$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/9A54CDE2348011F086A8BD61C4F9AE02.roa File: 9A54CDE2348011F086A8BD61C4F9AE02.roa (raw, json) Hash identifier: pZ/IuFjNSaP5mWEh2joWSRI7X8KU75Bz1DpqY2aQSvM= Subject key identifier: 2A:22:A3:B9:67:0A:28:A8:CD:47:9C:E1:B0:60:D1:C5:C2:4D:99:28 Certificate issuer: /CN=A919874A/serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788 Certificate serial: D2 Authority key identifier: D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/9A54CDE2348011F086A8BD61C4F9AE02.roa Signing time: Wed 11 Mar 2026 05:46:21 +0000 ROA not before: Wed 11 Mar 2026 05:46:21 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138096 IP address blocks: 161.248.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919874A, serialNumber=D0480FF1075052FEFEE6C08E1DBF8E83E0012788 Validity Not Before: Mar 11 05:46:21 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b101ad-89f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:d0:20:5a:87:52:8c:db:56:2d:69:b7:0d: de:8d:5b:40:bd:0c:1b:60:40:35:6f:4c:4a:39:21: 38:72:1f:e2:77:12:7f:0e:ac:6d:68:b2:d3:43:ca: 62:09:64:33:ad:52:59:33:23:3d:a1:87:7b:50:8e: ff:74:cf:aa:e1:89:2e:70:5b:70:15:13:23:eb:a6: ba:b0:9e:26:43:5f:20:e3:5f:91:e5:49:2f:aa:34: cd:02:ba:91:c5:59:92:03:43:ac:d5:ba:1f:8f:01: b2:76:ee:2d:d0:88:65:a8:c1:bd:ca:2d:3b:ba:b2: 73:ea:96:e6:c3:61:a7:5d:f8:a2:57:56:80:da:b4: 9e:58:e9:83:17:67:d0:7b:cb:c0:8d:56:07:95:43: c5:23:44:4a:4e:80:6d:b4:b5:46:c0:18:b3:7d:47: 2e:d8:c8:68:e4:24:f4:7d:43:8a:92:50:1c:53:00: fb:1f:a9:12:40:eb:33:6c:0d:13:a2:49:f6:f4:92: fc:32:a9:86:34:5e:4d:4c:7b:b8:ab:90:26:02:06: 0b:a0:80:40:44:34:1e:f1:50:56:fd:de:97:48:fb: 11:9a:1b:db:61:21:15:f7:0a:ba:ab:3a:49:54:7f: 48:83:41:e9:56:55:6a:d2:b9:79:2b:80:2d:aa:c1: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:A3:B9:67:0A:28:A8:CD:47:9C:E1:B0:60:D1:C5:C2:4D:99:28 X509v3 Authority Key Identifier: keyid:D0:48:0F:F1:07:50:52:FE:FE:E6:C0:8E:1D:BF:8E:83:E0:01:27:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0EgP8QdQUv7-5sCOHb-Og-ABJ4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/ECE166D4EAD311EFB1C4CC55C4F9AE02/9A54CDE2348011F086A8BD61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.117.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f4:35:bb:cf:8a:5b:4a:0b:e6:bc:67:91:40:87:f1:b1:e9: 7c:01:27:4c:29:dc:52:2c:7b:e4:20:51:51:d7:c3:24:b4:37: 48:6b:b6:4c:15:9d:22:46:c0:21:2f:8a:21:ae:c5:af:2d:9c: 30:ad:76:6e:a8:d8:ea:0b:8c:5b:80:d4:7e:12:db:4e:53:ab: 06:21:fc:3c:b8:9b:2b:d5:56:2a:9f:19:91:18:62:3b:58:d9: be:0c:16:d5:d2:cf:65:a0:20:fe:47:29:79:9b:3c:8d:18:01: 5d:62:af:a3:90:65:51:57:2b:09:2a:ff:db:98:09:33:7d:a6: f9:43:d5:60:4c:2a:d5:9b:58:04:23:3c:27:05:c4:99:77:8d: 6e:c4:00:3b:d7:65:4b:cb:57:7b:c3:84:47:cb:a8:35:73:1f: 01:ad:6a:2a:dc:ca:a6:f3:2e:5f:92:bf:ef:da:23:5a:f0:8b: 9c:de:22:e6:e2:cd:cd:11:e0:ae:75:0b:13:a9:a9:9d:8e:fe: d0:e7:52:eb:3a:b2:20:25:e9:2b:14:2b:0d:1b:8a:55:d7:f2: f7:10:3c:73:19:cc:7b:19:4e:df:11:1f:f7:51:d6:df:e5:65: fc:02:56:e9:fc:6a:fc:82:73:13:34:13:29:5d:a2:a9:13:78: 6c:02:06:e5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3NEExMTAvBgNVBAUTKEQwNDgwRkYxMDc1MDUyRkVGRUU2QzA4RTFEQkY4RTgz RTAwMTI3ODgwHhcNMjYwMzExMDU0NjIxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIxMDFhZC04OWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVLQIFqHUozbVi1ptw3ejVtAvQwbYEA1b0xKOSE4ch/idxJ/DqxtaLLTQ8pi CWQzrVJZMyM9oYd7UI7/dM+q4YkucFtwFRMj66a6sJ4mQ18g41+R5UkvqjTNArqR xVmSA0Os1bofjwGydu4t0IhlqMG9yi07urJz6pbmw2GnXfiiV1aA2rSeWOmDF2fQ e8vAjVYHlUPFI0RKToBttLVGwBizfUcu2Mho5CT0fUOKklAcUwD7H6kSQOszbA0T okn29JL8MqmGNF5NTHu4q5AmAgYLoIBARDQe8VBW/d6XSPsRmhvbYSEV9wq6qzpJ VH9Ig0HpVlVq0rl5K4AtqsGbJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCoio7ln CiiozUec4bBg0cXCTZkoMB8GA1UdIwQYMBaAFNBID/EHUFL+/ubAjh2/joPgASeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODc0QS9FQ0UxNjZENEVB RDMxMUVGQjFDNENDNTVDNEY5QUUwMi8wRWdQOFFkUVV2Ny01c0NPSGItT2ctQUJK NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBFZ1A4UWRRVXY3LTVzQ09IYi1PZy1BQko0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg3NEEvRUNFMTY2RDRFQUQzMTFFRkIxQzRDQzU1QzRGOUFFMDIvOUE1NENERTIz NDgwMTFGMDg2QThCRDYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofh1MA0GCSqGSIb3DQEBCwUAA4IBAQCj9DW7z4pbSgvmvGeRQIfx sel8ASdMKdxSLHvkIFFR18MktDdIa7ZMFZ0iRsAhL4ohrsWvLZwwrXZuqNjqC4xb gNR+EttOU6sGIfw8uJsr1VYqnxmRGGI7WNm+DBbV0s9loCD+Ryl5mzyNGAFdYq+j kGVRVysJKv/bmAkzfab5Q9VgTCrVm1gEIzwnBcSZd41uxAA712VLy1d7w4RHy6g1 cx8BrWoq3Mqm8y5fkr/v2iNa8Iuc3iLm4s3NEeCudQsTqamdjv7Q51LrOrIgJekr FCsNG4pV1/L3EDxzGcx7GU7fER/3Udbf5WX8Albp/Gr8gnMTNBMpXaKpE3hsAgbl -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:45 2026 by rpki-client