$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D315CCDCB08511EFB426613FC4F9AE02.roa File: D315CCDCB08511EFB426613FC4F9AE02.roa (raw, json) Hash identifier: OVeI4ZR2VIifhBvKclDSHvOCUUERwpsbKzx6w4QpJLE= Subject key identifier: 7B:BC:94:4A:5A:8E:80:3C:8B:23:A9:C6:FE:83:3C:9F:3F:A6:D8:63 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C5A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D315CCDCB08511EFB426613FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:47:16 +0000 ROA not before: Thu 08 May 2025 15:55:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153272 IP address blocks: 160.20.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11354 (0x2c5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:55:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c1f4-1dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7d:70:f4:4b:56:08:dd:7a:a7:38:87:1f:99: 6e:4a:f5:8f:cb:63:c5:6c:97:d1:a4:61:24:9d:fd: 2b:3b:8d:87:81:9e:e1:cd:b7:f9:be:07:99:68:3f: bf:f9:4b:a4:44:70:49:54:5c:a8:b6:cc:a0:f6:b5: c8:6d:45:64:c4:b8:9a:c0:d9:28:f6:8c:4a:d7:25: 4c:a0:a3:d1:c2:5a:a0:f9:52:d3:44:a1:0f:9f:d4: 13:06:b6:2e:e2:3c:61:d9:ef:08:b4:a2:36:f8:eb: 00:29:58:6f:c2:57:e0:3e:a1:9c:2d:9f:f6:26:c0: db:8d:86:a7:4c:a2:9b:82:a6:61:d4:38:79:06:77: 7e:e8:3a:64:ab:7f:4c:49:84:a9:a1:42:d2:f5:e5: 87:d1:69:8f:07:3e:7d:ff:53:6a:6a:92:8e:40:ba: 2f:e3:3b:97:72:75:f6:ae:f6:72:94:77:1a:72:41: 00:f6:f8:5f:b5:b1:cb:70:0f:8b:c9:dc:fb:f4:d4: 99:fe:8b:55:bd:a0:11:35:a6:14:88:71:ad:c8:71: a9:37:65:36:f2:a8:02:05:50:d6:e6:99:b7:ee:fb: 9f:08:3f:e1:3c:a7:41:91:fa:c5:f7:bd:42:b3:50: 15:09:e1:0e:8c:ac:24:c7:4c:37:68:0b:68:b9:a4: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BC:94:4A:5A:8E:80:3C:8B:23:A9:C6:FE:83:3C:9F:3F:A6:D8:63 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D315CCDCB08511EFB426613FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.20.136.0/23 Signature Algorithm: sha256WithRSAEncryption ad:67:13:34:69:b6:a4:44:d9:02:cb:b9:52:02:70:93:c6:38: bc:76:19:a7:1c:f1:0b:f5:2b:15:6d:6a:9c:b9:64:32:70:91: 17:9e:5f:96:ac:db:a1:7a:6a:81:80:e1:94:1c:01:ad:90:b8: 1c:b4:4b:7f:78:2e:73:3b:09:6a:a2:05:70:49:ec:2d:79:5e: 8c:85:62:1a:ba:4c:9c:64:4e:91:3e:de:f1:17:4e:32:9c:47: a8:02:6e:e4:1a:e1:90:15:55:62:c3:a2:2a:08:1e:6a:85:c6: 11:ef:36:f1:51:da:d4:01:99:9a:52:fa:aa:5e:1c:c8:7f:09: e0:c3:8d:1e:90:b7:5e:48:39:13:1d:37:dc:61:ed:96:76:51: cd:3d:ff:15:d5:32:9a:20:b6:99:e7:72:04:e2:20:d0:dc:ea: 6f:73:7b:92:3c:cb:ec:8c:29:a1:ee:99:b3:02:7c:5c:41:b0: a2:34:d9:c9:c0:e1:d8:87:55:6c:bc:8d:48:a5:1d:31:e3:b0: d8:ea:fc:d8:a3:1b:48:99:71:b2:81:1f:c5:79:46:7d:e4:21: 8e:82:c4:30:8e:6d:43:ab:fd:33:9a:12:d8:fd:ab:45:33:96: a0:c7:e7:d7:5a:d2:92:86:f5:9b:1f:31:69:69:9f:f5:05:43: 60:38:df:47 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NTIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzFmNC0xZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8X1w9EtWCN16pziHH5luSvWPy2PFbJfRpGEknf0rO42HgZ7hzbf5vgeZaD+/ +UukRHBJVFyotsyg9rXIbUVkxLiawNko9oxK1yVMoKPRwlqg+VLTRKEPn9QTBrYu 4jxh2e8ItKI2+OsAKVhvwlfgPqGcLZ/2JsDbjYanTKKbgqZh1Dh5Bnd+6Dpkq39M SYSpoULS9eWH0WmPBz59/1NqapKOQLov4zuXcnX2rvZylHcackEA9vhftbHLcA+L ydz79NSZ/otVvaARNaYUiHGtyHGpN2U28qgCBVDW5pm37vufCD/hPKdBkfrF971C s1AVCeEOjKwkx0w3aAtouaRBbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHu8lEpa joA8iyOpxv6DPJ8/pthjMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDMxNUNDRENC MDg1MTFFRkI0MjY2MTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBSIMA0GCSqGSIb3DQEBCwUAA4IBAQCtZxM0abakRNkCy7lSAnCT xji8dhmnHPEL9SsVbWqcuWQycJEXnl+WrNuhemqBgOGUHAGtkLgctEt/eC5zOwlq ogVwSewteV6MhWIaukycZE6RPt7xF04ynEeoAm7kGuGQFVViw6IqCB5qhcYR7zbx UdrUAZmaUvqqXhzIfwngw40ekLdeSDkTHTfcYe2WdlHNPf8V1TKaILaZ53IE4iDQ 3Opvc3uSPMvsjCmh7pmzAnxcQbCiNNnJwOHYh1VsvI1IpR0x47DY6vzYoxtImXGy gR/FeUZ95CGOgsQwjm1Dq/0zmhLY/atFM5agx+fXWtKShvWbHzFpaZ/1BUNgON9H -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:29 2026 by rpki-client