$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa File: B67D0D22AF1911F0BAE74926C4F9AE02.roa (raw, json) Hash identifier: iUtNwzA2QX22o1z9Kgh8k3db7SMgGlEAU562WH046bw= Subject key identifier: 67:6D:8E:64:C3:01:6B:83:48:66:1B:40:D3:34:D5:3B:89:DE:A4:70 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CC2 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:49:43 +0000 ROA not before: Wed 22 Oct 2025 07:35:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150584 IP address blocks: 157.15.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11458 (0x2cc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Oct 22 07:35:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c287-8085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:35:d5:bf:3c:f5:f6:e8:5b:b4:97:8d:18: 0e:d2:1e:ad:21:a5:77:57:d0:7d:f5:cd:67:e0:4a: a3:bd:0d:ae:f7:9c:db:c8:a2:c3:38:10:15:64:fd: 05:d6:ea:73:7d:34:97:82:47:a2:0a:e0:c5:1c:11: 00:23:0f:56:54:31:4b:35:47:8a:14:dc:3e:c6:d4: ad:8e:f9:35:19:0d:00:41:3d:21:0f:59:b5:06:09: 3f:d8:d1:28:c4:59:95:ad:a1:8b:00:68:08:47:07: fb:26:de:09:30:60:ee:d5:95:77:94:fb:18:c8:7c: e5:71:0e:42:a6:58:14:a7:83:6f:27:d3:ce:18:46: ad:b5:f6:99:c5:5f:4f:e6:42:03:59:6b:0b:9c:f3: ce:09:d6:37:ab:1c:3e:cd:9e:47:20:d6:fa:f9:bb: ae:80:5a:a9:85:33:36:38:71:b3:08:72:1b:40:30: 63:30:f9:80:fa:1f:4f:fb:31:7a:14:8b:b2:db:08: 5c:89:e8:10:57:1d:c7:7e:ec:ab:17:ad:fd:05:1f: ac:2e:a0:18:6f:5e:0e:da:0d:c3:18:a7:d3:d3:48: cd:7d:c9:51:5f:7e:2e:20:e0:80:0b:9a:7c:d5:d7: ae:9d:11:b8:73:76:81:93:af:c4:e1:39:ce:2b:ba: 47:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6D:8E:64:C3:01:6B:83:48:66:1B:40:D3:34:D5:3B:89:DE:A4:70 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.88.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:93:4a:16:ba:fc:67:90:6d:8c:82:51:ae:14:59:1d:d1:67: 4c:90:7d:02:19:b9:af:f3:44:24:d1:d7:0f:09:08:55:4d:7c: 8c:d5:1a:76:01:4d:98:b3:7d:ee:06:99:2c:65:41:4b:3c:43: f4:83:ac:eb:fd:39:57:af:e3:85:c7:54:96:5f:6d:3c:3c:7a: 26:16:db:fb:72:b8:6e:ff:b1:f1:50:05:05:70:1b:fc:d2:b6: c4:4f:e8:fc:34:ad:c1:aa:d7:3e:53:3f:bb:1c:ec:26:de:97: 97:ae:03:85:db:06:15:cc:b9:34:58:46:5b:4f:79:5c:e1:5a: 6f:44:5d:40:4a:ba:f5:d7:19:ae:ad:0c:1d:2c:d0:cc:e0:71: 35:fb:0f:69:31:60:b6:94:3b:73:5d:29:1e:71:6c:d1:62:7e: 5b:21:93:d7:7e:5d:12:ed:a1:9c:6d:36:d0:24:09:ad:c7:e7: 8c:1c:fe:3a:9e:d7:bc:a8:00:ff:a5:02:01:74:8d:08:e5:ba: bc:0d:e4:a6:31:9b:b8:7f:11:0e:20:14:10:07:fe:d8:0f:8d: 57:01:4e:b4:b3:ac:29:cd:2f:28:d3:23:ec:47:7f:2f:77:53: 65:dd:fe:38:ff:4f:97:94:a4:69:f2:1b:59:30:bd:66:35:d6: 37:7e:35:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMDIyMDczNTQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI4Ny04MDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0Y11b889fboW7SXjRgO0h6tIaV3V9B99c1n4EqjvQ2u95zbyKLDOBAVZP0F 1upzfTSXgkeiCuDFHBEAIw9WVDFLNUeKFNw+xtStjvk1GQ0AQT0hD1m1Bgk/2NEo xFmVraGLAGgIRwf7Jt4JMGDu1ZV3lPsYyHzlcQ5CplgUp4NvJ9POGEattfaZxV9P 5kIDWWsLnPPOCdY3qxw+zZ5HINb6+buugFqphTM2OHGzCHIbQDBjMPmA+h9P+zF6 FIuy2whciegQVx3HfuyrF639BR+sLqAYb14O2g3DGKfT00jNfclRX34uIOCAC5p8 1deunRG4c3aBk6/E4TnOK7pHYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGdtjmTD AWuDSGYbQNM01TuJ3qRwMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjY3RDBEMjJB RjE5MTFGMEJBRTc0OTI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ9YMA0GCSqGSIb3DQEBCwUAA4IBAQAMk0oWuvxnkG2MglGuFFkd 0WdMkH0CGbmv80Qk0dcPCQhVTXyM1Rp2AU2Ys33uBpksZUFLPEP0g6zr/TlXr+OF x1SWX208PHomFtv7crhu/7HxUAUFcBv80rbET+j8NK3Bqtc+Uz+7HOwm3peXrgOF 2wYVzLk0WEZbT3lc4VpvRF1ASrr11xmurQwdLNDM4HE1+w9pMWC2lDtzXSkecWzR Yn5bIZPXfl0S7aGcbTbQJAmtx+eMHP46nte8qAD/pQIBdI0I5bq8DeSmMZu4fxEO IBQQB/7YD41XAU60s6wpzS8o0yPsR38vd1Nl3f44/0+XlKRp8htZML1mNdY3fjVt -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:32 2026 by rpki-client