$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0690DC98DC5411EEBAF12F6BC4F9AE02.roa File: 0690DC98DC5411EEBAF12F6BC4F9AE02.roa (raw, json) Hash identifier: tyBQ1mpbL7Hje5/VGAbIYK+LRI+E8V/lKNrb5XX3WEE= Subject key identifier: 5F:FC:34:0D:7D:DF:20:E8:30:75:0D:8B:C4:27:A3:4F:8A:B5:23:D0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BD0 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0690DC98DC5411EEBAF12F6BC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:43:51 +0000 ROA not before: Thu 08 May 2025 15:53:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141416 IP address blocks: 157.20.174.0/24 maxlen: 24 157.20.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11216 (0x2bd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c126-e454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:e0:a1:1a:c8:d9:b2:22:ff:9b:ad:48:ff: 78:0d:07:63:50:81:f1:00:7d:65:8e:47:a2:28:9f: 27:12:53:c7:0e:47:aa:7c:40:f9:0d:ec:4a:da:ac: e2:2f:20:00:cb:59:15:6e:48:b6:f7:fb:55:6a:73: c4:c4:fd:71:36:12:06:54:e6:94:95:a7:80:8d:46: 74:ea:8e:af:15:f6:2c:87:16:ec:3e:12:f1:f8:ce: 9c:07:35:56:6b:8b:48:36:fc:cf:19:e1:7f:51:5c: 10:1a:47:77:e2:b6:54:cb:3a:3c:6a:27:fc:36:d5: 8b:48:8e:07:64:f1:74:11:0c:c9:69:71:fb:c6:3f: 34:c8:d4:e5:6e:91:6b:73:3d:fe:ae:7b:11:2a:f7: 73:4d:77:28:57:c3:fe:31:ff:bc:1a:0a:ea:cd:fc: 48:b7:17:0a:57:c3:f4:4f:76:03:1b:df:e1:88:45: ee:6d:83:2e:04:78:31:10:b5:d8:4d:a6:4b:b9:c7: 58:22:4f:4b:7e:e6:ae:18:bb:80:4a:d1:30:7c:8c: a5:e6:14:8c:ce:05:af:51:97:33:52:0f:ff:97:88: 82:d7:ac:29:5e:c4:5e:2b:4e:d9:ef:57:b3:98:af: e1:3a:a5:90:07:74:17:43:e5:f0:83:cb:29:f8:01: fc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:34:0D:7D:DF:20:E8:30:75:0D:8B:C4:27:A3:4F:8A:B5:23:D0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0690DC98DC5411EEBAF12F6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.174.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:c8:eb:c4:54:df:bb:3e:72:d4:b8:cc:ea:65:3b:ee:f1:c1: 12:66:4d:ad:f9:18:f6:c2:ae:6e:ed:c3:9f:47:b1:4a:07:bd: 85:a6:dc:21:76:a3:2f:8e:e5:96:24:5e:8b:64:36:57:3c:e1: a8:86:bf:50:dc:b3:e1:50:92:5f:03:7f:cd:13:a1:b9:15:3e: cb:cd:92:f3:54:4e:0b:63:d1:0b:ea:91:e9:21:4f:f0:e0:07: 73:5c:88:83:c8:6d:23:fb:0b:5f:70:7a:25:f3:3f:1f:35:4b: b6:1e:6d:37:32:5c:68:eb:5c:d3:de:c3:4c:8d:94:2e:dd:8b: e6:57:71:dd:06:da:ed:6e:0f:5f:21:41:5b:df:c6:91:5b:14: a3:ef:08:46:08:af:05:f9:32:74:be:15:8d:5d:34:08:f8:0e: 51:15:10:ea:d7:79:e2:e8:67:c3:de:7b:11:d4:1f:e5:5d:88: f2:e4:0e:49:99:5b:be:4c:c4:c5:42:e8:1a:a0:60:de:5b:83: 76:bf:f7:36:31:c1:60:6c:a2:40:a3:c2:87:b9:b6:0e:de:0a: 3d:15:87:d6:b7:07:f2:60:c6:b4:12:bb:3a:46:f3:d4:3e:1f: df:b2:fa:64:bf:27:f5:6c:a2:c5:cb:d4:f7:8d:db:41:a3:47: e8:ce:46:0c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzEyNi1lNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB/goRrI2bIi/5utSP94DQdjUIHxAH1ljkeiKJ8nElPHDkeqfED5DexK2qzi LyAAy1kVbki29/tVanPExP1xNhIGVOaUlaeAjUZ06o6vFfYshxbsPhLx+M6cBzVW a4tINvzPGeF/UVwQGkd34rZUyzo8aif8NtWLSI4HZPF0EQzJaXH7xj80yNTlbpFr cz3+rnsRKvdzTXcoV8P+Mf+8GgrqzfxItxcKV8P0T3YDG9/hiEXubYMuBHgxELXY TaZLucdYIk9LfuauGLuAStEwfIyl5hSMzgWvUZczUg//l4iC16wpXsReK07Z71ez mK/hOqWQB3QXQ+Xwg8sp+AH8HwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF/8NA19 3yDoMHUNi8Qno0+KtSPQMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDY5MERDOThE QzU0MTFFRUJBRjEyRjZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRSuMA0GCSqGSIb3DQEBCwUAA4IBAQBeyOvEVN+7PnLUuMzqZTvu 8cESZk2t+Rj2wq5u7cOfR7FKB72FptwhdqMvjuWWJF6LZDZXPOGohr9Q3LPhUJJf A3/NE6G5FT7LzZLzVE4LY9EL6pHpIU/w4AdzXIiDyG0j+wtfcHol8z8fNUu2Hm03 Mlxo61zT3sNMjZQu3YvmV3HdBtrtbg9fIUFb38aRWxSj7whGCK8F+TJ0vhWNXTQI +A5RFRDq13ni6GfD3nsR1B/lXYjy5A5JmVu+TMTFQugaoGDeW4N2v/c2McFgbKJA o8KHubYO3go9FYfWtwfyYMa0Ers6RvPUPh/fsvpkvyf1bKLFy9T3jdtBo0fozkYM -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:54 2026 by rpki-client