$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa File: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (raw, json) Hash identifier: ffvc9baQUhPBkEPNM+Vs7ZdfNHNVe+g2HNSMjZukS2Y= Subject key identifier: 80:8E:7B:03:CD:ED:02:48:48:F1:5A:3D:F9:6A:34:7B:7E:7D:15:3E Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: 0140 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa Signing time: Mon 13 Jul 2026 06:32:31 +0000 ROA not before: Mon 13 Jul 2026 06:32:31 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 40310 IP address blocks: 45.248.140.0/24 maxlen: 24 45.248.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jul 13 06:32:31 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a54867f-8040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:08:7f:95:0e:fa:88:65:87:fb:fd:53:43: 36:2f:17:51:9b:1f:5a:06:32:da:54:46:37:ed:7b: 70:9d:6c:f8:8d:27:6f:df:ab:08:27:75:d7:86:67: 63:a3:67:99:c4:97:ed:d0:ad:80:fc:84:c5:56:d2: 43:98:c0:51:69:69:54:ac:c6:ee:16:4d:00:60:76: 05:2f:da:e6:63:f5:d5:81:e5:30:04:37:c5:b6:d1: 24:b2:c3:d5:5e:38:10:1c:66:61:54:12:c2:3b:36: 1c:ba:9d:5c:75:95:f0:a7:89:b6:35:7e:87:f5:55: bf:fe:e2:47:07:73:f6:f8:50:57:58:f9:ae:22:76: 88:da:15:93:4e:ee:87:d2:f0:55:3a:0a:ab:1d:5b: a7:e2:7a:c6:73:e9:ad:3e:9a:d7:67:25:92:1c:19: bd:8e:cf:58:87:01:a7:1c:d7:b2:83:50:d3:d2:97: d7:51:65:73:fd:67:4d:53:cf:f4:00:62:2e:08:f7: 70:dc:e3:e6:37:23:82:82:e0:bf:ff:1e:c2:9a:4c: 37:04:bc:54:53:91:79:a8:1b:e3:75:e9:19:19:45: 2f:55:4c:5a:fd:c3:23:be:8a:92:91:60:42:d6:46: 60:e4:d4:78:f5:06:a0:91:8c:be:6f:1d:a1:6e:4d: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8E:7B:03:CD:ED:02:48:48:F1:5A:3D:F9:6A:34:7B:7E:7D:15:3E X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.140.0/24 45.248.142.0/23 Signature Algorithm: sha256WithRSAEncryption 80:4f:70:93:91:01:cb:f7:91:f9:60:d6:a1:a0:8c:ef:83:9e: c7:e0:b1:f3:54:72:d0:19:97:be:0e:6f:33:a6:94:89:ee:8d: 07:d0:f6:f1:ba:79:8d:c1:09:4e:76:49:b4:db:c0:39:11:48: 71:e0:79:97:17:a9:2e:91:b3:14:be:b6:0e:55:64:e0:d8:56: e5:31:94:b8:c8:3d:f2:01:cb:1b:09:ca:04:d5:bc:e3:8d:87: 3c:7d:fc:ad:40:a8:a9:75:4d:34:5a:60:06:37:9e:12:1b:e6: 56:b2:81:bd:be:d8:64:e1:40:7f:99:8a:4b:05:6e:09:a9:33: 4a:29:74:e8:c3:9c:d0:0f:28:c9:62:7a:aa:32:61:0e:c7:e0: bc:41:1f:e3:0b:a2:5a:7e:ef:bc:9e:6b:e2:ac:27:83:bf:1a: 17:c2:64:91:1c:c3:11:ab:8a:db:d1:e5:79:e9:8d:7d:73:37: a0:ed:9f:87:be:b4:83:47:84:91:61:97:0a:c8:b5:b6:41:e1: 8b:fd:ef:0c:1c:0c:07:84:1c:e9:4c:3b:80:28:0f:c0:b3:83: 14:7c:15:d5:15:22:96:db:16:e0:50:ff:41:2d:06:55:2d:25: ae:ce:04:39:82:26:21:87:dc:63:6c:e8:06:6b:6e:a1:4b:34: b5:bf:c3:d5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjYwNzEzMDYzMjMxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTU0ODY3Zi04MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6oIf5UO+ohlh/v9U0M2LxdRmx9aBjLaVEY37XtwnWz4jSdv36sIJ3XXhmdj o2eZxJft0K2A/ITFVtJDmMBRaWlUrMbuFk0AYHYFL9rmY/XVgeUwBDfFttEkssPV XjgQHGZhVBLCOzYcup1cdZXwp4m2NX6H9VW//uJHB3P2+FBXWPmuInaI2hWTTu6H 0vBVOgqrHVun4nrGc+mtPprXZyWSHBm9js9YhwGnHNeyg1DT0pfXUWVz/WdNU8/0 AGIuCPdw3OPmNyOCguC//x7Cmkw3BLxUU5F5qBvjdekZGUUvVUxa/cMjvoqSkWBC 1kZg5NR49QagkYy+bx2hbk2WhwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFICOewPN 7QJISPFaPflqNHt+fRU+MB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg0ODUvMkRCQ0VGNDZCNDEyMTFFRkI4RTZFNzczQzRGOUFFMDIvQTU5RkZCM0VC N0Q3MTFFRjlFRDBDMzI0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQALfiMAwQBLfiOMA0GCSqGSIb3DQEBCwUAA4IBAQCAT3CTkQHL95H5 YNahoIzvg57H4LHzVHLQGZe+Dm8zppSJ7o0H0PbxunmNwQlOdkm028A5EUhx4HmX F6kukbMUvrYOVWTg2FblMZS4yD3yAcsbCcoE1bzjjYc8ffytQKipdU00WmAGN54S G+ZWsoG9vthk4UB/mYpLBW4JqTNKKXTow5zQDyjJYnqqMmEOx+C8QR/jC6Jafu+8 nmvirCeDvxoXwmSRHMMRq4rb0eV56Y19czeg7Z+HvrSDR4SRYZcKyLW2QeGL/e8M HAwHhBzpTDuAKA/As4MUfBXVFSKW2xbgUP9BLQZVLSWuzgQ5giYhh9xjbOgGa26h SzS1v8PV -----END CERTIFICATE-----Generated at Sat Jul 25 00:25:30 2026 by rpki-client