$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/1E595AE8DD0E11EE9833196BC4F9AE02.roa File: 1E595AE8DD0E11EE9833196BC4F9AE02.roa (raw, json) Hash identifier: wOdLJIpHlnEyWAzSPv9+zZxUu2MA92YWWlK509a7alM= Subject key identifier: 4D:48:0E:ED:D8:57:F9:E9:C8:8F:07:24:2E:D7:E3:E7:3E:D9:AD:D3 Certificate issuer: /CN=A91A7CDD/serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E Certificate serial: 0176 Authority key identifier: 83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/1E595AE8DD0E11EE9833196BC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:11:05 +0000 ROA not before: Thu 27 Mar 2025 05:12:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 18109 IP address blocks: 157.20.114.0/24 maxlen: 24 157.20.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CDD, serialNumber=838A94ED25240959AA6F15491003AC6E6D03957E Validity Not Before: Mar 27 05:12:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a59a78-31f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:04:73:ec:5c:ce:8a:2f:65:2a:86:4e:15: 84:ed:4f:88:9f:6b:b9:61:9b:f0:cc:b1:05:e3:79: a9:bb:3a:14:38:77:11:6d:a4:5d:54:c6:b6:43:0c: c2:3e:f7:06:df:1e:2a:77:ee:8a:1a:da:e0:61:f8: 11:21:c8:d3:93:4f:ed:03:ea:a1:93:2c:54:b8:dc: 9c:d3:17:05:04:2d:4a:89:0d:cc:d3:67:d0:87:8d: 80:b1:73:34:9f:72:92:1e:9b:5f:07:2e:b6:bb:d9: c4:d2:be:8d:ca:90:24:44:0c:7b:66:40:35:45:a4: 37:97:b5:97:a4:7c:bd:cc:21:56:f2:15:7b:fc:69: 51:97:75:9e:a9:71:78:a6:6d:77:31:0e:b5:bd:34: c0:dc:8f:94:f4:db:29:d9:ae:27:85:70:b5:2a:6e: 8b:b4:18:54:77:18:bc:2a:95:7b:12:85:0d:28:ee: 8c:69:c1:dd:d1:f1:c2:01:3d:66:77:1f:25:49:e3: 49:12:b0:4d:67:2c:41:02:9b:f6:29:c1:89:e0:a4: 98:d7:a4:85:0c:0e:60:b6:e7:9f:7b:f8:f6:c5:47: 70:c0:8d:d7:1b:cf:c5:6f:8a:25:64:05:b9:c5:70: c2:18:13:68:f7:ac:23:ab:9b:87:e2:27:d2:29:95: f7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:48:0E:ED:D8:57:F9:E9:C8:8F:07:24:2E:D7:E3:E7:3E:D9:AD:D3 X509v3 Authority Key Identifier: keyid:83:8A:94:ED:25:24:09:59:AA:6F:15:49:10:03:AC:6E:6D:03:95:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/g4qU7SUkCVmqbxVJEAOsbm0DlX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4qU7SUkCVmqbxVJEAOsbm0DlX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CDD/8A23A6F8DD0D11EE9D292D6AC4F9AE02/1E595AE8DD0E11EE9833196BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.114.0/23 Signature Algorithm: sha256WithRSAEncryption d1:c6:83:07:b0:0f:7b:cb:85:be:73:25:e9:87:a0:ad:b4:05: 85:14:de:6c:5e:3a:5d:67:99:b2:4e:2c:28:17:44:45:50:6f: d7:29:bf:cf:56:af:13:ea:d7:7f:19:a0:a9:9b:e9:ea:69:f9: de:a7:b4:b6:00:6b:44:cf:20:10:a1:8e:5d:e0:4b:4e:3d:fe: af:dd:59:0b:4a:d1:f1:12:60:83:4d:0b:af:70:16:d2:bb:17: ff:23:25:89:7e:ca:ee:84:81:61:8b:cb:ad:40:6a:ba:eb:54: b4:c2:6a:af:9d:74:1f:47:fa:95:35:fa:16:5c:d8:c0:88:90: cd:94:bd:a1:b4:e0:87:05:a7:94:e9:35:92:94:da:30:b1:cd: 98:f1:71:97:ae:81:5d:54:9d:29:df:24:cf:da:ec:fe:76:24: 1d:d8:4d:aa:1b:21:dd:6e:e4:ad:8b:30:1f:57:66:0a:03:34: e6:d6:1e:39:44:74:46:d1:74:a0:cb:4a:83:f2:47:10:ce:bc: c2:29:83:21:4b:52:7d:bb:34:52:08:0e:70:5b:f4:8b:6b:d8: 2b:12:61:79:64:21:ca:4e:3c:41:43:23:c8:15:b2:38:6b:92: 5d:0d:9b:72:05:23:c8:17:4c:ef:cc:85:5f:98:b9:50:61:6a: 21:33:f5:b9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDREQxMTAvBgNVBAUTKDgzOEE5NEVEMjUyNDA5NTlBQTZGMTU0OTEwMDNBQzZF NkQwMzk1N0UwHhcNMjUwMzI3MDUxMjAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWE3OC0zMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAAEc+xczoovZSqGThWE7U+In2u5YZvwzLEF43mpuzoUOHcRbaRdVMa2QwzC PvcG3x4qd+6KGtrgYfgRIcjTk0/tA+qhkyxUuNyc0xcFBC1KiQ3M02fQh42AsXM0 n3KSHptfBy62u9nE0r6NypAkRAx7ZkA1RaQ3l7WXpHy9zCFW8hV7/GlRl3WeqXF4 pm13MQ61vTTA3I+U9Nsp2a4nhXC1Km6LtBhUdxi8KpV7EoUNKO6MacHd0fHCAT1m dx8lSeNJErBNZyxBApv2KcGJ4KSY16SFDA5gtuefe/j2xUdwwI3XG8/Fb4olZAW5 xXDCGBNo96wjq5uH4ifSKZX35wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE1IDu3Y V/npyI8HJC7X4+c+2a3TMB8GA1UdIwQYMBaAFIOKlO0lJAlZqm8VSRADrG5tA5V+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NERC84QTIzQTZGOERE MEQxMUVFOUQyOTJENkFDNEY5QUUwMi9nNHFVN1NVa0NWbXFieFZKRUFPc2JtMERs WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c0cVU3U1VrQ1ZtcWJ4VkpFQU9zYm0wRGxYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTdDREQvOEEyM0E2RjhERDBEMTFFRTlEMjkyRDZBQzRGOUFFMDIvMUU1OTVBRThE RDBFMTFFRTk4MzMxOTZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRyMA0GCSqGSIb3DQEBCwUAA4IBAQDRxoMHsA97y4W+cyXph6Ct tAWFFN5sXjpdZ5myTiwoF0RFUG/XKb/PVq8T6td/GaCpm+nqafnep7S2AGtEzyAQ oY5d4EtOPf6v3VkLStHxEmCDTQuvcBbSuxf/IyWJfsruhIFhi8utQGq661S0wmqv nXQfR/qVNfoWXNjAiJDNlL2htOCHBaeU6TWSlNowsc2Y8XGXroFdVJ0p3yTP2uz+ diQd2E2qGyHdbuStizAfV2YKAzTm1h45RHRG0XSgy0qD8kcQzrzCKYMhS1J9uzRS CA5wW/SLa9grEmF5ZCHKTjxBQyPIFbI4a5JdDZtyBSPIF0zvzIVfmLlQYWohM/W5 -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:46 2026 by rpki-client