e3:91:73:52: 28:0e:0c:71:a7:03:86:4d:2d:26:54:62:6b:e2:12: 69:44:c8:f9:9b:3a:d4:56:c1:83:b6:36:a0:ef:5e: 5b:8f:00:d1:26:bb:38:12:fe:09:88:cf:a6:b6:c8: 8c:b4:88:6a:cf:90:5d:06:37:d7:31:21:8c:bb:da: 67:cc:4e:51:73:05:f3:1f:6f:ec:92:d6:fb:db:de: 6d:87:85:18:7e:d5:1b:18:0f:da:cb:c7:8f:e5:68: ac:35:e0:d2:19:6a:82:a1:d9:9d:47:bd:1d:e4:a2: 92:7d:5a:0f:2c:6d:af:0d:fb:03:fa:e5:fe:f8:8d: 28:27:bc:c0:e3:35:a2:29:02:30:ca:4b:7d:8b:55: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:23:07:B2:EB:6C:14:E9:49:DB:82:9B:50:E9:80:28:FE:D3:A2:9D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D74300A41D1211F1BF2912330A3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 157.20.170.0/23 Signature Algorithm: sha256WithRSAEncryption ad:88:99:e6:18:21:d0:3d:90:d4:7f:b8:31:8d:01:a6:9b:fb: ad:a1:40:cc:26:07:c0:11:f9:d0:d6:62:0b:fa:7c:e3:7d:27: 56:35:02:f3:eb:4b:30:b1:9b:84:60:a0:fe:43:2b:91:4b:83: 2f:79:34:a0:74:53:a1:57:73:6c:56:c1:24:66:e4:27:da:1d: 16:84:76:7f:41:15:86:c6:fa:c1:ae:25:ac:9c:b4:5a:9d:b2: 85:68:0d:85:70:4d:fe:df:13:33:39:8f:0b:87:19:7d:ce:ed: 58:90:0d:d8:61:5c:ec:6a:1e:2e:2b:ff:46:e2:70:3d:39:aa: ca:3d:68:98:fd:a2:76:9c:49:ae:71:bb:a5:25:82:51:05:71: cc:2e:4c:83:af:6a:16:31:95:f8:a8:f4:fb:09:0f:0f:86:e7: b5:79:71:a2:35:8c:b4:d7:e4:da:58:22:89:9a:3c:df:c0:a0: cc:41:9b:46:67:a1:a3:db:3a:da:3b:28:61:2c:fd:fb:ca:d0: 73:e1:d7:8d:d6:d1:62:fe:48:da:e9:88:36:70:af:dc:dd:fb: 85:07:8f:2e:0f:fc:7e:5a:f1:fc:cd:7c:9a:bc:2c:81:57:e9: 38:56:3d:9a:21:22:bb:61:da:ad:aa:0a:67:04:c7:87:63:8f: 03:b8:2b:79 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNTMxMTYyMzAzWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFjNjA2Ny05NTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnwSijkrXBvKEh+4uZ7HaPFty1qGIc+fkCmVzW+JKyEdST/2ugKsYYBMjbnH teQbYPqY0Yvf9QLJGzYY94co3XFvdcUeqMbo633th9uelj353F7509BLZ6B+ebLC ltWZsO5iNct6nMFVt0rDvcSQBhC+zeORc1IoDgxxpwOGTS0mVGJr4hJpRMj5mzrU VsGDtjag715bjwDRJrs4Ev4JiM+mtsiMtIhqz5BdBjfXMSGMu9pnzE5RcwXzH2/s ktb7295th4UYftUbGA/ay8eP5WisNeDSGWqCodmdR70d5KKSfVoPLG2vDfsD+uX+ +I0oJ7zA4zWiKQIwykt9i1VX0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC4jB7Lr bBTpSduCm1DpgCj+06KdMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDc0MzAwQTQx RDEyMTFGMUJGMjkxMjMzMEEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRSqMA0GCSqGSIb3DQEBCwUAA4IBAQCtiJnmGCHQPZDUf7gxjQGm m/utoUDMJgfAEfnQ1mIL+nzjfSdWNQLz60swsZuEYKD+QyuRS4MveTSgdFOhV3Ns VsEkZuQn2h0WhHZ/QRWGxvrBriWsnLRanbKFaA2FcE3+3xMzOY8Lhxl9zu1YkA3Y YVzsah4uK/9G4nA9OarKPWiY/aJ2nEmucbulJYJRBXHMLkyDr2oWMZX4qPT7CQ8P hue1eXGiNYy01+TaWCKJmjzfwKDMQZtGZ6Gj2zraOyhhLP37ytBz4deN1tFi/kja 6Yg2cK/c3fuFB48uD/x+WvH8zXyavCyBV+k4Vj2aISK7YdqtqgpnBMeHY48DuCt5 -----END CERTIFICATE-----Generated at Thu Jun 4 11:06:56 2026 by rpki-client