$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa File: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (raw, json) Hash identifier: QXDdzYa6iyzovy5Z9ik5QXaJEcfXc3NGsSzn/V3Ryt4= Subject key identifier: BE:61:8F:90:4C:AA:7A:C5:89:B6:0D:0D:0B:B0:5E:96:98:4A:5A:0E Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0C80 Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa Signing time: Sat 30 Aug 2025 18:38:48 +0000 ROA not before: Sat 30 Aug 2025 18:38:48 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 10148 IP address blocks: 128.250.0.0/16 maxlen: 24 192.43.207.0/24 maxlen: 24 192.43.208.0/24 maxlen: 24 192.43.209.0/24 maxlen: 24 192.101.254.0/24 maxlen: 24 192.231.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Aug 30 18:38:48 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68b34538-53dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:25:db:ce:2e:22:e4:7f:94:21:4e:f0:9e:52: e4:e0:02:5b:f5:43:be:e0:52:bb:b6:73:31:24:c8: 46:bc:8a:72:9e:c1:ab:02:ba:58:5d:ad:31:07:19: 91:af:ed:33:00:3a:5d:ae:d8:02:16:a6:5e:e6:43: 97:86:f7:f9:9d:18:fe:7a:be:a7:c7:4a:83:b7:3b: 9a:46:ee:f9:63:25:6a:c6:55:fb:d8:4a:31:56:72: 2d:74:9e:d9:a4:e9:e5:13:ea:2f:8f:7c:0f:ad:c3: 00:23:ca:69:08:5a:c7:7e:d5:9f:c7:81:40:9e:03: ca:82:09:0e:86:e9:b9:55:ea:95:fe:84:89:0d:68: 56:8c:8d:31:57:d1:b6:6e:14:37:f8:f0:46:2b:be: 59:8b:e9:85:20:67:da:c6:07:e5:2f:04:ca:90:35: 79:5f:e0:b8:09:15:a8:5a:46:a6:7f:a1:bd:3a:36: 04:2b:60:63:30:24:c5:52:cf:93:3e:88:16:92:80: 95:a3:fb:ef:d4:d0:7f:3c:82:ef:79:86:b0:2f:05: 2e:ba:67:0d:3f:92:4d:29:39:02:ea:54:36:4f:d7: 40:cd:7c:f5:0e:c9:b7:50:51:39:99:75:ce:29:b0: 9a:d3:12:7b:1b:de:84:37:ad:ed:e0:0b:77:03:80: 43:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:61:8F:90:4C:AA:7A:C5:89:B6:0D:0D:0B:B0:5E:96:98:4A:5A:0E X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.250.0.0/16 192.43.207.0-192.43.209.255 192.101.254.0/24 192.231.127.0/24 Signature Algorithm: sha256WithRSAEncryption a0:8b:85:98:e9:bd:37:78:de:b0:08:5a:73:55:7e:a7:24:f9: d7:07:be:90:7e:4d:d9:80:d3:c0:7e:91:d0:8c:08:bc:6a:81: 6c:d6:b2:5d:69:46:ce:48:42:56:d2:7e:ec:44:06:10:52:6a: 7e:20:e8:e9:16:f5:e6:d5:8c:e7:fd:30:f1:53:31:3c:f2:a4: 56:aa:d6:59:d6:b4:89:6b:f1:38:3c:f3:86:7d:37:12:26:7c: 2a:24:66:67:d9:39:dd:57:cc:a7:bb:f5:2a:10:1f:6a:7c:c2: 4e:fd:ba:8f:37:4a:f0:b3:d0:1c:a3:c0:d7:43:fd:81:ca:09: 8d:f2:e2:12:d7:98:97:ce:8b:82:29:1b:10:dd:3c:d8:f9:b8: 1a:be:ba:75:11:e6:d6:c3:ab:ff:e8:9f:f2:35:6a:d5:9c:bb: d3:b8:42:a4:87:60:76:3f:e5:d5:2a:0f:9e:54:b0:e4:d2:2e: 5e:ad:72:f1:2d:bb:7e:ea:a8:32:02:39:c8:58:21:17:07:23: a0:a2:ec:b5:26:10:b4:4c:88:11:3e:d5:7f:ca:33:a1:70:e0: 4b:21:45:e5:53:20:08:52:99:9c:1a:01:ec:74:38:98:ab:94: 6b:6f:e6:ab:3f:6e:be:a5:26:dd:b8:36:de:e4:8f:fe:03:7f: 4d:90:6c:c2 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjUwODMwMTgzODQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzNDUzOC01M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSXbzi4i5H+UIU7wnlLk4AJb9UO+4FK7tnMxJMhGvIpynsGrArpYXa0xBxmR r+0zADpdrtgCFqZe5kOXhvf5nRj+er6nx0qDtzuaRu75YyVqxlX72EoxVnItdJ7Z pOnlE+ovj3wPrcMAI8ppCFrHftWfx4FAngPKggkOhum5VeqV/oSJDWhWjI0xV9G2 bhQ3+PBGK75Zi+mFIGfaxgflLwTKkDV5X+C4CRWoWkamf6G9OjYEK2BjMCTFUs+T PogWkoCVo/vv1NB/PILveYawLwUuumcNP5JNKTkC6lQ2T9dAzXz1Dsm3UFE5mXXO KbCa0xJ7G96EN63t4At3A4BDRwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFL5hj5BM qnrFibYNDQuwXpaYSloOMB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3QkEvNjgxMkRGOTIwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvMTU3QTFCRkM1 OUVFMTFFQkEzOThBQTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMCUEAgABMB8DAwCA+jAMAwQAwCvPAwQBwCvQAwQAwGX+AwQAwOd/MA0GCSqG SIb3DQEBCwUAA4IBAQCgi4WY6b03eN6wCFpzVX6nJPnXB76Qfk3ZgNPAfpHQjAi8 aoFs1rJdaUbOSEJW0n7sRAYQUmp+IOjpFvXm1Yzn/TDxUzE88qRWqtZZ1rSJa/E4 PPOGfTcSJnwqJGZn2TndV8ynu/UqEB9qfMJO/bqPN0rws9Aco8DXQ/2BygmN8uIS 15iXzouCKRsQ3TzY+bgavrp1EebWw6v/6J/yNWrVnLvTuEKkh2B2P+XVKg+eVLDk 0i5erXLxLbt+6qgyAjnIWCEXByOgouy1JhC0TIgRPtV/yjOhcOBLIUXlUyAIUpmc GgHsdDiYq5Rrb+arP26+pSbduDbe5I/+A39NkGzC -----END CERTIFICATE-----Generated at Sun Sep 7 19:21:29 2025 by rpki-client