$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa File: A19F973C60C011F0A28C7F2CC4F9AE02.roa (raw, json) Hash identifier: z6l4Kf7BBkbhNbxfRp+L0t7tdYphMHusFnOI/s0ajOk= Subject key identifier: 51:DC:37:E6:6E:09:96:39:E7:AA:C5:7B:84:DD:3E:0F:A1:02:E6:64 Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: 02 Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa Signing time: Mon 14 Jul 2025 14:41:31 +0000 ROA not before: Mon 14 Jul 2025 14:41:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 151335 IP address blocks: 157.15.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: Jul 14 14:41:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6875171b-f061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:1f:e5:a6:7f:2c:8f:53:c1:11:70:0f:c8: 55:e6:67:e5:51:81:f9:33:49:77:1e:88:db:ff:db: 3e:60:d3:ab:1e:5c:97:8d:46:9b:97:7f:0a:da:cf: 38:ab:14:27:0f:47:35:72:c0:9b:20:83:96:3e:6b: 4e:f8:60:d8:bf:5a:5f:37:b5:a1:ad:60:d9:98:cc: 70:1c:b6:da:35:34:aa:e6:8c:43:e5:8f:07:52:c6: 90:8a:95:5b:23:b9:f7:ce:d1:b0:31:f1:74:20:0b: cc:28:41:c7:70:dc:3c:1c:d4:e6:b9:41:fa:a2:34: ed:50:55:73:6d:60:d1:e1:32:1d:7a:a0:96:8c:eb: 8e:c8:8f:01:0b:d5:a4:5b:fe:0f:84:79:d6:ca:ac: 9a:dd:be:e0:0c:b2:ef:ea:69:64:4d:f0:80:d0:b9: b1:35:47:ac:82:83:8f:de:cb:8e:d1:25:f7:10:7e: 8e:e1:d7:3b:23:e6:b3:81:a6:f4:94:68:94:35:9c: 15:88:1d:0d:b9:12:fb:4e:28:22:01:b3:6e:0f:4b: e2:7b:5b:2f:86:2e:ab:3f:85:00:94:9e:17:fb:8e: 63:f6:5a:d2:0e:6d:f5:da:10:53:fb:ad:db:68:40: db:90:ce:7e:66:b4:48:1a:fc:9c:60:84:29:b9:fb: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DC:37:E6:6E:09:96:39:E7:AA:C5:7B:84:DD:3E:0F:A1:02:E6:64 X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.128.0/24 Signature Algorithm: sha256WithRSAEncryption 17:48:21:78:02:fd:1a:5a:61:d5:30:7c:fe:72:84:13:cd:c5: 78:12:f2:f7:84:32:ec:5c:23:2e:19:52:48:af:14:7f:ed:23: a1:ab:19:8a:9d:48:c4:4e:6f:45:bd:d6:6c:e9:85:0b:f7:bc: 08:04:ff:7f:ba:7d:b1:5c:8c:1a:94:56:91:15:4c:56:1c:73: 06:ec:49:39:01:12:58:24:1f:4c:95:16:86:90:48:12:17:61: ed:e2:ee:e8:22:76:d4:12:93:b7:1e:79:ab:55:c5:58:cc:5e: cd:66:0a:de:52:72:9a:7f:90:cb:43:7a:5a:08:01:59:03:ff: 07:3a:17:9b:3b:d8:c5:0f:a3:81:3e:62:82:58:bb:1b:ee:65: 30:30:ed:bd:04:eb:81:fe:27:2d:42:5e:7c:c8:a5:e2:de:a4: f1:bd:69:29:81:6a:c9:fc:48:bd:6a:c5:fb:b7:15:35:5e:dc: bc:f2:91:bf:ad:e6:e3:0b:a8:5e:af:33:76:81:cf:64:95:80: b1:25:34:84:7c:26:b7:85:2f:26:1a:24:d5:c2:01:8c:e5:79: c8:df:71:c9:b6:9f:db:a9:6b:e9:dd:1f:3f:c6:5c:72:7a:be: 00:ae:4e:14:09:2f:64:db:40:43:d1:2b:d8:fe:51:3a:5d:86: 5b:82:dd:88 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoNTU3ODlBMzQxNkU3RUY1MTVDRTA4RjA1QTM2RjFERUQ4 MzQ0NEMwOTAeFw0yNTA3MTQxNDQxMzFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzUxNzFiLWYwNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCbh/lpn8sj1PBEXAPyFXmZ+VRgfkzSXceiNv/2z5g06seXJeNRpuXfwrazzir FCcPRzVywJsgg5Y+a074YNi/Wl83taGtYNmYzHActto1NKrmjEPljwdSxpCKlVsj uffO0bAx8XQgC8woQcdw3Dwc1Oa5QfqiNO1QVXNtYNHhMh16oJaM647IjwEL1aRb /g+EedbKrJrdvuAMsu/qaWRN8IDQubE1R6yCg4/ey47RJfcQfo7h1zsj5rOBpvSU aJQ1nBWIHQ25EvtOKCIBs24PS+J7Wy+GLqs/hQCUnhf7jmP2WtIObfXaEFP7rdto QNuQzn5mtEga/JxghCm5+5tlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUdw35m4J ljnnqsV7hN0+D6EC5mQwHwYDVR0jBBgwFoAUVXiaNBbn71Fc4I8Fo28d7YNETAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzQxODA1MDk0NjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhpYU5CYm43MUZjNEk4Rm8yOGQ3WU5FVEFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDNGMi80MTgwNTA5NDYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9BMTlGOTczQzYw QzAxMUYwQTI4QzdGMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJ0PgDANBgkqhkiG9w0BAQsFAAOCAQEAF0gheAL9Glph1TB8 /nKEE83FeBLy94Qy7FwjLhlSSK8Uf+0joasZip1IxE5vRb3WbOmFC/e8CAT/f7p9 sVyMGpRWkRVMVhxzBuxJOQESWCQfTJUWhpBIEhdh7eLu6CJ21BKTtx55q1XFWMxe zWYK3lJymn+Qy0N6WggBWQP/BzoXmzvYxQ+jgT5igli7G+5lMDDtvQTrgf4nLUJe fMil4t6k8b1pKYFqyfxIvWrF+7cVNV7cvPKRv63m4wuoXq8zdoHPZJWAsSU0hHwm t4UvJhok1cIBjOV5yN9xybaf26lr6d0fP8Zccnq+AK5OFAkvZNtAQ9Er2P5ROl2G W4LdiA== -----END CERTIFICATE-----Generated at Mon Jul 21 08:03:16 2025 by rpki-client