$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DD0B20D0C0DE11EEB0643379C4F9AE02.roa File: DD0B20D0C0DE11EEB0643379C4F9AE02.roa (raw, json) Hash identifier: /B2jvQWmHhKmLT2b3utwD5gre7JMFuczPiGIMtVx+s8= Subject key identifier: 84:A1:83:CF:66:10:FB:13:23:A2:21:0B:26:CE:0B:A8:67:3A:52:92 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2BF3 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DD0B20D0C0DE11EEB0643379C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:44:40 +0000 ROA not before: Thu 08 May 2025 15:53:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151731 IP address blocks: 157.15.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11251 (0x2bf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:53:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c158-484c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:cd:99:be:ac:09:cd:45:ce:40:ca:13:5c: 9d:4f:33:7a:f6:bf:83:64:b2:60:41:16:e4:fc:d7: 6b:63:30:af:66:61:86:d3:92:0e:dc:b3:7c:aa:09: 23:f2:c2:fc:ef:e9:a5:1d:1d:77:07:3d:c0:fa:d9: 16:c3:19:08:80:3e:b8:be:cf:89:ab:6b:6e:42:6f: de:10:36:65:fc:6e:81:f0:0d:a7:05:70:b5:c9:9e: a8:1c:ad:e1:21:d9:d0:b1:73:fd:9f:3d:3f:5a:e4: da:73:3a:a7:7a:39:f8:ee:64:44:60:16:e4:64:c7: 43:49:fc:d3:79:bc:9e:ee:84:0a:0d:b2:b4:7c:aa: 32:d2:84:3b:4a:e2:5c:40:53:91:a7:83:bf:ce:43: 44:87:4d:2f:5e:06:c7:cc:58:33:fa:7d:64:8b:d1: 91:76:03:31:01:27:36:cd:53:5c:ee:d2:3b:a5:58: 0b:ac:01:1f:ec:ed:24:30:7f:15:6a:7b:e2:66:c6: fd:99:d7:b6:50:09:b1:e3:17:2a:81:57:7f:5c:0a: f8:14:62:d4:8d:f7:50:d0:50:25:47:71:73:d4:a9: 28:8f:a5:31:d3:9b:fb:de:b0:f5:7f:92:f4:4c:9f: 7e:63:02:f0:05:12:28:28:54:f4:08:31:ea:07:64: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A1:83:CF:66:10:FB:13:23:A2:21:0B:26:CE:0B:A8:67:3A:52:92 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DD0B20D0C0DE11EEB0643379C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.90.0/23 Signature Algorithm: sha256WithRSAEncryption 51:40:f7:a7:12:a1:c0:aa:6c:f3:1a:51:60:32:15:c5:a4:58: 77:bb:de:2b:50:fc:4d:eb:22:93:4d:a0:94:59:2a:74:f5:ff: 4d:7e:b9:1d:3f:9d:4d:aa:b6:e2:34:65:a9:bd:8d:5a:e6:ef: 3d:53:14:23:56:df:65:f1:c7:00:f9:5f:82:88:40:c0:9a:95: 4e:e2:d7:ec:b6:db:e1:4b:95:28:56:97:bb:76:c3:0b:ad:54: cb:c8:9d:94:60:d0:62:bd:cd:d5:7c:15:da:3e:26:21:20:2d: 90:c4:3b:bd:26:fa:97:2d:70:47:40:0c:70:0d:03:11:66:db: 8b:ad:ed:82:a2:35:21:09:d5:ec:7c:dc:1a:0d:ba:c4:b2:40: 30:7c:1c:2d:5d:88:5b:81:a4:72:62:30:27:5d:e1:36:4e:22: f4:8a:53:e9:b2:6b:af:20:e8:8b:42:44:07:16:29:8c:51:a8: 59:ca:8b:c9:60:7a:ed:05:e1:7c:d4:06:dd:c4:06:64:88:a3: 18:47:cc:9b:aa:7f:0d:92:1b:13:7c:82:fc:43:e5:55:2a:e2: c6:3d:1e:d5:c9:4d:43:0b:6e:df:af:4a:77:a1:4c:31:2b:53: 5c:49:6b:56:90:96:e2:d6:16:ef:66:f9:87:13:0b:bd:23:6e: 4d:2c:3d:6e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICK/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE1OC00ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8jNmb6sCc1FzkDKE1ydTzN69r+DZLJgQRbk/NdrYzCvZmGG05IO3LN8qgkj 8sL87+mlHR13Bz3A+tkWwxkIgD64vs+Jq2tuQm/eEDZl/G6B8A2nBXC1yZ6oHK3h IdnQsXP9nz0/WuTaczqnejn47mREYBbkZMdDSfzTebye7oQKDbK0fKoy0oQ7SuJc QFORp4O/zkNEh00vXgbHzFgz+n1ki9GRdgMxASc2zVNc7tI7pVgLrAEf7O0kMH8V anviZsb9mde2UAmx4xcqgVd/XAr4FGLUjfdQ0FAlR3Fz1Kkoj6Ux05v73rD1f5L0 TJ9+YwLwBRIoKFT0CDHqB2SMZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIShg89m EPsTI6IhCybOC6hnOlKSMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvREQwQjIwRDBD MERFMTFFRUIwNjQzMzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ9aMA0GCSqGSIb3DQEBCwUAA4IBAQBRQPenEqHAqmzzGlFgMhXF pFh3u94rUPxN6yKTTaCUWSp09f9NfrkdP51NqrbiNGWpvY1a5u89UxQjVt9l8ccA +V+CiEDAmpVO4tfsttvhS5UoVpe7dsMLrVTLyJ2UYNBivc3VfBXaPiYhIC2QxDu9 JvqXLXBHQAxwDQMRZtuLre2CojUhCdXsfNwaDbrEskAwfBwtXYhbgaRyYjAnXeE2 TiL0ilPpsmuvIOiLQkQHFimMUahZyovJYHrtBeF81AbdxAZkiKMYR8ybqn8NkhsT fIL8Q+VVKuLGPR7VyU1DC27fr0p3oUwxK1NcSWtWkJbi1hbvZvmHEwu9I25NLD1u -----END CERTIFICATE-----Generated at Mon Mar 2 23:39:27 2026 by rpki-client