$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa File: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (raw, json) Hash identifier: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc= Subject key identifier: FF:8C:6D:F7:8F:40:22:B2:30:FC:20:6F:52:72:DA:55:16:68:C0:1D Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC Certificate serial: DA Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:15:54 +0000 ROA not before: Sat 31 Jan 2026 06:25:04 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137248 IP address blocks: 161.248.168.0/23 maxlen: 23 161.248.168.0/24 maxlen: 24 161.248.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC Validity Not Before: Jan 31 06:25:04 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a43c0a-1df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:be:38:18:87:88:0e:02:47:f8:03:85:53: f5:8e:e8:ae:21:6d:d1:43:7c:a2:a9:c1:49:ca:4d: 42:42:cb:c5:d6:dc:bc:54:c3:d7:92:c8:60:8c:67: 6d:7a:36:79:17:e7:ed:13:78:98:3b:62:b8:5a:15: 5c:36:78:9e:d3:a0:1c:f4:91:db:91:43:c6:3e:b5: 0b:e1:c7:31:8e:9e:8c:6b:d4:03:a9:b0:1c:28:cc: 4e:1d:b1:ae:ac:1c:07:41:63:d1:b2:41:68:1c:b0: 7f:31:97:37:e6:a9:4f:9b:ea:54:f6:90:b3:c5:25: 63:43:f5:cb:4b:50:58:6a:3d:be:70:1e:72:62:4b: 51:b8:7c:02:12:a8:a9:fd:27:a8:fb:82:09:b8:4e: 0e:c0:07:22:1b:a0:29:ce:67:b9:06:6d:69:0c:fc: 71:81:9e:c0:d5:1a:13:3c:86:74:26:d9:55:94:49: 15:67:32:ff:8b:20:c8:cd:6d:dd:01:c9:c7:67:90: 52:1c:b8:fa:ac:f6:ca:62:d7:d4:a4:2d:51:76:2a: 96:1b:96:ed:26:5b:e0:49:50:c2:61:39:70:4c:9a: 2b:57:f0:53:40:05:9a:62:40:5e:7b:6e:cd:3c:93: 5e:90:3a:7f:47:ee:f4:1d:47:a8:e4:2f:96:fa:1e: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8C:6D:F7:8F:40:22:B2:30:FC:20:6F:52:72:DA:55:16:68:C0:1D X509v3 Authority Key Identifier: keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/4ECE44B0D24311EF919B6D12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.168.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:20:72:92:07:c0:62:f9:4a:2d:f4:1c:ae:fd:d3:bb:5e:b8: e0:fa:57:46:38:f0:32:0f:e3:7f:4b:2e:a9:c0:b0:24:06:7f: ee:6f:2d:97:6b:39:72:5f:b5:25:3c:bd:08:ce:11:4f:5e:d2: eb:85:c9:7f:36:d8:f8:7f:87:3c:73:fe:27:87:c4:7c:d1:21: 3c:87:0d:f5:d0:e7:23:cc:de:8b:f2:77:97:5b:a6:0f:cf:db: ea:ec:b0:7b:eb:c7:98:60:85:2e:cb:ba:cd:e2:92:fd:04:f9: 22:94:f4:50:93:97:e2:e8:6d:7e:7b:cf:b5:65:dc:62:2c:3a: 4a:65:46:e2:c3:be:a6:89:d6:d5:bd:7f:05:8f:85:10:2c:43: 72:94:c3:3a:5d:7d:c5:55:6c:d0:49:10:e7:5f:b4:d2:e2:37: 99:69:a9:df:55:9c:c3:25:90:e4:56:4e:84:aa:fe:d2:c0:95: c3:05:6f:08:b3:56:6d:f9:62:97:3b:65:a4:78:d0:4d:a0:cf: 4a:6d:b0:ca:4a:e4:d6:80:97:ac:0a:7c:d0:35:d9:23:1a:65: ce:13:7e:59:15:46:13:8f:cb:3b:b1:54:08:e5:c4:58:a4:c3: 1e:02:2e:82:eb:ae:79:1f:af:5f:49:ac:be:88:5b:ac:90:34: 52:08:c8:dd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NjAxMTAvBgNVBAUTKDc2MjAyNjZCOTg5MUEyMThDMEU1RjJFRjI4OEY3ODJE NTcxN0YyQkMwHhcNMjYwMTMxMDYyNTA0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2MwYS0xZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7q+OBiHiA4CR/gDhVP1juiuIW3RQ3yiqcFJyk1CQsvF1ty8VMPXkshgjGdt ejZ5F+ftE3iYO2K4WhVcNnie06Ac9JHbkUPGPrUL4ccxjp6Ma9QDqbAcKMxOHbGu rBwHQWPRskFoHLB/MZc35qlPm+pU9pCzxSVjQ/XLS1BYaj2+cB5yYktRuHwCEqip /Seo+4IJuE4OwAciG6Apzme5Bm1pDPxxgZ7A1RoTPIZ0JtlVlEkVZzL/iyDIzW3d AcnHZ5BSHLj6rPbKYtfUpC1RdiqWG5btJlvgSVDCYTlwTJorV/BTQAWaYkBee27N PJNekDp/R+70HUeo5C+W+h5EFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP+MbfeP QCKyMPwgb1Jy2lUWaMAdMB8GA1UdIwQYMBaAFHYgJmuYkaIYwOXy7yiPeC1XF/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY2MC9GOTg3MTFEQUQy NDIxMUVGODhDNUJDMTFDNEY5QUUwMi9kaUFtYTVpUm9oakE1Zkx2S0k5NExWY1g4 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RpQW1hNWlSb2hqQTVmTHZLSTk0TFZjWDhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU2NjAvRjk4NzExREFEMjQyMTFFRjg4QzVCQzExQzRGOUFFMDIvNEVDRTQ0QjBE MjQzMTFFRjkxOUI2RDEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofioMA0GCSqGSIb3DQEBCwUAA4IBAQCbIHKSB8Bi+Uot9Byu/dO7 Xrjg+ldGOPAyD+N/Sy6pwLAkBn/uby2XazlyX7UlPL0IzhFPXtLrhcl/Ntj4f4c8 c/4nh8R80SE8hw310OcjzN6L8neXW6YPz9vq7LB768eYYIUuy7rN4pL9BPkilPRQ k5fi6G1+e8+1ZdxiLDpKZUbiw76midbVvX8Fj4UQLENylMM6XX3FVWzQSRDnX7TS 4jeZaanfVZzDJZDkVk6Eqv7SwJXDBW8Is1Zt+WKXO2WkeNBNoM9KbbDKSuTWgJes CnzQNdkjGmXOE35ZFUYTj8s7sVQI5cRYpMMeAi6C6655H69fSay+iFuskDRSCMjd -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:20 2026 by rpki-client