$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/255842A2EFF411EE853CC833C4F9AE02.roa File: 255842A2EFF411EE853CC833C4F9AE02.roa (raw, json) Hash identifier: 3zorNKE/Za5VvMkZZVN1UraEZu7wavI4AN86TSPunrs= Subject key identifier: 8E:23:F2:0A:FF:46:C4:BB:46:65:B9:00:2F:D6:BD:E8:D9:81:20:43 Certificate issuer: /CN=A918E85E/serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Certificate serial: 0169 Authority key identifier: 72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/255842A2EFF411EE853CC833C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:10:42 +0000 ROA not before: Sat 29 Mar 2025 05:31:04 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38203 IP address blocks: 157.20.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E, serialNumber=72D1F679C96D205C2D471C94A80DEF60D911261C Validity Not Before: Mar 29 05:31:04 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a59a61-dac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:6b:95:82:91:8e:8f:ae:c6:a0:b6:f3:74: c4:0f:b2:87:28:ce:7e:54:16:5e:83:7c:53:a6:01: 18:95:f1:02:1b:9c:0f:25:e3:4b:39:9d:e3:4b:4a: e5:24:92:07:0e:94:d2:59:d5:e2:4f:89:21:38:af: 83:cd:30:c4:5d:b4:5f:46:26:06:8c:c5:97:32:95: 06:3e:b1:94:9f:ef:e7:75:df:0f:14:6d:2b:72:66: 03:30:99:f3:25:af:15:9f:ee:dd:94:42:c1:8b:4c: fe:24:ef:66:89:56:5b:06:85:b1:82:f5:d9:df:1a: 0b:33:54:41:dc:2c:57:f5:18:b9:aa:4b:28:9b:ae: fe:92:1f:e5:d0:fb:82:73:2d:1a:f8:28:82:46:ff: af:27:6e:72:e0:24:86:0f:a9:09:99:74:5a:1d:f9: f3:fd:f6:ec:22:50:3e:3a:a2:73:e0:8d:ea:5e:05: 1e:49:d3:f3:01:ed:fa:fa:3c:bb:27:ec:6c:68:5c: a3:58:78:76:93:c4:d5:c5:60:07:45:64:94:d9:3c: 00:1d:e4:c0:d9:38:ae:b0:5e:e4:3d:a6:7c:f4:18: 72:b0:6f:56:a0:ad:04:45:8d:31:82:b9:61:d8:7d: 9a:74:1d:f1:ec:99:80:91:56:1e:5c:42:c6:fc:36: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:23:F2:0A:FF:46:C4:BB:46:65:B9:00:2F:D6:BD:E8:D9:81:20:43 X509v3 Authority Key Identifier: keyid:72:D1:F6:79:C9:6D:20:5C:2D:47:1C:94:A8:0D:EF:60:D9:11:26:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/ctH2ecltIFwtRxyUqA3vYNkRJhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ctH2ecltIFwtRxyUqA3vYNkRJhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/5BC1267AEFF311EE977CAC31C4F9AE02/255842A2EFF411EE853CC833C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.148.0/23 Signature Algorithm: sha256WithRSAEncryption 79:7b:67:d5:56:29:c0:e2:a9:28:bc:96:50:5c:4d:d3:92:de: a9:df:71:b5:27:9f:53:18:c8:c0:91:ff:ac:14:ee:74:c9:16: f3:86:98:ae:d4:50:a3:a5:05:88:d3:d9:80:1f:fc:e2:ff:b1: 82:c7:1e:99:e7:e6:e4:ed:2b:43:37:6b:9b:76:20:fd:d9:4f: 2e:e2:05:53:80:ef:66:29:ef:f2:c6:5a:3c:0b:fb:44:2e:37: f0:c7:27:ca:bd:c8:08:63:b3:a2:9f:fd:1a:76:09:db:2d:f1: 2d:cc:6e:11:65:55:78:17:d5:6e:61:c5:7f:5f:37:4c:5a:fe: 36:9a:de:9d:1d:2c:d4:85:bd:5b:4f:ba:f5:86:fd:46:2c:4f: 31:57:a6:c6:e2:a2:a8:5a:84:59:a9:68:e0:f5:2a:91:d3:e7: f0:52:9f:62:17:38:6b:2a:a5:e3:67:bf:98:b2:b6:e6:79:cd: bf:10:6f:2e:5d:d5:8b:ee:de:b0:3b:7b:be:7c:8d:2e:3f:24: 51:f4:32:f0:fe:d2:51:2a:83:e6:0c:92:f8:4d:95:62:b0:d4: b5:e0:a6:c4:40:09:5e:f0:fb:52:aa:8f:46:87:c8:9a:b3:f5: 10:ac:c3:29:4e:44:49:62:29:16:78:a8:07:d6:79:72:60:46: 39:56:57:28 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NUUxMTAvBgNVBAUTKDcyRDFGNjc5Qzk2RDIwNUMyRDQ3MUM5NEE4MERFRjYw RDkxMTI2MUMwHhcNMjUwMzI5MDUzMTA0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWE2MS1kYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLFrlYKRjo+uxqC283TED7KHKM5+VBZeg3xTpgEYlfECG5wPJeNLOZ3jS0rl JJIHDpTSWdXiT4khOK+DzTDEXbRfRiYGjMWXMpUGPrGUn+/ndd8PFG0rcmYDMJnz Ja8Vn+7dlELBi0z+JO9miVZbBoWxgvXZ3xoLM1RB3CxX9Ri5qksom67+kh/l0PuC cy0a+CiCRv+vJ25y4CSGD6kJmXRaHfnz/fbsIlA+OqJz4I3qXgUeSdPzAe36+jy7 J+xsaFyjWHh2k8TVxWAHRWSU2TwAHeTA2TiusF7kPaZ89BhysG9WoK0ERY0xgrlh 2H2adB3x7JmAkVYeXELG/Da/CQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI4j8gr/ RsS7RmW5AC/WvejZgSBDMB8GA1UdIwQYMBaAFHLR9nnJbSBcLUcclKgN72DZESYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS81QkMxMjY3QUVG RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi9jdEgyZWNsdElGd3RSeHlVcUEzdllOa1JK aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2N0SDJlY2x0SUZ3dFJ4eVVxQTN2WU5rUkpody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU4NUUvNUJDMTI2N0FFRkYzMTFFRTk3N0NBQzMxQzRGOUFFMDIvMjU1ODQyQTJF RkY0MTFFRTg1M0NDODMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRSUMA0GCSqGSIb3DQEBCwUAA4IBAQB5e2fVVinA4qkovJZQXE3T kt6p33G1J59TGMjAkf+sFO50yRbzhpiu1FCjpQWI09mAH/zi/7GCxx6Z5+bk7StD N2ubdiD92U8u4gVTgO9mKe/yxlo8C/tELjfwxyfKvcgIY7Oin/0adgnbLfEtzG4R ZVV4F9VuYcV/XzdMWv42mt6dHSzUhb1bT7r1hv1GLE8xV6bG4qKoWoRZqWjg9SqR 0+fwUp9iFzhrKqXjZ7+Ysrbmec2/EG8uXdWL7t6wO3u+fI0uPyRR9DLw/tJRKoPm DJL4TZVisNS14KbEQAle8PtSqo9Gh8ias/UQrMMpTkRJYikWeKgH1nlyYEY5Vlco -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:03 2026 by rpki-client