$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa File: DA0B108CDD5E11EFA66C7457C4F9AE02.roa (raw, json) Hash identifier: 2OsU+NA29OEo4ctXcIZEO3JnLC9UjyJNxY+mPbv09Po= Subject key identifier: 4C:06:CD:6E:4D:96:50:2C:93:59:F8:DB:45:86:3D:CC:75:C7:C1:A1 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C16 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:45:37 +0000 ROA not before: Thu 08 May 2025 15:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152517 IP address blocks: 157.20.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11286 (0x2c16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c191-b3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:eb:d7:01:89:b5:24:e4:8b:18:9f:9a:65: 8f:86:06:09:01:2c:5e:52:77:db:c5:3c:1f:dc:15: 70:e7:a5:c3:54:b5:55:57:10:a1:5f:1c:46:bb:43: 06:30:9b:52:ec:01:d4:19:57:5d:e2:94:b9:b9:2b: 5b:ea:85:6d:54:0e:ce:6f:69:82:2d:5b:b4:53:93: 8d:c3:05:d3:88:00:ab:52:44:9e:e3:ef:7e:86:95: ed:e7:a7:b2:16:30:7e:36:30:38:0a:99:a9:83:2b: b6:40:ac:04:4b:a3:00:ed:24:34:2e:5b:0e:0c:d7: 07:01:16:77:0f:9b:1c:20:75:40:c1:4b:f1:2e:a4: 75:d9:35:84:9a:26:b2:ce:75:a1:f7:73:88:bc:3a: 9d:78:d0:83:ae:28:cd:08:d2:85:fd:04:ce:f6:25: d7:f2:74:d1:8c:b8:1e:32:6b:bd:ef:a5:6c:21:29: b3:0b:73:c0:bd:78:35:1d:c7:12:dd:c2:68:24:5e: f9:af:21:b8:ff:00:41:b3:ee:59:15:5f:4d:0c:af: 4b:51:43:8d:90:0f:a7:30:1b:ce:3a:89:79:0d:31: d2:45:73:96:e2:1d:d9:a0:99:e0:fb:a3:88:16:a3: ff:87:bf:9d:37:dd:a5:d8:eb:8a:0e:c9:8a:71:37: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:06:CD:6E:4D:96:50:2C:93:59:F8:DB:45:86:3D:CC:75:C7:C1:A1 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA0B108CDD5E11EFA66C7457C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.196.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c1:98:c5:e2:63:d2:3f:3f:ad:cc:68:89:68:86:50:d0:c0: 31:bb:76:43:08:e4:67:0b:13:ea:02:c2:e1:af:1d:13:b7:d0: 2c:cb:9b:90:88:f9:c9:f4:17:a8:01:75:f6:a2:1a:cf:94:c0: 40:f4:7e:a7:b2:46:38:33:11:fc:5e:37:1c:50:0e:ac:d7:28: 4b:d1:e8:76:29:65:3c:5d:e7:69:cc:b6:7c:76:5a:1b:00:37: 79:76:ad:71:15:65:f9:94:2c:5f:ce:c0:8c:3b:34:60:52:fe: 35:b8:19:81:d0:ca:4f:34:9a:aa:b5:c4:cd:8e:f5:2b:9a:f2: fc:e2:fb:13:20:08:d2:3e:11:12:5b:ba:97:df:e3:d7:c7:52: ee:a8:a4:62:a2:e7:c2:8e:e4:ab:74:e1:09:2b:86:47:b2:4d: 98:2c:f3:6a:15:98:55:b3:e8:a4:ae:ec:f4:22:7a:4d:d6:3f: eb:63:44:84:f2:56:99:46:7f:42:b6:2a:46:ca:b3:02:e6:a8: 9f:67:29:e2:bd:54:63:4a:92:4d:c9:7f:74:35:9a:df:2d:82: 41:e0:6d:e7:2f:d2:e3:96:9d:7e:72:81:84:a5:79:11:42:0a: 0b:b7:29:b0:c3:99:58:df:04:6a:a8:02:98:dd:03:5f:3f:77: 58:54:27:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDE1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE5MS1iM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl3r1wGJtSTkixifmmWPhgYJASxeUnfbxTwf3BVw56XDVLVVVxChXxxGu0MG MJtS7AHUGVdd4pS5uStb6oVtVA7Ob2mCLVu0U5ONwwXTiACrUkSe4+9+hpXt56ey FjB+NjA4Cpmpgyu2QKwES6MA7SQ0LlsODNcHARZ3D5scIHVAwUvxLqR12TWEmiay znWh93OIvDqdeNCDrijNCNKF/QTO9iXX8nTRjLgeMmu976VsISmzC3PAvXg1HccS 3cJoJF75ryG4/wBBs+5ZFV9NDK9LUUONkA+nMBvOOol5DTHSRXOW4h3ZoJng+6OI FqP/h7+dN92l2OuKDsmKcTfVOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEwGzW5N llAsk1n420WGPcx1x8GhMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREEwQjEwOENE RDVFMTFFRkE2NkM3NDU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnRTEMA0GCSqGSIb3DQEBCwUAA4IBAQA4wZjF4mPSPz+tzGiJaIZQ 0MAxu3ZDCORnCxPqAsLhrx0Tt9Asy5uQiPnJ9BeoAXX2ohrPlMBA9H6nskY4MxH8 XjccUA6s1yhL0eh2KWU8XedpzLZ8dlobADd5dq1xFWX5lCxfzsCMOzRgUv41uBmB 0MpPNJqqtcTNjvUrmvL84vsTIAjSPhESW7qX3+PXx1LuqKRioufCjuSrdOEJK4ZH sk2YLPNqFZhVs+ikruz0InpN1j/rY0SE8laZRn9CtipGyrMC5qifZynivVRjSpJN yX90NZrfLYJB4G3nL9Ljlp1+coGEpXkRQgoLtymww5lY3wRqqAKY3QNfP3dYVCcn -----END CERTIFICATE-----Generated at Mon Mar 2 17:05:35 2026 by rpki-client