$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/84C953D2688011F1B19CA9CF6847A888.roa File: 84C953D2688011F1B19CA9CF6847A888.roa (raw, json) Hash identifier: fgzTloFvPEEAD/Z6TV0oH5S1jdOAkNOT7FUcowuC3Qo= Subject key identifier: C1:5F:A4:B7:CF:D4:14:52:52:5C:01:40:22:4A:93:A1:70:44:9C:65 Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 21F0 Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/84C953D2688011F1B19CA9CF6847A888.roa Signing time: Fri 14 Aug 2026 02:04:42 +0000 ROA not before: Fri 14 Aug 2026 02:04:42 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 23620 IP address blocks: 157.112.80.0/20 maxlen: 20 157.112.80.0/24 maxlen: 24 157.112.81.0/24 maxlen: 24 157.112.82.0/24 maxlen: 24 157.112.83.0/24 maxlen: 24 157.112.84.0/24 maxlen: 24 157.112.85.0/24 maxlen: 24 157.112.86.0/24 maxlen: 24 157.112.87.0/24 maxlen: 24 157.112.88.0/24 maxlen: 24 157.112.89.0/24 maxlen: 24 157.112.90.0/24 maxlen: 24 157.112.91.0/24 maxlen: 24 157.112.92.0/24 maxlen: 24 157.112.93.0/24 maxlen: 24 157.112.94.0/24 maxlen: 24 157.112.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8688 (0x21f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Aug 14 02:04:42 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a7e77b9-03e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:90:5d:3e:3c:46:e0:14:a3:e8:8d:05:9f: 58:0e:80:c4:3d:81:8f:15:eb:08:78:ae:5d:b8:c0: e6:74:0a:3a:fd:46:1c:69:c6:d3:40:70:f5:7e:fc: 17:b3:e7:d1:f8:7a:d8:2c:8a:05:bf:c8:2f:48:14: 9f:73:3a:34:39:2f:e8:e1:41:b9:f0:23:c5:9d:93: b4:32:bd:fa:ad:5c:b4:79:e1:63:5e:b5:6f:8d:c7: 24:5e:23:d3:15:fb:0f:8c:b9:04:33:a1:0c:be:75: 9b:b4:ea:2f:14:1e:cc:51:be:bd:00:91:26:32:94: 96:6e:1f:ff:b0:a6:7a:01:cc:39:b0:9f:62:2f:78: 9d:d2:da:2a:fb:30:cf:87:12:48:12:d6:87:1c:d3: b9:38:4b:e0:8c:ee:46:54:e4:56:ba:7e:72:4f:72: 3a:20:21:68:dc:84:81:88:1f:68:9e:bb:c3:02:b7: 48:87:95:92:9f:b2:32:15:a5:04:1f:73:c9:17:49: 8d:06:1c:b2:7f:6c:f7:cd:7a:a8:d0:82:83:11:3f: 55:01:96:b7:12:d2:b7:0e:a4:7c:44:e7:96:7a:e3: dd:e5:cb:07:ba:7f:4e:59:81:e3:d5:87:5d:f8:0c: 03:34:e1:31:1f:08:c0:25:a1:39:37:49:2d:a3:db: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5F:A4:B7:CF:D4:14:52:52:5C:01:40:22:4A:93:A1:70:44:9C:65 X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/84C953D2688011F1B19CA9CF6847A888.roa sbgp-ipAddrBlock: critical IPv4: 157.112.80.0/20 Signature Algorithm: sha256WithRSAEncryption 34:a7:de:91:15:d5:38:d9:71:b3:5e:d2:6a:63:2e:06:09:6c: df:89:14:63:1a:48:f4:9d:e3:47:4c:71:f1:66:a6:46:7a:43: 21:48:5b:2f:11:e6:54:95:8f:af:29:7b:1b:71:da:11:dc:23: 8e:66:ff:af:68:df:03:eb:17:48:25:50:dd:ad:bf:d1:c6:b5: 35:44:64:ad:91:32:ff:82:c2:60:f5:ef:a6:59:e0:4d:39:cb: 36:21:82:52:c2:08:00:c5:03:ba:cf:43:c3:2c:af:e2:b3:09: c1:54:7c:1b:00:2e:9c:cb:b8:fe:e9:01:83:b4:96:4f:62:a4: 7c:b8:ab:7e:83:fb:23:66:44:05:53:58:8a:a2:ad:84:63:a8: a3:d6:a3:4e:ea:7c:b8:61:22:43:42:47:1b:9b:59:22:b1:22: b3:1f:51:1a:8f:25:37:2c:bf:97:4b:2c:42:5a:99:9e:9e:cf: d7:fd:e8:a4:4a:eb:b2:1f:2e:52:7f:e9:7c:5f:7a:13:24:4c: a3:94:95:97:93:39:ab:8b:57:a2:06:a3:fc:d8:8e:20:59:0b: f3:c9:53:b2:26:2e:3f:18:c8:ed:93:32:14:bb:56:f4:35:22: 43:27:9a:23:b8:ac:95:d2:f6:86:09:8d:b1:78:61:51:b8:4b: 5d:d8:59:a4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjYwODE0MDIwNDQyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdlNzdiOS0wM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySSQXT48RuAUo+iNBZ9YDoDEPYGPFesIeK5duMDmdAo6/UYcacbTQHD1fvwX s+fR+HrYLIoFv8gvSBSfczo0OS/o4UG58CPFnZO0Mr36rVy0eeFjXrVvjcckXiPT FfsPjLkEM6EMvnWbtOovFB7MUb69AJEmMpSWbh//sKZ6Acw5sJ9iL3id0toq+zDP hxJIEtaHHNO5OEvgjO5GVORWun5yT3I6ICFo3ISBiB9onrvDArdIh5WSn7IyFaUE H3PJF0mNBhyyf2z3zXqo0IKDET9VAZa3EtK3DqR8ROeWeuPd5csHun9OWYHj1Ydd +AwDNOExHwjAJaE5N0kto9uJOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMFfpLfP 1BRSUlwBQCJKk6FwRJxlMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEI5MzYvNDA3NTEyMUFGMENEMTFFNUE0NDMyRTc0QzRGOUFFMDIvODRDOTUzRDI2 ODgwMTFGMUIxOUNBOUNGNjg0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEnXBQMA0GCSqGSIb3DQEBCwUAA4IBAQA0p96RFdU42XGzXtJqYy4G CWzfiRRjGkj0neNHTHHxZqZGekMhSFsvEeZUlY+vKXsbcdoR3COOZv+vaN8D6xdI JVDdrb/RxrU1RGStkTL/gsJg9e+mWeBNOcs2IYJSwggAxQO6z0PDLK/iswnBVHwb AC6cy7j+6QGDtJZPYqR8uKt+g/sjZkQFU1iKoq2EY6ij1qNO6ny4YSJDQkcbm1ki sSKzH1EajyU3LL+XSyxCWpmens/X/eikSuuyHy5Sf+l8X3oTJEyjlJWXkzmri1ei BqP82I4gWQvzyVOyJi4/GMjtkzIUu1b0NSJDJ5ojuKyV0vaGCY2xeGFRuEtd2Fmk -----END CERTIFICATE-----Generated at Sat Sep 26 09:58:30 2026 by rpki-client