$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa File: 13CA64E4C35B11EFA021A243C4F9AE02.roa (raw, json) Hash identifier: cA4EpqB36n167Q1HdD3K3flvs1ql/TPMQ9D+AoLp6ME= Subject key identifier: 62:37:E0:D6:88:16:F4:BC:2B:A0:F4:AA:E7:F3:83:96:B3:7C:C1:63 Certificate issuer: /CN=A9135F07/serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Certificate serial: E3 Authority key identifier: 4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:56:31 +0000 ROA not before: Sat 29 Mar 2025 07:02:55 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 131331 IP address blocks: 157.20.40.0/24 maxlen: 24 157.20.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=4F9EFD43BA79A349455109DB200845A8908CDC5C Validity Not Before: Mar 29 07:02:55 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3e31f-58f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:8e:11:72:ca:b2:5b:d4:01:af:e6:6f:38: 7d:91:9e:a4:5e:14:6e:cb:d5:0f:8e:7e:d8:df:5c: 3b:2a:32:53:00:45:18:89:d2:73:07:b4:08:73:d9: d2:99:68:c7:04:41:8c:0e:9c:0e:6b:e2:48:26:10: 50:01:33:97:3d:a2:39:8d:b9:41:a9:8e:35:2f:99: f9:b4:59:ec:3f:3e:3e:94:40:68:5b:46:0b:56:f5: be:83:3a:3c:6c:74:14:5d:2e:8b:cf:52:9a:e2:9f: 6c:ef:ed:b5:1d:fd:b7:40:2e:ce:0b:3d:c3:5a:ca: 5b:de:35:46:e3:6a:6a:52:e3:87:de:7e:80:3f:c2: 2a:94:f1:1c:3f:66:31:8c:84:28:c4:c0:46:6d:6b: af:8b:20:fa:9f:ae:32:f1:2c:4d:9c:93:97:95:f6: 59:d0:d9:6c:b3:3a:7b:51:0a:05:41:6f:1b:9b:e4: ba:b3:ee:fc:e7:9c:ff:b7:5f:de:36:43:67:55:cf: 54:fb:c0:2d:35:80:8a:ba:d6:11:3b:75:2a:6f:58: 7c:2d:8f:c2:25:e3:4f:7f:50:b3:e3:05:b1:68:c5: 77:88:ff:0e:18:98:ab:c6:8c:6d:55:3d:44:f8:f2: 4a:27:22:3d:e3:7a:b6:b9:43:0d:d5:cd:53:e1:ad: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:37:E0:D6:88:16:F4:BC:2B:A0:F4:AA:E7:F3:83:96:B3:7C:C1:63 X509v3 Authority Key Identifier: keyid:4F:9E:FD:43:BA:79:A3:49:45:51:09:DB:20:08:45:A8:90:8C:DC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/T579Q7p5o0lFUQnbIAhFqJCM3Fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T579Q7p5o0lFUQnbIAhFqJCM3Fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/2F722A98C35A11EF8314C43FC4F9AE02/13CA64E4C35B11EFA021A243C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.40.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:cb:b0:fd:cd:bc:bd:73:77:d5:37:e6:8a:3a:76:81:64:19: c3:50:da:45:62:5f:7f:56:0b:be:b3:6d:16:fd:ac:b7:10:4f: e4:2f:23:54:30:49:a4:1a:15:f9:cd:f5:6c:9e:45:93:7a:a2: 65:cc:31:6d:e6:da:f2:5a:33:a5:7c:cd:3f:c3:22:2f:ed:10: 6d:54:ae:44:48:01:73:69:41:05:95:a2:c1:44:f1:51:1d:75: 9a:47:0d:5f:a1:ed:38:ed:58:7c:60:9f:aa:a8:59:e9:a7:d3: 04:84:8d:39:97:3f:e6:d7:db:2b:b1:11:4c:34:0b:14:ef:65: fa:8e:82:12:3c:14:06:18:1a:81:0e:97:59:f3:02:e9:ba:3b: 40:65:0b:b4:01:d5:0f:e5:2c:52:10:1a:30:14:fb:48:d8:64: d7:92:65:55:5b:f4:d8:56:58:f7:d4:90:84:96:87:98:58:9d: 95:13:e7:9e:3a:d0:1b:50:cc:dd:e4:d7:f0:c7:48:1c:2b:9b: 01:bf:2d:e6:ea:3e:08:7c:6d:9b:da:87:b1:bd:3d:f5:2d:23: 2b:1a:75:d6:07:ec:33:2e:4d:fc:17:db:81:09:4c:63:5d:86: 46:d4:8e:b1:68:ac:82:1d:1a:88:02:ae:2e:67:b3:33:f7:ca: ba:7a:68:37 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGMDcxMTAvBgNVBAUTKDRGOUVGRDQzQkE3OUEzNDk0NTUxMDlEQjIwMDg0NUE4 OTA4Q0RDNUMwHhcNMjUwMzI5MDcwMjU1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTMxZi01OGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0PaOEXLKslvUAa/mbzh9kZ6kXhRuy9UPjn7Y31w7KjJTAEUYidJzB7QIc9nS mWjHBEGMDpwOa+JIJhBQATOXPaI5jblBqY41L5n5tFnsPz4+lEBoW0YLVvW+gzo8 bHQUXS6Lz1Ka4p9s7+21Hf23QC7OCz3DWspb3jVG42pqUuOH3n6AP8IqlPEcP2Yx jIQoxMBGbWuviyD6n64y8SxNnJOXlfZZ0Nlsszp7UQoFQW8bm+S6s+7855z/t1/e NkNnVc9U+8AtNYCKutYRO3Uqb1h8LY/CJeNPf1Cz4wWxaMV3iP8OGJirxoxtVT1E +PJKJyI943q2uUMN1c1T4a1a3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGI34NaI FvS8K6D0qufzg5azfMFjMB8GA1UdIwQYMBaAFE+e/UO6eaNJRVEJ2yAIRaiQjNxc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYwNy8yRjcyMkE5OEMz NUExMUVGODMxNEM0M0ZDNEY5QUUwMi9UNTc5UTdwNW8wbEZVUW5iSUFoRnFKQ00z RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Q1NzlRN3A1bzBsRlVRbmJJQWhGcUpDTTNGdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVGMDcvMkY3MjJBOThDMzVBMTFFRjgzMTRDNDNGQzRGOUFFMDIvMTNDQTY0RTRD MzVCMTFFRkEwMjFBMjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRQoMA0GCSqGSIb3DQEBCwUAA4IBAQB+y7D9zby9c3fVN+aKOnaB ZBnDUNpFYl9/Vgu+s20W/ay3EE/kLyNUMEmkGhX5zfVsnkWTeqJlzDFt5tryWjOl fM0/wyIv7RBtVK5ESAFzaUEFlaLBRPFRHXWaRw1foe047Vh8YJ+qqFnpp9MEhI05 lz/m19srsRFMNAsU72X6joISPBQGGBqBDpdZ8wLpujtAZQu0AdUP5SxSEBowFPtI 2GTXkmVVW/TYVlj31JCEloeYWJ2VE+eeOtAbUMzd5Nfwx0gcK5sBvy3m6j4IfG2b 2oexvT31LSMrGnXWB+wzLk38F9uBCUxjXYZG1I6xaKyCHRqIAq4uZ7Mz98q6emg3 -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:16 2026 by rpki-client