$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/9F56DCE491F611F099771D3FC4F9AE02.roa File: 9F56DCE491F611F099771D3FC4F9AE02.roa (raw, json) Hash identifier: Yhm7+m6I9lWu4bRq4rLXmeSCG3dRSGkgkhbHl5g6RH0= Subject key identifier: 8F:94:8A:A6:4C:85:A8:7D:97:E9:D4:E6:05:44:F0:BF:DA:24:D1:72 Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 64 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/9F56DCE491F611F099771D3FC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:35:34 +0000 ROA not before: Mon 15 Sep 2025 05:48:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154228 IP address blocks: 144.48.248.0/23 maxlen: 23 144.48.248.0/24 maxlen: 24 144.48.249.0/24 maxlen: 24 2001:df6:1e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 07:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Sep 15 05:48:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a59226-d0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:b3:ab:f2:e8:c7:43:a7:c9:70:0c:fc:ef: f6:0b:d0:ac:0a:0d:18:52:69:8c:50:bb:0d:8d:c9: 79:3e:8c:65:d1:4d:0b:6a:40:6d:c9:44:2c:80:83: d4:4e:23:ee:58:f5:1e:30:9c:37:ed:4a:78:a8:0b: a9:d1:e4:bb:e1:35:36:38:2f:62:a0:08:32:08:67: 2f:d4:a8:fb:8a:db:ba:f7:2e:d6:be:d3:68:4a:55: ca:ad:5c:89:4c:7d:b7:f6:1c:06:1c:35:b0:a5:a0: 53:54:85:67:9d:d4:49:af:5d:09:d4:ac:7e:1a:24: 50:db:21:86:e2:84:d1:6f:bd:7e:a3:b5:5e:d1:04: 5c:a6:ad:9e:b4:b6:f0:c1:dd:e6:08:f9:6d:36:e3: 61:03:4d:1c:ae:b7:a7:41:e3:03:06:c7:d2:93:d2: 68:af:0c:fb:d6:cc:7e:62:26:6f:d5:fb:41:15:d7: 56:0a:0f:83:10:d5:ce:37:02:61:f3:3f:a1:f8:ca: 1e:e4:dc:4c:cb:44:02:b9:79:4c:ae:87:8d:0b:89: 65:b8:d1:de:96:ba:28:b1:01:b1:a0:d2:98:68:50: 23:2c:e8:21:3d:1d:0b:d5:7b:af:91:98:39:57:3d: 11:e5:4b:9a:ed:6e:cc:63:6a:18:f5:f6:2a:91:e2: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:8A:A6:4C:85:A8:7D:97:E9:D4:E6:05:44:F0:BF:DA:24:D1:72 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/9F56DCE491F611F099771D3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.48.248.0/23 IPv6: 2001:df6:1e40::/48 Signature Algorithm: sha256WithRSAEncryption 00:05:a6:60:5a:4e:05:29:b5:cf:ee:72:69:7c:ef:96:4b:f4: 02:d2:83:ee:77:c4:46:95:38:59:68:34:49:a8:1a:39:d8:f1: bd:31:b2:9e:93:98:49:f3:b4:3c:e9:01:89:11:88:bf:21:9f: cd:a2:20:1d:85:70:ff:31:98:3f:29:b8:4a:3b:09:f0:01:16: 85:39:d0:be:20:9c:c3:62:98:a5:be:ae:e6:21:10:28:33:13: 9a:97:03:5f:bd:8c:a4:39:ca:29:a4:48:de:84:89:25:79:b7: 6d:a7:47:84:c0:32:99:70:02:f3:cf:4b:e3:3f:9b:41:2e:e5: 97:65:17:c1:b3:51:b5:73:16:85:63:05:f9:90:6e:d5:84:78: 3c:3f:f8:d4:54:ee:a6:19:11:d8:23:86:c3:7c:9d:ba:27:bf: ee:71:43:05:66:2a:c9:ed:c9:e2:94:07:46:3e:17:74:0f:45: fd:90:00:43:72:af:bf:13:55:83:d5:91:2e:72:09:63:79:5b: 38:a1:b6:3a:36:31:86:9a:9a:9b:36:3f:81:27:37:29:c4:f9: 7b:a3:ef:02:d2:9b:5e:f7:0b:d0:4a:ac:be:9e:5b:44:86:7b: d1:e9:70:ae:f7:f1:ea:97:cd:3a:2a:1f:8a:d2:1c:62:e0:c1: e3:0a:be:75 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNTA5MTUwNTQ4NTFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5MjI2LWQwZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMibOr8ujHQ6fJcAz87/YL0KwKDRhSaYxQuw2NyXk+jGXRTQtqQG3JRCyAg9RO I+5Y9R4wnDftSnioC6nR5LvhNTY4L2KgCDIIZy/UqPuK27r3Lta+02hKVcqtXIlM fbf2HAYcNbCloFNUhWed1EmvXQnUrH4aJFDbIYbihNFvvX6jtV7RBFymrZ60tvDB 3eYI+W0242EDTRyut6dB4wMGx9KT0mivDPvWzH5iJm/V+0EV11YKD4MQ1c43AmHz P6H4yh7k3EzLRAK5eUyuh40LiWW40d6WuiixAbGg0phoUCMs6CE9HQvVe6+RmDlX PRHlS5rtbsxjahj19iqR4l73AgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUj5SKpkyF qH2X6dTmBUTwv9ok0XIwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzYxNS9CQUYzOEU4QTkxRjUxMUYwQjM2QjA5M0NDNEY5QUUwMi85RjU2RENFNDkx RjYxMUYwOTk3NzFEM0ZDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAGQMPgwDwQCAAIwCQMHACABDfYeQDANBgkqhkiG9w0BAQsFAAOCAQEA AAWmYFpOBSm1z+5yaXzvlkv0AtKD7nfERpU4WWg0SagaOdjxvTGynpOYSfO0POkB iRGIvyGfzaIgHYVw/zGYPym4SjsJ8AEWhTnQviCcw2KYpb6u5iEQKDMTmpcDX72M pDnKKaRI3oSJJXm3badHhMAymXAC889L4z+bQS7ll2UXwbNRtXMWhWMF+ZBu1YR4 PD/41FTuphkR2COGw3yduie/7nFDBWYqye3J4pQHRj4XdA9F/ZAAQ3KvvxNVg9WR LnIJY3lbOKG2OjYxhpqamzY/gSc3KcT5e6PvAtKbXvcL0Eqsvp5bRIZ70elwrvfx 6pfNOiofitIcYuDB4wq+dQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:50 2026 by rpki-client