$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/249FA95E9D4111EFA3DA7F75C4F9AE02.roa File: 249FA95E9D4111EFA3DA7F75C4F9AE02.roa (raw, json) Hash identifier: dV21RljBsPZXn1S1QDXxjkv9wNQTkd8R72gkZpqjyJk= Subject key identifier: 8B:F6:E7:87:BC:BC:7A:A4:7C:58:14:5E:17:03:F3:7B:DE:9A:49:42 Certificate issuer: /CN=A91D50A2/serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Certificate serial: 0182 Authority key identifier: FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/249FA95E9D4111EFA3DA7F75C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:03:04 +0000 ROA not before: Sun 11 May 2025 04:45:25 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135858 IP address blocks: 198.217.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50A2, serialNumber=FEB863633DEB713F7D92568C71798584B0BAD666 Validity Not Before: May 11 04:45:25 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a5a6a8-e123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:09:60:99:8e:7e:25:cf:c6:ed:a5:24:b6: 8c:11:77:d0:e6:02:24:1a:8b:eb:5c:b1:bf:9e:3b: 1f:36:e8:9a:10:cf:15:d1:d1:b1:12:00:0f:b2:2e: 4d:b1:a6:c9:4c:4d:37:37:c5:14:15:e0:bc:16:3c: f7:5c:ce:72:13:6e:fc:4f:23:87:d7:47:d5:c8:18: 99:ef:a5:a1:fe:cb:79:eb:a1:05:64:88:fc:e0:6d: 58:47:0a:0a:5f:24:f1:3d:27:94:9d:43:bc:89:cf: b2:41:55:a0:48:8d:2f:05:06:ed:41:6c:10:9a:ea: 36:0b:70:ab:d3:96:82:78:5e:89:5f:92:31:b0:c5: c5:9c:60:f7:51:07:12:f4:bc:cc:53:01:0e:93:22: 50:5b:b0:f9:36:02:c4:3e:ed:b0:2b:b3:4e:2c:98: 04:73:5f:cd:12:c6:e0:12:a6:8e:6a:57:d8:85:f3: fd:79:94:71:52:71:bf:98:a0:77:f9:be:1c:ed:e4: 05:ed:a1:ad:58:47:e3:72:b4:00:ac:f0:a9:b6:31: 5a:d8:ba:ee:39:d8:be:34:e8:3f:60:28:9b:1f:ec: 86:41:1f:e7:8c:36:65:99:ad:f3:e0:05:98:91:fc: 3d:ec:25:3f:b9:80:0a:2c:23:0f:e1:d7:bd:a1:b9: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F6:E7:87:BC:BC:7A:A4:7C:58:14:5E:17:03:F3:7B:DE:9A:49:42 X509v3 Authority Key Identifier: keyid:FE:B8:63:63:3D:EB:71:3F:7D:92:56:8C:71:79:85:84:B0:BA:D6:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/_rhjYz3rcT99klaMcXmFhLC61mY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_rhjYz3rcT99klaMcXmFhLC61mY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/E4C88512D02711EEBF5B693CC4F9AE02/249FA95E9D4111EFA3DA7F75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 198.217.248.0/24 Signature Algorithm: sha256WithRSAEncryption bf:10:c0:84:9d:28:d6:05:9b:6f:16:50:0f:a3:83:8a:aa:ee: 4c:e8:27:0e:7a:c2:e6:95:f5:6f:ce:53:2c:8d:32:55:e7:81: 4a:95:4d:0d:ca:6f:61:96:06:16:c6:02:63:c5:2e:a6:52:75: 32:f6:30:a9:3d:43:da:3f:71:00:67:8d:92:31:5a:de:c2:b0: 75:87:10:84:87:1c:c2:00:c3:18:7b:89:36:50:e7:5a:a1:38: 50:17:68:4a:34:54:6e:92:cc:29:a9:0a:52:f8:f3:c7:f9:e5: 0a:1b:86:e2:19:7a:df:ef:fc:40:3f:c5:d3:56:81:6a:ff:8b: 47:35:df:61:7b:69:f3:87:d7:75:5d:46:00:f0:18:75:2a:5f: a6:b2:4c:77:7c:fc:62:8a:03:95:a9:8d:a3:5e:e3:86:41:4d: db:db:55:ba:93:a9:1a:44:b9:89:ae:93:b9:42:fc:f5:cb:96: c6:fe:a0:8f:76:c1:b8:7e:eb:cb:90:d5:5e:86:7b:04:e7:5e: 3f:83:6a:ba:70:d4:fc:e7:d7:17:03:f1:56:a3:61:65:a6:d0: 10:ed:5f:12:d0:99:06:4d:66:e3:04:87:2e:a4:35:3d:5c:a3: 4e:a7:7a:01:56:bc:e8:9d:07:5a:06:f6:2a:5f:1a:4f:47:52: 58:43:90:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwQTIxMTAvBgNVBAUTKEZFQjg2MzYzM0RFQjcxM0Y3RDkyNTY4QzcxNzk4NTg0 QjBCQUQ2NjYwHhcNMjUwNTExMDQ0NTI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTZhOC1lMTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rEJYJmOfiXPxu2lJLaMEXfQ5gIkGovrXLG/njsfNuiaEM8V0dGxEgAPsi5N sabJTE03N8UUFeC8Fjz3XM5yE278TyOH10fVyBiZ76Wh/st566EFZIj84G1YRwoK XyTxPSeUnUO8ic+yQVWgSI0vBQbtQWwQmuo2C3Cr05aCeF6JX5IxsMXFnGD3UQcS 9LzMUwEOkyJQW7D5NgLEPu2wK7NOLJgEc1/NEsbgEqaOalfYhfP9eZRxUnG/mKB3 +b4c7eQF7aGtWEfjcrQArPCptjFa2LruOdi+NOg/YCibH+yGQR/njDZlma3z4AWY kfw97CU/uYAKLCMP4de9obkViwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIv254e8 vHqkfFgUXhcD83vemklCMB8GA1UdIwQYMBaAFP64Y2M963E/fZJWjHF5hYSwutZm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBBMi9FNEM4ODUxMkQw MjcxMUVFQkY1QjY5M0NDNEY5QUUwMi9fcmhqWXozcmNUOTlrbGFNY1htRmhMQzYx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19yaGpZejNyY1Q5OWtsYU1jWG1GaExDNjFtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUwQTIvRTRDODg1MTJEMDI3MTFFRUJGNUI2OTNDQzRGOUFFMDIvMjQ5RkE5NUU5 RDQxMTFFRkEzREE3Rjc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAxtn4MA0GCSqGSIb3DQEBCwUAA4IBAQC/EMCEnSjWBZtvFlAPo4OK qu5M6CcOesLmlfVvzlMsjTJV54FKlU0Nym9hlgYWxgJjxS6mUnUy9jCpPUPaP3EA Z42SMVrewrB1hxCEhxzCAMMYe4k2UOdaoThQF2hKNFRukswpqQpS+PPH+eUKG4bi GXrf7/xAP8XTVoFq/4tHNd9he2nzh9d1XUYA8Bh1Kl+mskx3fPxiigOVqY2jXuOG QU3b21W6k6kaRLmJrpO5Qvz1y5bG/qCPdsG4fuvLkNVehnsE514/g2q6cNT859cX A/FWo2FlptAQ7V8S0JkGTWbjBIcupDU9XKNOp3oBVrzonQdaBvYqXxpPR1JYQ5AT -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:34 2026 by rpki-client