$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB7FFDD0E02D11EEBE91895FC4F9AE02.roa File: DB7FFDD0E02D11EEBE91895FC4F9AE02.roa (raw, json) Hash identifier: LQMrDHpbibXKdyh1OdgQvGn77xCVX60qRZozg9EWC+s= Subject key identifier: 07:88:C7:F8:C4:FD:EE:12:04:C6:F2:AE:7C:02:06:46:BC:BD:0E:96 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 30DD Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB7FFDD0E02D11EEBE91895FC4F9AE02.roa Signing time: Mon 06 Jul 2026 16:17:41 +0000 ROA not before: Mon 06 Jul 2026 16:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138244 IP address blocks: 157.20.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12509 (0x30dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd525-fa07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:1f:e9:57:9b:a6:64:95:0d:dc:d0:ba:8c: bb:34:a1:29:8c:d4:ea:29:c5:95:d2:67:02:75:4a: f0:25:4e:5e:9a:25:4a:2e:82:8a:f0:44:86:b4:ea: 58:8d:d2:6b:a2:d1:fb:53:b1:c3:94:7c:c9:b1:b3: 97:c0:5d:dd:a8:45:7e:ef:69:3a:74:44:ce:28:0a: 17:85:c4:97:47:5b:40:ed:bc:80:5c:48:82:d7:86: 5e:41:7a:9b:92:4a:87:50:34:5d:d1:6b:48:29:aa: f4:27:0e:48:87:b6:4e:57:10:4a:dd:0b:34:08:da: ab:5a:67:d5:60:e0:5b:36:03:fc:c7:e8:8a:38:64: e1:2d:10:ee:35:fd:1b:04:6a:21:53:2a:81:a3:ec: ee:d1:fc:67:7f:63:6e:2d:1f:c1:bd:d9:f7:9a:45: a0:3e:cb:3f:64:c8:1e:f4:14:bf:d1:e3:fa:e4:99: 0b:2a:84:d1:ff:a9:3a:a7:3e:8a:43:bf:38:35:ea: 66:a2:76:56:8d:d7:7b:b3:dc:e7:b6:4f:92:d6:35: b4:78:93:d4:bc:4c:26:cb:22:2b:66:b2:7d:37:b3: ce:92:f3:b3:aa:9b:55:fe:20:22:6d:ad:37:e9:5d: d6:84:fb:9d:7f:e5:25:1c:57:e9:50:8e:a0:15:6e: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:88:C7:F8:C4:FD:EE:12:04:C6:F2:AE:7C:02:06:46:BC:BD:0E:96 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB7FFDD0E02D11EEBE91895FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.172.0/23 Signature Algorithm: sha256WithRSAEncryption 91:76:9c:9f:c1:fe:ca:17:f8:50:25:88:17:d2:80:53:4b:6d: 7a:52:fe:f7:e0:a9:f2:f2:89:dd:e8:ae:4c:a9:32:6e:c8:36: ce:e1:f5:b1:cd:23:c5:a3:c5:86:49:42:39:d0:84:70:f4:a5: 9f:86:f0:08:98:84:7f:2e:71:63:ad:e5:36:ac:0d:b4:d1:15: 60:95:41:62:90:a0:c0:d6:b9:76:ce:4e:8a:0c:95:fb:0a:7a: 8f:47:d7:5c:f9:5b:98:8f:28:74:e8:10:23:53:eb:bf:30:4a: df:a4:88:5b:82:15:1c:1a:b2:b7:51:32:6b:f1:8a:94:7d:03: ce:9e:1a:45:ba:58:60:f1:e7:05:16:8b:f0:63:d1:bc:42:a2: de:20:a9:a9:f7:5f:c0:9f:15:98:47:d7:83:62:1a:97:cb:f6: 83:9d:c2:8b:67:a6:99:3a:e4:ac:81:aa:bc:54:7d:c9:17:ac: 56:c2:0b:eb:53:ac:77:2a:5d:64:29:0a:5b:4d:73:0e:15:a4: af:c5:8d:db:67:0c:d0:84:22:a8:06:99:bf:a3:f8:3f:4b:f8: 21:29:68:84:c5:e4:c9:6e:2b:21:6f:e5:40:68:54:94:e8:2c: 66:5a:fa:c5:ab:95:34:6b:58:da:8a:f2:c3:23:bd:ba:9e:fc: b3:c5:6d:4f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYxNzQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDUyNS1mYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGUf6VebpmSVDdzQuoy7NKEpjNTqKcWV0mcCdUrwJU5emiVKLoKK8ESGtOpY jdJrotH7U7HDlHzJsbOXwF3dqEV+72k6dETOKAoXhcSXR1tA7byAXEiC14ZeQXqb kkqHUDRd0WtIKar0Jw5Ih7ZOVxBK3Qs0CNqrWmfVYOBbNgP8x+iKOGThLRDuNf0b BGohUyqBo+zu0fxnf2NuLR/Bvdn3mkWgPss/ZMge9BS/0eP65JkLKoTR/6k6pz6K Q784NepmonZWjdd7s9zntk+S1jW0eJPUvEwmyyIrZrJ9N7POkvOzqptV/iAiba03 6V3WhPudf+UlHFfpUI6gFW5SXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAeIx/jE /e4SBMbyrnwCBka8vQ6WMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREI3RkZERDBF MDJEMTFFRUJFOTE4OTVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRSsMA0GCSqGSIb3DQEBCwUAA4IBAQCRdpyfwf7KF/hQJYgX0oBT S216Uv734Kny8ond6K5MqTJuyDbO4fWxzSPFo8WGSUI50IRw9KWfhvAImIR/LnFj reU2rA200RVglUFikKDA1rl2zk6KDJX7CnqPR9dc+VuYjyh06BAjU+u/MErfpIhb ghUcGrK3UTJr8YqUfQPOnhpFulhg8ecFFovwY9G8QqLeIKmp91/AnxWYR9eDYhqX y/aDncKLZ6aZOuSsgaq8VH3JF6xWwgvrU6x3Kl1kKQpbTXMOFaSvxY3bZwzQhCKo Bpm/o/g/S/ghKWiExeTJbishb+VAaFSU6CxmWvrFq5U0a1jaivLDI726nvyzxW1P -----END CERTIFICATE-----Generated at Tue Jul 21 14:50:36 2026 by rpki-client