$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa File: 971A75D21F4F11F096499929C4F9AE02.roa (raw, json) Hash identifier: SNY8F1teAf8hIkA6lCrU6gufz1YhQnLy8l2J7blbf2k= Subject key identifier: D8:FC:F2:F7:26:49:E2:9E:B3:8F:09:9C:1F:BC:37:0B:C2:77:40:AC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 259F Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa Signing time: Sat 28 Feb 2026 21:04:41 +0000 ROA not before: Thu 08 May 2025 15:52:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138296 IP address blocks: 157.20.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 21:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9631 (0x259f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a35869-f6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:9a:c3:d0:54:70:ae:7c:1a:71:a2:19:31: 8f:54:9b:86:63:d4:22:3b:27:a4:66:8e:6d:40:f6: 10:17:e8:bb:5c:ef:7e:6a:b6:5f:43:e3:3b:ee:90: 08:17:c9:d0:d3:4f:24:c8:fc:2e:05:13:cc:a1:09: f0:b4:5e:b5:a6:0e:c9:43:0b:c8:cd:d6:99:8b:d0: d6:15:58:85:cb:c3:ef:d4:5d:af:30:c3:a9:2d:0c: 6d:75:6b:41:90:5b:6c:2e:46:38:20:09:32:ef:13: b5:87:c4:b1:80:2a:0f:22:b4:59:99:07:19:d5:74: 67:be:2e:40:18:32:5d:52:df:32:47:d5:fb:69:53: 0d:a8:8a:88:c1:88:08:f4:b1:0d:d4:34:09:6c:29: e9:e7:f5:24:0f:d6:5f:8e:9b:de:78:12:e0:c3:29: b3:9c:60:7e:34:d6:7f:46:02:0f:74:fe:47:95:2b: 32:d7:48:04:94:42:72:29:71:0f:09:08:fa:ce:25: e8:56:82:c0:92:cf:fc:77:fc:2c:99:27:34:e4:84: c5:8d:12:4f:0a:d1:c2:77:23:69:c8:8f:7e:67:05: 9a:bd:d3:2b:d3:bc:93:9e:79:31:55:a0:3f:3a:f3: 4f:9b:a4:7a:10:95:ec:7c:d7:2b:8e:c1:23:2e:34: 7c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:F2:F7:26:49:E2:9E:B3:8F:09:9C:1F:BC:37:0B:C2:77:40:AC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/971A75D21F4F11F096499929C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.86.0/23 Signature Algorithm: sha256WithRSAEncryption 27:71:b6:67:96:c3:90:c1:35:68:37:dd:f3:3c:19:2e:bd:79: c7:90:ee:7e:9c:ee:be:29:14:13:52:0e:06:b3:39:47:5c:6a: 73:89:97:79:7f:12:a6:de:a5:c1:18:0c:72:a3:8f:33:60:f2: 7e:98:24:64:80:b1:73:a2:45:4c:bb:10:6d:8b:db:40:55:26: a1:ca:de:5c:5f:e4:3d:44:34:f0:d6:d2:86:fb:84:81:fe:bc: fd:f1:6a:be:71:3e:c2:80:fe:e7:d2:7d:4d:97:d8:35:5f:a3: 17:35:da:e9:2a:a7:72:f8:4e:98:6a:55:8f:2b:b1:0d:f2:78: 06:3c:33:1f:1b:2c:21:56:f9:d1:75:b4:4c:04:3d:f5:c2:71: 98:99:ab:73:c0:66:85:50:59:f6:b4:1f:b9:8c:03:4f:39:38: 48:61:1d:69:49:c5:55:1f:06:0f:7c:01:8c:39:a9:13:43:38: 98:27:00:6f:35:5b:2b:ef:83:ab:0b:65:69:f0:55:f9:de:b8: 63:af:7f:f6:c5:3f:ea:a7:d1:3c:8a:df:9c:41:53:f0:20:c4: a3:4c:22:94:5a:12:e1:48:f0:66:3f:1e:81:cb:e2:ca:d0:3a: 2d:38:ea:5d:3f:db:bd:52:6b:9a:d4:b0:2a:59:3c:ba:64:8a: 91:15:13:4b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzNTg2OS1mNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2qaw9BUcK58GnGiGTGPVJuGY9QiOyekZo5tQPYQF+i7XO9+arZfQ+M77pAI F8nQ008kyPwuBRPMoQnwtF61pg7JQwvIzdaZi9DWFViFy8Pv1F2vMMOpLQxtdWtB kFtsLkY4IAky7xO1h8SxgCoPIrRZmQcZ1XRnvi5AGDJdUt8yR9X7aVMNqIqIwYgI 9LEN1DQJbCnp5/UkD9ZfjpveeBLgwymznGB+NNZ/RgIPdP5HlSsy10gElEJyKXEP CQj6ziXoVoLAks/8d/wsmSc05ITFjRJPCtHCdyNpyI9+ZwWavdMr07yTnnkxVaA/ OvNPm6R6EJXsfNcrjsEjLjR8OQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNj88vcm SeKes48JnB+8NwvCd0CsMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTcxQTc1RDIx RjRGMTFGMDk2NDk5OTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRWMA0GCSqGSIb3DQEBCwUAA4IBAQAncbZnlsOQwTVoN93zPBku vXnHkO5+nO6+KRQTUg4GszlHXGpziZd5fxKm3qXBGAxyo48zYPJ+mCRkgLFzokVM uxBti9tAVSahyt5cX+Q9RDTw1tKG+4SB/rz98Wq+cT7CgP7n0n1Nl9g1X6MXNdrp Kqdy+E6YalWPK7EN8ngGPDMfGywhVvnRdbRMBD31wnGYmatzwGaFUFn2tB+5jANP OThIYR1pScVVHwYPfAGMOakTQziYJwBvNVsr74OrC2Vp8FX53rhjr3/2xT/qp9E8 it+cQVPwIMSjTCKUWhLhSPBmPx6By+LK0DotOOpdP9u9Umua1LAqWTy6ZIqRFRNL -----END CERTIFICATE-----Generated at Mon Mar 2 00:50:52 2026 by rpki-client