$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/49A2605CCED411EE9537E682C4F9AE02.roa File: 49A2605CCED411EE9537E682C4F9AE02.roa (raw, json) Hash identifier: afDHthC2N3trGdqG9E5tV0sp4HzXV/JRw3ASf+ARGxQ= Subject key identifier: E2:57:50:72:82:06:31:03:4D:C7:7E:36:52:0E:88:0D:24:FF:37:63 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 05CC Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/49A2605CCED411EE9537E682C4F9AE02.roa Signing time: Tue 13 May 2025 10:54:56 +0000 ROA not before: Tue 13 May 2025 10:54:56 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.15.84.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.30.158.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 10:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: May 13 10:54:56 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68232500-f7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:d0:1b:1b:05:bc:4d:01:f0:4f:b6:4e:86: d6:63:31:d4:60:cd:7a:37:b0:68:8e:85:1d:bc:42: 5f:70:4a:27:18:61:07:3c:75:97:73:54:ed:db:5e: 81:d1:bc:eb:50:f9:fe:16:86:f0:82:9c:f6:8f:bc: f0:c3:55:f6:55:af:4c:ee:db:e6:c5:77:ab:c5:f3: e7:32:f8:86:40:8e:da:1c:05:3e:40:1a:f6:98:87: a9:1a:19:99:d4:c0:40:d4:ef:14:38:27:0d:cf:21: f3:2c:65:9c:7e:3a:b5:09:59:02:8d:3f:15:50:f1: 8b:a0:1e:c4:bb:43:9e:ff:d1:2c:5f:14:af:31:5d: 59:8f:27:02:f1:4d:c0:0b:bf:3c:60:9e:f1:b1:3d: 03:ee:52:f1:a3:eb:d4:f3:a9:18:bc:00:07:6b:cd: 31:ae:9a:40:61:19:24:ba:70:0e:f3:9d:d7:65:72: 2f:b2:78:52:c5:ec:c4:c8:e7:65:cc:5a:ca:67:b6: c7:fc:b4:5d:36:84:9e:40:f1:f0:cf:8b:5f:ef:a2: 65:4b:a0:47:e9:05:d7:75:f4:25:4d:14:18:81:df: 31:78:2e:15:f8:df:0c:a8:a3:c7:e6:7e:dd:e0:42: 4d:57:2e:b7:57:3c:07:c8:d8:bb:f2:b9:44:a1:a3: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:57:50:72:82:06:31:03:4D:C7:7E:36:52:0E:88:0D:24:FF:37:63 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/49A2605CCED411EE9537E682C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.15.84.0/23 157.20.82.0/23 160.25.166.0/23 160.30.158.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 Signature Algorithm: sha256WithRSAEncryption 73:59:d9:47:df:b2:c4:44:49:ad:18:43:a6:76:1f:6e:e6:57: 37:8c:ae:46:9a:dd:a0:2e:3a:c7:41:e8:51:69:55:ed:ef:96: 47:41:cb:ec:59:34:79:24:60:2f:a1:5e:97:76:bb:1a:10:55: 8f:1e:85:08:07:27:a1:82:d6:1b:fd:bc:92:4b:3f:f9:f6:07: 94:5d:d0:8c:07:46:4a:bb:f1:5c:19:20:dd:ef:b1:a2:f1:98: 67:ad:44:25:18:34:1c:99:67:9c:84:64:12:05:c7:f7:40:73: f2:6f:5e:27:3a:f4:9c:5f:d7:30:f6:db:1b:c5:e7:fd:8a:1b: 3d:65:f5:b1:1f:54:cd:e8:f0:3b:6d:e4:c6:cb:74:4c:80:dd: 10:8c:8b:16:3b:ce:be:84:0a:d4:83:94:de:ea:26:62:4a:5d: 36:47:1f:4d:3f:06:df:5b:f6:da:13:d8:29:fc:00:cb:5b:31: a2:63:1a:8f:3b:cf:90:8d:29:d9:9c:7d:4d:28:21:ae:86:44: b6:ca:7f:43:2e:72:03:35:d9:ef:db:53:a3:25:85:38:97:d2: f3:14:84:28:2c:c7:36:14:7f:d2:94:27:0e:a3:d1:c5:22:8e: e1:58:0a:ac:09:7b:96:2f:f7:e1:79:32:d8:29:cf:c9:90:6f: f7:1b:55:ca -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwNTEzMTA1NDU2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIzMjUwMC1mN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ELQGxsFvE0B8E+2TobWYzHUYM16N7BojoUdvEJfcEonGGEHPHWXc1Tt216B 0bzrUPn+Fobwgpz2j7zww1X2Va9M7tvmxXerxfPnMviGQI7aHAU+QBr2mIepGhmZ 1MBA1O8UOCcNzyHzLGWcfjq1CVkCjT8VUPGLoB7Eu0Oe/9EsXxSvMV1ZjycC8U3A C788YJ7xsT0D7lLxo+vU86kYvAAHa80xrppAYRkkunAO853XZXIvsnhSxezEyOdl zFrKZ7bH/LRdNoSeQPHwz4tf76JlS6BH6QXXdfQlTRQYgd8xeC4V+N8MqKPH5n7d 4EJNVy63VzwHyNi78rlEoaNIYQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFOJXUHKC BjEDTcd+NlIOiA0k/zdjMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDlBMjYwNUND RUQ0MTFFRTk1MzdFNjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAGdCjQDBAGdD1QDBAGdFFIDBAGgGaYDBAGgHp4DBAGgu5Iw DAMEAaC/VgMEAaC/WAMEAaD6tDANBgkqhkiG9w0BAQsFAAOCAQEAc1nZR9+yxERJ rRhDpnYfbuZXN4yuRprdoC46x0HoUWlV7e+WR0HL7Fk0eSRgL6Fel3a7GhBVjx6F CAcnoYLWG/28kks/+fYHlF3QjAdGSrvxXBkg3e+xovGYZ61EJRg0HJlnnIRkEgXH 90Bz8m9eJzr0nF/XMPbbG8Xn/YobPWX1sR9UzejwO23kxst0TIDdEIyLFjvOvoQK 1IOU3uomYkpdNkcfTT8G31v22hPYKfwAy1sxomMajzvPkI0p2Zx9TSghroZEtsp/ Qy5yAzXZ79tToyWFOJfS8xSEKCzHNhR/0pQnDqPRxSKO4VgKrAl7li/34Xky2CnP yZBv9xtVyg== -----END CERTIFICATE-----Generated at Fri Jun 20 04:58:01 2025 by rpki-client