$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa File: 45FFCD9AD6E511EE9E963F62C4F9AE02.roa (raw, json) Hash identifier: Nmz+T7J1/goQR7bG8RRHAGQFwYvKNpQKHY/wB5FJCtc= Subject key identifier: A1:E7:4B:D4:7C:FC:E0:1E:AC:98:B7:76:EB:F0:D6:00:58:EA:0F:A4 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 065D Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa Signing time: Thu 21 Aug 2025 01:55:34 +0000 ROA not before: Thu 21 Aug 2025 01:55:34 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135905 IP address blocks: 157.20.88.0/23 maxlen: 24 160.22.102.0/23 maxlen: 24 160.191.100.0/23 maxlen: 23 160.250.126.0/23 maxlen: 24 160.250.188.0/23 maxlen: 24 165.101.114.0/23 maxlen: 24 165.101.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:33:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 21 01:55:34 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68a67c95-94a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:16:33:71:bc:fa:1f:dc:df:38:c8:23:56: 1a:66:3c:05:10:d5:e1:3f:0b:aa:93:6c:1d:e0:94: 5b:4e:9e:4e:30:63:c8:49:8b:cb:06:4b:ae:b1:99: 6f:2c:30:cf:aa:88:61:21:24:2a:6a:39:ec:b2:af: c5:7c:80:c6:0b:0b:46:57:00:7a:f5:fe:0e:6c:8b: 38:f4:e0:a7:2d:a7:a5:5a:81:86:e0:c8:0a:50:ed: 55:e3:f7:b4:e0:1b:43:ce:96:8e:c6:7e:98:ee:4a: 21:6e:35:fa:4b:a3:99:30:5b:89:29:01:42:29:b5: 35:d6:72:b4:f3:f1:68:ad:99:01:0e:9f:e7:01:b9: 1d:9b:96:ca:28:e4:ed:c6:28:a6:2b:29:d9:88:50: 4b:74:82:db:00:4e:f2:37:00:8c:05:4c:d4:b7:01: a7:b7:f4:8f:51:a5:73:53:b5:89:16:fd:a7:33:1f: da:67:c2:12:04:cc:97:6f:9d:6d:32:e4:e2:0e:4d: f4:bd:a8:1e:7f:c0:ae:49:22:f0:79:b8:45:f2:41: 2a:be:b2:e4:88:52:ed:c9:52:09:c4:85:3a:a3:07: b4:14:bf:33:78:ea:16:db:6d:fe:3f:34:d8:18:73: 91:bd:a2:3b:f2:d4:63:b6:96:f0:3e:2a:87:eb:9b: c9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:4B:D4:7C:FC:E0:1E:AC:98:B7:76:EB:F0:D6:00:58:EA:0F:A4 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/45FFCD9AD6E511EE9E963F62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.20.88.0/23 160.22.102.0/23 160.191.100.0/23 160.250.126.0/23 160.250.188.0/23 165.101.114.0-165.101.117.255 Signature Algorithm: sha256WithRSAEncryption 87:b6:2c:82:28:82:56:42:cb:3f:45:60:12:31:9b:42:63:06: 15:81:e3:cc:a8:6d:cc:51:e8:e4:b0:f6:9c:16:1c:d6:63:a3: a4:b5:3e:46:cd:fe:f3:4a:c2:38:91:69:9e:93:5f:64:eb:57: 3c:83:ed:f1:4d:44:94:91:69:1f:70:2c:17:a5:11:c1:40:c9: 48:95:87:22:ec:4b:50:59:11:e7:df:ef:d0:3a:a6:9a:cd:87: ba:9f:22:99:12:5d:2d:44:6c:b9:1a:7d:76:f6:bd:38:80:d0: cc:1a:8e:8f:0f:a9:d6:aa:69:db:6a:51:f7:ed:c1:5b:d1:85: e8:63:66:bd:fc:3f:36:ce:e3:06:e3:d2:fd:7e:a9:d4:67:87: 8f:3e:17:0a:8e:50:7c:96:91:e2:f7:52:12:d6:99:8d:9d:c4: 41:0c:45:88:d3:b8:5a:83:c3:c9:42:8b:b5:55:b1:5a:15:a7: 53:9a:a9:2e:39:88:f6:39:22:37:7f:74:a6:51:35:52:71:e6: ac:5e:8f:43:e9:76:aa:17:66:ba:bc:2f:db:84:ff:7e:4c:81: b0:e9:f7:9b:50:8d:ac:6c:8d:26:17:68:25:01:a7:a6:5b:fc: 86:6b:b5:ef:79:60:b5:36:42:15:68:4e:22:0f:45:5f:1d:9b: 05:6a:3b:34 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODIxMDE1NTM0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2N2M5NS05NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA110WM3G8+h/c3zjII1YaZjwFENXhPwuqk2wd4JRbTp5OMGPISYvLBkuusZlv LDDPqohhISQqajnssq/FfIDGCwtGVwB69f4ObIs49OCnLaelWoGG4MgKUO1V4/e0 4BtDzpaOxn6Y7kohbjX6S6OZMFuJKQFCKbU11nK08/ForZkBDp/nAbkdm5bKKOTt xiimKynZiFBLdILbAE7yNwCMBUzUtwGnt/SPUaVzU7WJFv2nMx/aZ8ISBMyXb51t MuTiDk30vagef8CuSSLwebhF8kEqvrLkiFLtyVIJxIU6owe0FL8zeOoW223+PzTY GHORvaI78tRjtpbwPiqH65vJoQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKHnS9R8 /OAerJi3duvw1gBY6g+kMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDVGRkNEOUFE NkU1MTFFRTlFOTYzRjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBAGdFFgDBAGgFmYDBAGgv2QDBAGg+n4DBAGg+rwwDAMEAaVl cgMEAaVldDANBgkqhkiG9w0BAQsFAAOCAQEAh7YsgiiCVkLLP0VgEjGbQmMGFYHj zKhtzFHo5LD2nBYc1mOjpLU+Rs3+80rCOJFpnpNfZOtXPIPt8U1ElJFpH3AsF6UR wUDJSJWHIuxLUFkR59/v0Dqmms2Hup8imRJdLURsuRp9dva9OIDQzBqOjw+p1qpp 22pR9+3BW9GF6GNmvfw/Ns7jBuPS/X6p1GeHjz4XCo5QfJaR4vdSEtaZjZ3EQQxF iNO4WoPDyUKLtVWxWhWnU5qpLjmI9jkiN390plE1UnHmrF6PQ+l2qhdmurwv24T/ fkyBsOn3m1CNrGyNJhdoJQGnplv8hmu173lgtTZCFWhOIg9FXx2bBWo7NA== -----END CERTIFICATE-----Generated at Sat Aug 23 07:19:53 2025 by rpki-client