$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa File: 9B016306CCAB11EEB89B362DC4F9AE02.roa (raw, json) Hash identifier: tzhhQF9HwGRtM9lAt0+aWeS4ASZHgfwUQyVab86fhro= Subject key identifier: 8B:C2:C4:34:F2:A9:30:25:AC:E2:11:77:43:32:E3:BD:31:CA:BA:7F Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BFA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:44:49 +0000 ROA not before: Thu 08 May 2025 15:53:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151747 IP address blocks: 157.20.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11258 (0x2bfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c161-e328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:5f:f6:d6:97:17:65:26:cb:82:b8:9e:5c: 48:0f:17:ca:9c:b0:e5:83:52:07:3e:0e:49:d4:5d: 2b:fd:02:06:6e:c8:d6:d0:03:77:d6:69:d2:ed:b5: 8a:d0:b8:f1:e0:5c:48:de:f8:f2:f8:0c:04:d6:b9: 62:cf:b4:5a:58:cc:19:de:fe:e1:ca:0f:90:8a:ff: 00:94:34:82:2c:21:6c:08:33:06:c2:eb:a9:ff:ee: 00:3d:9c:9e:ab:20:49:42:a2:0b:ae:5e:6e:f3:25: 1d:29:0c:7d:73:ad:da:d8:07:72:69:d3:9f:fc:31: aa:e5:40:ea:a9:16:4f:da:a8:9c:dc:b5:c2:33:b3: c6:1e:94:eb:16:90:f6:6e:f5:4d:47:af:6c:31:39: 52:3d:be:33:96:23:41:e7:31:5b:de:0b:fb:31:ac: 93:24:1c:49:9b:10:31:53:59:54:c4:71:b4:a1:d7: af:40:78:3c:fc:7b:d8:4c:55:ac:b9:76:36:20:e8: e0:82:07:2c:7e:2e:49:cd:54:96:22:e2:fc:d3:3b: 55:63:4f:e1:a1:a9:e3:66:3b:3b:8a:03:f0:24:93: af:16:e5:7c:72:01:de:d4:4d:21:69:30:23:c3:28: 6a:ba:fc:b2:9b:ee:77:3f:df:5e:50:27:49:f0:e0: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:C4:34:F2:A9:30:25:AC:E2:11:77:43:32:E3:BD:31:CA:BA:7F X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B016306CCAB11EEB89B362DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.28.0/23 Signature Algorithm: sha256WithRSAEncryption 79:4d:bd:b4:e8:35:53:c8:c6:f2:99:34:94:8b:98:74:9e:a1: 75:cf:2f:27:29:0f:b8:fa:2c:74:d5:50:0c:2b:3a:8f:74:b7: de:c6:29:0e:96:17:22:c7:55:0d:91:af:92:2d:cc:1e:18:dc: e7:60:f6:b4:35:ad:51:96:e9:74:b8:6b:0f:fb:d8:82:d4:77: 84:28:29:07:4a:15:7e:2e:b1:a0:ac:dd:bb:a2:a2:2d:53:f8: 97:68:0b:7b:7c:ee:71:c5:27:85:81:6b:57:65:19:45:84:6c: b2:dc:68:7f:0e:20:de:10:a8:4a:b0:e7:91:74:5b:23:41:67: 82:bd:1d:43:91:f4:34:63:b1:72:e5:28:0a:46:53:0a:45:d4: 39:d3:68:96:35:41:82:82:70:aa:fb:01:64:f8:9c:96:25:22: 5d:37:f8:3a:2a:08:d2:b3:0f:f0:f7:e2:a2:f6:88:a5:7a:33: 60:e9:e5:84:a6:db:b8:df:5e:f2:c0:68:b3:80:ff:ec:ef:ea: ab:04:c1:b6:d4:55:77:34:e5:4d:1a:17:13:73:9e:b6:dc:5e: 2c:55:df:4e:0a:c3:00:42:c7:52:55:ab:7b:96:3b:9d:a3:e0: 49:8f:65:1f:27:f4:c9:58:94:36:8e:56:aa:2a:d1:8a:95:1f: 20:6b:c6:35 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE2MS1lMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqI9f9taXF2Umy4K4nlxIDxfKnLDlg1IHPg5J1F0r/QIGbsjW0AN31mnS7bWK 0Ljx4FxI3vjy+AwE1rliz7RaWMwZ3v7hyg+Qiv8AlDSCLCFsCDMGwuup/+4APZye qyBJQqILrl5u8yUdKQx9c63a2AdyadOf/DGq5UDqqRZP2qic3LXCM7PGHpTrFpD2 bvVNR69sMTlSPb4zliNB5zFb3gv7MayTJBxJmxAxU1lUxHG0odevQHg8/HvYTFWs uXY2IOjgggcsfi5JzVSWIuL80ztVY0/hoanjZjs7igPwJJOvFuV8cgHe1E0haTAj wyhquvyym+53P99eUCdJ8ODr6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIvCxDTy qTAlrOIRd0My470xyrp/MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUIwMTYzMDZD Q0FCMTFFRUI4OUIzNjJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRQcMA0GCSqGSIb3DQEBCwUAA4IBAQB5Tb206DVTyMbymTSUi5h0 nqF1zy8nKQ+4+ix01VAMKzqPdLfexikOlhcix1UNka+SLcweGNznYPa0Na1Rlul0 uGsP+9iC1HeEKCkHShV+LrGgrN27oqItU/iXaAt7fO5xxSeFgWtXZRlFhGyy3Gh/ DiDeEKhKsOeRdFsjQWeCvR1DkfQ0Y7Fy5SgKRlMKRdQ502iWNUGCgnCq+wFk+JyW JSJdN/g6KgjSsw/w9+Ki9oilejNg6eWEptu4317ywGizgP/s7+qrBMG21FV3NOVN GhcTc5623F4sVd9OCsMAQsdSVat7ljudo+BJj2UfJ/TJWJQ2jlaqKtGKlR8ga8Y1 -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:36 2026 by rpki-client