$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/84C953D2688011F1B19CA9CF6847A888.roa File: 84C953D2688011F1B19CA9CF6847A888.roa (raw, json) Hash identifier: voJSjqqTjn3/MPxyjI4+2Lxaf6Fn/26o8TVNpvFJyz8= Subject key identifier: DD:F3:22:70:CA:E4:0F:6E:6D:4D:E3:5B:D0:97:71:7B:35:F6:CE:7D Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 21E3 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/84C953D2688011F1B19CA9CF6847A888.roa Signing time: Fri 24 Jul 2026 02:17:27 +0000 ROA not before: Fri 24 Jul 2026 02:17:27 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 23620 IP address blocks: 157.112.80.0/20 maxlen: 20 157.112.80.0/24 maxlen: 24 157.112.81.0/24 maxlen: 24 157.112.82.0/24 maxlen: 24 157.112.83.0/24 maxlen: 24 157.112.84.0/24 maxlen: 24 157.112.85.0/24 maxlen: 24 157.112.86.0/24 maxlen: 24 157.112.87.0/24 maxlen: 24 157.112.88.0/24 maxlen: 24 157.112.89.0/24 maxlen: 24 157.112.90.0/24 maxlen: 24 157.112.91.0/24 maxlen: 24 157.112.92.0/24 maxlen: 24 157.112.93.0/24 maxlen: 24 157.112.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8675 (0x21e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Jul 24 02:17:27 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a62cb36-edb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:a6:8f:82:79:ac:27:11:0a:f6:00:9d:26: 20:67:a8:fd:f3:00:06:de:f5:4e:62:01:4b:0a:b7: d4:ec:9e:1e:c4:36:a8:79:57:7f:38:a1:42:78:19: 76:af:73:3e:8d:b4:3c:65:cd:34:da:77:99:10:65: d3:c9:cc:98:33:d7:00:ca:2c:6b:6e:28:73:6e:45: cf:a4:cb:f1:81:0e:03:2d:4e:13:ad:b4:a0:83:ed: 58:55:7a:46:5c:20:ac:01:16:d5:8c:9e:1e:35:2f: ae:96:55:4f:80:8f:34:af:33:af:13:41:e1:96:70: 97:81:8c:41:36:9a:f3:74:12:5f:ae:57:1f:c8:76: 1d:0f:ea:66:74:8f:3d:10:db:1f:0b:40:47:dd:35: 1c:03:b3:9a:24:d7:4d:97:49:c7:22:39:c5:6a:32: ab:69:fc:40:1d:c6:cc:9b:98:82:ed:59:b5:d3:b0: 04:5c:b6:9e:1c:1c:0b:64:8c:21:54:62:25:91:17: 59:6a:86:68:d6:cd:aa:3c:c2:64:f8:c4:2d:a8:cf: 11:e5:7a:11:97:00:be:2a:7e:91:84:39:aa:b9:1d: 58:12:62:7a:59:c8:bf:47:ef:cc:b3:a9:e6:70:45: 1a:9e:7a:1c:3a:27:54:f8:3d:26:7c:90:62:2a:6b: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:22:70:CA:E4:0F:6E:6D:4D:E3:5B:D0:97:71:7B:35:F6:CE:7D X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/84C953D2688011F1B19CA9CF6847A888.roa sbgp-ipAddrBlock: critical IPv4: 157.112.80.0/20 Signature Algorithm: sha256WithRSAEncryption 52:28:ee:73:f0:17:7d:5d:83:61:08:f7:5e:92:fc:ba:7f:3c: 59:aa:40:61:10:36:69:d1:af:e4:53:1a:55:6a:29:8f:b0:43: 7b:cc:9a:7e:dd:73:e6:e2:19:ed:af:02:12:6e:e4:66:5e:f2: f0:a7:2b:a3:8b:dc:06:01:f9:42:15:37:e3:47:48:c2:43:cf: 9a:1c:14:91:98:e8:75:11:6b:ee:e7:17:a7:04:59:84:9d:bd: 2d:91:a2:43:8a:37:37:6e:18:81:82:e0:be:28:f8:9d:4b:fd: ef:c2:f7:36:be:09:19:7f:dc:21:81:fd:07:7b:36:94:7d:f1: c3:b4:3c:dc:9a:d7:0a:ff:d4:df:42:1e:36:07:28:81:40:0a: 42:6f:24:03:76:6f:fd:42:be:bd:93:60:12:32:00:4b:ed:9c: 7c:d9:5c:45:fd:aa:d0:5c:38:4d:c5:21:1e:a6:36:1b:ab:5a: 8c:0a:6e:06:8b:a9:4d:ad:b4:3b:b0:20:7b:15:bb:86:c2:e6: 4d:98:58:e0:d5:f7:5f:8c:0e:26:ef:be:8d:89:9a:83:34:6e: 16:1c:e5:c0:ed:23:9a:e2:d9:c8:55:64:fd:ef:d6:b9:d3:d0: 28:38:2c:ef:88:b0:c6:38:39:05:c5:db:d3:f7:2e:cc:95:22: a3:a7:71:95 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjYwNzI0MDIxNzI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyY2IzNi1lZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7mmj4J5rCcRCvYAnSYgZ6j98wAG3vVOYgFLCrfU7J4exDaoeVd/OKFCeBl2 r3M+jbQ8Zc002neZEGXTycyYM9cAyixrbihzbkXPpMvxgQ4DLU4TrbSgg+1YVXpG XCCsARbVjJ4eNS+ullVPgI80rzOvE0HhlnCXgYxBNprzdBJfrlcfyHYdD+pmdI89 ENsfC0BH3TUcA7OaJNdNl0nHIjnFajKrafxAHcbMm5iC7Vm107AEXLaeHBwLZIwh VGIlkRdZaoZo1s2qPMJk+MQtqM8R5XoRlwC+Kn6RhDmquR1YEmJ6Wci/R+/Ms6nm cEUannocOidU+D0mfJBiKmtkVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN3zInDK 5A9ubU3jW9CXcXs19s59MB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI5MzYvNDA3NTEyMUFGMENEMTFFNUE0NDMyRTc0QzRGOUFFMDIvODRDOTUzRDI2 ODgwMTFGMUIxOUNBOUNGNjg0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEnXBQMA0GCSqGSIb3DQEBCwUAA4IBAQBSKO5z8Bd9XYNhCPdekvy6 fzxZqkBhEDZp0a/kUxpVaimPsEN7zJp+3XPm4hntrwISbuRmXvLwpyuji9wGAflC FTfjR0jCQ8+aHBSRmOh1EWvu5xenBFmEnb0tkaJDijc3bhiBguC+KPidS/3vwvc2 vgkZf9whgf0HezaUffHDtDzcmtcK/9TfQh42ByiBQApCbyQDdm/9Qr69k2ASMgBL 7Zx82VxF/arQXDhNxSEepjYbq1qMCm4Gi6lNrbQ7sCB7FbuGwuZNmFjg1fdfjA4m 776NiZqDNG4WHOXA7SOa4tnIVWT979a509AoOCzviLDGODkFxdvT9y7MlSKjp3GV -----END CERTIFICATE-----Generated at Wed Jul 29 10:24:06 2026 by rpki-client