$ rpki-client -vvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/CB24F37C033711F0B76A8520C4F9AE02.roa File: CB24F37C033711F0B76A8520C4F9AE02.roa (raw, json) Hash identifier: XEgsmSONdO5QmyZ+W6pwM4gqDm2Ruw04W/Sgse84F1I= Subject key identifier: 68:1D:B9:04:FB:19:2F:B9:72:D2:E1:76:3D:39:21:89:02:BA:62:2C Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Certificate serial: 010B Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/CB24F37C033711F0B76A8520C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:53:09 +0000 ROA not before: Wed 27 Aug 2025 06:42:21 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151495 IP address blocks: 157.20.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:53:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Validity Not Before: Aug 27 06:42:21 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59645-eed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f2:20:e8:90:fb:63:1d:e9:1d:f7:cb:22:95: 48:c0:8e:be:ea:04:12:47:05:ff:04:5c:e8:fa:db: 03:d2:13:b1:d7:16:59:31:08:39:39:a1:74:49:a0: 87:9b:17:03:2c:66:86:9f:34:e5:84:c3:e5:2d:0a: 2a:5e:83:f9:77:aa:4a:0e:3d:7b:fb:4f:e5:b6:91: 16:5b:16:23:b9:63:c4:6f:0e:f0:2b:2e:3b:a7:c1: 94:77:86:93:7b:f9:34:48:59:15:01:db:26:54:b1: ab:8f:bf:55:f2:5b:74:89:ea:fa:aa:0b:ce:dc:b9: 8a:50:1a:2a:c3:8f:98:2a:68:9e:cf:de:41:88:54: 23:0c:66:4c:7d:ea:cb:b8:79:10:7e:28:de:cb:cb: 6e:4e:7e:00:c5:1f:8c:1a:00:fb:4c:2c:7c:1e:e7: 72:a2:26:21:03:a8:bc:cf:df:4f:2b:8a:d3:2f:b4: a3:59:e8:eb:a5:fd:ae:51:1a:a6:46:f1:81:12:2a: 86:ff:29:e9:d5:d4:9f:16:a9:e1:91:04:25:53:65: 74:9f:ad:d5:74:e9:a6:f3:af:2d:63:1a:d6:b4:ff: 87:9a:79:58:8e:6d:a4:7f:48:2d:76:29:60:e5:98: 72:1b:5d:e5:26:5c:40:48:c1:04:84:9c:2b:74:b7: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:B9:04:FB:19:2F:B9:72:D2:E1:76:3D:39:21:89:02:BA:62:2C X509v3 Authority Key Identifier: keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/CB24F37C033711F0B76A8520C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.65.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ac:e7:4e:2b:00:81:15:ba:02:3d:7a:9c:12:e3:f2:35:bc: 9f:57:78:a2:0a:14:4a:91:a7:4c:52:d1:7d:40:5d:7a:d9:40: 27:fd:f3:0c:d4:ba:d9:30:f5:33:66:95:25:a6:4f:c5:48:3b: 18:fc:11:bf:7b:d9:9f:e0:e3:9e:9f:f0:63:c4:73:14:b0:c5: f4:cc:ce:b1:4a:31:6a:ea:f5:9d:38:54:06:92:a7:fd:79:20: 39:e2:67:bd:07:fa:6c:f2:fc:44:6f:0f:33:fd:b1:68:de:17: 6a:8b:ee:0a:7d:75:a9:d6:64:f9:76:35:57:83:2c:a7:f7:11: b0:b5:3e:26:08:b0:a5:5a:d4:ff:a9:ba:e5:c3:e8:2c:1d:d1: 1f:0f:4f:30:2c:8a:90:bb:52:8c:81:ef:bd:26:06:d8:53:1e: 8a:4f:92:b7:ed:53:4f:b1:a5:80:c3:cb:b9:d7:ba:0b:02:8f: 6d:26:00:09:29:d7:b1:7c:69:84:42:2a:45:98:19:d3:47:70: b2:64:24:11:f8:45:b8:97:93:1f:b3:8c:f8:5b:06:dd:5a:cf: 9f:0f:5e:1d:a4:45:7d:69:55:35:a5:16:8f:28:68:02:05:03: a9:0a:31:32:95:b5:c2:7d:a6:12:ac:aa:53:a1:e8:9f:95:0f: 5d:a9:e0:25 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKDVEOTQ2RDRGNDc5RDM3QkNFMTcwMENCMEJBREQ1MUEy QzNERjYyMEYwHhcNMjUwODI3MDY0MjIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTY0NS1lZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPIg6JD7Yx3pHffLIpVIwI6+6gQSRwX/BFzo+tsD0hOx1xZZMQg5OaF0SaCH mxcDLGaGnzTlhMPlLQoqXoP5d6pKDj17+0/ltpEWWxYjuWPEbw7wKy47p8GUd4aT e/k0SFkVAdsmVLGrj79V8lt0ier6qgvO3LmKUBoqw4+YKmiez95BiFQjDGZMferL uHkQfijey8tuTn4AxR+MGgD7TCx8HudyoiYhA6i8z99PK4rTL7SjWejrpf2uURqm RvGBEiqG/ynp1dSfFqnhkQQlU2V0n63VdOmm868tYxrWtP+HmnlYjm2kf0gtdilg 5ZhyG13lJlxASMEEhJwrdLdiFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGgduQT7 GS+5ctLhdj05IYkCumIsMB8GA1UdIwQYMBaAFF2UbU9HnTe84XAMsLrdUaLD32IP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yMjg2NTYyQThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43emhjQXl3dXQxUm9zUGZZ ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1haUnRUMGVkTjd6aGNBeXd1dDFSb3NQZllnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI3ODcvMjI4NjU2MkE4Rjc5MTFFRjkyQUM3ODFFQzRGOUFFMDIvQ0IyNEYzN0Mw MzM3MTFGMEI3NkE4NTIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnRRBMA0GCSqGSIb3DQEBCwUAA4IBAQB5rOdOKwCBFboCPXqcEuPy NbyfV3iiChRKkadMUtF9QF162UAn/fMM1LrZMPUzZpUlpk/FSDsY/BG/e9mf4OOe n/BjxHMUsMX0zM6xSjFq6vWdOFQGkqf9eSA54me9B/ps8vxEbw8z/bFo3hdqi+4K fXWp1mT5djVXgyyn9xGwtT4mCLClWtT/qbrlw+gsHdEfD08wLIqQu1KMge+9JgbY Ux6KT5K37VNPsaWAw8u517oLAo9tJgAJKdexfGmEQipFmBnTR3CyZCQR+EW4l5Mf s4z4WwbdWs+fD14dpEV9aVU1pRaPKGgCBQOpCjEylbXCfaYSrKpToeiflQ9dqeAl -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:48 2026 by rpki-client