$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/E4C7F5CC861C11F1A1A4787881A30FBC.roa File: E4C7F5CC861C11F1A1A4787881A30FBC.roa (raw, json) Hash identifier: eS4gifaEB1Ko6koZdynUYduB0XDv64fPCwP13PzmRbY= Subject key identifier: 5F:9D:4E:CF:EF:01:1D:B6:FD:B2:97:C1:91:C2:82:86:C7:35:D6:C0 Certificate issuer: /CN=A91DCD09/serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Certificate serial: 02B2 Authority key identifier: 4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/E4C7F5CC861C11F1A1A4787881A30FBC.roa Signing time: Thu 23 Jul 2026 22:59:29 +0000 ROA not before: Thu 23 Jul 2026 22:59:29 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 16509 IP address blocks: 45.157.168.0/24 maxlen: 24 45.157.169.0/24 maxlen: 24 45.157.170.0/24 maxlen: 24 45.157.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=4CD9DE372D0348AC33B167A5D78E3013FC03571F Validity Not Before: Jul 23 22:59:29 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a629cd1-ba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:37:52:9e:01:a9:3e:22:0f:44:50:f2:98: 4b:42:0f:fc:fb:4e:aa:76:f2:f6:c3:e1:70:fd:4d: 51:03:eb:a7:51:87:9a:df:36:88:4a:c0:e4:d7:1e: a7:41:7b:27:a2:b2:20:19:12:75:75:1a:a5:69:59: fe:ae:95:02:32:77:9d:62:64:30:25:cd:5f:49:48: 79:98:32:2a:b3:e7:93:6e:19:3f:8c:bc:3f:5e:2f: 86:8a:58:90:37:51:17:97:df:cd:53:28:da:df:45: 38:5b:78:a6:7c:8a:41:70:69:67:e8:d2:f4:94:ef: 5c:19:dc:00:6c:19:54:0c:ea:df:d2:7d:85:b4:10: d0:a4:34:47:d4:32:9f:07:bd:b9:0c:a2:b4:3d:cc: 47:84:0a:0f:a3:3f:cf:95:b8:ed:10:e7:9f:a5:af: 7a:9d:3e:27:34:f2:a4:0f:68:7b:65:f7:3b:8a:86: 64:e1:f0:98:b3:f2:73:42:b6:97:b4:37:98:30:64: 35:b7:37:89:f0:c5:17:32:ed:3f:0e:f4:fb:e2:97: bd:fa:ac:2b:c2:2f:35:c8:19:d1:8f:71:d9:d5:04: c8:44:48:1f:5b:a4:b9:0f:08:10:ab:6f:b2:7f:73: dd:06:d5:cf:1d:d1:c9:44:44:d3:aa:44:d2:ba:e2: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:4E:CF:EF:01:1D:B6:FD:B2:97:C1:91:C2:82:86:C7:35:D6:C0 X509v3 Authority Key Identifier: keyid:4C:D9:DE:37:2D:03:48:AC:33:B1:67:A5:D7:8E:30:13:FC:03:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/TNneNy0DSKwzsWel144wE_wDVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TNneNy0DSKwzsWel144wE_wDVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/578B06CC886411EDBF995F42C4F9AE02/E4C7F5CC861C11F1A1A4787881A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 45.157.168.0/22 Signature Algorithm: sha256WithRSAEncryption 03:6c:88:8d:c5:46:ca:a5:03:18:cf:2a:e8:7e:51:58:23:e3: 92:43:84:4f:9b:ec:5f:62:2b:8b:40:0a:f1:4c:b4:ba:df:f6: a1:eb:a0:5c:5b:0a:65:14:17:2e:04:a6:c1:f8:3d:99:6c:c5: e2:4e:2c:0c:e9:6a:a3:cf:56:76:6a:e3:63:27:1a:2c:fc:0a: e6:f5:2c:91:db:32:31:3b:37:ec:a9:5b:ff:bd:4e:76:ce:e1: 2a:c3:e0:d3:f0:29:74:b1:e1:7c:e2:58:03:76:16:96:4c:7f: 5e:20:2a:2c:41:e7:b7:da:17:3b:22:a5:69:b0:e8:e7:33:93: 66:28:44:e3:8e:55:e0:5b:46:20:c6:5c:fd:20:20:74:39:08: 3e:06:74:48:2d:53:19:67:ce:04:23:bc:b5:81:7e:14:23:9f: 88:5a:ab:bc:ea:0d:57:1d:ba:20:2f:23:3a:67:7f:71:47:a1: dc:aa:27:f2:c3:f4:5a:41:ab:5b:06:4a:ca:c5:bf:fb:fe:67: be:99:05:e3:53:fb:7c:2a:8b:49:45:f1:e6:88:4e:51:b8:ce: 47:83:77:7d:38:7e:5c:8b:82:10:42:86:98:42:f5:c7:07:88: b3:1a:9c:62:a2:68:8a:03:40:44:fb:95:3e:b7:13:f9:53:e3: 72:34:07:82 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKDRDRDlERTM3MkQwMzQ4QUMzM0IxNjdBNUQ3OEUzMDEz RkMwMzU3MUYwHhcNMjYwNzIzMjI1OTI5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYyOWNkMS1iYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArr43Up4BqT4iD0RQ8phLQg/8+06qdvL2w+Fw/U1RA+unUYea3zaISsDk1x6n QXsnorIgGRJ1dRqlaVn+rpUCMnedYmQwJc1fSUh5mDIqs+eTbhk/jLw/Xi+GiliQ N1EXl9/NUyja30U4W3imfIpBcGln6NL0lO9cGdwAbBlUDOrf0n2FtBDQpDRH1DKf B725DKK0PcxHhAoPoz/PlbjtEOefpa96nT4nNPKkD2h7Zfc7ioZk4fCYs/JzQraX tDeYMGQ1tzeJ8MUXMu0/DvT74pe9+qwrwi81yBnRj3HZ1QTIREgfW6S5DwgQq2+y f3PdBtXPHdHJRETTqkTSuuJkoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF+dTs/v AR22/bKXwZHCgobHNdbAMB8GA1UdIwQYMBaAFEzZ3jctA0isM7FnpdeOMBP8A1cf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS81NzhCMDZDQzg4 NjQxMUVEQkY5OTVGNDJDNEY5QUUwMi9UTm5lTnkwRFNLd3pzV2VsMTQ0d0Vfd0RW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RObmVOeTBEU0t3enNXZWwxNDR3RV93RFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvNTc4QjA2Q0M4ODY0MTFFREJGOTk1RjQyQzRGOUFFMDIvRTRDN0Y1Q0M4 NjFDMTFGMUExQTQ3ODc4ODFBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCLZ2oMA0GCSqGSIb3DQEBCwUAA4IBAQADbIiNxUbKpQMYzyroflFY I+OSQ4RPm+xfYiuLQArxTLS63/ah66BcWwplFBcuBKbB+D2ZbMXiTiwM6Wqjz1Z2 auNjJxos/Arm9SyR2zIxOzfsqVv/vU52zuEqw+DT8Cl0seF84lgDdhaWTH9eICos Qee32hc7IqVpsOjnM5NmKETjjlXgW0Ygxlz9ICB0OQg+BnRILVMZZ84EI7y1gX4U I5+IWqu86g1XHbogLyM6Z39xR6Hcqifyw/RaQatbBkrKxb/7/me+mQXjU/t8KotJ RfHmiE5RuM5Hg3d9OH5ci4IQQoaYQvXHB4izGpxiomiKA0BE+5U+txP5U+NyNAeC -----END CERTIFICATE-----Generated at Sat Jul 25 00:19:52 2026 by rpki-client