$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DD0B20D0C0DE11EEB0643379C4F9AE02.roa File: DD0B20D0C0DE11EEB0643379C4F9AE02.roa (raw, json) Hash identifier: ADMHsUmQzTVDjK80IighRqlJMwbZE52DjjY3hoUhI/Q= Subject key identifier: 00:79:DF:A1:E2:8F:22:77:D7:1B:5E:EC:90:D4:2D:E0:4E:28:56:78 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 314E Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DD0B20D0C0DE11EEB0643379C4F9AE02.roa Signing time: Mon 06 Jul 2026 16:21:23 +0000 ROA not before: Mon 06 Jul 2026 16:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151731 IP address blocks: 157.15.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12622 (0x314e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 6 16:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4bd603-dc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:55:38:ef:d5:98:ca:eb:d8:6d:44:1a:df: 51:29:8e:4f:b3:e4:53:a6:18:62:66:8c:ca:84:97: cf:6d:da:47:a3:b7:51:3f:71:a0:ec:c5:4f:13:06: ec:ca:a1:56:3f:a2:17:7c:53:ae:64:6d:58:cf:d8: 3f:91:30:47:8c:79:70:db:95:fa:7d:71:f7:92:b9: 34:20:06:3e:23:5d:7b:79:a3:a1:e7:b1:28:37:47: 82:df:a2:bc:a4:32:05:12:fe:61:68:d6:fe:63:39: f4:6c:d7:23:6d:4b:cc:a2:bc:ed:2f:a9:66:61:93: f7:a7:7d:8d:7d:98:17:07:ae:7f:74:0c:09:32:bb: 65:ac:0d:f3:6a:88:0c:81:ce:35:4b:c3:63:be:3d: ca:4b:b4:35:e8:cc:9f:37:38:35:13:c8:3c:1a:e8: 71:37:af:3c:7a:ab:4f:e2:f6:57:56:05:15:2f:93: d1:6d:96:e0:70:17:1c:cc:8f:3c:e6:6c:68:24:35: c7:8c:44:3d:a6:0c:ed:c8:30:0c:23:60:8e:c9:aa: 87:b2:ef:3f:c6:44:a8:f5:bf:90:a1:43:35:68:23: f3:5e:9c:9e:a9:be:c9:c4:f8:cb:89:b2:90:25:56: 01:fb:7f:19:3d:8f:01:fb:17:58:09:1c:86:f5:ce: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:79:DF:A1:E2:8F:22:77:D7:1B:5E:EC:90:D4:2D:E0:4E:28:56:78 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DD0B20D0C0DE11EEB0643379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.90.0/23 Signature Algorithm: sha256WithRSAEncryption 87:4e:07:f6:72:f3:8d:47:bd:1c:27:de:c6:4a:4a:a3:9d:95: fe:02:26:f1:2e:4d:13:dc:0e:56:d7:91:8f:aa:18:8f:a6:05: 5a:e7:64:49:67:c1:57:92:dc:a1:a2:f8:09:5b:de:d7:5a:a4: 1d:85:18:77:ad:63:00:59:f1:47:19:7f:43:0a:01:6f:9c:42: 2a:b9:d4:f5:3b:50:25:64:b3:15:b8:5a:cb:49:09:8c:d6:a4: 2a:37:7c:44:9e:4d:65:54:94:d6:bb:14:1f:5e:4c:3b:42:62: bd:12:ea:e3:d2:40:73:96:da:1e:fc:da:ed:17:7b:4b:53:19: 1e:e5:55:63:de:5a:00:47:52:49:e8:2f:7c:32:66:38:0b:f4: db:ad:66:5b:e1:ac:2c:e8:37:26:15:4d:d1:cf:10:d2:62:03: e6:c4:ea:8b:ab:ca:0c:db:92:e0:88:89:4a:60:fd:ef:39:38: 9f:18:bc:f4:2a:d2:23:6a:b6:05:dc:49:ac:8a:9f:3d:0c:3d: 84:c1:ef:9d:cb:6e:9d:47:84:82:ca:82:10:ef:45:43:82:3c: 5e:f4:c3:7f:39:be:a0:a5:d3:99:df:56:43:55:69:79:cd:4b: 80:e3:94:0e:84:d5:ef:0c:d3:78:c2:4b:6c:15:42:79:82:9b: a6:d3:72:a3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwNzA2MTYyMTIzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiZDYwMy1kYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/VVOO/VmMrr2G1EGt9RKY5Ps+RTphhiZozKhJfPbdpHo7dRP3Gg7MVPEwbs yqFWP6IXfFOuZG1Yz9g/kTBHjHlw25X6fXH3krk0IAY+I117eaOh57EoN0eC36K8 pDIFEv5haNb+Yzn0bNcjbUvMorztL6lmYZP3p32NfZgXB65/dAwJMrtlrA3zaogM gc41S8Njvj3KS7Q16MyfNzg1E8g8GuhxN688eqtP4vZXVgUVL5PRbZbgcBcczI88 5mxoJDXHjEQ9pgztyDAMI2COyaqHsu8/xkSo9b+QoUM1aCPzXpyeqb7JxPjLibKQ JVYB+38ZPY8B+xdYCRyG9c7aLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAB536Hi jyJ31xte7JDULeBOKFZ4MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREQwQjIwRDBD MERFMTFFRUIwNjQzMzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ9aMA0GCSqGSIb3DQEBCwUAA4IBAQCHTgf2cvONR70cJ97GSkqj nZX+AibxLk0T3A5W15GPqhiPpgVa52RJZ8FXktyhovgJW97XWqQdhRh3rWMAWfFH GX9DCgFvnEIqudT1O1AlZLMVuFrLSQmM1qQqN3xEnk1lVJTWuxQfXkw7QmK9Eurj 0kBzltoe/NrtF3tLUxke5VVj3loAR1JJ6C98MmY4C/TbrWZb4aws6DcmFU3RzxDS YgPmxOqLq8oM25LgiIlKYP3vOTifGLz0KtIjarYF3Emsip89DD2Ewe+dy26dR4SC yoIQ70VDgjxe9MN/Ob6gpdOZ31ZDVWl5zUuA45QOhNXvDNN4wktsFUJ5gpum03Kj -----END CERTIFICATE-----Generated at Tue Jul 21 14:51:29 2026 by rpki-client