$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/CB24F37C033711F0B76A8520C4F9AE02.roa File: CB24F37C033711F0B76A8520C4F9AE02.roa (raw, json) Hash identifier: 6FOSG+PDOX8IQ8IkU4F+r2ZxK7Ap4wqnXAN3PEPi5FM= Subject key identifier: CC:40:33:6E:7A:70:D3:C1:4F:69:BA:90:F9:55:D6:21:E5:EE:B5:49 Certificate issuer: /CN=A9152787/serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Certificate serial: 017B Authority key identifier: 5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/CB24F37C033711F0B76A8520C4F9AE02.roa Signing time: Sun 20 Sep 2026 04:30:08 +0000 ROA not before: Sun 20 Sep 2026 04:30:08 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151495 IP address blocks: 157.20.65.0/24 maxlen: 24 157.20.65.0/32 maxlen: 32 157.20.65.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152787, serialNumber=5D946D4F479D37BCE1700CB0BADD51A2C3DF620F Validity Not Before: Sep 20 04:30:08 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aaf6150-630e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:21:b0:6f:46:90:23:48:ad:96:56:cb:1f: 71:fe:c0:89:11:72:f9:34:c2:30:6a:d7:23:ad:d8: 06:a3:a2:61:ed:12:40:c4:ac:59:2b:fa:32:4e:9b: c5:6b:4a:f7:80:2e:d8:40:94:b3:6a:6c:fb:44:f1: 02:69:26:95:72:03:fd:56:fc:09:94:14:e9:70:61: f6:d9:46:86:8a:c3:d2:ec:d8:bc:a1:f5:fd:01:85: a4:6b:24:74:5c:e2:f7:84:e1:a3:74:70:4c:d1:33: cf:1f:5b:65:e8:c0:91:0c:b7:c6:22:fa:65:90:0a: 91:f3:ed:29:9b:93:c1:21:97:33:06:f4:d2:16:68: 02:20:14:1e:fa:57:10:01:7a:33:ae:ce:39:e5:ae: 7c:8a:25:9b:4f:c6:20:77:00:04:30:45:67:67:7c: 14:39:01:54:9a:14:7c:be:ba:5f:e1:e2:45:68:38: 7d:88:db:bb:0d:da:e6:7d:b7:8b:48:aa:5c:4d:da: b9:b7:28:69:d6:90:44:5c:4b:f0:a7:90:92:2f:b7: e1:86:74:1b:1f:df:10:98:b8:bb:6b:84:d2:2f:a1: b9:61:12:c7:db:5d:0c:0e:59:4f:f1:b7:2c:d0:de: 31:46:18:6c:da:5f:36:54:8b:0a:83:62:59:4a:8d: c9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:40:33:6E:7A:70:D3:C1:4F:69:BA:90:F9:55:D6:21:E5:EE:B5:49 X509v3 Authority Key Identifier: keyid:5D:94:6D:4F:47:9D:37:BC:E1:70:0C:B0:BA:DD:51:A2:C3:DF:62:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/XZRtT0edN7zhcAywut1RosPfYg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XZRtT0edN7zhcAywut1RosPfYg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152787/2286562A8F7911EF92AC781EC4F9AE02/CB24F37C033711F0B76A8520C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.65.0/24 Signature Algorithm: sha256WithRSAEncryption 90:db:0e:7b:c1:85:ab:16:ba:7f:6c:3d:fd:8f:b6:2d:b0:94: 21:bc:b0:5a:9e:7d:b6:a2:33:3e:88:a4:4e:f4:fd:a9:38:16: 60:e4:c9:84:e9:91:64:eb:92:ed:80:98:09:5d:6f:93:d2:0b: 67:93:db:55:a5:c8:ad:ee:0d:bf:23:5c:16:31:5c:ba:b3:58: 0b:b2:37:09:2f:87:11:70:7a:cc:ed:55:f3:4f:ab:34:94:b6: ae:3b:8f:74:62:dc:74:30:6f:67:51:ed:95:b3:af:08:ad:22: 77:84:5c:e2:9a:72:c2:0e:6c:bd:93:77:ac:04:1e:8d:7d:32: 8c:aa:07:0b:1c:f9:2f:6b:df:b4:a7:80:d7:2d:67:79:67:72: c9:54:6f:95:1d:e9:e1:e7:d4:40:2a:43:0d:06:80:92:2a:f1: c8:0d:3a:58:40:3b:d8:c2:ba:83:33:1e:4a:cf:3a:7b:28:a0: cd:46:aa:86:cf:25:b8:1f:e4:d7:3e:cb:76:5a:c1:6f:97:83: 16:eb:51:bb:97:a8:2d:f2:f1:36:fe:de:73:0d:3c:37:5f:49: 32:8c:4f:89:cc:e5:61:41:3f:e7:73:8d:c9:28:a4:6f:6b:57: 8a:0f:08:0b:68:2d:f2:2a:36:3e:35:02:40:e2:8c:af:9a:9c: 6a:62:58:c6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3ODcxMTAvBgNVBAUTKDVEOTQ2RDRGNDc5RDM3QkNFMTcwMENCMEJBREQ1MUEy QzNERjYyMEYwHhcNMjYwOTIwMDQzMDA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFmNjE1MC02MzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24ghsG9GkCNIrZZWyx9x/sCJEXL5NMIwatcjrdgGo6Jh7RJAxKxZK/oyTpvF a0r3gC7YQJSzamz7RPECaSaVcgP9VvwJlBTpcGH22UaGisPS7Ni8ofX9AYWkayR0 XOL3hOGjdHBM0TPPH1tl6MCRDLfGIvplkAqR8+0pm5PBIZczBvTSFmgCIBQe+lcQ AXozrs455a58iiWbT8YgdwAEMEVnZ3wUOQFUmhR8vrpf4eJFaDh9iNu7DdrmfbeL SKpcTdq5tyhp1pBEXEvwp5CSL7fhhnQbH98QmLi7a4TSL6G5YRLH210MDllP8bcs 0N4xRhhs2l82VIsKg2JZSo3JkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMxAM256 cNPBT2m6kPlV1iHl7rVJMB8GA1UdIwQYMBaAFF2UbU9HnTe84XAMsLrdUaLD32IP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mjc4Ny8yMjg2NTYyQThG NzkxMUVGOTJBQzc4MUVDNEY5QUUwMi9YWlJ0VDBlZE43emhjQXl3dXQxUm9zUGZZ ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1haUnRUMGVkTjd6aGNBeXd1dDFSb3NQZllnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI3ODcvMjI4NjU2MkE4Rjc5MTFFRjkyQUM3ODFFQzRGOUFFMDIvQ0IyNEYzN0Mw MzM3MTFGMEI3NkE4NTIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnRRBMA0GCSqGSIb3DQEBCwUAA4IBAQCQ2w57wYWrFrp/bD39j7Yt sJQhvLBann22ojM+iKRO9P2pOBZg5MmE6ZFk65LtgJgJXW+T0gtnk9tVpcit7g2/ I1wWMVy6s1gLsjcJL4cRcHrM7VXzT6s0lLauO490Ytx0MG9nUe2Vs68IrSJ3hFzi mnLCDmy9k3esBB6NfTKMqgcLHPkva9+0p4DXLWd5Z3LJVG+VHenh59RAKkMNBoCS KvHIDTpYQDvYwrqDMx5Kzzp7KKDNRqqGzyW4H+TXPst2WsFvl4MW61G7l6gt8vE2 /t5zDTw3X0kyjE+JzOVhQT/nc43JKKRva1eKDwgLaC3yKjY+NQJA4oyvmpxqYljG -----END CERTIFICATE-----Generated at Fri Sep 25 17:41:52 2026 by rpki-client