$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa File: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (raw, json) Hash identifier: 7y7RETYbuZ100fvQ4OZzDzZF974c+TgTdz2U9WNxBsM= Subject key identifier: 41:06:82:CA:C1:37:F1:25:F0:3F:6E:BD:54:57:D9:C1:D4:40:58:DD Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: F0 Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:13:46 +0000 ROA not before: Mon 19 Jan 2026 05:24:57 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 151133 IP address blocks: 161.248.0.0/23 maxlen: 23 161.248.0.0/24 maxlen: 24 161.248.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Validity Not Before: Jan 19 05:24:57 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41f6a-801f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:56:a8:09:80:e2:33:dc:68:07:c1:d3:1f: 62:da:28:64:fa:aa:85:6a:f9:c0:72:1e:d0:f7:e3: 4d:cb:2a:71:60:15:09:25:b7:10:ab:fb:68:b9:91: 5e:e1:7c:34:be:f4:9d:4a:00:d8:6f:57:1e:4c:48: f0:b7:f9:08:ae:00:64:02:fc:da:b7:28:b7:59:66: 3a:13:b4:ec:fb:85:81:04:97:61:06:06:36:2c:a3: ec:6c:53:4a:fa:ec:b9:28:55:36:89:7b:a2:2d:65: 5a:82:a4:52:15:c0:86:fe:4e:84:ed:9e:36:dd:d5: d7:62:c9:cc:4f:ac:f6:29:41:f5:eb:4a:4d:a1:f1: 29:6b:dc:50:17:6f:00:11:ed:42:71:c6:54:da:e1: c0:9a:68:bd:81:d2:fe:66:84:51:e3:c2:79:11:81: 37:0f:4a:01:d1:28:7d:e4:90:cd:38:7a:9e:fc:4f: ba:1f:0a:f4:10:a0:fd:6c:35:58:93:fb:4e:f3:99: d4:59:ad:8b:96:fe:71:ff:4e:56:37:10:9c:7c:cf: e7:1e:e0:1d:c2:81:1d:4f:dd:e9:37:74:a6:7f:87: 92:d1:0c:53:6a:b3:f6:db:7b:cd:d9:f4:cc:b4:a8: 01:df:08:64:9b:20:f4:3e:a1:cf:c2:bd:13:94:e7: 25:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:06:82:CA:C1:37:F1:25:F0:3F:6E:BD:54:57:D9:C1:D4:40:58:DD X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/3139D35EBFA811EFA9B7DC2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.0.0/23 Signature Algorithm: sha256WithRSAEncryption 44:7b:32:08:2f:ff:67:0f:1e:f5:40:6a:48:b2:d4:66:c8:21: bc:bb:ce:7d:bc:7c:42:ed:4f:42:b7:1f:92:80:70:6e:2d:02: e7:2f:04:17:a2:ec:78:7c:63:4f:c9:26:6a:0b:b8:e4:91:73: 9f:71:15:2c:b3:78:15:0a:f2:3e:f3:91:52:35:40:2e:2b:34: 9a:bb:36:6b:1b:ba:db:75:9b:8c:e3:0a:07:0d:40:e3:a8:c0: 74:f0:0b:f9:4a:c2:13:02:15:08:b2:00:59:1f:3f:1b:75:24: 3f:f8:83:8e:cc:fe:7f:37:2f:73:a9:44:18:ea:e4:eb:06:a4: 52:3a:eb:8b:31:14:f0:5c:84:c4:43:50:2a:87:4d:ca:73:a4: 82:69:2f:90:88:2a:0c:8e:b0:cb:d6:7e:9f:0d:45:36:d9:22: 8d:eb:09:92:c7:ca:f1:30:1d:63:06:1d:3d:65:d9:e3:2a:48: 0e:f7:0b:63:4c:49:64:32:e9:03:00:9f:bc:d3:15:32:74:30: 46:c0:ce:7e:8d:b6:73:37:80:e4:55:f2:ba:ba:09:c9:f0:dc: ec:cf:ed:54:7c:0f:1a:3e:fe:4b:87:07:75:cf:6d:31:bd:c5: a5:8e:03:30:35:8f:e9:0b:94:f1:4a:85:2b:56:59:8a:a5:86: 2f:aa:de:9a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky NzBCQUNCMDcwHhcNMjYwMTE5MDUyNDU3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWY2YS04MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/BWqAmA4jPcaAfB0x9i2ihk+qqFavnAch7Q9+NNyypxYBUJJbcQq/touZFe 4Xw0vvSdSgDYb1ceTEjwt/kIrgBkAvzatyi3WWY6E7Ts+4WBBJdhBgY2LKPsbFNK +uy5KFU2iXuiLWVagqRSFcCG/k6E7Z423dXXYsnMT6z2KUH160pNofEpa9xQF28A Ee1CccZU2uHAmmi9gdL+ZoRR48J5EYE3D0oB0Sh95JDNOHqe/E+6Hwr0EKD9bDVY k/tO85nUWa2Llv5x/05WNxCcfM/nHuAdwoEdT93pN3Smf4eS0QxTarP223vN2fTM tKgB3whkmyD0PqHPwr0TlOclGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEEGgsrB N/El8D9uvVRX2cHUQFjdMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThCRTMvRTZFNkJFNDRCRjlDMTFFRjlEQTg4MjgyQzRGOUFFMDIvMzEzOUQzNUVC RkE4MTFFRkE5QjdEQzJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgAMA0GCSqGSIb3DQEBCwUAA4IBAQBEezIIL/9nDx71QGpIstRm yCG8u859vHxC7U9Ctx+SgHBuLQLnLwQXoux4fGNPySZqC7jkkXOfcRUss3gVCvI+ 85FSNUAuKzSauzZrG7rbdZuM4woHDUDjqMB08Av5SsITAhUIsgBZHz8bdSQ/+IOO zP5/Ny9zqUQY6uTrBqRSOuuLMRTwXITEQ1Aqh03Kc6SCaS+QiCoMjrDL1n6fDUU2 2SKN6wmSx8rxMB1jBh09ZdnjKkgO9wtjTElkMukDAJ+80xUydDBGwM5+jbZzN4Dk VfK6ugnJ8Nzsz+1UfA8aPv5Lhwd1z20xvcWljgMwNY/pC5TxSoUrVlmKpYYvqt6a -----END CERTIFICATE-----Generated at Thu Mar 26 22:29:21 2026 by rpki-client