$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/D999BCE486E911F189970DEF85A30FBC.roa File: D999BCE486E911F189970DEF85A30FBC.roa (raw, json) Hash identifier: PM+CjH8NGl/svPw8N5o7ZKEH0zYFpc1M+Q6DjNKK8fc= Subject key identifier: C2:1E:F4:BF:CA:BB:58:72:44:17:22:C2:9D:68:02:F3:8B:8E:6B:FC Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 02B1 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/D999BCE486E911F189970DEF85A30FBC.roa Signing time: Thu 23 Jul 2026 22:59:28 +0000 ROA not before: Thu 23 Jul 2026 22:59:28 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 45.157.168.0/24 maxlen: 24 45.157.169.0/24 maxlen: 24 45.157.170.0/24 maxlen: 24 45.157.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jul 23 22:59:28 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a629cd0-ce68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2d:3e:94:76:33:a5:40:a1:26:88:bc:cd:f6: 12:d4:7a:44:0d:14:a6:05:a1:28:29:05:01:50:07: fa:37:c6:de:0f:10:e7:df:7b:22:b9:4e:64:0b:68: 67:e7:15:b4:c3:3a:47:95:f8:49:9c:44:0c:37:24: a8:45:69:bd:e5:bf:64:2b:9b:c4:8a:fe:a3:4e:dc: df:12:05:73:e4:0e:ac:78:3e:fa:eb:3d:2b:43:79: cf:f7:fd:30:de:bf:ad:86:5f:3f:71:ad:b0:5b:1c: db:4d:3a:41:8d:f8:8b:f3:28:8f:0a:7f:0a:26:83: b5:6b:d9:80:4c:02:d6:f4:d3:e7:60:9d:5d:f6:db: 22:f2:10:0e:18:1e:2f:bd:74:e6:b9:7d:9d:fe:74: d7:ba:1f:28:08:d0:c4:85:39:1b:06:c3:c1:2c:53: 6a:57:eb:35:69:86:c4:a5:21:50:e6:ba:de:df:1a: 7a:27:b1:d5:49:b6:1e:a7:2e:e0:bc:aa:0b:2f:6f: 4c:91:b5:49:80:e1:32:ef:1b:f2:61:da:aa:95:6c: 81:0d:2e:83:ee:ea:fb:bc:1d:19:e1:0d:39:31:ad: 53:ad:32:ba:da:b8:4d:81:57:75:c7:b1:af:71:94: 5b:e2:94:bc:bc:88:5b:19:77:c5:e2:ce:3a:3c:29: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1E:F4:BF:CA:BB:58:72:44:17:22:C2:9D:68:02:F3:8B:8E:6B:FC X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/D999BCE486E911F189970DEF85A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 45.157.168.0/22 Signature Algorithm: sha256WithRSAEncryption 53:bc:aa:b3:67:50:65:bb:20:eb:d1:91:3c:e9:e6:84:38:e2: bb:e3:a6:0c:cf:de:98:8c:04:5a:d2:2e:43:af:ec:3c:64:82: 1e:46:ba:64:a2:1b:c4:eb:3d:cd:22:8f:3f:31:1b:0d:6a:f9: f4:da:86:52:25:a2:15:e8:06:7a:05:1c:aa:64:7f:b1:9b:71: f0:90:be:cf:cc:f4:83:99:cc:8c:7f:f4:85:8f:c6:d9:02:0a: ba:ff:16:1c:de:82:9e:26:85:ab:5f:9f:f6:9e:64:e4:c3:57: 1c:32:d6:36:60:36:da:01:db:22:2f:26:fa:8d:d1:a3:ea:70: 1f:20:c3:a0:61:e7:1a:f3:61:3f:75:c4:dc:c7:62:a1:a6:5b: 67:99:f8:71:8a:69:b9:4b:bc:8f:75:fd:6b:1f:50:4e:c7:5f: 54:19:52:3c:51:c3:02:cb:39:46:1e:4e:3d:57:f4:55:f2:23: 3b:a7:07:66:d3:89:30:7c:fd:4c:5d:c4:41:75:f3:c2:08:01: c5:0b:77:9e:34:71:97:fd:98:c9:4d:bc:ae:16:d9:09:c8:43: 1f:11:62:05:46:30:ec:0e:b0:03:e6:67:b7:66:ba:94:96:5c: db:1a:75:51:38:4c:dd:c5:5e:14:ff:e6:83:98:0b:7f:d9:8a: c6:b8:0d:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYwNzIzMjI1OTI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyOWNkMC1jZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoC0+lHYzpUChJoi8zfYS1HpEDRSmBaEoKQUBUAf6N8beDxDn33siuU5kC2hn 5xW0wzpHlfhJnEQMNySoRWm95b9kK5vEiv6jTtzfEgVz5A6seD766z0rQ3nP9/0w 3r+thl8/ca2wWxzbTTpBjfiL8yiPCn8KJoO1a9mATALW9NPnYJ1d9tsi8hAOGB4v vXTmuX2d/nTXuh8oCNDEhTkbBsPBLFNqV+s1aYbEpSFQ5rre3xp6J7HVSbYepy7g vKoLL29MkbVJgOEy7xvyYdqqlWyBDS6D7ur7vB0Z4Q05Ma1TrTK62rhNgVd1x7Gv cZRb4pS8vIhbGXfF4s46PCnSgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMIe9L/K u1hyRBciwp1oAvOLjmv8MB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvNTc4QjA2Q0M4ODY0MTFFREJGOTk1RjQyQzRGOUFFMDIvRDk5OUJDRTQ4 NkU5MTFGMTg5OTcwREVGODVBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCLZ2oMA0GCSqGSIb3DQEBCwUAA4IBAQBTvKqzZ1BluyDr0ZE86eaE OOK746YMz96YjARa0i5Dr+w8ZIIeRrpkohvE6z3NIo8/MRsNavn02oZSJaIV6AZ6 BRyqZH+xm3HwkL7PzPSDmcyMf/SFj8bZAgq6/xYc3oKeJoWrX5/2nmTkw1ccMtY2 YDbaAdsiLyb6jdGj6nAfIMOgYeca82E/dcTcx2Khpltnmfhximm5S7yPdf1rH1BO x19UGVI8UcMCyzlGHk49V/RV8iM7pwdm04kwfP1MXcRBdfPCCAHFC3eeNHGX/ZjJ TbyuFtkJyEMfEWIFRjDsDrAD5me3ZrqUllzbGnVROEzdxV4U/+aDmAt/2YrGuA0T -----END CERTIFICATE-----Generated at Sat Jul 25 00:19:52 2026 by rpki-client