$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/7F053D7E0A9611F0AA1BF786C4F9AE02.roa File: 7F053D7E0A9611F0AA1BF786C4F9AE02.roa (raw, json) Hash identifier: C4PktSIqyer8MO6XphzB29DbUJzhVWW55CATe9fFwVM= Subject key identifier: F4:12:4E:0B:4F:88:7E:1D:2D:57:96:D7:69:68:16:80:B9:2E:E3:F1 Certificate issuer: /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Certificate serial: DE Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/7F053D7E0A9611F0AA1BF786C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:59:41 +0000 ROA not before: Sat 15 Nov 2025 04:22:28 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 8849 IP address blocks: 161.248.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Validity Not Before: Nov 15 04:22:28 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a597cd-dd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:2e:6a:64:93:c2:4d:15:29:fc:97:2b:35: bb:06:39:cf:01:5c:07:d2:17:d5:23:52:10:9e:29: ba:ab:f9:76:2a:fd:17:9d:5c:90:e7:90:42:1f:14: 77:1b:3b:85:14:04:a9:2e:fd:c7:c4:5d:56:4c:70: 7b:33:55:1f:01:43:5c:2f:3d:86:7d:2c:fb:10:80: 81:9b:cd:0d:8e:bf:7e:83:46:f2:09:e0:77:0b:31: b6:da:32:03:52:25:0f:e5:7e:5e:47:d9:0a:1e:a7: 6d:69:57:f7:bf:b4:48:f7:a8:46:87:69:32:17:42: 1d:24:cc:b4:0c:c2:6b:6e:1f:f3:78:aa:b3:0d:94: e1:e6:5e:63:6f:7e:a6:e5:cc:df:d9:65:68:e2:0a: 27:53:37:6e:fe:1d:fa:d5:d7:88:7d:c6:fa:57:58: b0:c4:85:05:8e:b2:3f:9b:a1:c3:92:6e:d5:50:15: 08:f8:c9:68:51:6d:83:c0:4c:b8:c5:d9:3e:ef:ab: ac:c7:d8:8d:e2:63:6a:c9:a3:62:01:31:59:a0:e8: 0c:9b:27:70:55:8a:d5:14:a2:d8:da:cb:28:32:39: bd:dc:16:b5:5e:be:e1:76:83:ea:89:8d:64:5d:4f: 34:01:9d:da:f1:7d:54:eb:98:0d:e6:d6:fd:fc:14: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:12:4E:0B:4F:88:7E:1D:2D:57:96:D7:69:68:16:80:B9:2E:E3:F1 X509v3 Authority Key Identifier: keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/7F053D7E0A9611F0AA1BF786C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.36.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:10:62:45:f6:3d:c6:42:2b:a8:d6:67:51:fd:af:07:38:48: cc:03:d8:b1:65:4f:b6:dd:42:da:94:eb:19:8c:09:28:28:84: 34:4f:78:a9:3c:a8:72:56:d8:67:e5:05:06:f6:db:e8:be:0b: aa:2b:2b:90:f7:b6:b2:31:cb:4d:9c:fd:74:17:78:e8:e2:1a: 04:bb:37:77:a6:c9:0b:3b:d5:0d:f4:63:87:05:e1:0b:b5:ce: 4a:b6:f8:03:78:e1:b2:69:df:42:b2:dd:02:d3:aa:aa:0f:c4: d0:51:72:62:f2:7c:4a:17:32:2b:a2:4f:43:c6:cd:6e:d9:02: 30:b9:3c:1f:3c:de:3c:98:23:b9:32:b3:21:11:2f:b4:03:c8: f1:ed:ca:4f:cc:7d:5a:d7:7b:16:2f:ee:fd:0e:ce:a4:fd:09: d4:96:d8:8c:c3:60:a7:b3:e0:ef:83:0a:91:29:bb:92:38:9a: ce:58:6c:ae:02:59:04:73:04:8d:73:19:e5:ae:b8:ca:f3:5e: 8c:e8:28:ab:44:5f:11:51:5b:a5:bf:7f:df:c6:e7:bd:5c:61: 6a:9e:31:44:fc:74:3c:5e:71:e7:52:2e:56:d7:42:1d:1b:a0: 1e:34:1a:72:53:e8:9b:d1:86:62:1f:78:d0:0f:96:73:a2:3f: 61:6c:57:8d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0NzcxMTAvBgNVBAUTKEE5MjMwQUU5OTBBMDM2N0FFNTlBMEYyMUJGRUVGRUNE OTVENzRBODEwHhcNMjUxMTE1MDQyMjI4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTdjZC1kZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwguamSTwk0VKfyXKzW7BjnPAVwH0hfVI1IQnim6q/l2Kv0XnVyQ55BCHxR3 GzuFFASpLv3HxF1WTHB7M1UfAUNcLz2GfSz7EICBm80Njr9+g0byCeB3CzG22jID UiUP5X5eR9kKHqdtaVf3v7RI96hGh2kyF0IdJMy0DMJrbh/zeKqzDZTh5l5jb36m 5czf2WVo4gonUzdu/h361deIfcb6V1iwxIUFjrI/m6HDkm7VUBUI+MloUW2DwEy4 xdk+76usx9iN4mNqyaNiATFZoOgMmydwVYrVFKLY2ssoMjm93Ba1Xr7hdoPqiY1k XU80AZ3a8X1U65gN5tb9/BTPnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPQSTgtP iH4dLVeW12loFoC5LuPxMB8GA1UdIwQYMBaAFKkjCumQoDZ65ZoPIb/u/s2V10qB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ3Ny80RDI3RDFDQ0U5 RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi9xU01LNlpDZ05ucmxtZzhodi03LXpaWFhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FTTUs2WkNnTm5ybG1nOGh2LTctelpYWFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA0NzcvNEQyN0QxQ0NFOUU5MTFFRkI1MDJBNTVGQzRGOUFFMDIvN0YwNTNEN0Uw QTk2MTFGMEFBMUJGNzg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofgkMA0GCSqGSIb3DQEBCwUAA4IBAQA+EGJF9j3GQiuo1mdR/a8H OEjMA9ixZU+23ULalOsZjAkoKIQ0T3ipPKhyVthn5QUG9tvovguqKyuQ97ayMctN nP10F3jo4hoEuzd3pskLO9UN9GOHBeELtc5KtvgDeOGyad9Cst0C06qqD8TQUXJi 8nxKFzIrok9Dxs1u2QIwuTwfPN48mCO5MrMhES+0A8jx7cpPzH1a13sWL+79Ds6k /QnUltiMw2Cns+DvgwqRKbuSOJrOWGyuAlkEcwSNcxnlrrjK816M6CirRF8RUVul v3/fxue9XGFqnjFE/HQ8XnHnUi5W10IdG6AeNBpyU+ib0YZiH3jQD5Zzoj9hbFeN -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:33 2026 by rpki-client