$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa File: 5535DEF8DE2311EFA15D0950C4F9AE02.roa (raw, json) Hash identifier: AyZ7E7XlDuN3XaeXh2DYqEGSof5FxQegQ2ExlcJ4gWg= Subject key identifier: 9F:E9:19:7C:23:21:18:DE:FA:92:1C:36:C1:D5:ED:D9:A7:90:82:5A Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2B9E Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:42:40 +0000 ROA not before: Thu 08 May 2025 15:52:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134320 IP address blocks: 157.20.196.0/24 maxlen: 24 157.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11166 (0x2b9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c0e0-9ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:bd:9d:b1:5d:aa:f3:c7:57:ab:eb:be:34: ae:5b:d9:42:86:67:72:92:36:ce:99:c6:45:98:37: 02:ad:ef:a9:49:6f:c8:bc:fd:e6:25:0d:04:1b:5c: ae:da:d1:5b:3c:9f:59:dd:40:52:a4:96:4d:5a:3d: b8:a2:e3:29:22:46:f3:41:60:ac:f0:96:ec:89:df: eb:71:1f:be:0d:73:d9:0a:44:9f:a0:e2:f0:c3:77: f7:77:23:18:e4:5d:68:b6:5f:56:84:5b:60:6b:07: 4a:b9:17:98:fd:76:64:fb:b3:fe:4d:75:5b:5b:e2: 67:02:53:bb:64:79:93:0e:6f:ae:9e:19:39:6e:88: 34:79:66:b2:3e:6f:9d:f7:db:2f:22:7b:79:b6:e2: cc:40:75:08:76:20:2c:e0:45:8c:12:2f:6d:dd:83: b3:0a:ec:69:43:58:e9:83:a3:89:bc:7f:60:26:56: cc:e1:23:7a:30:24:70:ee:2c:32:ea:4f:48:79:54: 1f:2e:49:ef:b4:36:28:d1:2b:70:87:fb:9d:3f:a6: a2:bd:bd:87:ff:95:ea:fd:2f:c9:a6:bd:ea:df:11: af:3b:68:3f:90:56:ba:54:61:06:95:aa:fc:a1:bf: 91:83:17:fb:a6:44:99:cf:d5:a6:fa:f0:e2:a8:af: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:19:7C:23:21:18:DE:FA:92:1C:36:C1:D5:ED:D9:A7:90:82:5A X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.196.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:5f:89:4a:e3:0b:31:ad:83:fd:f9:bd:4f:28:57:db:12:52: d5:2c:cc:ae:1b:9a:b0:e4:09:cb:58:ac:cc:fa:ee:52:26:d6: 0c:85:56:d8:8d:84:8f:4f:4f:74:87:8b:b8:0f:d4:dc:38:8e: 05:da:40:de:48:93:d5:25:11:c4:05:10:6f:e9:cd:8c:4b:9f: 35:62:8e:40:5d:b8:c1:f7:b7:94:32:f0:2b:27:b1:f7:b6:21: 0e:20:aa:90:0b:74:82:f0:a9:8b:2f:14:63:15:c9:f7:8f:7f: fc:bf:56:dd:56:3f:83:d7:b7:e3:bb:f6:9a:94:7c:45:25:d1: 8d:27:35:48:8d:58:e6:77:28:ba:01:f9:dc:49:33:32:64:90: 06:e5:d9:09:a7:4a:36:c0:73:3d:12:e4:07:52:55:0e:50:08: cc:1c:eb:69:cd:60:c7:f9:ac:1a:a0:6c:ee:62:d2:86:88:ac: 09:7f:91:1f:c0:56:b0:d6:9b:c5:c3:0a:3b:a3:a8:dd:a9:e9: 83:46:60:27:81:dc:72:e8:a7:c8:c7:23:14:ac:c6:f4:d4:d3: 94:5f:55:c4:30:ec:6d:80:77:f8:bb:a4:11:8d:3b:a8:82:b9: 10:58:7b:fa:25:13:87:a8:c4:bd:37:a7:4d:b5:c7:5d:ae:e3: 6f:73:f3:bb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzBlMC05YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0C9nbFdqvPHV6vrvjSuW9lChmdykjbOmcZFmDcCre+pSW/IvP3mJQ0EG1yu 2tFbPJ9Z3UBSpJZNWj24ouMpIkbzQWCs8Jbsid/rcR++DXPZCkSfoOLww3f3dyMY 5F1otl9WhFtgawdKuReY/XZk+7P+TXVbW+JnAlO7ZHmTDm+unhk5bog0eWayPm+d 99svInt5tuLMQHUIdiAs4EWMEi9t3YOzCuxpQ1jpg6OJvH9gJlbM4SN6MCRw7iwy 6k9IeVQfLknvtDYo0Stwh/udP6aivb2H/5Xq/S/Jpr3q3xGvO2g/kFa6VGEGlar8 ob+Rgxf7pkSZz9Wm+vDiqK/yIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ/pGXwj IRje+pIcNsHV7dmnkIJaMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTUzNURFRjhE RTIzMTFFRkExNUQwOTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRTEMA0GCSqGSIb3DQEBCwUAA4IBAQBLX4lK4wsxrYP9+b1PKFfb ElLVLMyuG5qw5AnLWKzM+u5SJtYMhVbYjYSPT090h4u4D9TcOI4F2kDeSJPVJRHE BRBv6c2MS581Yo5AXbjB97eUMvArJ7H3tiEOIKqQC3SC8KmLLxRjFcn3j3/8v1bd Vj+D17fju/aalHxFJdGNJzVIjVjmdyi6AfncSTMyZJAG5dkJp0o2wHM9EuQHUlUO UAjMHOtpzWDH+awaoGzuYtKGiKwJf5EfwFaw1pvFwwo7o6jdqemDRmAngdxy6KfI xyMUrMb01NOUX1XEMOxtgHf4u6QRjTuogrkQWHv6JROHqMS9N6dNtcddruNvc/O7 -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:42 2026 by rpki-client