$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa File: 4A181CDA609011F0AB85BC5AC4F9AE02.roa (raw, json) Hash identifier: 75uksTDjfRUwy77cXEWGDPZCJhhWa8LmsDaNGurEKd4= Subject key identifier: 02:81:4B:25:3B:CC:35:B5:95:6F:7A:68:79:B5:15:3A:60:C3:24:EA Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0680 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:06 +0000 ROA not before: Thu 28 Aug 2025 14:51:06 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.15.84.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:06 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06cd9-8295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:5d:f7:69:ff:5b:c4:38:d2:91:81:8f:08: c7:0c:bf:32:9c:4b:89:c2:bc:c0:ea:92:ce:d7:ee: c6:40:d7:30:80:56:ca:45:b0:a5:59:a8:d8:5d:26: ec:7b:53:f3:b8:7f:88:17:28:94:c2:99:6f:54:31: b3:ed:cf:9a:9a:db:46:5a:94:c6:66:68:26:1c:df: a5:75:2b:fa:31:25:7a:0f:c3:c4:22:c0:43:f3:cd: 2c:08:cb:da:1e:22:74:4e:64:aa:e2:c3:97:d8:a2: 00:37:04:54:8d:7c:10:4e:7a:dd:3f:2e:fe:dc:5d: 6d:08:8c:fc:ae:ad:87:38:36:fd:77:25:67:69:72: e3:32:f6:77:86:27:eb:4c:77:16:38:cc:d3:22:f8: e0:5e:d8:c0:1d:68:c7:08:6f:f0:74:cf:01:e9:93: 48:33:a5:0f:19:e9:b1:7c:4c:cb:48:f0:e2:d6:9b: 58:66:96:3d:be:55:c6:8c:aa:f4:97:03:4b:09:64: 23:56:a9:1d:cd:2e:98:fc:1c:ce:c6:48:17:6d:78: 7c:e4:dc:23:72:8e:63:c4:b1:cd:d3:7d:0a:98:f7: e8:fe:98:50:f3:63:ca:29:79:63:cd:40:f1:eb:fd: a7:7b:2c:e0:5a:b2:45:d8:f4:13:8c:37:b0:05:ea: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:81:4B:25:3B:CC:35:B5:95:6F:7A:68:79:B5:15:3A:60:C3:24:EA X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.15.84.0/23 157.20.82.0/23 160.25.166.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 Signature Algorithm: sha256WithRSAEncryption 35:d2:7a:60:83:9c:92:8f:32:83:12:e6:8c:f7:b9:6f:4e:19: 06:f7:61:07:8a:8d:de:4f:cc:6b:2a:23:00:8f:ab:3f:4d:9d: ab:3c:1e:e2:32:cd:e6:c2:a7:e8:91:32:b6:cd:6f:9e:be:91: 85:8a:11:c1:d0:07:3c:bd:d1:f5:e0:30:9b:7c:5c:2b:e1:cf: ed:8f:b1:34:b6:a2:ab:79:ac:cc:b6:b1:d9:7c:16:20:ed:41: fd:0d:88:cf:c1:09:2b:48:33:14:85:87:ae:4c:2a:dc:11:d3: 00:70:52:c7:1f:6f:19:31:f9:cb:36:71:08:df:f9:20:bd:9b: 9b:f5:00:0f:66:f1:63:91:ac:58:5f:11:b6:eb:53:22:03:0c: 0e:9d:f9:4e:7b:34:ae:a5:46:8d:58:4a:e8:47:7c:12:50:1b: 8e:63:df:6a:22:9e:50:c9:5e:53:cc:f7:95:a5:a4:d3:82:f4: eb:b6:a9:eb:39:c6:34:a5:18:29:07:b6:d3:32:31:dc:65:29: 18:2e:c6:af:45:51:5d:c7:7d:c6:eb:2e:61:cb:20:2b:c4:08: 19:25:fa:89:19:e5:95:f6:68:3a:5d:b9:45:31:b4:41:7a:f8: 38:7c:8f:61:a6:0f:72:af:f0:53:dd:e9:1d:c7:b2:45:5b:5b: 98:b1:e6:aa -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNkOS04Mjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fFd92n/W8Q40pGBjwjHDL8ynEuJwrzA6pLO1+7GQNcwgFbKRbClWajYXSbs e1PzuH+IFyiUwplvVDGz7c+amttGWpTGZmgmHN+ldSv6MSV6D8PEIsBD880sCMva HiJ0TmSq4sOX2KIANwRUjXwQTnrdPy7+3F1tCIz8rq2HODb9dyVnaXLjMvZ3hifr THcWOMzTIvjgXtjAHWjHCG/wdM8B6ZNIM6UPGemxfEzLSPDi1ptYZpY9vlXGjKr0 lwNLCWQjVqkdzS6Y/BzOxkgXbXh85Nwjco5jxLHN030KmPfo/phQ82PKKXljzUDx 6/2neyzgWrJF2PQTjDewBeq8uQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFAKBSyU7 zDW1lW96aHm1FTpgwyTqMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEExODFDREE2 MDkwMTFGMEFCODVCQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAGdCjQDBAGdD1QDBAGdFFIDBAGgGaYDBAGgu5IwDAMEAaC/ VgMEAaC/WAMEAaD6tDANBgkqhkiG9w0BAQsFAAOCAQEANdJ6YIOcko8ygxLmjPe5 b04ZBvdhB4qN3k/MayojAI+rP02dqzwe4jLN5sKn6JEyts1vnr6RhYoRwdAHPL3R 9eAwm3xcK+HP7Y+xNLaiq3mszLax2XwWIO1B/Q2Iz8EJK0gzFIWHrkwq3BHTAHBS xx9vGTH5yzZxCN/5IL2bm/UAD2bxY5GsWF8RtutTIgMMDp35Tns0rqVGjVhK6Ed8 ElAbjmPfaiKeUMleU8z3laWk04L067ap6znGNKUYKQe20zIx3GUpGC7Gr0VRXcd9 xusuYcsgK8QIGSX6iRnllfZoOl25RTG0QXr4OHyPYaYPcq/wU93pHceyRVtbmLHm qg== -----END CERTIFICATE-----Generated at Sun Sep 7 00:29:37 2025 by rpki-client