$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa File: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (raw, json) Hash identifier: QQ0CP8HHmI7PCShWjhNg26xSyERliRPL6u4e6U+9a/k= Subject key identifier: B4:47:7D:E1:23:7F:87:3D:08:73:48:0F:05:98:70:A7:D9:B6:CC:29 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: B8 Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa Signing time: Thu 23 Jan 2025 04:18:34 +0000 ROA not before: Thu 23 Jan 2025 04:18:34 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137190 IP address blocks: 157.10.162.0/23 maxlen: 23 157.10.162.0/24 maxlen: 24 157.10.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: Jan 23 04:18:34 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6791c31a-57da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:88:18:2e:04:bd:cc:f7:c1:8c:ef:c1:5f: 38:d4:d9:0e:ff:b6:76:6d:f6:a7:d4:95:d2:21:62: 62:2f:3a:0d:36:26:e2:bc:7a:c0:6a:31:d9:d9:d8: 59:3c:3e:53:d7:22:64:f1:9d:14:bf:d0:48:e4:88: 9d:2d:43:c5:6d:83:86:39:01:ea:d8:09:cf:40:8e: e3:b9:d0:89:c8:df:ee:6c:85:77:94:58:83:bc:00: 91:d9:c3:36:5c:f4:c4:b9:54:d4:74:08:26:83:5f: bc:0e:3e:e0:d7:c9:33:05:da:94:87:22:f6:ea:bc: 95:08:5f:1a:7c:79:59:c9:22:a5:ac:8a:50:c0:44: cb:39:03:5c:7b:64:e9:16:e8:6c:a4:a3:0b:5d:52: c1:2d:26:34:42:91:e1:d6:73:ee:fd:e4:33:5d:f1: cd:e3:d5:55:69:63:c6:3c:27:0f:2e:0a:9f:06:a7: a8:bf:84:ef:92:7b:21:0f:f0:f1:28:7c:31:b6:06: 79:a2:e2:b8:ca:9e:4d:74:2f:62:1b:f4:db:bf:18: 9d:d8:4e:55:bf:d6:bf:e9:38:13:b0:ec:d0:f9:30: 32:0d:e2:35:cf:fc:cc:dc:f3:b0:9d:03:20:01:fc: 39:5c:1c:38:ce:d2:92:91:c3:00:1a:ce:85:5f:5e: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:47:7D:E1:23:7F:87:3D:08:73:48:0F:05:98:70:A7:D9:B6:CC:29 X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.162.0/23 Signature Algorithm: sha256WithRSAEncryption ab:64:fe:31:3e:ff:df:aa:0c:05:b9:79:86:ad:10:72:1f:0a: be:39:97:ce:39:e7:ec:07:89:1c:64:c0:ac:20:04:c3:c9:37: 11:20:d5:80:50:6d:71:0e:9b:83:89:fa:a4:69:2c:e8:40:da: 8a:42:f0:eb:73:c2:44:44:05:25:d4:69:22:ee:5c:a3:59:ac: 29:fd:d6:16:30:40:82:6c:0b:36:a7:4e:28:ba:00:d2:7c:4b: 8b:4e:dd:63:56:ba:13:a4:fe:61:2d:ab:25:69:55:d9:42:ef: 72:3e:f3:e5:eb:ad:99:2a:40:b7:04:c4:11:99:fc:48:4f:eb: ac:6c:d5:19:2c:bb:26:e9:2d:85:53:2e:57:ee:b7:43:62:86: fa:5e:fb:50:26:27:a7:f0:5a:05:5c:31:00:f1:54:a5:83:07: e5:84:63:53:c2:ee:bb:04:74:04:32:d6:c9:3b:ab:36:85:15: ba:7e:92:75:a8:4e:e3:e4:ec:40:c5:63:7a:4c:61:c2:3b:b2: 4a:88:56:d1:f6:ed:3c:1b:22:fd:2b:55:14:76:30:22:ef:36: 06:68:a8:80:30:e5:54:56:6f:41:18:34:a8:f5:21:58:a3:a5: 02:c0:0f:57:d0:2f:31:73:a7:8f:8c:07:01:9d:3f:1c:a9:ae: 2f:9b:f1:9b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5 NUE3QUNDNTAwHhcNMjUwMTIzMDQxODM0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkxYzMxYS01N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dWIGC4Evcz3wYzvwV841NkO/7Z2bfan1JXSIWJiLzoNNibivHrAajHZ2dhZ PD5T1yJk8Z0Uv9BI5IidLUPFbYOGOQHq2AnPQI7judCJyN/ubIV3lFiDvACR2cM2 XPTEuVTUdAgmg1+8Dj7g18kzBdqUhyL26ryVCF8afHlZySKlrIpQwETLOQNce2Tp FuhspKMLXVLBLSY0QpHh1nPu/eQzXfHN49VVaWPGPCcPLgqfBqeov4TvknshD/Dx KHwxtgZ5ouK4yp5NdC9iG/Tbvxid2E5Vv9a/6TgTsOzQ+TAyDeI1z/zM3POwnQMg Afw5XBw4ztKSkcMAGs6FX14cnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLRHfeEj f4c9CHNIDwWYcKfZtswpMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFCRUYvQzA3NjQ1NzJDQjE5MTFFRTgxNUZBQjY4QzRGOUFFMDIvODA0NUU5QTRD RUVDMTFFRUFGRkM1RTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGdCqIwDQYJKoZIhvcNAQELBQADggEBAKtk/jE+/9+qDAW5 eYatEHIfCr45l8455+wHiRxkwKwgBMPJNxEg1YBQbXEOm4OJ+qRpLOhA2opC8Otz wkREBSXUaSLuXKNZrCn91hYwQIJsCzanTii6ANJ8S4tO3WNWuhOk/mEtqyVpVdlC 73I+8+XrrZkqQLcExBGZ/EhP66xs1RksuybpLYVTLlfut0Nihvpe+1AmJ6fwWgVc MQDxVKWDB+WEY1PC7rsEdAQy1sk7qzaFFbp+knWoTuPk7EDFY3pMYcI7skqIVtH2 7TwbIv0rVRR2MCLvNgZoqIAw5VRWb0EYNKj1IVijpQLAD1fQLzFzp4+MBwGdPxyp ri+b8Zs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:59 2025 by rpki-client