$ rpki-client -vvf rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/B1C9E322E9EE11EF9D68D841C4F9AE02.roa File: B1C9E322E9EE11EF9D68D841C4F9AE02.roa (raw, json) Hash identifier: ueAfbCMkj1wTXyISOQ5e3CCqBKbOGTMXBSwXfehkPHM= Subject key identifier: A7:BC:72:D3:85:55:72:61:E4:35:43:DC:D0:EF:1F:30:15:66:54:0D Certificate issuer: /CN=A9110477/serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Certificate serial: DF Authority key identifier: A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/B1C9E322E9EE11EF9D68D841C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:59:42 +0000 ROA not before: Sat 15 Nov 2025 04:22:29 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 9658 IP address blocks: 161.248.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110477, serialNumber=A9230AE990A0367AE59A0F21BFEEFECD95D74A81 Validity Not Before: Nov 15 04:22:29 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a597ce-d04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:53:0a:ac:3e:52:6c:68:34:be:ff:2c:66:7e: 84:80:40:37:50:36:b9:60:96:6e:ce:fc:a0:f9:52: ae:e9:a5:6b:d4:32:19:ea:c6:a0:71:4b:66:ca:dd: ec:61:78:71:19:82:6c:ba:52:a3:17:44:7b:79:82: 79:32:a9:34:98:b9:e6:fc:7b:ee:a5:4b:fe:a9:3c: 88:41:6b:ce:61:d3:00:57:39:d5:27:00:f2:88:43: 09:02:cd:42:26:90:72:bf:58:e4:99:f5:af:7a:85: 20:bc:ef:e3:f7:63:d9:24:b9:06:47:72:c8:38:a0: 6c:b1:91:7e:8d:e1:1f:9b:87:2d:0d:40:26:6c:21: 3b:c5:1a:2d:6a:00:e2:e8:73:03:b1:45:70:db:95: bf:3f:4a:a3:29:61:3f:5d:0c:29:3a:ff:6b:7e:4c: 60:b9:e2:59:f1:68:ec:74:ff:03:79:01:b5:a2:13: 8c:6e:cf:4a:e6:9f:63:68:e2:8e:5f:23:b0:79:0f: 05:92:71:00:b2:d6:fa:fd:d2:df:7d:e9:ca:81:49: 96:84:8e:d3:69:34:e8:cb:31:0c:69:dd:74:65:f8: 38:68:d4:18:bc:b9:1b:77:d2:6d:bf:87:70:a8:02: f4:29:f6:52:18:d7:43:9c:de:33:e6:22:db:c2:23: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BC:72:D3:85:55:72:61:E4:35:43:DC:D0:EF:1F:30:15:66:54:0D X509v3 Authority Key Identifier: keyid:A9:23:0A:E9:90:A0:36:7A:E5:9A:0F:21:BF:EE:FE:CD:95:D7:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qSMK6ZCgNnrlmg8hv-7-zZXXSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110477/4D27D1CCE9E911EFB502A55FC4F9AE02/B1C9E322E9EE11EF9D68D841C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.36.0/24 Signature Algorithm: sha256WithRSAEncryption d4:2f:d9:b7:2d:c4:a1:f2:9c:c5:2d:6c:54:73:92:7c:9f:5c: 5e:ee:5e:ff:ee:da:aa:fe:c8:3f:8e:62:c5:91:3b:5f:36:14: 5b:17:f3:03:37:aa:52:60:d7:f8:9c:ad:9b:64:ad:0b:78:65: d1:12:30:c3:15:d0:1a:d0:00:5e:1b:2c:eb:ba:e7:ed:46:41: 9f:df:fb:a9:56:cb:f7:5a:38:74:40:09:3c:3f:33:23:5d:1e: 3b:7a:a7:16:6c:fb:5c:a4:0d:0c:ce:b9:af:33:bb:57:41:45: 27:88:d5:c7:bf:e3:d3:17:93:91:61:dd:62:4d:91:53:52:8d: 5f:a4:16:7a:07:92:da:60:73:91:2d:3f:2d:53:7d:1c:b1:f0: a1:25:b4:ef:42:44:b0:3d:24:ef:35:38:72:ca:e0:ef:68:3f: 41:7c:7f:c2:2e:b4:7c:8b:b2:2f:42:0e:25:e4:9c:98:c6:fa: 37:44:05:2a:1b:27:33:49:92:df:51:2d:f8:f9:08:ee:06:f5: c1:f8:81:b8:1f:41:2a:ab:20:75:01:1d:3d:a0:67:a9:e5:96: 26:b4:7d:5f:85:a5:0c:86:73:1f:f7:b1:da:aa:3c:92:9c:f3: 7f:e6:49:36:03:7a:2e:4c:15:c2:9a:d3:b5:8f:6a:6e:93:9c: b3:ea:7a:a3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0NzcxMTAvBgNVBAUTKEE5MjMwQUU5OTBBMDM2N0FFNTlBMEYyMUJGRUVGRUNE OTVENzRBODEwHhcNMjUxMTE1MDQyMjI5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTdjZS1kMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lMKrD5SbGg0vv8sZn6EgEA3UDa5YJZuzvyg+VKu6aVr1DIZ6sagcUtmyt3s YXhxGYJsulKjF0R7eYJ5Mqk0mLnm/HvupUv+qTyIQWvOYdMAVznVJwDyiEMJAs1C JpByv1jkmfWveoUgvO/j92PZJLkGR3LIOKBssZF+jeEfm4ctDUAmbCE7xRotagDi 6HMDsUVw25W/P0qjKWE/XQwpOv9rfkxgueJZ8WjsdP8DeQG1ohOMbs9K5p9jaOKO XyOweQ8FknEAstb6/dLffenKgUmWhI7TaTToyzEMad10Zfg4aNQYvLkbd9Jtv4dw qAL0KfZSGNdDnN4z5iLbwiNRAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKe8ctOF VXJh5DVD3NDvHzAVZlQNMB8GA1UdIwQYMBaAFKkjCumQoDZ65ZoPIb/u/s2V10qB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDQ3Ny80RDI3RDFDQ0U5 RTkxMUVGQjUwMkE1NUZDNEY5QUUwMi9xU01LNlpDZ05ucmxtZzhodi03LXpaWFhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FTTUs2WkNnTm5ybG1nOGh2LTctelpYWFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA0NzcvNEQyN0QxQ0NFOUU5MTFFRkI1MDJBNTVGQzRGOUFFMDIvQjFDOUUzMjJF OUVFMTFFRjlENjhEODQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofgkMA0GCSqGSIb3DQEBCwUAA4IBAQDUL9m3LcSh8pzFLWxUc5J8 n1xe7l7/7tqq/sg/jmLFkTtfNhRbF/MDN6pSYNf4nK2bZK0LeGXREjDDFdAa0ABe GyzruuftRkGf3/upVsv3Wjh0QAk8PzMjXR47eqcWbPtcpA0MzrmvM7tXQUUniNXH v+PTF5ORYd1iTZFTUo1fpBZ6B5LaYHORLT8tU30csfChJbTvQkSwPSTvNThyyuDv aD9BfH/CLrR8i7IvQg4l5JyYxvo3RAUqGyczSZLfUS34+QjuBvXB+IG4H0EqqyB1 AR09oGep5ZYmtH1fhaUMhnMf97HaqjySnPN/5kk2A3ouTBXCmtO1j2puk5yz6nqj -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:52 2026 by rpki-client