$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2520E06EDC4911EEA18D6172C4F9AE02.roa File: 2520E06EDC4911EEA18D6172C4F9AE02.roa (raw, json) Hash identifier: p7FRRj6UDdNfuXJCrcPSj3+DpEIBmIX7Nh6tVGDHzZ0= Subject key identifier: 02:53:69:6E:0E:D7:1F:81:5D:56:77:FC:D1:69:35:C7:CB:66:9F:A0 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BFE Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2520E06EDC4911EEA18D6172C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:44:55 +0000 ROA not before: Thu 08 May 2025 15:53:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152484 IP address blocks: 157.20.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11262 (0x2bfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c167-a630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:be:3b:91:bb:e1:7b:76:2c:9f:f5:0d:3d:a4: 4f:8c:ad:9b:86:be:f0:95:60:d5:62:35:90:b7:79: 48:74:92:6a:f4:f7:0c:92:aa:c8:a9:23:e4:00:63: 66:18:84:69:9c:77:eb:df:89:85:ed:38:bd:8f:8b: 21:a4:0a:e5:dc:8d:d7:3a:68:23:84:c0:aa:f3:7c: 99:fe:56:47:f6:7e:f5:7f:c4:08:88:3b:ac:cd:75: f6:0e:6a:c0:1f:f8:79:6c:34:d0:6c:28:0a:5a:23: fa:0c:65:c2:3f:bc:4c:e6:4c:0a:19:c3:29:7c:27: 01:9b:cc:07:17:8f:3b:c5:99:d9:1f:e9:fd:aa:0b: 03:86:71:bf:39:00:e0:7e:ca:85:d1:d0:6a:57:65: e0:49:4b:29:bb:d8:ba:69:9f:de:3a:5d:4c:5a:50: 13:d6:95:32:2f:35:21:1a:5f:f3:cf:a5:47:d8:aa: bf:a5:f4:5c:12:60:d3:c3:60:06:c3:0c:44:5e:42: 13:07:d8:bf:e1:0f:d3:00:91:5b:2a:2b:dd:81:3f: d7:aa:e3:94:33:6b:cb:ca:b3:c3:c3:cf:87:e5:b5: 39:6c:f8:33:1a:df:5c:b7:44:7d:f8:1e:cf:fc:dd: 3f:07:b3:38:23:97:65:92:3a:07:c8:59:3a:d9:f2: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:53:69:6E:0E:D7:1F:81:5D:56:77:FC:D1:69:35:C7:CB:66:9F:A0 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2520E06EDC4911EEA18D6172C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.180.0/23 Signature Algorithm: sha256WithRSAEncryption 11:3f:a8:44:c9:a3:0e:3d:6a:0d:f5:da:48:45:ba:76:b6:8c: bb:9c:07:95:00:ab:96:5d:63:b5:75:35:87:5d:b0:81:eb:ef: a3:b7:fc:ec:56:59:0c:4b:08:0e:5d:52:54:c5:aa:72:dc:dd: b1:de:ad:9d:53:91:36:6c:2c:c2:77:b1:56:1e:da:48:f9:77: 98:07:80:47:3e:03:1e:38:4e:89:f0:2e:3f:c4:f0:92:73:92: 40:6b:0d:d6:70:5f:26:c7:ea:c6:1a:bb:a5:64:e7:53:90:58: 67:c4:cc:6e:9d:f4:62:93:52:55:c2:4f:c9:29:5e:3a:ca:b5: 48:75:c8:cc:1c:e5:0d:1b:a8:87:fb:df:65:99:cd:5b:00:74: de:9c:3f:cf:f8:22:16:14:76:42:71:93:97:f8:ac:05:01:2f: 7f:9f:07:1d:d1:e4:f3:55:87:44:fc:5f:cf:8c:21:c0:3a:b6: 70:67:2f:70:29:f3:61:6b:42:16:47:1e:4b:3f:0f:9a:92:7f: d3:c9:7b:94:97:5e:fc:62:2c:a8:e5:9e:76:4b:a2:ed:9b:26: 4e:80:d9:38:61:88:1f:ec:b5:7c:48:45:ad:8d:3c:ae:3c:c7: b3:fc:42:aa:ce:1a:c7:e1:35:30:af:b7:f8:fa:b7:da:85:17: 71:cc:0d:83 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE2Ny1hNjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr747kbvhe3Ysn/UNPaRPjK2bhr7wlWDVYjWQt3lIdJJq9PcMkqrIqSPkAGNm GIRpnHfr34mF7Ti9j4shpArl3I3XOmgjhMCq83yZ/lZH9n71f8QIiDuszXX2DmrA H/h5bDTQbCgKWiP6DGXCP7xM5kwKGcMpfCcBm8wHF487xZnZH+n9qgsDhnG/OQDg fsqF0dBqV2XgSUspu9i6aZ/eOl1MWlAT1pUyLzUhGl/zz6VH2Kq/pfRcEmDTw2AG wwxEXkITB9i/4Q/TAJFbKivdgT/XquOUM2vLyrPDw8+H5bU5bPgzGt9ct0R9+B7P /N0/B7M4I5dlkjoHyFk62fJW7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAJTaW4O 1x+BXVZ3/NFpNcfLZp+gMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjUyMEUwNkVE QzQ5MTFFRUExOEQ2MTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRS0MA0GCSqGSIb3DQEBCwUAA4IBAQARP6hEyaMOPWoN9dpIRbp2 toy7nAeVAKuWXWO1dTWHXbCB6++jt/zsVlkMSwgOXVJUxapy3N2x3q2dU5E2bCzC d7FWHtpI+XeYB4BHPgMeOE6J8C4/xPCSc5JAaw3WcF8mx+rGGrulZOdTkFhnxMxu nfRik1JVwk/JKV46yrVIdcjMHOUNG6iH+99lmc1bAHTenD/P+CIWFHZCcZOX+KwF AS9/nwcd0eTzVYdE/F/PjCHAOrZwZy9wKfNha0IWRx5LPw+akn/TyXuUl178Yiyo 5Z52S6LtmyZOgNk4YYgf7LV8SEWtjTyuPMez/EKqzhrH4TUwr7f4+rfahRdxzA2D -----END CERTIFICATE-----Generated at Mon Mar 2 17:07:58 2026 by rpki-client