$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa File: 2B4804B845B211EF9B812019C4F9AE02.roa (raw, json) Hash identifier: PHCMK3dhaeAZ+9EYgZ17CzNOe8icAJdFBqm+KQxnS0I= Subject key identifier: 92:82:DB:AB:87:DB:EF:73:44:D5:40:2B:B2:92:C0:7D:A5:4A:85:A5 Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: 0136 Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:07:53 +0000 ROA not before: Tue 13 Jan 2026 04:23:29 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Jan 13 04:23:29 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41e09-706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:47:35:83:77:43:30:7b:78:1d:1c:98:d4: c6:9a:b8:39:b0:18:09:07:42:d0:d5:67:ab:b9:db: 0f:63:6f:07:c9:07:91:a4:48:52:6d:8e:12:04:03: 95:ae:d8:34:0d:72:a6:39:62:0d:fc:28:50:ac:1f: 0d:0a:11:65:ca:7e:e9:f4:6d:c1:eb:c1:2f:ac:ba: a6:ed:da:b9:62:8e:1d:93:ad:2c:09:da:ca:17:55: c1:5f:ea:8f:63:ac:dc:93:07:9e:7d:a4:f0:aa:cc: f5:c3:34:5a:63:bd:87:03:aa:d9:b9:7c:40:de:70: ce:21:2e:76:60:f7:59:e6:b8:47:65:2c:ef:09:3c: 9f:0a:a7:8f:af:b9:2d:ec:08:72:5d:84:7b:1e:06: 3e:c3:e5:84:ad:89:83:41:3f:1c:75:99:6b:00:a1: 05:cd:d5:78:d5:2c:4a:53:8d:dd:80:61:72:06:2d: ed:e6:9b:48:b1:d5:ed:8a:a9:54:78:48:69:f3:30: 41:41:7d:12:5d:fd:2a:a1:4d:cf:04:5f:e7:f5:7c: 79:13:ef:67:8d:4d:d9:83:61:40:8b:ae:bd:f7:17: 7e:74:11:cd:d3:27:d7:b0:cd:8a:d8:a2:13:53:01: fe:3c:6a:69:11:dd:d7:c7:3d:16:51:ff:4f:00:6a: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:82:DB:AB:87:DB:EF:73:44:D5:40:2B:B2:92:C0:7D:A5:4A:85:A5 X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/2B4804B845B211EF9B812019C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.122.0/23 Signature Algorithm: sha256WithRSAEncryption be:2f:75:3a:5e:b0:21:fb:a3:e1:0d:ea:83:b5:5f:1f:40:a1: 1f:16:40:2c:ab:12:26:09:ea:57:09:cc:e0:70:b6:22:61:87: 97:27:26:af:59:9e:44:6f:ec:30:b4:7d:62:c7:a8:d4:19:7e: 75:67:43:76:3d:50:76:51:c0:29:4c:57:8a:29:05:65:f6:d7: aa:43:c0:66:38:36:25:d0:e4:ae:24:29:55:e2:b2:15:9b:7d: 9d:93:91:76:f5:da:00:09:be:55:1e:92:2d:35:e1:0a:8e:a6: 97:8c:e8:f2:87:28:99:4f:fa:90:f0:8a:ba:6a:9d:7d:1c:87: 35:dc:69:3c:23:69:24:a4:9a:68:de:00:69:13:bd:c6:38:93: 45:64:61:db:78:5b:d9:5c:1a:67:6f:ba:f4:ba:f0:bd:5a:f7: bf:a2:ac:26:83:75:77:b6:26:43:48:68:04:eb:a1:82:54:f5: 42:ac:2b:b1:a9:0a:c7:42:b3:1b:c1:40:b0:f6:78:6d:27:29: 8b:3f:14:10:56:17:fb:02:9f:71:e9:64:08:90:60:03:99:08: 68:85:fc:fb:59:9b:a9:66:21:5f:8c:2c:2b:bc:1c:d0:77:4d: ff:39:15:f1:28:81:ab:45:24:b5:87:f8:0c:68:29:9f:b8:35: 79:95:74:3c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjYwMTEzMDQyMzI5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWUwOS03MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCNHNYN3QzB7eB0cmNTGmrg5sBgJB0LQ1WerudsPY28HyQeRpEhSbY4SBAOV rtg0DXKmOWIN/ChQrB8NChFlyn7p9G3B68EvrLqm7dq5Yo4dk60sCdrKF1XBX+qP Y6zckweefaTwqsz1wzRaY72HA6rZuXxA3nDOIS52YPdZ5rhHZSzvCTyfCqePr7kt 7AhyXYR7HgY+w+WErYmDQT8cdZlrAKEFzdV41SxKU43dgGFyBi3t5ptIsdXtiqlU eEhp8zBBQX0SXf0qoU3PBF/n9Xx5E+9njU3Zg2FAi6699xd+dBHN0yfXsM2K2KIT UwH+PGppEd3Xxz0WUf9PAGrnYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJKC26uH 2+9zRNVAK7KSwH2lSoWlMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEMkIvRkMxMUJGRDI0NUIwMTFFRkJENTk4Qjc3QzRGOUFFMDIvMkI0ODA0Qjg0 NUIyMTFFRjlCODEyMDE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQp6MA0GCSqGSIb3DQEBCwUAA4IBAQC+L3U6XrAh+6PhDeqDtV8f QKEfFkAsqxImCepXCczgcLYiYYeXJyavWZ5Eb+wwtH1ix6jUGX51Z0N2PVB2UcAp TFeKKQVl9teqQ8BmODYl0OSuJClV4rIVm32dk5F29doACb5VHpItNeEKjqaXjOjy hyiZT/qQ8Iq6ap19HIc13Gk8I2kkpJpo3gBpE73GOJNFZGHbeFvZXBpnb7r0uvC9 Wve/oqwmg3V3tiZDSGgE66GCVPVCrCuxqQrHQrMbwUCw9nhtJymLPxQQVhf7Ap9x 6WQIkGADmQhohfz7WZupZiFfjCwrvBzQd03/ORXxKIGrRSS1h/gMaCmfuDV5lXQ8 -----END CERTIFICATE-----Generated at Mon Mar 2 09:22:01 2026 by rpki-client