$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa File: 80741B04221F11EF92A42E1AC4F9AE02.roa (raw, json) Hash identifier: swG/TJNzvtXbusBEGiNOYHB9K0pajP/QlCliJ4S76lU= Subject key identifier: 30:04:95:D7:70:26:07:B7:74:43:7E:52:48:2B:62:2F:08:83:AB:BC Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 014B Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:21:22 +0000 ROA not before: Sat 29 Mar 2025 06:01:02 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 152588 IP address blocks: 157.20.102.0/24 maxlen: 24 157.20.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Mar 29 06:01:02 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5aaf2-3a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:97:79:5e:d5:a8:a2:c7:c4:33:14:de:80: 61:bc:b0:05:11:af:7b:9d:f4:1e:d3:28:56:70:ea: 4c:95:b3:24:8d:b7:14:fa:e4:e7:73:90:cf:2f:3a: ea:20:af:61:ba:b8:0f:4d:6c:1e:1b:85:9c:3f:9a: 8b:d6:e3:99:71:43:7a:46:e6:63:d8:49:92:d5:5e: 2d:dd:6c:06:dd:ce:26:d4:0d:08:b1:47:11:8c:45: 65:96:19:07:e9:bf:79:0c:e5:ab:b5:33:c8:e4:87: 4b:2b:0a:9e:05:d8:2a:d7:8a:57:dc:b4:00:9e:24: 6e:ac:4f:f1:c0:6f:38:38:cc:8b:b3:ad:c6:5f:90: df:85:31:89:4a:b0:1c:48:2d:6b:b2:fc:c7:a2:aa: d8:1e:11:ee:45:20:21:e8:41:d0:03:02:8c:a4:19: 28:4c:86:ef:4a:5f:96:63:98:70:e0:5d:9e:ba:d6: a2:eb:52:79:60:b1:07:d5:93:89:8e:99:c4:fc:75: 26:44:2b:0a:a8:da:93:da:c5:f8:34:bf:a5:ac:80: 7a:99:d6:5f:25:da:f9:c6:8f:3c:9f:f0:f0:43:3c: fe:1b:e3:50:21:01:90:37:6b:4c:43:84:a7:00:6c: b3:18:97:9e:aa:c6:fa:89:45:fc:87:b2:33:35:0d: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:04:95:D7:70:26:07:B7:74:43:7E:52:48:2B:62:2F:08:83:AB:BC X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.102.0/23 Signature Algorithm: sha256WithRSAEncryption ed:2b:e3:97:97:46:77:0c:99:f0:62:9a:a7:9d:95:c3:dc:0d: 3c:34:1e:98:54:17:b7:11:cd:9b:a1:91:76:9e:fe:ae:08:fb: 9f:6a:4d:4a:84:4d:74:91:f4:f0:57:d6:00:87:ff:18:d9:62: a8:4f:9b:b4:15:7a:cc:e0:a6:e2:46:02:5e:7e:36:94:17:db: 4d:d5:90:39:13:8d:cc:8b:a4:cd:d4:45:e7:67:18:10:b8:54: e6:13:ab:44:6c:e0:4c:7d:65:05:0e:4c:2d:5b:bd:75:5d:f2: 17:58:cc:fb:cd:17:54:83:90:b3:ab:0f:da:12:d8:aa:00:d5: 41:70:2d:20:69:e6:4b:11:65:c8:69:97:5d:0a:bb:a0:1a:52: c6:27:1a:3a:21:31:5b:aa:96:b1:ee:05:c6:3e:7c:55:d9:16: c2:5f:36:62:18:d1:52:bf:3b:8b:31:87:eb:4f:29:ee:ef:3b: 34:5c:c0:78:49:bf:6b:9c:0c:49:45:f3:e1:f9:63:12:ae:07: b1:86:c0:17:13:ca:3e:44:35:00:32:0e:58:34:04:23:74:0f: 72:49:fc:8b:8b:b3:6f:a7:5e:6e:20:63:91:86:19:da:92:a4: d0:0d:6e:4c:94:4b:66:7f:53:5b:84:c8:b0:a6:7d:0c:94:1c: 92:21:b8:42 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwMzI5MDYwMTAyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWFmMi0zYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgmXeV7VqKLHxDMU3oBhvLAFEa97nfQe0yhWcOpMlbMkjbcU+uTnc5DPLzrq IK9hurgPTWweG4WcP5qL1uOZcUN6RuZj2EmS1V4t3WwG3c4m1A0IsUcRjEVllhkH 6b95DOWrtTPI5IdLKwqeBdgq14pX3LQAniRurE/xwG84OMyLs63GX5DfhTGJSrAc SC1rsvzHoqrYHhHuRSAh6EHQAwKMpBkoTIbvSl+WY5hw4F2eutai61J5YLEH1ZOJ jpnE/HUmRCsKqNqT2sX4NL+lrIB6mdZfJdr5xo88n/DwQzz+G+NQIQGQN2tMQ4Sn AGyzGJeeqsb6iUX8h7IzNQ2L2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDAElddw Jge3dEN+UkgrYi8Ig6u8MB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRCMzMvMUFDRTdEMDQyMjFFMTFFRjkzNDRBMzA5QzRGOUFFMDIvODA3NDFCMDQy MjFGMTFFRjkyQTQyRTFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRmMA0GCSqGSIb3DQEBCwUAA4IBAQDtK+OXl0Z3DJnwYpqnnZXD 3A08NB6YVBe3Ec2boZF2nv6uCPufak1KhE10kfTwV9YAh/8Y2WKoT5u0FXrM4Kbi RgJefjaUF9tN1ZA5E43Mi6TN1EXnZxgQuFTmE6tEbOBMfWUFDkwtW711XfIXWMz7 zRdUg5Czqw/aEtiqANVBcC0gaeZLEWXIaZddCrugGlLGJxo6ITFbqpax7gXGPnxV 2RbCXzZiGNFSvzuLMYfrTynu7zs0XMB4Sb9rnAxJRfPh+WMSrgexhsAXE8o+RDUA Mg5YNAQjdA9ySfyLi7Nvp15uIGORhhnakqTQDW5MlEtmf1NbhMiwpn0MlBySIbhC -----END CERTIFICATE-----Generated at Wed Mar 4 09:47:47 2026 by rpki-client