$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa File: 8F1CEB52CFB011EEB0D03629C4F9AE02.roa (raw, json) Hash identifier: 45lEwf1eR3yEH6kZu3Svpf6sU4VXwS+OLlGwWt1viMk= Subject key identifier: 9A:4E:3B:DA:E1:05:75:53:6B:46:37:6C:DD:5A:C3:62:16:EE:67:F6 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BDA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:44:05 +0000 ROA not before: Thu 08 May 2025 15:53:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149537 IP address blocks: 157.20.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11226 (0x2bda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c135-5aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:62:05:41:be:44:ff:be:1f:2d:79:a1:7c: b4:3b:bc:4d:24:d0:f0:a9:20:02:14:3f:4d:7c:a0: 5a:fd:80:ca:57:25:a1:f3:4b:fa:e5:72:c8:71:00: 6e:d8:e5:49:6c:d1:f8:9c:18:b6:a9:96:2a:49:f4: 90:26:e0:6b:7a:ae:97:19:e6:70:13:11:77:8a:ae: 19:38:bd:0f:c3:9c:70:42:36:61:41:76:46:d5:00: 6c:85:e7:2b:c1:d9:71:fd:8f:72:d7:dc:d5:35:16: 09:a0:6b:6e:90:2b:31:9d:e4:cd:d1:59:47:fa:4c: f4:bb:3d:96:da:2e:df:da:4c:9d:4f:59:31:a8:6a: 08:b5:90:5a:4b:5d:be:19:91:78:81:b7:1f:97:4c: ec:7b:d5:3c:e6:9d:5b:3d:4a:6c:18:d7:25:c1:58: db:9e:18:60:ea:57:ef:2b:13:3a:b4:20:f2:11:58: 05:28:85:a7:ad:b0:23:84:a5:cb:de:df:c3:cc:a2: 62:a3:19:6c:98:ce:cd:e7:83:30:09:de:62:fb:cb: 01:29:a0:d8:78:fa:47:d5:90:34:0e:e4:c5:c3:66: 37:ec:44:b3:91:8d:f9:fb:00:34:ed:a6:18:32:33: 03:21:b0:48:44:f9:cc:2a:f2:72:3b:a0:1e:23:ad: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4E:3B:DA:E1:05:75:53:6B:46:37:6C:DD:5A:C3:62:16:EE:67:F6 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/8F1CEB52CFB011EEB0D03629C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.51.0/24 Signature Algorithm: sha256WithRSAEncryption 19:37:46:87:46:43:5b:f9:d3:50:41:35:ea:2f:ad:0b:01:54: d5:f9:29:95:a8:71:c5:f4:a9:14:d6:9a:63:cb:bd:4a:01:36: 4d:81:a2:5b:7f:a7:f0:61:69:49:68:81:bc:24:5e:6e:25:1f: 34:a0:29:fe:aa:9a:4c:11:fe:1b:8f:4c:cd:2f:cd:36:eb:c2: 1d:39:55:55:bd:11:f5:fd:11:66:82:19:7c:3f:93:03:8a:14: b2:67:83:a3:93:fa:99:54:94:6f:bb:3e:2f:0a:50:bd:32:85: 16:72:ea:86:c3:2c:f1:f8:aa:9e:04:91:23:c5:6f:20:95:9b: 40:29:96:df:f5:1d:4d:da:a9:0c:b4:ba:b3:d3:19:99:df:39: 5e:d4:f4:90:e0:54:0d:07:22:74:21:5c:bf:9c:9c:19:19:0f: 7e:e2:d5:1d:e8:a5:1f:69:82:25:db:dc:0f:d3:94:ca:33:47: d9:18:fb:7d:55:7c:e8:bb:17:01:bb:6a:42:3b:2b:58:1b:cc: fc:d8:4d:6d:26:0b:f8:9c:69:a3:1e:3a:33:59:fe:71:c2:6b: 3a:b0:26:1f:9a:5e:22:ea:53:01:2c:f5:85:d8:27:fd:16:5f: 20:25:34:e5:ed:05:8f:93:43:8d:7c:6e:15:8e:8a:67:8d:d8: 9a:94:33:b4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzEzNS01YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBtiBUG+RP++Hy15oXy0O7xNJNDwqSACFD9NfKBa/YDKVyWh80v65XLIcQBu 2OVJbNH4nBi2qZYqSfSQJuBreq6XGeZwExF3iq4ZOL0Pw5xwQjZhQXZG1QBshecr wdlx/Y9y19zVNRYJoGtukCsxneTN0VlH+kz0uz2W2i7f2kydT1kxqGoItZBaS12+ GZF4gbcfl0zse9U85p1bPUpsGNclwVjbnhhg6lfvKxM6tCDyEVgFKIWnrbAjhKXL 3t/DzKJioxlsmM7N54MwCd5i+8sBKaDYePpH1ZA0DuTFw2Y37ESzkY35+wA07aYY MjMDIbBIRPnMKvJyO6AeI63H+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJpOO9rh BXVTa0Y3bN1aw2IW7mf2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEYxQ0VCNTJD RkIwMTFFRUIwRDAzNjI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnRQzMA0GCSqGSIb3DQEBCwUAA4IBAQAZN0aHRkNb+dNQQTXqL60L AVTV+SmVqHHF9KkU1ppjy71KATZNgaJbf6fwYWlJaIG8JF5uJR80oCn+qppMEf4b j0zNL80268IdOVVVvRH1/RFmghl8P5MDihSyZ4Ojk/qZVJRvuz4vClC9MoUWcuqG wyzx+KqeBJEjxW8glZtAKZbf9R1N2qkMtLqz0xmZ3zle1PSQ4FQNByJ0IVy/nJwZ GQ9+4tUd6KUfaYIl29wP05TKM0fZGPt9VXzouxcBu2pCOytYG8z82E1tJgv4nGmj HjozWf5xwms6sCYfml4i6lMBLPWF2Cf9Fl8gJTTl7QWPk0ONfG4VjopnjdialDO0 -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:48 2026 by rpki-client