$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa File: B341065EBDDE11EA9977C550C4F9AE02.roa (raw, json) Hash identifier: xXO6VkeQShSWJ6A+JdWNgAxWebq8ceeqqKrD17EMiwI= Subject key identifier: BE:5C:AB:71:60:A0:B3:56:F7:B6:A8:E2:28:8E:FC:E6:0E:F7:A3:27 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C72 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:47:51 +0000 ROA not before: Fri 09 May 2025 08:07:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55824 IP address blocks: 157.15.12.0/23 maxlen: 24 157.15.158.0/24 maxlen: 24 158.144.12.0/24 maxlen: 24 158.144.15.0/24 maxlen: 24 158.144.18.0/24 maxlen: 24 158.144.182.0/24 maxlen: 24 158.144.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11378 (0x2c72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 9 08:07:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c217-9b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:26:5e:ef:38:5e:63:17:c6:29:b5:35:2d: a5:ea:3f:f8:99:b5:81:f5:5a:da:64:57:e8:11:a0: d4:53:76:13:34:16:5a:f9:d5:74:5d:14:fe:46:dc: 37:fa:3f:d7:5a:99:ef:e6:b8:f4:c8:06:23:04:63: cd:68:5b:1c:03:f0:ea:07:30:ce:cc:08:53:77:e8: be:84:40:7a:14:14:7f:61:9d:8a:33:76:51:c4:5e: 21:9a:ab:78:8c:8e:83:4c:81:7b:e3:d3:2a:4b:b6: 37:02:4b:82:26:72:f8:ba:46:94:d1:da:84:90:c2: 49:67:17:11:10:3b:10:0c:5f:1e:54:8a:a2:bb:8d: ee:a2:3d:5f:d9:a1:57:40:44:8c:8f:8a:a6:44:a1: d7:45:34:96:18:96:97:e3:2d:3d:0e:83:ff:62:cd: 69:20:63:10:ff:f6:f8:2d:05:45:16:65:23:a5:ff: 69:d7:42:dc:18:92:08:96:ba:26:e1:66:f5:59:7d: 7e:36:72:86:03:28:07:4d:39:f5:a0:bb:33:ff:e4: 10:a3:80:05:dc:7f:60:49:1e:56:2a:8e:26:1c:56: 04:0c:2d:e9:6f:70:0c:49:c6:5d:40:cc:a7:27:b2: 54:96:95:4c:f3:6e:8b:22:39:87:c7:03:67:2b:f8: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5C:AB:71:60:A0:B3:56:F7:B6:A8:E2:28:8E:FC:E6:0E:F7:A3:27 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B341065EBDDE11EA9977C550C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.12.0/23 157.15.158.0/24 158.144.12.0/24 158.144.15.0/24 158.144.18.0/24 158.144.182.0/24 158.144.186.0/23 Signature Algorithm: sha256WithRSAEncryption 36:93:d6:16:a8:60:3d:d9:f8:31:a8:1f:95:8b:22:2b:d7:e1: a0:de:30:89:56:c8:5a:48:91:df:ef:72:83:f3:c4:f1:c8:0d: b1:42:df:d9:50:3b:06:47:eb:87:96:df:f0:4e:b2:67:01:fb: f3:5b:f5:d4:51:ad:28:9a:48:d0:c0:d0:a0:d1:86:c0:b0:9e: fc:cc:eb:8b:ab:78:ae:78:56:bc:b3:2a:5b:42:52:81:4f:66: 38:73:8e:f6:0d:af:68:60:34:0d:ae:d9:cb:45:2e:13:a2:fe: 74:c3:24:c7:b2:a9:d8:2e:72:06:df:9f:37:e0:1c:d1:8c:d1: 7f:a2:39:37:e8:82:e9:97:a9:41:02:12:6b:f2:3b:2e:0a:87: 47:d8:69:33:20:e2:2b:31:19:74:31:cf:b9:18:1c:57:e1:26: ac:d7:c9:cf:36:06:fe:dd:c5:a5:68:1f:7e:c3:24:c5:f0:c5: 20:f6:3d:7e:1e:30:9b:64:73:6c:4f:ed:a4:18:48:2d:79:da: 92:42:96:e5:16:a4:39:9c:28:56:c3:53:21:08:f6:86:ce:6e: 9a:fb:35:fd:7e:29:0d:88:b2:55:32:78:b7:80:49:24:3d:e3: 53:88:91:fa:d2:96:ad:98:eb:dc:57:4a:ec:7f:91:44:e2:05: ad:7a:b7:86 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICLHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA5MDgwNzM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzIxNy05YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhkmXu84XmMXxim1NS2l6j/4mbWB9VraZFfoEaDUU3YTNBZa+dV0XRT+Rtw3 +j/XWpnv5rj0yAYjBGPNaFscA/DqBzDOzAhTd+i+hEB6FBR/YZ2KM3ZRxF4hmqt4 jI6DTIF749MqS7Y3AkuCJnL4ukaU0dqEkMJJZxcREDsQDF8eVIqiu43uoj1f2aFX QESMj4qmRKHXRTSWGJaX4y09DoP/Ys1pIGMQ//b4LQVFFmUjpf9p10LcGJIIlrom 4Wb1WX1+NnKGAygHTTn1oLsz/+QQo4AF3H9gSR5WKo4mHFYEDC3pb3AMScZdQMyn J7JUlpVM826LIjmHxwNnK/hqcwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFL5cq3Fg oLNW97ao4iiO/OYO96MnMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjM0MTA2NUVC RERFMTFFQTk5NzdDNTUwQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQBnQ8MAwQAnQ+eAwQAnpAMAwQAnpAPAwQAnpASAwQAnpC2AwQBnpC6 MA0GCSqGSIb3DQEBCwUAA4IBAQA2k9YWqGA92fgxqB+ViyIr1+Gg3jCJVshaSJHf 73KD88TxyA2xQt/ZUDsGR+uHlt/wTrJnAfvzW/XUUa0omkjQwNCg0YbAsJ78zOuL q3iueFa8sypbQlKBT2Y4c472Da9oYDQNrtnLRS4Tov50wyTHsqnYLnIG35834BzR jNF/ojk36ILpl6lBAhJr8jsuCodH2GkzIOIrMRl0Mc+5GBxX4Sas18nPNgb+3cWl aB9+wyTF8MUg9j1+HjCbZHNsT+2kGEgtedqSQpblFqQ5nChWw1MhCPaGzm6a+zX9 fikNiLJVMni3gEkkPeNTiJH60patmOvcV0rsf5FE4gWtereG -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:58 2026 by rpki-client