$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa File: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (raw, json) Hash identifier: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw= Subject key identifier: 3B:27:09:D8:9C:B6:DF:6C:62:CC:E5:0F:07:7A:93:53:12:D5:4F:AE Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 0194 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa Signing time: Thu 19 Mar 2026 03:39:10 +0000 ROA not before: Thu 19 Mar 2026 03:39:10 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136784 IP address blocks: 157.15.242.0/23 maxlen: 23 157.15.242.0/24 maxlen: 24 157.15.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Mar 19 03:39:10 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bb6fde-bc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:40:80:71:6a:b3:71:9c:4e:7e:5c:e6:76:70: 8d:e0:22:c5:fb:13:7a:84:c0:8a:c2:94:a0:b0:64: a1:ed:85:f1:ba:97:11:f4:cf:2f:7c:f6:c7:dc:a0: 15:de:ee:cc:f1:bd:f5:4f:32:e9:fe:b8:15:79:b2: 17:50:ac:22:e2:90:e0:80:ed:7b:ee:d2:6f:3a:1d: 33:d8:ce:7e:55:68:27:19:1a:87:36:bf:d2:68:77: b2:12:57:22:77:18:24:6b:5e:53:b0:68:2d:2b:b0: 6c:25:d2:76:c2:c1:a5:26:fc:10:06:69:1c:2f:e0: 06:a6:88:3a:39:b0:63:b2:a2:bf:5f:ec:dc:e8:30: 60:ef:a0:57:a3:c7:24:3b:d8:00:26:74:c2:3c:28: 95:99:b2:df:c3:1a:a5:8c:fd:6f:53:13:b0:89:4c: 8c:37:eb:41:a2:ed:76:bd:20:26:f4:61:45:f7:6e: 49:18:1a:7a:56:fe:11:55:a7:07:3c:17:0f:e8:e4: f4:c9:72:52:c4:3c:d7:b5:15:ca:3c:a9:61:e9:4c: 21:33:98:19:7e:1e:02:8f:9f:8b:19:9b:dc:dc:84: 06:7e:d5:eb:e3:ca:d9:96:d1:3f:b4:da:96:72:20: 92:5e:5a:ee:3b:2b:b4:52:29:78:68:09:2e:b6:e5: 5a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:27:09:D8:9C:B6:DF:6C:62:CC:E5:0F:07:7A:93:53:12:D5:4F:AE X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/C3CCADD2CAF211EEBA58E81EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.242.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:0a:b9:a6:7a:3e:9b:f1:47:f7:07:db:db:1f:80:85:15:43: 7d:5a:10:2a:d7:21:75:e8:07:f2:7f:37:fe:29:96:f6:62:d6: da:13:0b:b8:4c:90:b7:43:ad:c9:b9:b1:e4:70:66:1c:89:a2: a6:dc:00:ba:99:5d:81:8a:30:89:6f:11:ea:5c:1b:8a:36:1f: 87:c2:f7:03:3d:5b:c5:23:99:a4:38:ac:06:5b:78:5e:ed:41: eb:e5:60:09:09:cb:88:da:4b:a4:cd:79:b5:1d:0f:de:b3:5a: 19:c2:c3:bc:38:18:2f:e6:ec:11:6a:30:4d:cf:64:b5:f5:38: 4e:50:a6:5b:51:d1:e3:ca:c0:dc:c0:30:d9:4c:0d:d5:40:e7: 5a:bc:b7:d7:6d:2f:f6:8d:ca:3b:36:f8:09:ab:24:97:b8:fb: 7e:32:9a:f2:36:2f:43:60:c0:e2:79:89:c3:d9:9d:1b:37:ec: 3d:f8:e7:b5:e7:bd:80:96:6a:be:6e:c6:60:0c:d1:13:0a:df: 1e:1c:a6:3a:f9:7e:5e:f0:58:af:b1:5c:d8:3d:6f:9c:98:76: 89:95:7b:1b:86:96:fc:db:d3:b5:47:d2:8f:31:d4:2c:d5:97: ac:a6:91:80:7c:90:5e:2f:d3:a7:67:83:e9:c0:b2:db:d1:b5: 1e:23:0b:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjYwMzE5MDMzOTEwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJiNmZkZS1iYzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60CAcWqzcZxOflzmdnCN4CLF+xN6hMCKwpSgsGSh7YXxupcR9M8vfPbH3KAV 3u7M8b31TzLp/rgVebIXUKwi4pDggO177tJvOh0z2M5+VWgnGRqHNr/SaHeyElci dxgka15TsGgtK7BsJdJ2wsGlJvwQBmkcL+AGpog6ObBjsqK/X+zc6DBg76BXo8ck O9gAJnTCPCiVmbLfwxqljP1vUxOwiUyMN+tBou12vSAm9GFF925JGBp6Vv4RVacH PBcP6OT0yXJSxDzXtRXKPKlh6UwhM5gZfh4Cj5+LGZvc3IQGftXr48rZltE/tNqW ciCSXlruOyu0Uil4aAkutuVaEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDsnCdic tt9sYszlDwd6k1MS1U+uMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFBMzAvNEI3QTE4NkFDQUYyMTFFRUFDREIyRTFFQzRGOUFFMDIvQzNDQ0FERDJD QUYyMTFFRUJBNThFODFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ/yMA0GCSqGSIb3DQEBCwUAA4IBAQCcCrmmej6b8Uf3B9vbH4CF FUN9WhAq1yF16Afyfzf+KZb2YtbaEwu4TJC3Q63JubHkcGYciaKm3AC6mV2BijCJ bxHqXBuKNh+HwvcDPVvFI5mkOKwGW3he7UHr5WAJCcuI2kukzXm1HQ/es1oZwsO8 OBgv5uwRajBNz2S19ThOUKZbUdHjysDcwDDZTA3VQOdavLfXbS/2jco7NvgJqySX uPt+MpryNi9DYMDieYnD2Z0bN+w9+Oe1572Almq+bsZgDNETCt8eHKY6+X5e8Fiv sVzYPW+cmHaJlXsbhpb829O1R9KPMdQs1ZesppGAfJBeL9OnZ4PpwLLb0bUeIwvp -----END CERTIFICATE-----Generated at Thu Mar 26 22:28:22 2026 by rpki-client