$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/249FA95E9D4111EFA3DA7F75C4F9AE02.roa File: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (raw, json) Hash identifier: IIgjx5hMDfgzrpHDFYnjfbNSp51tU2xzdb1oFbQHBNY= Subject key identifier: FD:FC:23:15:5C:E6:0F:0B:F0:D3:4D:B7:80:B1:96:F4:C6:3B:4E:B2 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: 01A6 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/249FA95E9D4111EFA3DA7F75C4F9AE02.roa Signing time: Tue 05 May 2026 04:36:10 +0000 ROA not before: Tue 05 May 2026 04:36:10 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 135858 IP address blocks: 198.217.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: May 5 04:36:10 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f973ba-7a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:a6:aa:b9:5a:94:ca:00:9d:e4:10:b6:7c: 3a:d8:cf:e9:bf:22:53:ba:9a:04:79:dc:f0:dc:93: 51:ec:5c:86:f3:69:9e:4b:e3:3e:39:d4:8a:44:f6: f7:2e:73:36:67:c5:9e:4f:f0:c4:fb:25:32:e6:42: e2:cd:e5:7d:0b:ec:4a:d5:74:55:fc:f8:04:e3:3a: 30:2d:21:01:99:8c:7e:4e:2f:1e:03:ec:ad:ac:03: 9b:d8:05:e9:cd:8a:cd:ad:c8:d0:fe:ba:35:15:89: 52:a4:93:83:1d:5a:8c:31:c9:dd:03:d2:38:e1:96: ad:f9:0d:87:4a:a5:57:d4:5b:ca:6b:e6:e2:46:d0: a3:cf:5f:33:90:96:db:d1:79:f6:54:9b:87:da:08: f2:4c:40:59:d1:2f:28:10:c0:4e:c6:5a:7f:a0:c5: 01:3c:8d:39:f5:15:8e:3f:db:b6:c9:f6:a7:6d:39: 13:a1:c9:a8:2b:04:c1:15:3d:2e:df:ee:7d:fc:07: 67:5a:14:3f:ce:a0:30:80:f3:51:ee:92:0c:11:62: 30:be:1b:59:d6:ec:66:24:72:59:04:1a:d6:6c:4d: 27:1c:43:6d:29:37:2e:aa:d7:fe:39:7d:04:77:43: 5a:d8:cd:b3:62:cb:ae:07:f5:8a:ad:0e:17:a8:ce: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FC:23:15:5C:E6:0F:0B:F0:D3:4D:B7:80:B1:96:F4:C6:3B:4E:B2 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/249FA95E9D4111EFA3DA7F75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 198.217.248.0/24 Signature Algorithm: sha256WithRSAEncryption aa:47:9e:f8:fb:e7:2b:6d:a4:1c:b4:4b:74:1c:c0:34:d1:d7: ca:b0:0c:f6:bc:3b:20:d0:04:fc:eb:75:ef:ed:51:d1:40:5f: 30:10:c1:85:b0:a8:c6:8e:7d:1c:42:46:78:db:53:4d:64:73: a6:07:78:f5:08:bf:4d:42:9f:97:c8:24:7a:63:32:16:63:df: 57:15:25:c9:7f:35:90:77:d1:eb:00:1d:9d:49:e1:63:3d:7f: 3b:a2:06:98:a7:6c:b3:51:f8:32:e8:64:a8:0b:65:f4:ae:0e: 82:76:23:67:5b:8a:d1:f5:d1:9a:38:3f:3e:3a:73:3c:31:a9: f0:c7:51:50:ff:55:56:73:a2:ae:21:5b:14:8d:d2:ad:bf:51: 5d:92:dc:66:1c:c9:b2:23:1e:cc:47:bf:82:f5:d7:a3:94:0f: 52:ed:67:95:8f:c4:f0:18:51:6f:56:c9:9e:48:1a:7d:96:ca: 70:11:cb:17:44:79:c2:de:9c:42:2d:65:07:21:af:aa:59:6a: 64:f7:53:7d:6c:75:8e:cc:af:8d:91:0c:55:27:11:d2:1d:22: eb:93:b9:d7:39:68:76:1d:e1:2f:5f:da:e1:aa:42:dd:29:ea: 18:28:4a:db:b2:7c:87:29:a9:56:c4:d4:4f:87:64:42:9d:b3: f8:89:9f:8b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjYwNTA1MDQzNjEwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY5NzNiYS03YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqGmqrlalMoAneQQtnw62M/pvyJTupoEedzw3JNR7FyG82meS+M+OdSKRPb3 LnM2Z8WeT/DE+yUy5kLizeV9C+xK1XRV/PgE4zowLSEBmYx+Ti8eA+ytrAOb2AXp zYrNrcjQ/ro1FYlSpJODHVqMMcndA9I44Zat+Q2HSqVX1FvKa+biRtCjz18zkJbb 0Xn2VJuH2gjyTEBZ0S8oEMBOxlp/oMUBPI059RWOP9u2yfanbTkTocmoKwTBFT0u 3+59/AdnWhQ/zqAwgPNR7pIMEWIwvhtZ1uxmJHJZBBrWbE0nHENtKTcuqtf+OX0E d0Na2M2zYsuuB/WKrQ4XqM4sSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP38IxVc 5g8L8NNNt4CxlvTGO06yMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUwQTIvRTRDODg1MTJEMDI3MTFFRUJGNUI2OTNDQzRGOUFFMDIvMjQ5RkE5NUU5 RDQxMTFFRkEzREE3Rjc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAxtn4MA0GCSqGSIb3DQEBCwUAA4IBAQCqR574++crbaQctEt0HMA0 0dfKsAz2vDsg0AT863Xv7VHRQF8wEMGFsKjGjn0cQkZ421NNZHOmB3j1CL9NQp+X yCR6YzIWY99XFSXJfzWQd9HrAB2dSeFjPX87ogaYp2yzUfgy6GSoC2X0rg6CdiNn W4rR9dGaOD8+OnM8Manwx1FQ/1VWc6KuIVsUjdKtv1FdktxmHMmyIx7MR7+C9dej lA9S7WeVj8TwGFFvVsmeSBp9lspwEcsXRHnC3pxCLWUHIa+qWWpk91N9bHWOzK+N kQxVJxHSHSLrk7nXOWh2HeEvX9rhqkLdKeoYKErbsnyHKalWxNRPh2RCnbP4iZ+L -----END CERTIFICATE-----Generated at Wed May 13 09:42:21 2026 by rpki-client