$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/22A5298E53C811EFA7F6D30AC4F9AE02.roa File: 22A5298E53C811EFA7F6D30AC4F9AE02.roa (raw, json) Hash identifier: JaPnld76sDp2SCurkXI51WKGiNd4m6r7fKhLCA0W6n0= Subject key identifier: E3:D6:DF:45:15:A5:85:27:E8:48:DF:69:8E:34:7F:A7:24:BD:BB:91 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C1E Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/22A5298E53C811EFA7F6D30AC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:45:46 +0000 ROA not before: Thu 08 May 2025 15:54:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152530 IP address blocks: 157.66.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11294 (0x2c1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c19a-5f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dd:34:0d:90:80:07:32:95:b8:97:41:35:4e: 9a:e2:5d:64:14:b1:4d:02:3c:e9:cc:74:8b:0d:04: 22:f6:66:71:a5:17:cf:d2:27:34:e8:84:af:16:ad: eb:0c:00:84:ae:64:22:23:03:45:fe:4a:d4:07:15: 57:84:db:c7:69:a5:05:e1:7f:3d:b1:01:50:35:45: 74:8f:44:3e:99:5d:67:c3:dc:dc:76:96:05:86:fa: 94:68:e2:be:d7:eb:c1:85:14:a5:1a:aa:41:9f:1f: f6:a2:69:9a:b7:cc:1c:a1:b6:e8:4f:1c:79:28:b3: 9e:3d:f5:df:90:bc:25:f3:c4:9b:e6:f5:c1:b8:5e: cd:2a:64:43:3c:ca:2d:57:60:8e:36:b1:62:ca:4e: 83:47:9f:c1:85:e7:48:c4:e8:29:9e:c9:31:63:62: 8a:71:09:e1:cd:a5:f4:03:e8:bf:fb:4a:9e:0e:78: 7d:ea:24:12:61:8f:a2:ef:1b:34:6f:13:3e:f0:af: 56:9f:75:9d:cd:b7:d3:2f:2e:0a:1a:ab:0c:19:ad: 9f:6c:09:a5:86:e7:f0:27:f9:cf:fc:d1:da:9a:d6: ea:42:66:4d:10:22:e6:69:81:6a:e2:67:83:17:16: 21:b4:0d:73:6d:52:95:a3:87:a0:17:2c:23:bb:27: 1c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:DF:45:15:A5:85:27:E8:48:DF:69:8E:34:7F:A7:24:BD:BB:91 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/22A5298E53C811EFA7F6D30AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.102.0/23 Signature Algorithm: sha256WithRSAEncryption 17:7f:54:81:a1:f8:d4:48:02:f9:37:04:c6:c5:ea:02:cf:af: de:f3:32:3b:99:3e:99:70:19:2d:a2:15:d3:f3:bb:5d:c9:38: 41:72:a3:67:f9:9c:a8:38:17:a3:60:3f:48:18:46:2a:82:6d: bf:6d:50:08:21:de:f5:e4:69:c6:cf:c4:af:17:dc:c0:b6:b2: c4:55:e9:d8:33:5e:b2:23:d3:1f:9a:4a:a7:41:54:6f:9e:84: 85:84:db:48:45:0a:95:87:02:cf:f0:16:59:f6:5b:c0:4c:09: d3:6b:56:16:84:6c:17:0c:5c:c1:6b:84:63:1b:a2:20:d6:c0: fd:e0:b4:43:d3:be:36:c1:b7:73:d5:c7:be:41:21:63:30:bd: 9f:65:ad:45:5a:ce:99:32:3d:5b:9c:fa:ce:3a:6b:43:14:4e: 40:77:cf:66:49:93:13:10:81:04:0b:9c:35:1e:80:3f:ef:4f: 45:a4:8f:87:a2:3b:35:22:5f:de:fa:19:c3:87:99:20:51:de: 55:53:1b:ca:27:0b:c1:8a:51:5b:fc:62:9e:6f:ce:b0:5d:3d: e4:76:fc:1f:dd:8b:30:28:86:2a:b4:1f:25:8a:a0:e8:ac:0a: 49:d4:b9:17:77:f7:d2:1b:4f:20:cf:da:89:a7:b6:28:3f:ed: 31:4c:c9:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE5YS01ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApt00DZCABzKVuJdBNU6a4l1kFLFNAjzpzHSLDQQi9mZxpRfP0ic06ISvFq3r DACErmQiIwNF/krUBxVXhNvHaaUF4X89sQFQNUV0j0Q+mV1nw9zcdpYFhvqUaOK+ 1+vBhRSlGqpBnx/2ommat8wcobboTxx5KLOePfXfkLwl88Sb5vXBuF7NKmRDPMot V2CONrFiyk6DR5/BhedIxOgpnskxY2KKcQnhzaX0A+i/+0qeDnh96iQSYY+i7xs0 bxM+8K9Wn3WdzbfTLy4KGqsMGa2fbAmlhufwJ/nP/NHamtbqQmZNECLmaYFq4meD FxYhtA1zbVKVo4egFywjuyccawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOPW30UV pYUn6EjfaY40f6ckvbuRMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjJBNTI5OEU1 M0M4MTFFRkE3RjZEMzBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnUJmMA0GCSqGSIb3DQEBCwUAA4IBAQAXf1SBofjUSAL5NwTGxeoC z6/e8zI7mT6ZcBktohXT87tdyThBcqNn+ZyoOBejYD9IGEYqgm2/bVAIId715GnG z8SvF9zAtrLEVenYM16yI9MfmkqnQVRvnoSFhNtIRQqVhwLP8BZZ9lvATAnTa1YW hGwXDFzBa4RjG6Ig1sD94LRD0742wbdz1ce+QSFjML2fZa1FWs6ZMj1bnPrOOmtD FE5Ad89mSZMTEIEEC5w1HoA/709FpI+Hojs1Il/e+hnDh5kgUd5VUxvKJwvBilFb /GKeb86wXT3kdvwf3YswKIYqtB8liqDorApJ1LkXd/fSG08gz9qJp7YoP+0xTMlV -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:52 2026 by rpki-client