$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa File: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (raw, json) Hash identifier: y4wbeevFotsFYhy4cAZ2aVXx14HMD8UVHpQb8fn68EA= Subject key identifier: 36:C9:27:0C:42:D6:C8:CE:A0:12:4B:0F:DE:6F:16:41:2C:65:6E:1B Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 0181 Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:46:17 +0000 ROA not before: Mon 17 Mar 2025 04:50:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134245 IP address blocks: 157.20.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Mar 17 04:50:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a2b9-f01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:15:5e:10:df:c1:d6:72:25:02:23:db:8f:40: cd:36:31:da:34:e8:03:9e:33:54:5c:ef:34:f9:d1: 48:d7:e6:d9:c6:02:9b:7e:38:40:aa:ba:2f:f0:50: cd:85:54:a0:a5:e9:75:55:d9:72:71:a8:fc:db:9c: 48:28:35:fb:d1:05:78:ad:86:fb:f8:6d:81:05:24: f8:e9:08:2f:ea:cc:65:be:d8:0a:5f:2d:f5:ef:cd: d7:35:3b:8e:98:48:5c:87:22:a5:b9:0e:52:8c:e8: 7f:c2:21:41:c0:d2:2a:3b:f9:80:66:69:43:eb:1f: 08:51:e1:4c:35:25:92:84:d4:04:6e:26:fa:fb:fa: 00:22:41:14:f0:70:30:3c:4a:ca:cf:6c:83:64:c2: e5:c7:50:1c:3c:0a:11:aa:25:49:d6:2e:47:2f:4d: cf:37:fe:29:09:3d:30:4e:6b:e4:5a:61:76:7c:3d: d3:ce:f3:14:02:19:bb:ac:d9:33:6e:0f:4e:17:d1: 78:cd:e6:6a:0d:09:27:0f:72:f7:7a:5c:6c:b1:cf: 3a:13:23:e7:ba:a6:d7:de:0e:4a:d7:69:3e:85:ec: f0:dc:89:b1:20:e7:c2:4f:59:4a:dd:30:97:b4:e3: b4:de:d4:42:21:e0:9f:a4:1f:17:3c:cd:f8:ac:9f: 72:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C9:27:0C:42:D6:C8:CE:A0:12:4B:0F:DE:6F:16:41:2C:65:6E:1B X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.112.0/23 Signature Algorithm: sha256WithRSAEncryption 66:cd:27:11:7a:8f:13:4f:64:a9:ca:26:67:fa:4a:e9:9e:16: 52:25:ed:2a:e6:af:bd:cb:5a:f1:f0:ee:4b:6e:d9:b6:54:57: 4d:fc:80:6a:38:e8:3f:1d:9b:36:b0:16:b2:ff:73:0f:66:40: 22:e7:de:58:21:bc:fa:34:9a:9d:73:6b:48:6e:77:ce:fa:41: f8:20:1f:ce:20:ce:1e:d5:94:10:db:13:98:d7:95:78:8f:8f: b2:e9:c5:0a:3c:ef:68:69:fe:8e:b9:bc:52:20:15:a5:52:27: e8:57:46:1c:e6:24:67:a3:6c:55:f3:ed:35:48:3d:99:27:b6: 52:e0:c8:8b:49:d0:c4:db:78:48:05:56:8c:51:d6:37:a1:63: 2a:94:f8:1d:78:dd:71:e0:1f:c7:97:5d:32:a9:ea:8e:da:54: d4:fe:1a:12:73:db:13:d0:6e:e1:a7:0f:e9:c9:8c:c7:c9:ce: 0e:74:4b:d9:0e:3b:04:05:ad:59:a0:c9:59:97:f5:5b:92:36: ba:70:1a:ac:ea:c4:67:eb:27:bc:9d:1e:f6:ad:9b:fd:05:09: 1f:3b:55:cd:f5:e6:d8:65:3d:96:03:7c:73:50:88:e8:08:21: 0a:b9:1d:ca:61:32:e3:b4:08:14:83:2f:53:36:37:f0:20:76: fb:da:a0:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjUwMzE3MDQ1MDU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTJiOS1mMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8RVeEN/B1nIlAiPbj0DNNjHaNOgDnjNUXO80+dFI1+bZxgKbfjhAqrov8FDN hVSgpel1Vdlycaj825xIKDX70QV4rYb7+G2BBST46Qgv6sxlvtgKXy31783XNTuO mEhchyKluQ5SjOh/wiFBwNIqO/mAZmlD6x8IUeFMNSWShNQEbib6+/oAIkEU8HAw PErKz2yDZMLlx1AcPAoRqiVJ1i5HL03PN/4pCT0wTmvkWmF2fD3TzvMUAhm7rNkz bg9OF9F4zeZqDQknD3L3elxssc86EyPnuqbX3g5K12k+hezw3ImxIOfCT1lK3TCX tOO03tRCIeCfpB8XPM34rJ9yvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDbJJwxC 1sjOoBJLD95vFkEsZW4bMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwNjgvRDc3QjlENjZENUM0MTFFRTg5QzE5NzBEQzRGOUFFMDIvNEQ2OUQyRDJE NUREMTFFRUE1QjFDNzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRRwMA0GCSqGSIb3DQEBCwUAA4IBAQBmzScReo8TT2SpyiZn+krp nhZSJe0q5q+9y1rx8O5Lbtm2VFdN/IBqOOg/HZs2sBay/3MPZkAi595YIbz6NJqd c2tIbnfO+kH4IB/OIM4e1ZQQ2xOY15V4j4+y6cUKPO9oaf6OubxSIBWlUifoV0Yc 5iRno2xV8+01SD2ZJ7ZS4MiLSdDE23hIBVaMUdY3oWMqlPgdeN1x4B/Hl10yqeqO 2lTU/hoSc9sT0G7hpw/pyYzHyc4OdEvZDjsEBa1ZoMlZl/Vbkja6cBqs6sRn6ye8 nR72rZv9BQkfO1XN9ebYZT2WA3xzUIjoCCEKuR3KYTLjtAgUgy9TNjfwIHb72qDL -----END CERTIFICATE-----Generated at Fri Mar 27 00:33:54 2026 by rpki-client