$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa File: 7A2414A8C01C11EEAB088B48C4F9AE02.roa (raw, json) Hash identifier: rf42rwuY6/PUb1rwfD7PyAPbCzvKfjcJBuGw9xyYCxY= Subject key identifier: AE:1F:4C:2A:02:5C:11:B7:BC:EB:C7:FB:3E:0D:CA:23:66:E9:3F:35 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BBB Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:43:22 +0000 ROA not before: Thu 08 May 2025 15:52:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138252 IP address blocks: 157.10.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11195 (0x2bbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c10a-3d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:fd:8d:ed:58:ac:a3:5f:26:3e:5b:6b:d8: ee:ed:aa:d6:a4:33:af:1b:33:70:64:ea:e5:4c:8a: d4:23:ef:e7:60:d7:bc:b6:7a:73:66:b2:a1:08:7e: 7d:5a:3e:25:c9:e7:ca:62:3a:bc:16:39:ea:3b:b6: 5e:1d:d4:0f:f1:cb:47:28:9a:5f:93:69:2c:b2:3a: 59:26:34:6c:7a:4a:af:67:bb:3b:b7:af:ff:38:b6: 4e:7c:0e:c8:3e:4c:dd:19:5a:28:bb:31:e3:12:00: 5c:56:f0:13:33:20:82:ab:3b:f8:f6:b2:c1:21:aa: 9f:87:06:d0:8f:0f:59:6e:02:2f:c1:0f:d6:22:1e: 04:27:c7:ab:6e:0d:b3:59:33:29:80:7d:b7:0b:25: 48:07:64:51:9b:2d:aa:eb:ed:88:ed:29:36:c5:61: 2e:d8:e4:62:91:f6:25:87:47:65:b7:cd:bc:8a:a9: 86:9d:90:10:e7:ef:c6:74:9b:61:49:3f:e6:ad:9a: 5a:10:e3:f1:a5:f5:15:40:55:72:4d:03:56:50:2f: 7a:ce:ee:15:83:fc:25:b8:27:16:80:e2:30:c8:78: ac:b4:9a:27:24:84:34:14:87:34:3b:f0:f4:85:70: 6f:04:bd:0e:5a:23:10:34:ae:bc:37:67:94:0d:50: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:4C:2A:02:5C:11:B7:BC:EB:C7:FB:3E:0D:CA:23:66:E9:3F:35 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.56.0/23 Signature Algorithm: sha256WithRSAEncryption 83:28:c1:a9:4c:06:60:30:94:af:78:34:64:27:98:44:57:04: c9:db:35:c3:8a:03:01:e6:b4:7b:37:f2:57:32:5f:33:38:bf: 38:f3:98:42:b9:f5:0a:fa:1b:4e:8f:79:d4:5f:0c:42:33:9f: 40:90:cb:35:ad:a8:4d:e9:28:38:5c:6d:f6:23:6c:72:b4:aa: be:62:d5:f7:57:9e:ad:48:71:01:4c:0e:a9:88:85:ba:c9:09: ac:74:9f:d3:94:c2:48:ce:94:fc:e4:a9:4e:4e:ad:ad:c4:31: 50:27:77:e4:13:1b:c8:fc:4f:46:1a:80:96:f0:00:74:ee:76: a9:b3:8d:5b:53:b9:1a:c1:4d:51:6a:c6:6d:3e:67:74:ce:8d: 8c:87:04:08:21:ef:30:43:35:11:7f:1e:99:67:bb:c1:52:99: 83:00:59:b4:49:e7:51:90:4d:50:9a:7f:bc:07:a1:11:08:03: 71:4c:43:a8:13:50:af:9a:dc:b9:d0:95:d0:0f:6b:23:77:e8: e5:d1:af:86:ea:8c:b6:13:5c:56:82:f1:89:fa:81:9c:15:1e: 9d:ea:57:51:f4:a7:42:d8:d5:57:86:89:0d:83:e1:60:38:e3: 61:a1:9b:a5:32:04:71:6f:43:da:8b:74:d1:b5:b6:02:6f:f1: 99:e7:67:a4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzEwYS0zZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFr9je1YrKNfJj5ba9ju7arWpDOvGzNwZOrlTIrUI+/nYNe8tnpzZrKhCH59 Wj4lyefKYjq8FjnqO7ZeHdQP8ctHKJpfk2kssjpZJjRsekqvZ7s7t6//OLZOfA7I PkzdGVoouzHjEgBcVvATMyCCqzv49rLBIaqfhwbQjw9ZbgIvwQ/WIh4EJ8erbg2z WTMpgH23CyVIB2RRmy2q6+2I7Sk2xWEu2ORikfYlh0dlt828iqmGnZAQ5+/GdJth ST/mrZpaEOPxpfUVQFVyTQNWUC96zu4Vg/wluCcWgOIwyHistJonJIQ0FIc0O/D0 hXBvBL0OWiMQNK68N2eUDVBAmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK4fTCoC XBG3vOvH+z4NyiNm6T81MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0EyNDE0QThD MDFDMTFFRUFCMDg4QjQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQo4MA0GCSqGSIb3DQEBCwUAA4IBAQCDKMGpTAZgMJSveDRkJ5hE VwTJ2zXDigMB5rR7N/JXMl8zOL8485hCufUK+htOj3nUXwxCM59AkMs1rahN6Sg4 XG32I2xytKq+YtX3V56tSHEBTA6piIW6yQmsdJ/TlMJIzpT85KlOTq2txDFQJ3fk ExvI/E9GGoCW8AB07naps41bU7kawU1RasZtPmd0zo2MhwQIIe8wQzURfx6ZZ7vB UpmDAFm0SedRkE1Qmn+8B6ERCANxTEOoE1Cvmty50JXQD2sjd+jl0a+G6oy2E1xW gvGJ+oGcFR6d6ldR9KdC2NVXhokNg+FgOONhoZulMgRxb0Pai3TRtbYCb/GZ52ek -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:16 2026 by rpki-client