$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/B7E221E4024311F0BD990F64C4F9AE02.roa File: B7E221E4024311F0BD990F64C4F9AE02.roa (raw, json) Hash identifier: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q= Subject key identifier: 2B:EF:D3:29:B1:AA:24:EE:62:63:F7:39:45:10:C8:28:A1:0A:47:28 Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D Certificate serial: DC Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/B7E221E4024311F0BD990F64C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:30:36 +0000 ROA not before: Tue 13 Jan 2026 05:24:48 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138346 IP address blocks: 161.248.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D Validity Not Before: Jan 13 05:24:48 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a59f0c-eee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0f:5b:70:75:b8:7e:9f:f4:bb:01:39:4c:7d: 5e:f3:82:10:84:28:dc:e4:28:31:db:3a:ac:2a:5a: b9:87:6d:9b:be:bf:87:8c:f8:e2:76:43:f1:dc:ec: e5:4f:84:cf:02:14:39:bf:8f:75:ed:45:21:94:49: 8d:e5:64:c2:40:85:2f:25:75:45:53:0e:0f:4a:a5: eb:84:f3:88:f3:6b:31:e8:8d:ae:5d:96:0b:a9:f8: e8:4b:c2:3b:cd:b3:df:b5:8a:6d:7e:9c:89:92:97: c2:a7:3e:92:15:18:35:c7:48:8b:26:30:0e:91:4f: cf:20:e8:ca:aa:b6:01:f8:0c:6d:ea:ce:44:bc:d5: 0f:ff:65:a3:a7:6b:bb:57:cc:81:77:98:6b:6d:49: d8:a6:e3:0d:f1:c3:ef:9a:c1:0f:3d:fe:8c:74:de: 3d:c2:92:fb:80:65:56:db:77:01:03:bc:df:e2:9a: 5a:35:93:85:44:b9:39:6e:65:0d:32:b9:01:b2:90: cd:38:49:8e:b4:d9:a3:cb:0b:fa:2e:ce:e7:48:85: 9f:10:ba:a1:24:bf:16:a6:b7:f6:bd:54:a9:45:f0: e0:89:4f:2b:c6:73:d1:42:92:c1:bc:97:8b:92:3b: 86:07:1e:39:c4:2e:cc:a3:04:6d:6c:91:74:8d:60: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EF:D3:29:B1:AA:24:EE:62:63:F7:39:45:10:C8:28:A1:0A:47:28 X509v3 Authority Key Identifier: keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/B7E221E4024311F0BD990F64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:e5:76:33:e8:f9:8e:5e:10:30:52:12:36:61:bc:78:37:d5: 3f:44:a8:09:7a:63:cd:e6:99:17:6c:02:1b:00:c6:29:a0:c1: c3:92:8a:80:db:9e:4f:e0:ed:2d:4b:fc:fe:3a:46:a0:c3:bf: 2e:17:44:bc:8b:e7:87:7d:7d:f1:20:65:02:28:73:06:4e:20: 8f:0d:f3:25:d4:82:fa:b6:ce:60:42:45:84:7c:91:ee:59:f0: c9:e2:83:01:dc:1a:6a:f2:47:3a:61:e2:78:0d:61:69:35:1b: ef:3b:4e:b3:06:64:20:d8:7a:c0:e0:9b:97:cf:4c:53:43:8b: 38:cb:c4:0c:af:f2:30:83:36:85:91:d8:ee:3e:13:20:3d:de: 83:1a:8d:a2:6e:e8:86:88:3c:8e:81:aa:5b:40:87:8d:36:6f: c9:17:25:93:39:de:56:57:1e:65:a5:b9:0d:d7:60:93:5a:e0: bc:c8:97:b0:0b:5a:20:70:6c:45:bb:e7:18:fe:91:12:d6:15: cc:1d:a8:47:65:70:48:1f:4f:9d:2a:cc:db:0c:46:33:2f:00: f2:ee:23:7d:bf:56:82:ef:61:e7:c7:02:7b:3b:bf:23:96:40: 48:27:4c:9b:dd:fe:ad:b0:51:75:65:7d:31:94:9e:85:b1:37: fe:9c:c3:ba -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDQ0NkZBRjkyM0JFQkFGOTYzNTcyODdGRTI1MDk5MUM3 NTQ5MTQ1NEQwHhcNMjYwMTEzMDUyNDQ4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWYwYy1lZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4A9bcHW4fp/0uwE5TH1e84IQhCjc5Cgx2zqsKlq5h22bvr+HjPjidkPx3Ozl T4TPAhQ5v4917UUhlEmN5WTCQIUvJXVFUw4PSqXrhPOI82sx6I2uXZYLqfjoS8I7 zbPftYptfpyJkpfCpz6SFRg1x0iLJjAOkU/PIOjKqrYB+Axt6s5EvNUP/2Wjp2u7 V8yBd5hrbUnYpuMN8cPvmsEPPf6MdN49wpL7gGVW23cBA7zf4ppaNZOFRLk5bmUN MrkBspDNOEmOtNmjywv6Ls7nSIWfELqhJL8Wprf2vVSpRfDgiU8rxnPRQpLBvJeL kjuGBx45xC7MowRtbJF0jWCQFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCvv0ymx qiTuYmP3OUUQyCihCkcoMB8GA1UdIwQYMBaAFERvr5I766+WNXKH/iUJkcdUkUVN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy8zQUZDMzNFMkVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9SRy12a2p2cnI1WTFjb2YtSlFtUngxU1JS VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JHLXZranZycjVZMWNvZi1KUW1SeDFTUlJVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkYxQ0MvM0FGQzMzRTJFRjYzMTFFRkJGNjRBQjZBQzRGOUFFMDIvQjdFMjIxRTQw MjQzMTFGMEJEOTkwRjY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofg4MA0GCSqGSIb3DQEBCwUAA4IBAQB+5XYz6PmOXhAwUhI2Ybx4 N9U/RKgJemPN5pkXbAIbAMYpoMHDkoqA255P4O0tS/z+Okagw78uF0S8i+eHfX3x IGUCKHMGTiCPDfMl1IL6ts5gQkWEfJHuWfDJ4oMB3Bpq8kc6YeJ4DWFpNRvvO06z BmQg2HrA4JuXz0xTQ4s4y8QMr/IwgzaFkdjuPhMgPd6DGo2ibuiGiDyOgapbQIeN Nm/JFyWTOd5WVx5lpbkN12CTWuC8yJewC1ogcGxFu+cY/pES1hXMHahHZXBIH0+d KszbDEYzLwDy7iN9v1aC72HnxwJ7O78jlkBIJ0yb3f6tsFF1ZX0xlJ6FsTf+nMO6 -----END CERTIFICATE-----Generated at Thu Mar 26 10:07:58 2026 by rpki-client