$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa File: 2F70B33CABAC11EEBA0E8D79C4F9AE02.roa (raw, json) Hash identifier: Spsd0xjkn4zqm+v9ZQSqTdhBfA0QrmjXeenHRoROkKw= Subject key identifier: FF:76:A3:3A:FB:10:85:4F:3F:7B:78:33:E5:A9:A8:06:9D:98:43:6E Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BE9 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:44:27 +0000 ROA not before: Thu 08 May 2025 15:53:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151701 IP address blocks: 157.10.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11241 (0x2be9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c14b-ed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:c1:23:fb:0c:7b:88:ec:da:d0:6a:63:fc: 9f:47:26:89:69:00:53:55:22:b8:dc:6d:9e:85:c4: 88:b2:b3:48:a0:e4:d9:da:ed:c6:8b:cd:11:ac:58: 5f:1e:e5:bf:76:0a:fa:b0:a3:6f:e6:1f:28:a6:7a: d6:bf:29:f5:04:ba:c5:09:5c:79:d8:72:2b:45:ba: 66:1b:8d:61:e6:b5:07:08:7f:76:49:05:8e:36:6a: f8:1a:50:b2:6a:8d:ac:0a:31:5c:74:8b:82:d6:8c: af:f0:82:f7:bf:b6:a2:c4:b7:31:92:ee:e0:cc:55: e5:12:ed:7c:7d:2c:1b:d6:cc:14:55:f3:c9:05:79: d3:e8:a3:ee:61:9e:cd:da:62:f6:74:6b:d6:07:33: 8c:94:c7:9a:80:dd:56:5e:ff:48:ec:56:65:24:4b: ae:24:e7:92:b5:5d:b2:2c:70:22:15:aa:f4:b2:79: 9e:de:84:3c:f2:33:84:96:5b:b1:f3:55:31:9c:7f: b5:5a:67:7d:87:e3:d4:8e:c7:e6:2d:be:fd:12:57: 86:aa:b3:b7:55:00:cb:46:cc:6b:ac:f7:33:e9:1c: ae:22:07:de:93:18:82:a0:29:27:f9:8a:36:02:70: 37:90:f7:53:d7:14:5e:33:e3:2d:4d:9c:ab:d0:bd: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:76:A3:3A:FB:10:85:4F:3F:7B:78:33:E5:A9:A8:06:9D:98:43:6E X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2F70B33CABAC11EEBA0E8D79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.22.0/23 Signature Algorithm: sha256WithRSAEncryption 34:fb:79:c1:22:3c:e6:16:17:1e:81:92:0f:50:30:cc:46:2d: cf:04:1f:ea:80:de:84:b7:fb:df:e3:b8:a7:3a:df:c6:6d:fc: 27:e1:cc:17:c6:ae:31:cd:02:27:fa:c4:36:bd:64:e3:f4:dd: 4f:21:01:cc:eb:e2:d3:a4:d0:fc:79:19:70:4d:02:95:0b:f1: 22:11:0b:51:ea:06:56:dd:f9:7f:5e:f9:f6:ad:73:18:3c:1e: c0:b3:c5:54:2a:1f:c9:48:75:db:20:28:fe:66:c3:a6:31:5f: bc:8a:0d:71:5f:2c:ed:ec:4d:7c:47:53:d6:09:1c:4f:5e:7c: 2b:0f:80:6c:83:ed:8a:2c:86:8e:32:82:83:2e:79:ca:1d:31: 1c:46:e4:80:0c:2e:0f:bc:c3:53:0a:d4:54:2d:16:e1:89:1c: e4:3e:ab:d3:48:e1:d2:3a:a0:fe:f4:51:39:e0:7a:06:62:a2: 83:8b:6c:e5:d9:74:4e:95:82:78:e0:bd:a8:0a:07:ea:56:c0: 26:e5:be:9e:fd:8e:cf:eb:4c:81:78:ff:3f:b8:7b:d5:da:de: f2:f0:cb:f4:36:9c:df:6f:5a:93:5e:2e:3d:e7:6c:35:a6:65: 87:55:68:e7:e8:d0:c1:9f:0a:08:bf:99:ad:0f:69:f2:66:16: cb:cd:82:31 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE0Yi1lZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5lrBI/sMe4js2tBqY/yfRyaJaQBTVSK43G2ehcSIsrNIoOTZ2u3Gi80RrFhf HuW/dgr6sKNv5h8opnrWvyn1BLrFCVx52HIrRbpmG41h5rUHCH92SQWONmr4GlCy ao2sCjFcdIuC1oyv8IL3v7aixLcxku7gzFXlEu18fSwb1swUVfPJBXnT6KPuYZ7N 2mL2dGvWBzOMlMeagN1WXv9I7FZlJEuuJOeStV2yLHAiFar0snme3oQ88jOEllux 81UxnH+1Wmd9h+PUjsfmLb79EleGqrO3VQDLRsxrrPcz6RyuIgfekxiCoCkn+Yo2 AnA3kPdT1xReM+MtTZyr0L1SWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP92ozr7 EIVPP3t4M+WpqAadmENuMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkY3MEIzM0NB QkFDMTFFRUJBMEU4RDc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQoWMA0GCSqGSIb3DQEBCwUAA4IBAQA0+3nBIjzmFhcegZIPUDDM Ri3PBB/qgN6Et/vf47inOt/Gbfwn4cwXxq4xzQIn+sQ2vWTj9N1PIQHM6+LTpND8 eRlwTQKVC/EiEQtR6gZW3fl/Xvn2rXMYPB7As8VUKh/JSHXbICj+ZsOmMV+8ig1x Xyzt7E18R1PWCRxPXnwrD4Bsg+2KLIaOMoKDLnnKHTEcRuSADC4PvMNTCtRULRbh iRzkPqvTSOHSOqD+9FE54HoGYqKDi2zl2XROlYJ44L2oCgfqVsAm5b6e/Y7P60yB eP8/uHvV2t7y8Mv0Npzfb1qTXi4952w1pmWHVWjn6NDBnwoIv5mtD2nyZhbLzYIx -----END CERTIFICATE-----Generated at Mon Mar 2 23:23:54 2026 by rpki-client