$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa File: 4A181CDA609011F0AB85BC5AC4F9AE02.roa (raw, json) Hash identifier: Rf6+EkWmb2OctRy1vSjuhTjVWqKkArV8fWRQ7bvRLas= Subject key identifier: 5C:B2:B9:0A:1A:7B:AF:95:C2:3C:62:1F:BF:F3:0B:7F:70:3C:2D:47 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0702 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa Signing time: Sun 26 Oct 2025 01:56:34 +0000 ROA not before: Sun 26 Oct 2025 01:56:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.15.84.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 161.248.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1794 (0x702) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 26 01:56:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68fd7fd2-4125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:36:0d:3b:e6:b0:13:2b:41:d2:98:8c:e0: f8:f7:86:54:64:82:aa:ab:26:99:d3:6e:3a:74:f2: 7f:52:65:6a:72:38:48:45:dd:c0:f8:ca:f9:30:41: f4:85:6a:02:81:ad:ec:6f:3d:b1:7d:39:aa:d7:1f: 74:42:8b:2e:6b:0a:4e:7f:80:d6:b9:7c:a7:7e:38: 24:02:27:89:51:25:ce:b8:13:15:d4:43:1b:c9:f0: 47:68:64:2a:1c:25:52:02:f0:5a:76:37:90:cf:ab: e3:a3:6b:fb:a2:15:72:26:ec:53:74:50:28:f6:a2: be:de:d7:60:cf:a2:ab:68:00:5a:ef:d9:9a:ea:f2: 33:7e:61:be:0e:92:37:6c:05:0b:d0:dc:51:58:03: 32:24:1e:17:5e:85:5d:8e:20:53:96:ef:81:74:f7: 9d:04:92:d2:67:52:ae:69:6c:e6:b7:50:47:c7:c1: f3:0a:d5:a4:29:bf:5e:1f:4a:53:35:06:84:f0:14: 9a:4f:46:01:d7:6e:e0:19:28:a8:e5:6f:69:aa:1e: f9:ff:45:d6:78:3e:6b:6b:eb:0c:6e:60:fc:08:ae: 8f:94:41:90:96:07:64:13:66:b2:8a:0a:a4:df:e3: 34:f0:8c:8c:da:45:a4:23:c0:9e:23:c6:7a:0e:2b: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:B9:0A:1A:7B:AF:95:C2:3C:62:1F:BF:F3:0B:7F:70:3C:2D:47 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.15.84.0/23 157.20.82.0/23 160.25.166.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 161.248.82.0/23 Signature Algorithm: sha256WithRSAEncryption 69:48:c5:9b:ed:79:a1:a5:71:1e:cb:12:2d:bf:f7:6e:ca:34: b7:2d:86:d3:53:0a:36:32:ec:f9:87:da:3d:7e:02:c2:19:4b: 51:ea:43:75:45:43:44:81:3e:9c:7c:85:e3:61:2d:11:c3:27: 12:7d:72:67:da:4a:f7:0a:45:77:7a:6e:4b:05:68:6d:92:0e: f2:a5:fa:e2:3a:9c:dc:8f:0a:1b:cd:50:25:3b:fd:b1:92:9a: 7b:97:6e:04:45:82:2b:a3:b0:ec:24:c9:c7:48:03:8e:08:11: fe:0e:ec:fd:90:91:24:48:5f:31:d1:c4:2b:ab:06:74:36:7f: 3e:ba:f5:d6:dc:28:a1:57:7c:d7:c6:66:0e:fe:3b:9e:24:e7: a0:ff:d5:e0:d5:41:ba:89:be:9f:19:72:e4:37:25:44:dc:c4: 45:fc:a7:f2:1f:39:b3:69:be:bc:12:9c:20:dd:a9:9f:c4:3a: fc:3a:a7:af:25:75:aa:7a:5b:04:c1:b2:da:2f:05:ce:f4:69: 3f:23:8a:62:a7:25:2f:69:a4:49:da:46:dc:24:13:08:9d:e2: 5e:98:7e:b2:b2:a3:e1:9f:8e:2e:f3:1b:c2:9b:00:51:21:81: 36:87:83:44:4a:30:86:7f:bf:8d:00:0c:58:5e:ad:ef:cc:b0: d8:f0:5b:f1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICBwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMDI2MDE1NjM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZkN2ZkMi00MTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ82DTvmsBMrQdKYjOD494ZUZIKqqyaZ0246dPJ/UmVqcjhIRd3A+Mr5MEH0 hWoCga3sbz2xfTmq1x90QosuawpOf4DWuXynfjgkAieJUSXOuBMV1EMbyfBHaGQq HCVSAvBadjeQz6vjo2v7ohVyJuxTdFAo9qK+3tdgz6KraABa79ma6vIzfmG+DpI3 bAUL0NxRWAMyJB4XXoVdjiBTlu+BdPedBJLSZ1KuaWzmt1BHx8HzCtWkKb9eH0pT NQaE8BSaT0YB127gGSio5W9pqh75/0XWeD5ra+sMbmD8CK6PlEGQlgdkE2ayigqk 3+M08IyM2kWkI8CeI8Z6Ditn1QIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFFyyuQoa e6+VwjxiH7/zC39wPC1HMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEExODFDREE2 MDkwMTFGMEFCODVCQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBAGdCjQDBAGdD1QDBAGdFFIDBAGgGaYDBAGgu5IwDAMEAaC/ VgMEAaC/WAMEAaD6tAMEAaH4UjANBgkqhkiG9w0BAQsFAAOCAQEAaUjFm+15oaVx HssSLb/3bso0ty2G01MKNjLs+YfaPX4CwhlLUepDdUVDRIE+nHyF42EtEcMnEn1y Z9pK9wpFd3puSwVobZIO8qX64jqc3I8KG81QJTv9sZKae5duBEWCK6Ow7CTJx0gD jggR/g7s/ZCRJEhfMdHEK6sGdDZ/Prr11twooVd818ZmDv47niTnoP/V4NVBuom+ nxly5DclRNzERfyn8h85s2m+vBKcIN2pn8Q6/DqnryV1qnpbBMGy2i8FzvRpPyOK YqclL2mkSdpG3CQTCJ3iXph+srKj4Z+OLvMbwpsAUSGBNoeDREowhn+/jQAMWF6t 78yw2PBb8Q== -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:06 2025 by rpki-client