$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/5CAB3758374A11EFB612084EC4F9AE02.roa File: 5CAB3758374A11EFB612084EC4F9AE02.roa (raw, json) Hash identifier: Qr2ySKjGmRYAdpzwktH+MBDjQbf6TMSp972hu+BA2yk= Subject key identifier: 07:BA:84:2B:22:6E:44:8A:87:02:00:11:6A:22:A8:61:75:FE:10:9D Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 02DD Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/5CAB3758374A11EFB612084EC4F9AE02.roa Signing time: Thu 08 Oct 2026 16:29:38 +0000 ROA not before: Thu 08 Oct 2026 16:29:38 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134433 IP address blocks: 45.157.168.0/24 maxlen: 24 45.157.169.0/24 maxlen: 24 45.157.170.0/24 maxlen: 24 45.157.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 16:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Oct 8 16:29:38 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4f2-27ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:57:5a:dd:b1:ad:1e:e0:df:bb:8b:38:9c: a0:c6:18:29:a0:19:16:6e:fe:6f:f1:fe:46:24:04: 6f:06:48:01:49:84:dd:87:ab:ba:1f:1c:14:bd:01: 01:8e:a0:03:6f:1b:fa:56:dc:7c:3b:5e:a4:ae:a3: 1b:a0:67:f9:31:ca:c8:6d:20:48:a9:6b:82:3f:58: a9:99:47:28:eb:8d:2e:c5:30:57:c8:3a:f1:ec:d5: 8c:05:47:ac:66:49:7e:51:62:68:41:4d:58:db:f1: 56:86:5d:d8:16:b0:6a:17:48:04:0d:21:19:c8:30: ee:be:a1:e1:05:c4:68:e6:cb:16:4e:bc:40:7e:e1: f8:c1:b4:fd:34:0a:7f:37:57:98:b4:a7:8f:be:1d: db:99:63:89:a6:79:38:6b:84:57:03:07:89:3f:d7: 24:bb:15:b2:b9:10:c9:c4:7f:0c:01:eb:7a:bb:25: 54:a8:80:b9:16:a5:f5:46:8b:34:3e:fb:ab:83:2d: 34:50:30:cc:6f:8a:24:0a:8a:70:12:95:be:2f:e7: 24:d4:f4:bf:d5:a3:96:85:e5:32:3c:fc:b2:db:1f: e4:b6:da:db:95:dd:45:3d:5b:c7:ef:77:82:37:11: 0d:6b:91:9a:ef:ee:1b:fa:23:6d:b3:74:78:9f:3a: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BA:84:2B:22:6E:44:8A:87:02:00:11:6A:22:A8:61:75:FE:10:9D X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/5CAB3758374A11EFB612084EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.157.168.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:3b:2c:7c:c9:da:58:7f:90:e1:29:3a:1c:7d:06:b9:8f:80: c8:16:c6:20:57:ed:69:e1:0f:42:00:37:8e:c5:d5:07:68:d0: aa:c8:b5:49:92:2d:3f:15:17:87:2e:ee:74:01:5f:83:fe:73: f3:a4:52:8c:4e:9c:7b:bd:9a:f0:45:c4:af:a6:11:35:a8:2d: 42:76:f3:6e:61:5c:e2:26:90:fa:1f:9b:68:f3:dd:09:59:e8: 14:f5:34:df:fa:2f:6d:79:7a:7e:b8:44:91:02:27:51:14:51: 3e:00:e6:a2:30:62:21:23:0a:34:ee:a7:f5:68:d9:b6:2d:02: 14:1c:43:a8:e2:f4:d4:74:ad:7c:6d:e6:ee:f1:d6:be:65:45: 44:39:0e:2a:a3:ab:5f:97:57:23:43:d7:fa:ee:be:57:8d:2e: f4:3b:77:45:a4:90:8c:17:a6:23:ad:d5:53:73:7d:88:b4:7e: 90:fd:c0:46:ec:de:80:12:b2:25:dc:02:d5:23:d2:8a:73:61: 32:8c:a1:78:eb:87:d7:c5:3f:59:5e:f9:3e:99:37:9a:60:ab: d4:4c:35:dc:ed:1d:04:b4:4d:4d:93:96:2f:f2:79:94:f8:0d: 25:94:f0:62:d3:2d:74:24:6c:2b:6d:ec:8d:dd:95:b1:14:3e: d0:92:49:a5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYxMDA4MTYyOTM4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRmMi0yN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqStXWt2xrR7g37uLOJygxhgpoBkWbv5v8f5GJARvBkgBSYTdh6u6HxwUvQEB jqADbxv6Vtx8O16krqMboGf5McrIbSBIqWuCP1ipmUco640uxTBXyDrx7NWMBUes Zkl+UWJoQU1Y2/FWhl3YFrBqF0gEDSEZyDDuvqHhBcRo5ssWTrxAfuH4wbT9NAp/ N1eYtKePvh3bmWOJpnk4a4RXAweJP9ckuxWyuRDJxH8MAet6uyVUqIC5FqX1Ros0 Pvurgy00UDDMb4okCopwEpW+L+ck1PS/1aOWheUyPPyy2x/kttrbld1FPVvH73eC NxENa5Ga7+4b+iNts3R4nzoLgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAe6hCsi bkSKhwIAEWoiqGF1/hCdMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvNTc4QjA2Q0M4ODY0MTFFREJGOTk1RjQyQzRGOUFFMDIvNUNBQjM3NTgz NzRBMTFFRkI2MTIwODRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCLZ2oMA0GCSqGSIb3DQEBCwUAA4IBAQA6Oyx8ydpYf5DhKTocfQa5 j4DIFsYgV+1p4Q9CADeOxdUHaNCqyLVJki0/FReHLu50AV+D/nPzpFKMTpx7vZrw RcSvphE1qC1CdvNuYVziJpD6H5to890JWegU9TTf+i9teXp+uESRAidRFFE+AOai MGIhIwo07qf1aNm2LQIUHEOo4vTUdK18bebu8da+ZUVEOQ4qo6tfl1cjQ9f67r5X jS70O3dFpJCMF6YjrdVTc32ItH6Q/cBG7N6AErIl3ALVI9KKc2EyjKF464fXxT9Z Xvk+mTeaYKvUTDXc7R0EtE1Nk5Yv8nmU+A0llPBi0y10JGwrbeyN3ZWxFD7Qkkml -----END CERTIFICATE-----Generated at Sun Nov 15 11:10:20 2026 by rpki-client