$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB7FFDD0E02D11EEBE91895FC4F9AE02.roa File: DB7FFDD0E02D11EEBE91895FC4F9AE02.roa (raw, json) Hash identifier: Hf/8FDCXzWGVnOlENFwN6NIN6Qe/NeTWZQeJED8VKDM= Subject key identifier: F2:42:3D:E7:E8:DC:9A:BA:56:A4:9E:45:2D:8B:DC:C2:12:BF:10:24 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BBA Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB7FFDD0E02D11EEBE91895FC4F9AE02.roa Signing time: Sun 01 Mar 2026 22:43:20 +0000 ROA not before: Thu 08 May 2025 15:52:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138244 IP address blocks: 157.20.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11194 (0x2bba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:52:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c108-0029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:08:00:41:97:2b:0f:49:c9:07:f9:4f:ad:f5: 2d:34:34:77:94:6c:e0:8a:cc:19:fc:78:ec:2d:ac: ff:98:e2:09:d3:01:23:98:99:d0:98:7e:8e:74:44: e6:74:50:88:49:f1:7d:c5:1d:f2:16:8f:e1:5f:2f: a3:95:01:bb:59:e5:73:e3:24:c1:c1:22:2b:2a:b0: 32:04:8d:b0:13:6e:71:2b:ad:09:6c:2d:62:38:e0: 3b:49:8a:7d:b1:b8:51:52:ba:10:49:cd:74:eb:fb: 9e:d9:8e:b7:a2:0a:6d:b8:b8:3a:8c:d9:59:c7:db: 62:eb:cb:32:40:5f:da:77:c8:fa:8e:4d:53:69:94: 35:3d:d9:1f:94:14:fa:a9:f1:11:33:2c:1f:a0:8f: 21:76:19:ba:de:1d:42:29:c8:94:71:70:0b:ae:4a: 83:19:88:8a:22:8f:94:3f:9c:f3:71:e3:0a:52:ad: 70:e7:e6:65:bb:40:2c:b6:08:56:0f:91:84:9e:58: 7c:5b:f4:ad:bd:86:37:53:08:9a:ca:13:cd:1e:5d: c1:ae:c9:40:11:f4:d3:59:be:26:e2:66:4e:39:0b: 95:d5:d8:b8:9f:6e:12:01:eb:ae:91:96:b3:60:3b: 17:e7:40:7e:3b:8c:f9:e4:77:30:34:b8:16:66:a0: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:42:3D:E7:E8:DC:9A:BA:56:A4:9E:45:2D:8B:DC:C2:12:BF:10:24 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DB7FFDD0E02D11EEBE91895FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.172.0/23 Signature Algorithm: sha256WithRSAEncryption 74:0e:6d:35:e8:85:bd:26:db:ad:a5:43:3f:f9:64:d3:3e:9a: 1b:4a:9e:53:34:a9:59:44:46:45:b1:3f:51:cb:c7:dc:1e:d3: 9f:9e:4d:37:af:a5:5c:d5:7d:a0:89:c1:68:93:b4:e3:2f:39: 8d:30:00:9f:db:51:24:15:db:fb:5b:73:18:df:57:93:65:d8: bb:f9:4a:9d:a7:78:6a:60:d9:58:cc:2a:01:df:49:96:d4:f4: 93:41:59:bc:00:52:69:0b:12:d8:e2:18:2e:dc:65:ba:9c:46: a7:fc:1c:ae:f7:fa:25:65:1d:52:08:86:ae:58:9e:e3:86:8e: de:a1:93:09:24:f8:24:fe:ad:6a:ad:60:13:df:41:21:cc:69: 2e:7d:2e:76:32:3d:c4:c3:dc:01:05:02:2e:62:8e:01:a5:6e: df:71:bd:69:d7:05:eb:96:9a:f7:a1:ea:a8:83:2e:11:75:c9: e4:37:ce:c2:1c:42:26:15:55:4f:12:b1:1d:e6:97:e9:04:01: 2a:21:7c:25:b9:92:e6:95:1e:07:99:a7:7a:de:58:01:c5:68: 44:6a:5f:8d:a4:d7:32:f8:77:89:9a:fc:9f:7c:fd:39:c9:0a: 45:5c:25:36:27:08:ee:db:2c:45:40:63:db:9b:57:22:15:9a: 2a:6e:d0:7a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzEwOC0wMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QgAQZcrD0nJB/lPrfUtNDR3lGzgiswZ/HjsLaz/mOIJ0wEjmJnQmH6OdETm dFCISfF9xR3yFo/hXy+jlQG7WeVz4yTBwSIrKrAyBI2wE25xK60JbC1iOOA7SYp9 sbhRUroQSc106/ue2Y63ogptuLg6jNlZx9ti68syQF/ad8j6jk1TaZQ1PdkflBT6 qfERMywfoI8hdhm63h1CKciUcXALrkqDGYiKIo+UP5zzceMKUq1w5+Zlu0AstghW D5GEnlh8W/StvYY3UwiayhPNHl3BrslAEfTTWb4m4mZOOQuV1di4n24SAeuukZaz YDsX50B+O4z55HcwNLgWZqClFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPJCPefo 3Jq6VqSeRS2L3MISvxAkMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREI3RkZERDBF MDJEMTFFRUJFOTE4OTVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRSsMA0GCSqGSIb3DQEBCwUAA4IBAQB0Dm016IW9JtutpUM/+WTT PpobSp5TNKlZREZFsT9Ry8fcHtOfnk03r6Vc1X2gicFok7TjLzmNMACf21EkFdv7 W3MY31eTZdi7+Uqdp3hqYNlYzCoB30mW1PSTQVm8AFJpCxLY4hgu3GW6nEan/Byu 9/olZR1SCIauWJ7jho7eoZMJJPgk/q1qrWAT30EhzGkufS52Mj3Ew9wBBQIuYo4B pW7fcb1p1wXrlpr3oeqogy4RdcnkN87CHEImFVVPErEd5pfpBAEqIXwluZLmlR4H mad63lgBxWhEal+NpNcy+HeJmvyffP05yQpFXCU2Jwju2yxFQGPbm1ciFZoqbtB6 -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:52 2026 by rpki-client