$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/E4C7F5CC861C11F1A1A4787881A30FBC.roa File: E4C7F5CC861C11F1A1A4787881A30FBC.roa (raw, json) Hash identifier: /WmCxmDfqAjbLjhFMgkxnhquJ6Sz516O3n2Ciyjr6d4= Subject key identifier: 0D:18:0D:5A:4C:68:E8:ED:2A:F7:B2:87:61:4B:5E:B2:4D:CC:77:36 Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 02DF Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/E4C7F5CC861C11F1A1A4787881A30FBC.roa Signing time: Thu 08 Oct 2026 16:29:42 +0000 ROA not before: Thu 08 Oct 2026 16:29:42 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.157.168.0/24 maxlen: 24 45.157.169.0/24 maxlen: 24 45.157.170.0/24 maxlen: 24 45.157.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 16:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Oct 8 16:29:42 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4f6-4eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:e7:0d:26:df:5b:62:bb:90:d6:6e:dd:be: 1a:ef:2a:68:df:da:04:c9:01:e6:4e:9b:06:c3:3a: 19:2e:7d:05:a1:dc:78:c4:c5:be:c1:8f:49:f2:fc: ff:b8:8a:d9:f3:46:ac:09:b6:6f:57:3f:b3:73:2b: 12:70:2f:f1:c6:5e:31:fc:3d:42:ae:bf:05:64:ec: a5:70:4b:da:b5:05:ca:a0:d1:3e:81:49:36:a6:f5: 5e:f6:12:8f:bf:3a:c8:41:dd:8d:18:7b:ee:42:ec: 60:4d:c4:58:3d:27:0c:90:b2:fc:77:36:4a:03:8f: 62:53:c6:d3:07:1d:b2:55:5d:51:f3:95:07:32:fc: 38:e1:8d:ed:8e:eb:f4:8d:38:f2:29:99:3a:37:bf: 3f:81:9e:b5:ad:32:67:a5:9a:f2:a5:0f:23:af:61: 30:c4:02:a0:c8:9c:f6:36:be:fb:e0:fb:7a:49:c1: d7:cd:53:8c:84:79:88:cb:08:7e:0d:2b:c5:e0:dc: 28:6d:88:a2:7b:b4:ed:2b:97:68:04:d4:96:5d:f3: b3:b4:f8:02:66:73:4d:e0:d1:43:60:bf:b3:14:a5: 06:72:ca:86:ca:56:e3:24:71:a0:3b:0e:f5:7e:bc: 47:d7:ea:be:9d:a7:f5:9f:33:97:f8:b3:af:57:5c: 9e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:0D:5A:4C:68:E8:ED:2A:F7:B2:87:61:4B:5E:B2:4D:CC:77:36 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/E4C7F5CC861C11F1A1A4787881A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 45.157.168.0/22 Signature Algorithm: sha256WithRSAEncryption 68:55:16:f7:d7:51:8b:2f:4c:78:d6:34:3d:97:ce:02:30:26: a2:f9:4f:33:c6:72:55:08:eb:64:b9:e3:5d:99:db:75:69:1c: 97:28:d9:12:0d:db:07:0e:1c:df:43:70:48:95:43:62:b1:3a: 0c:87:ba:09:15:d5:5e:68:98:eb:d9:62:59:36:b8:9c:69:0d: 9c:de:33:77:5a:bd:b2:41:1f:6e:ed:17:6c:bb:8c:e6:ad:dd: 65:cd:0e:f9:a7:88:7f:0d:5d:24:e7:f9:be:36:b2:2b:9d:5d: 0e:11:4b:35:74:e3:76:b9:28:67:e0:b0:52:d0:ad:41:b6:4e: 26:68:be:cb:e6:19:31:a5:c4:6f:26:52:54:3a:59:82:1b:d3: c4:36:73:c6:47:d4:88:e6:9e:09:50:c7:f4:6f:42:2d:4c:3a: a2:74:16:b6:34:94:08:18:9a:2d:9f:df:5b:85:68:a7:ab:c7: 50:5f:15:b0:ec:d7:a8:02:10:3f:f2:df:e7:97:17:e7:8e:2d: 83:69:14:75:28:8f:98:11:71:d2:b9:c4:a0:13:2c:62:01:ac: 06:01:9e:32:d4:2c:28:9e:d1:af:e4:13:59:46:a7:08:0e:55: d0:78:99:f6:a2:67:a1:1c:c1:bf:e9:33:9a:54:3d:f5:df:f3: 4d:99:a4:45 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYxMDA4MTYyOTQyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRmNi00ZWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKjnDSbfW2K7kNZu3b4a7ypo39oEyQHmTpsGwzoZLn0Fodx4xMW+wY9J8vz/ uIrZ80asCbZvVz+zcysScC/xxl4x/D1Crr8FZOylcEvatQXKoNE+gUk2pvVe9hKP vzrIQd2NGHvuQuxgTcRYPScMkLL8dzZKA49iU8bTBx2yVV1R85UHMvw44Y3tjuv0 jTjyKZk6N78/gZ61rTJnpZrypQ8jr2EwxAKgyJz2Nr774Pt6ScHXzVOMhHmIywh+ DSvF4NwobYiie7TtK5doBNSWXfOztPgCZnNN4NFDYL+zFKUGcsqGylbjJHGgOw71 frxH1+q+naf1nzOX+LOvV1yeeQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA0YDVpM aOjtKveyh2FLXrJNzHc2MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvNTc4QjA2Q0M4ODY0MTFFREJGOTk1RjQyQzRGOUFFMDIvRTRDN0Y1Q0M4 NjFDMTFGMUExQTQ3ODc4ODFBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCLZ2oMA0GCSqGSIb3DQEBCwUAA4IBAQBoVRb311GLL0x41jQ9l84C MCai+U8zxnJVCOtkueNdmdt1aRyXKNkSDdsHDhzfQ3BIlUNisToMh7oJFdVeaJjr 2WJZNricaQ2c3jN3Wr2yQR9u7Rdsu4zmrd1lzQ75p4h/DV0k5/m+NrIrnV0OEUs1 dON2uShn4LBS0K1Btk4maL7L5hkxpcRvJlJUOlmCG9PENnPGR9SI5p4JUMf0b0It TDqidBa2NJQIGJotn99bhWinq8dQXxWw7NeoAhA/8t/nlxfnji2DaRR1KI+YEXHS ucSgEyxiAawGAZ4y1CwontGv5BNZRqcIDlXQeJn2omehHMG/6TOaVD313/NNmaRF -----END CERTIFICATE-----Generated at Sun Oct 11 11:58:56 2026 by rpki-client