$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa File: 80741B04221F11EF92A42E1AC4F9AE02.roa (raw, json) Hash identifier: XvV3KrQU+/AFsqX/bmWV7hZZ/sXJVuTdbUfgIHDhAFY= Subject key identifier: B3:AB:75:16:53:AC:97:5C:C3:CB:C6:E3:09:3E:D1:64:79:D2:1F:35 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: 015B Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa Signing time: Fri 27 Mar 2026 04:40:41 +0000 ROA not before: Fri 27 Mar 2026 04:40:41 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152588 IP address blocks: 157.20.102.0/24 maxlen: 24 157.20.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Mar 27 04:40:41 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c60a49-24bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:52:11:b4:97:44:97:64:b7:21:1b:6f:f9: 36:35:a8:ac:9b:04:79:0c:6b:6e:6d:ee:80:c5:37: e8:ca:07:bf:e5:ca:ca:81:69:bd:70:58:af:48:08: f3:ef:33:4f:3c:d9:73:75:68:cc:a1:ca:c1:85:ca: 96:80:42:20:1c:e2:d6:1b:5a:7d:15:dc:be:a8:76: b3:f4:4f:5d:5e:73:79:59:50:2c:64:de:fd:31:0a: b4:9f:15:c8:b3:a5:3f:07:f3:da:50:fd:b3:46:29: 9a:9f:d9:1d:bd:7b:5c:f3:08:64:36:8f:1c:85:d3: 9c:b6:0b:5c:03:da:cc:9a:49:87:8f:02:7a:82:ef: 64:b8:d0:8d:69:bf:2a:8f:0e:c2:ff:5d:42:54:90: 60:e9:9f:15:58:03:94:9b:37:af:fb:54:da:ce:8c: 2b:2b:ac:2a:27:99:64:71:83:f8:e6:79:0e:c2:4a: 0d:d8:6d:14:7a:b6:ed:15:66:ff:14:6e:38:88:56: ff:15:d4:ee:0b:04:6f:90:38:d3:64:07:79:c3:51: 11:84:66:4d:63:d7:10:10:55:a6:0d:bb:80:1c:50: 90:d1:16:6c:23:66:ea:59:db:bc:19:a2:c7:11:25: 14:f1:b9:55:75:5c:ae:a5:11:f0:9c:42:1c:cd:1c: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:75:16:53:AC:97:5C:C3:CB:C6:E3:09:3E:D1:64:79:D2:1F:35 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/80741B04221F11EF92A42E1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.102.0/23 Signature Algorithm: sha256WithRSAEncryption db:dc:08:ab:21:49:84:84:51:ea:a9:a8:4a:9c:2d:68:b6:68: 21:c2:36:50:7c:7a:31:af:9d:fa:41:9a:5b:81:c4:da:da:fd: 53:ad:ea:cf:18:a8:fe:ef:1a:bf:c2:55:bf:bf:67:92:fb:ef: 15:36:0e:a4:b8:54:2f:80:17:27:26:6d:b8:bf:20:5e:ff:8d: b8:29:37:25:6a:01:19:db:f8:81:7b:ad:55:dd:8f:bf:02:a0: 5d:3e:e9:44:e8:98:5a:9b:cc:03:ef:15:8d:f7:d2:b7:86:be: d1:97:60:7d:56:d0:66:5b:a0:22:ec:06:88:5b:ec:d0:57:b1: 83:52:31:b0:ba:eb:5a:12:43:72:21:15:70:4f:d9:43:9d:38: 3e:42:e4:4d:fe:48:68:6e:f6:a4:24:2e:3b:f5:52:48:fb:ec: 24:c8:17:b7:d2:d5:ae:37:e5:f1:2a:d3:7a:12:fe:6d:9e:7d: 01:4f:f5:59:6b:b2:d2:2f:e9:05:ff:d9:a8:7e:40:96:e9:c2: 38:ac:1f:c9:c4:30:be:6f:fe:06:1e:83:9e:7b:00:6e:26:09: 9f:ce:3d:5c:58:d2:81:ed:cc:ac:24:cb:69:6c:05:f4:e3:3b: c2:84:e5:47:78:72:0c:c6:f6:55:da:cf:22:17:cd:74:0b:1f: 01:b2:14:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjYwMzI3MDQ0MDQxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM2MGE0OS0yNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZNSEbSXRJdktyEbb/k2NaismwR5DGtube6AxTfoyge/5crKgWm9cFivSAjz 7zNPPNlzdWjMocrBhcqWgEIgHOLWG1p9Fdy+qHaz9E9dXnN5WVAsZN79MQq0nxXI s6U/B/PaUP2zRiman9kdvXtc8whkNo8chdOctgtcA9rMmkmHjwJ6gu9kuNCNab8q jw7C/11CVJBg6Z8VWAOUmzev+1TazowrK6wqJ5lkcYP45nkOwkoN2G0UerbtFWb/ FG44iFb/FdTuCwRvkDjTZAd5w1ERhGZNY9cQEFWmDbuAHFCQ0RZsI2bqWdu8GaLH ESUU8blVdVyupRHwnEIczRxRWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLOrdRZT rJdcw8vG4wk+0WR50h81MB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRCMzMvMUFDRTdEMDQyMjFFMTFFRjkzNDRBMzA5QzRGOUFFMDIvODA3NDFCMDQy MjFGMTFFRjkyQTQyRTFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRmMA0GCSqGSIb3DQEBCwUAA4IBAQDb3AirIUmEhFHqqahKnC1o tmghwjZQfHoxr536QZpbgcTa2v1TrerPGKj+7xq/wlW/v2eS++8VNg6kuFQvgBcn Jm24vyBe/424KTclagEZ2/iBe61V3Y+/AqBdPulE6Jham8wD7xWN99K3hr7Rl2B9 VtBmW6Ai7AaIW+zQV7GDUjGwuutaEkNyIRVwT9lDnTg+QuRN/khobvakJC479VJI ++wkyBe30tWuN+XxKtN6Ev5tnn0BT/VZa7LSL+kF/9mofkCW6cI4rB/JxDC+b/4G HoOeewBuJgmfzj1cWNKB7cysJMtpbAX04zvChOVHeHIMxvZV2s8iF810Cx8BshRv -----END CERTIFICATE-----Generated at Fri Apr 17 11:03:03 2026 by rpki-client