$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/3486D47412D511EFB1EF161DC4F9AE02.roa File: 3486D47412D511EFB1EF161DC4F9AE02.roa (raw, json) Hash identifier: noY77zuBNX8xTUWwrf35ANzxZz07dvvKvq+tI08iw0s= Subject key identifier: 8D:AE:5C:98:66:D0:0A:71:AC:F2:A8:D5:4E:3A:07:D1:7E:A2:B7:1B Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Certificate serial: 0392 Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/3486D47412D511EFB1EF161DC4F9AE02.roa Signing time: Tue 03 Mar 2026 01:33:59 +0000 ROA not before: Tue 03 Mar 2026 01:33:59 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55256 IP address blocks: 45.250.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 914 (0x392) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D Validity Not Before: Mar 3 01:33:59 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a63a87-4217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:30:3e:13:88:e7:46:7a:26:b3:11:84:32: 52:50:f0:99:b8:45:ee:d5:9c:79:81:0c:99:58:bb: 80:bd:6e:04:b2:46:38:1f:d4:1d:6f:bf:a5:bc:35: aa:f5:b5:75:02:63:ed:2b:6d:20:5d:26:0f:17:ad: d6:cd:16:52:6e:03:ec:47:47:83:1c:f4:6b:18:b6: a0:64:ad:f1:f2:fd:da:25:91:51:3f:26:c8:4d:3a: 39:08:e7:25:3b:66:d7:72:1e:b5:40:66:8c:37:d9: 9d:ec:a2:f5:66:9c:f3:a5:da:fa:e9:bf:a2:1a:f8: ae:ab:86:6c:09:f2:e1:f3:4f:54:93:cb:00:92:a4: a9:5e:9f:e6:ca:5e:60:be:b9:7f:db:f9:19:b1:11: c8:b2:cd:54:df:60:e0:b7:45:b5:4f:ef:a7:5b:f0: d5:00:2d:25:66:6d:24:bf:80:45:5e:f5:9a:64:88: 8a:d0:26:f5:72:cc:75:48:c3:b6:08:c9:34:b4:3d: ea:27:05:70:65:42:e0:41:f3:7d:ec:d3:a4:66:b2: 92:3a:c5:31:7c:d8:2e:3e:c2:83:b1:5b:04:b8:35: 56:1b:67:b2:98:61:ec:59:65:27:b9:c3:cb:35:f6: 81:77:24:89:18:15:8a:20:ed:21:ef:3c:7c:68:ae: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AE:5C:98:66:D0:0A:71:AC:F2:A8:D5:4E:3A:07:D1:7E:A2:B7:1B X509v3 Authority Key Identifier: keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/3486D47412D511EFB1EF161DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.250.161.0/24 Signature Algorithm: sha256WithRSAEncryption 98:45:0b:a2:0f:fc:62:04:b1:84:15:f9:26:e4:45:02:f5:e5: 05:ef:f1:33:0b:ea:91:fd:cc:2c:96:36:83:e8:89:f4:bd:d0: 8c:90:80:f2:b7:85:4f:63:f9:66:ef:3d:b2:22:59:97:6a:e0: 68:80:28:6e:8c:ef:27:db:00:a6:b8:93:c4:1f:96:50:69:6d: 5b:b8:0a:c8:0c:20:85:90:00:39:de:da:11:ca:30:d4:34:84: cc:4e:3d:6a:df:e4:67:a2:ae:fc:e3:e7:a4:23:e3:5e:79:19: 79:8b:8b:ed:45:86:84:4c:5c:4d:f9:be:f2:ef:71:e7:82:f8: 83:d1:f6:f5:3d:67:1a:a3:ca:4f:e6:c6:80:34:dd:da:74:75: 3d:f7:56:e5:50:d0:45:a1:17:4e:64:da:40:22:38:e5:1c:3d: 2d:2a:4e:9f:e8:f9:fd:0d:b0:17:00:9a:6e:b0:c9:61:84:81: 14:5f:0b:b8:fd:7d:72:fc:b1:28:b1:7a:30:50:ad:c9:91:c5: 39:9c:f5:40:d0:d9:0e:61:dc:14:bf:32:e2:75:2a:c2:37:ea: ca:17:83:ab:91:94:7f:44:8b:65:5f:a2:d6:9b:42:0f:30:3e: 8b:11:82:04:b2:6f:54:2d:2a:15:7e:31:65:e2:b1:fe:03:04: 96:65:4f:50 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC MURERDg5OEQwHhcNMjYwMzAzMDEzMzU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2M2E4Ny00MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOcwPhOI50Z6JrMRhDJSUPCZuEXu1Zx5gQyZWLuAvW4EskY4H9Qdb7+lvDWq 9bV1AmPtK20gXSYPF63WzRZSbgPsR0eDHPRrGLagZK3x8v3aJZFRPybITTo5COcl O2bXch61QGaMN9md7KL1Zpzzpdr66b+iGviuq4ZsCfLh809Uk8sAkqSpXp/myl5g vrl/2/kZsRHIss1U32Dgt0W1T++nW/DVAC0lZm0kv4BFXvWaZIiK0Cb1csx1SMO2 CMk0tD3qJwVwZULgQfN97NOkZrKSOsUxfNguPsKDsVsEuDVWG2eymGHsWWUnucPL NfaBdySJGBWKIO0h7zx8aK6vMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI2uXJhm 0ApxrPKo1U46B9F+orcbMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgwRDIvRDQyOEQwQzZEQURFMTFFQzg3NzExNDUwQzRGOUFFMDIvMzQ4NkQ0NzQx MkQ1MTFFRkIxRUYxNjFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQALfqhMA0GCSqGSIb3DQEBCwUAA4IBAQCYRQuiD/xiBLGEFfkm5EUC 9eUF7/EzC+qR/cwsljaD6In0vdCMkIDyt4VPY/lm7z2yIlmXauBogChujO8n2wCm uJPEH5ZQaW1buArIDCCFkAA53toRyjDUNITMTj1q3+Rnoq784+ekI+NeeRl5i4vt RYaETFxN+b7y73HngviD0fb1PWcao8pP5saANN3adHU991blUNBFoRdOZNpAIjjl HD0tKk6f6Pn9DbAXAJpusMlhhIEUXwu4/X1y/LEosXowUK3JkcU5nPVA0NkOYdwU vzLidSrCN+rKF4OrkZR/RItlX6LWm0IPMD6LEYIEsm9ULSoVfjFl4rH+AwSWZU9Q -----END CERTIFICATE-----Generated at Thu Mar 26 11:25:38 2026 by rpki-client