$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D97A31CE4DC511F1A0445D33AF833773.roa File: D97A31CE4DC511F1A0445D33AF833773.roa (raw, json) Hash identifier: xLAix/mDjySYihITWWhavKMyo1GBkrVYfPbC9MvLoWk= Subject key identifier: C0:6B:97:BA:6C:E3:FB:95:4E:37:49:2A:11:70:BD:5A:B5:42:BA:65 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30A3 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D97A31CE4DC511F1A0445D33AF833773.roa Signing time: Mon 06 Jul 2026 16:15:44 +0000 ROA not before: Mon 06 Jul 2026 16:15:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133680 IP address blocks: 157.20.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12451 (0x30a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:15:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd4af-d0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:9f:e3:46:d5:7a:c0:61:55:86:93:b0:19: 06:af:6e:95:7e:96:e8:05:b2:80:90:f0:47:cf:9e: 86:8d:15:04:eb:1b:6a:e2:99:a2:9b:ae:d0:a7:d4: bd:0c:63:f5:c0:96:79:36:06:5a:16:d7:27:8d:28: a6:91:a9:15:44:aa:75:a7:9b:ec:3b:14:74:ab:60: 4d:b2:0d:72:90:91:e1:08:81:c4:51:79:29:25:6a: 97:00:3f:9e:a8:d1:cc:70:eb:dd:3d:56:7a:0b:21: ff:3a:29:12:7a:1b:f7:c6:fc:1b:41:ec:5a:b5:90: d3:71:b6:dc:65:81:86:c4:0a:52:61:57:aa:f1:ae: 54:3c:17:d7:11:c4:ec:7c:7f:11:93:29:36:23:1b: 0a:94:7f:3d:4f:1e:dc:bf:fb:c1:44:f0:86:29:20: 19:32:e2:88:7a:9d:b5:02:81:b4:ea:7e:2c:23:96: 90:93:7f:83:d4:c6:84:64:ca:99:c3:bc:84:03:84: 65:42:6d:41:65:78:4a:70:c2:15:9b:8a:5a:36:2c: bf:f6:06:89:c4:da:b7:88:e3:48:f5:fd:f3:ad:a6: c5:44:cf:23:ba:13:99:b2:8c:35:76:87:30:39:79: c4:0d:d7:b8:71:ad:a9:88:87:fb:52:80:98:f2:b5: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6B:97:BA:6C:E3:FB:95:4E:37:49:2A:11:70:BD:5A:B5:42:BA:65 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D97A31CE4DC511F1A0445D33AF833773.roa sbgp-ipAddrBlock: critical IPv4: 157.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption 77:00:48:d4:ed:3b:ef:7f:56:82:61:a1:10:3c:6d:53:3d:a2: 40:8d:6a:f9:23:ad:10:a3:e5:90:f0:c6:0b:7e:bf:ec:c6:09: 31:59:ee:37:24:2c:47:d4:18:34:67:f7:b4:e9:95:11:69:b7: 11:b8:3f:11:f4:a2:67:06:c9:a0:02:89:bb:db:f6:78:78:9b: 66:22:2e:6a:ef:07:34:3f:98:71:c1:1d:4b:bb:8a:c8:89:91: ca:e6:df:52:6b:45:a2:fb:78:86:75:1b:36:33:df:0b:58:21: 8a:e8:43:99:8e:85:93:41:1f:03:b4:8e:17:8b:c6:ec:25:81: a3:06:b6:52:53:90:6b:ee:f0:98:40:32:c6:0a:80:fa:c8:c8: df:a1:3a:a5:1b:d2:3f:ad:70:c9:55:6a:e9:0c:f6:26:fd:37: 68:7d:53:46:29:02:6e:ea:37:61:11:81:91:d5:8c:41:a0:0c: 02:59:56:68:d2:d9:53:6a:ef:92:de:c5:a2:af:c5:4c:0f:0e: c7:b8:24:d0:50:7c:72:57:90:fd:14:c8:0e:02:e0:30:c9:1f: 0a:6d:e7:50:2d:6d:99:8d:be:b1:95:30:05:34:83:ca:60:05: d9:f5:cc:33:b8:eb:24:08:17:65:fa:9c:90:28:1a:3f:2d:f4: 55:ed:eb:f9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNTQ0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDRhZi1kMGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7qf40bVesBhVYaTsBkGr26VfpboBbKAkPBHz56GjRUE6xtq4pmim67Qp9S9 DGP1wJZ5NgZaFtcnjSimkakVRKp1p5vsOxR0q2BNsg1ykJHhCIHEUXkpJWqXAD+e qNHMcOvdPVZ6CyH/OikSehv3xvwbQexatZDTcbbcZYGGxApSYVeq8a5UPBfXEcTs fH8Rkyk2IxsKlH89Tx7cv/vBRPCGKSAZMuKIep21AoG06n4sI5aQk3+D1MaEZMqZ w7yEA4RlQm1BZXhKcMIVm4paNiy/9gaJxNq3iONI9f3zrabFRM8juhOZsow1docw OXnEDde4ca2piIf7UoCY8rXkIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMBrl7ps 4/uVTjdJKhFwvVq1QrplMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDk3QTMxQ0U0 REM1MTFGMUEwNDQ1RDMzQUY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRSKMA0GCSqGSIb3DQEBCwUAA4IBAQB3AEjU7Tvvf1aCYaEQPG1T PaJAjWr5I60Qo+WQ8MYLfr/sxgkxWe43JCxH1Bg0Z/e06ZURabcRuD8R9KJnBsmg Aom72/Z4eJtmIi5q7wc0P5hxwR1Lu4rIiZHK5t9Sa0Wi+3iGdRs2M98LWCGK6EOZ joWTQR8DtI4Xi8bsJYGjBrZSU5Br7vCYQDLGCoD6yMjfoTqlG9I/rXDJVWrpDPYm /TdofVNGKQJu6jdhEYGR1YxBoAwCWVZo0tlTau+S3sWir8VMDw7HuCTQUHxyV5D9 FMgOAuAwyR8KbedQLW2Zjb6xlTAFNIPKYAXZ9cwzuOskCBdl+pyQKBo/LfRV7ev5 -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:34 2026 by rpki-client