$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/1F5F5920B85F11EE9B53995FC4F9AE02.roa File: 1F5F5920B85F11EE9B53995FC4F9AE02.roa (raw, json) Hash identifier: EbaHzYxJkhS/e/mhIStkM2ixlMOj0eIXkmV/72ibVUE= Subject key identifier: D0:12:2F:A1:76:E4:81:6C:AC:8A:27:23:51:04:5D:F0:33:6C:33:A2 Certificate issuer: /CN=A91388E0/serialNumber=25242E131997835BFC9B180405C797C6289447E7 Certificate serial: 019D Authority key identifier: 25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/1F5F5920B85F11EE9B53995FC4F9AE02.roa Signing time: Mon 09 Mar 2026 03:38:05 +0000 ROA not before: Mon 09 Mar 2026 03:38:05 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152336 IP address blocks: 157.10.244.0/23 maxlen: 23 157.10.244.0/24 maxlen: 24 157.10.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=25242E131997835BFC9B180405C797C6289447E7 Validity Not Before: Mar 9 03:38:05 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69ae409d-2899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:fa:3a:48:a8:81:a6:91:78:83:b1:d2:99: 93:09:17:87:b3:03:16:ef:57:09:94:c8:00:60:74: b5:dd:98:fd:d3:cb:ab:60:31:a7:83:5a:d2:8d:a0: 5a:b2:2d:6e:bc:87:70:ea:c6:f2:c4:15:ab:f8:dd: 88:66:70:4a:ee:d0:85:7f:b9:6a:b0:31:50:a3:99: db:7f:0f:7b:03:79:a6:ad:b2:2d:e1:c8:3b:59:71: bd:95:4d:52:76:aa:ed:71:37:c7:25:4a:b3:ed:26: f4:a2:8c:10:1b:c7:f6:31:5c:b8:aa:af:08:36:a3: 4b:43:75:a0:10:47:ea:9e:8e:02:55:fa:8a:22:03: 6a:b6:ba:f5:2a:3f:aa:75:12:22:81:e6:07:13:dd: ee:a3:22:f8:b9:ec:40:92:22:dc:eb:5a:29:5f:0c: 6b:81:d6:16:99:49:ac:29:31:a4:ac:e3:9f:4d:a1: 70:f8:69:14:ba:18:1d:37:f0:2d:1e:84:bf:23:77: 8b:2d:e0:31:ab:70:7d:50:ab:55:c3:d7:2b:35:e8: 52:61:f7:22:84:03:42:fe:f3:8c:ee:65:f5:0c:cb: 05:30:ea:ef:ff:79:cb:e7:41:15:52:eb:68:bb:0f: 2a:aa:c4:57:5c:95:92:98:b9:fe:0f:7f:93:04:ad: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:2F:A1:76:E4:81:6C:AC:8A:27:23:51:04:5D:F0:33:6C:33:A2 X509v3 Authority Key Identifier: keyid:25:24:2E:13:19:97:83:5B:FC:9B:18:04:05:C7:97:C6:28:94:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/JSQuExmXg1v8mxgEBceXxiiUR-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JSQuExmXg1v8mxgEBceXxiiUR-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/4CBB1B32B85211EE8ACAA96AC4F9AE02/1F5F5920B85F11EE9B53995FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.244.0/23 Signature Algorithm: sha256WithRSAEncryption a2:97:6e:e8:b9:2c:3b:4e:0b:55:62:ff:54:f7:e9:d4:12:fb: f5:87:ad:71:de:56:5a:b8:69:5b:c9:a0:f1:ea:12:2b:79:7d: cc:23:e3:3c:db:ed:9e:4d:8d:2b:3e:e0:4b:46:a1:e6:09:dd: cb:a9:ac:f3:1c:29:e7:d4:72:6c:ea:74:e2:f0:41:a8:4e:43: 62:05:46:88:42:97:77:df:fc:e6:b1:ad:e9:12:91:db:55:5e: 0c:01:4f:db:2b:95:71:d9:91:8c:50:81:b7:44:65:f0:16:cd: 98:68:29:ee:29:13:f7:4c:89:e4:a3:c7:66:98:be:f0:c6:ce: 3b:94:9b:c9:96:1e:fa:46:aa:d7:5e:d4:8c:31:44:eb:dc:3f: 5e:53:7e:22:01:e9:eb:94:d6:ca:ea:24:84:ad:4c:f0:8c:3f: b4:73:5a:d0:37:58:97:a0:80:f0:88:19:8b:c5:6e:b0:f6:0b: c8:24:07:aa:2e:27:50:0c:dc:f2:2c:7c:1d:58:d5:b8:8b:72: a4:51:87:63:f4:4a:51:66:98:4f:dc:16:05:59:3c:ca:18:0f: 70:f9:ba:bf:4b:8b:19:ac:67:6d:ed:e1:4c:3e:12:0a:5f:1b: b4:13:99:36:f2:d3:d0:5c:b3:39:ea:7c:de:96:41:07:79:a6: f2:31:8f:3b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDI1MjQyRTEzMTk5NzgzNUJGQzlCMTgwNDA1Qzc5N0M2 Mjg5NDQ3RTcwHhcNMjYwMzA5MDMzODA1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlNDA5ZC0yODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArh36OkiogaaReIOx0pmTCReHswMW71cJlMgAYHS13Zj908urYDGng1rSjaBa si1uvIdw6sbyxBWr+N2IZnBK7tCFf7lqsDFQo5nbfw97A3mmrbIt4cg7WXG9lU1S dqrtcTfHJUqz7Sb0oowQG8f2MVy4qq8INqNLQ3WgEEfqno4CVfqKIgNqtrr1Kj+q dRIigeYHE93uoyL4uexAkiLc61opXwxrgdYWmUmsKTGkrOOfTaFw+GkUuhgdN/At HoS/I3eLLeAxq3B9UKtVw9crNehSYfcihANC/vOM7mX1DMsFMOrv/3nL50EVUuto uw8qqsRXXJWSmLn+D3+TBK3P8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNASL6F2 5IFsrIonI1EEXfAzbDOiMB8GA1UdIwQYMBaAFCUkLhMZl4Nb/JsYBAXHl8YolEfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC80Q0JCMUIzMkI4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9KU1F1RXhtWGcxdjhteGdFQmNlWHhpaVVS LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pTUXVFeG1YZzF2OG14Z0VCY2VYeGlpVVItYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzg4RTAvNENCQjFCMzJCODUyMTFFRThBQ0FBOTZBQzRGOUFFMDIvMUY1RjU5MjBC ODVGMTFFRTlCNTM5OTVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQr0MA0GCSqGSIb3DQEBCwUAA4IBAQCil27ouSw7TgtVYv9U9+nU Evv1h61x3lZauGlbyaDx6hIreX3MI+M82+2eTY0rPuBLRqHmCd3LqazzHCnn1HJs 6nTi8EGoTkNiBUaIQpd33/zmsa3pEpHbVV4MAU/bK5Vx2ZGMUIG3RGXwFs2YaCnu KRP3TInko8dmmL7wxs47lJvJlh76RqrXXtSMMUTr3D9eU34iAenrlNbK6iSErUzw jD+0c1rQN1iXoIDwiBmLxW6w9gvIJAeqLidQDNzyLHwdWNW4i3KkUYdj9EpRZphP 3BYFWTzKGA9w+bq/S4sZrGdt7eFMPhIKXxu0E5k28tPQXLM56nzelkEHeabyMY87 -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:11 2026 by rpki-client