$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa File: 4A181CDA609011F0AB85BC5AC4F9AE02.roa (raw, json) Hash identifier: 9ETPEGFnry+GRsP7xV3yE87kvhmIHVs2gjRTYsGzun0= Subject key identifier: D7:7E:82:7E:39:6F:DA:7E:C0:37:DE:18:44:F3:B1:74:3F:73:72:93 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0622 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa Signing time: Mon 14 Jul 2025 08:55:28 +0000 ROA not before: Mon 14 Jul 2025 08:55:28 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.15.84.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1570 (0x622) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jul 14 08:55:28 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6874c600-85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:d4:87:c7:9f:5b:4a:77:6e:d5:0e:d5:49: c1:de:b8:07:40:f0:9d:de:9b:a2:b1:1a:38:9e:9c: 5d:81:50:95:bb:e6:2b:1c:f7:67:2f:00:41:e4:45: 02:01:cb:ce:0e:e9:e4:91:75:65:71:72:55:fb:cd: 34:7d:cb:ae:fd:01:d8:4a:88:28:70:67:98:de:b7: dc:8e:d3:99:bd:d1:8f:07:d9:52:74:31:d2:b3:3a: 9f:1d:46:4d:e1:39:2b:fb:20:33:d3:86:c7:51:c5: 2c:39:82:2a:c3:78:a5:11:8c:4d:2a:51:35:22:81: 13:42:4f:4a:0b:36:b6:d7:95:bb:30:4e:dd:51:f2: b9:a8:32:04:08:25:20:29:4e:1b:39:44:b6:a4:5d: 77:42:11:29:9b:9d:b6:fb:9a:0b:50:ed:cc:8a:e2: 99:d6:34:7e:91:1c:f0:1e:6f:27:83:bd:2e:00:e3: d8:3a:c0:17:2d:0b:89:33:b8:0b:6c:84:03:eb:f7: 79:66:3b:0d:ce:2b:c9:62:72:d5:2d:95:2b:a5:96: 15:c2:e9:c7:39:d7:3b:42:2d:68:a6:f3:33:e8:6b: c4:fe:1b:8e:03:6c:6a:30:2b:02:2e:de:8a:c8:26: f0:5f:a5:7e:34:91:49:ed:a2:60:7d:22:5a:51:af: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7E:82:7E:39:6F:DA:7E:C0:37:DE:18:44:F3:B1:74:3F:73:72:93 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.15.84.0/23 157.20.82.0/23 160.25.166.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 Signature Algorithm: sha256WithRSAEncryption 30:99:79:a5:98:9c:53:bb:13:93:de:4f:5b:df:9d:03:95:e0: a1:cf:e7:73:39:c6:ca:91:c6:30:9d:35:a3:5a:b8:9a:7d:76: 44:27:b4:05:10:dc:94:30:53:6e:b3:e2:bb:6d:a8:7f:62:51: b7:cc:a7:14:69:86:c4:6f:77:0a:ca:b3:94:66:10:8c:36:78: ad:b6:d2:0a:91:03:4e:0c:de:4f:16:67:3e:9a:37:7d:b3:0c: 53:43:8b:2c:ed:89:5a:d6:23:da:4c:43:49:f2:e8:89:f5:2d: 3b:cb:7d:fa:ca:a0:16:8b:8d:f1:c0:2d:65:48:76:0c:c1:53: b2:b1:05:15:f3:e9:6a:5a:a7:f1:2a:cc:65:87:d7:57:20:d1: bc:88:dd:eb:82:7f:a8:ce:91:2e:89:15:73:00:3d:0b:7a:93: f8:2a:c0:0a:6e:64:10:63:40:86:27:a3:ce:b2:2b:28:42:19: e6:0c:26:44:6a:53:22:12:42:01:e7:fc:9f:be:2a:d0:0c:64: a5:d4:d2:b4:f9:f5:23:85:f3:a9:48:9b:b5:21:6e:1f:59:28: 1c:29:66:77:d9:3d:9f:75:ed:90:28:7b:4a:92:df:35:1c:83: 6c:6a:e6:a0:24:34:76:36:62:53:bd:56:3f:01:21:ac:61:2d: 37:5d:6b:f0 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICBiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwNzE0MDg1NTI4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc0YzYwMC04NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttXUh8efW0p3btUO1UnB3rgHQPCd3puisRo4npxdgVCVu+YrHPdnLwBB5EUC AcvODunkkXVlcXJV+800fcuu/QHYSogocGeY3rfcjtOZvdGPB9lSdDHSszqfHUZN 4Tkr+yAz04bHUcUsOYIqw3ilEYxNKlE1IoETQk9KCza215W7ME7dUfK5qDIECCUg KU4bOUS2pF13QhEpm522+5oLUO3MiuKZ1jR+kRzwHm8ng70uAOPYOsAXLQuJM7gL bIQD6/d5ZjsNzivJYnLVLZUrpZYVwunHOdc7Qi1opvMz6GvE/huOA2xqMCsCLt6K yCbwX6V+NJFJ7aJgfSJaUa/erwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFNd+gn45 b9p+wDfeGETzsXQ/c3KTMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEExODFDREE2 MDkwMTFGMEFCODVCQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAGdCjQDBAGdD1QDBAGdFFIDBAGgGaYDBAGgu5IwDAMEAaC/ VgMEAaC/WAMEAaD6tDANBgkqhkiG9w0BAQsFAAOCAQEAMJl5pZicU7sTk95PW9+d A5Xgoc/ncznGypHGMJ01o1q4mn12RCe0BRDclDBTbrPiu22of2JRt8ynFGmGxG93 CsqzlGYQjDZ4rbbSCpEDTgzeTxZnPpo3fbMMU0OLLO2JWtYj2kxDSfLoifUtO8t9 +sqgFouN8cAtZUh2DMFTsrEFFfPpalqn8SrMZYfXVyDRvIjd64J/qM6RLokVcwA9 C3qT+CrACm5kEGNAhiejzrIrKEIZ5gwmRGpTIhJCAef8n74q0AxkpdTStPn1I4Xz qUibtSFuH1koHClmd9k9n3XtkCh7SpLfNRyDbGrmoCQ0djZiU71WPwEhrGEtN11r 8A== -----END CERTIFICATE-----Generated at Mon Jul 21 23:41:54 2025 by rpki-client