$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa File: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (raw, json) Hash identifier: rHIJptD9OEcS2wFahG2dabzboPNIBNreWWEAZT1c52s= Subject key identifier: AF:70:00:24:6E:7F:18:4D:69:8A:71:59:71:EE:21:70:CD:FA:D0:0C Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: CA Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa Signing time: Wed 28 Jan 2026 23:19:10 +0000 ROA not before: Wed 28 Jan 2026 23:19:10 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55479 IP address blocks: 161.248.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Jan 28 23:19:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697a996e-a1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:41:3c:c1:ed:3c:70:c1:df:aa:c1:8c:fc:7a: 37:7c:09:1e:65:38:4d:86:41:23:fe:59:e7:1f:2c: cd:f2:39:ac:5d:0b:ff:50:59:b3:67:a2:13:09:79: c8:57:ff:a7:3c:f4:2b:fb:99:47:d4:b0:47:57:c2: c6:30:f2:24:83:86:3f:8b:4a:15:e0:95:73:84:c7: c1:df:ed:e1:83:4a:43:41:92:da:1c:30:d5:c6:1a: bf:87:13:e7:ce:56:32:a1:90:fc:b8:11:44:16:f5: f7:3c:9b:c9:d2:29:fc:32:60:05:25:eb:04:e3:06: d3:a2:e4:4a:00:d4:e4:e6:47:67:1a:fe:a3:c6:1c: 02:f5:96:f8:9d:c2:dd:f1:87:8d:0a:cd:a9:3f:e6: 23:3b:8e:25:b3:77:c1:f4:28:cb:4c:a6:12:63:76: d6:fe:9b:2f:20:71:d8:8b:24:91:99:cb:b0:47:44: 63:fd:40:df:cb:d4:42:17:a0:a7:d4:3f:f2:b2:a0: 0e:22:f1:99:7e:35:61:ee:e8:35:50:f0:3d:17:72: aa:17:36:52:3b:a8:ee:49:a4:d4:6e:96:66:2e:f8: 23:6f:6a:ba:3a:7a:75:fb:72:88:21:4c:08:06:97: a0:a8:8f:f6:92:6a:1a:34:52:bb:92:0e:c6:36:9e: f8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:70:00:24:6E:7F:18:4D:69:8A:71:59:71:EE:21:70:CD:FA:D0:0C X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.106.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e7:8a:07:a1:5e:ad:73:a4:ab:b2:50:71:8c:7c:c7:f4:73: 6a:35:2b:29:d1:98:d7:f5:53:0a:03:31:d2:e9:08:7f:ab:38: 88:13:7c:15:af:4b:ad:59:ea:05:6c:bf:7d:e0:56:29:77:a3: bb:f6:2f:d8:01:08:7b:fc:e4:04:28:56:54:36:65:a5:af:77: c9:04:71:f8:b8:1d:00:25:b6:af:c5:d8:d2:01:3c:14:17:ec: 69:e3:9b:fc:12:c4:1a:d4:32:7a:93:f9:46:9f:07:ed:90:2a: b2:e6:35:a9:e0:99:f0:d0:e5:1a:81:fe:dc:97:90:ae:39:30: 00:e6:43:8d:b0:70:23:00:eb:2b:39:9a:da:b7:4b:65:09:bc: 5c:ec:e2:fe:63:0a:85:fe:a3:4a:c8:3b:08:0f:d5:89:09:77: 55:7e:34:41:b7:59:71:d5:dc:ac:37:91:f6:cf:10:88:19:b0: c7:20:b5:8d:ff:27:35:f6:35:7f:d5:61:5e:c7:dd:56:43:f8: 69:d5:19:2c:b4:88:7f:6a:4e:88:48:e1:af:79:48:69:3b:2f: 3a:47:d1:bf:87:d6:9f:52:2b:69:f7:e2:ca:8c:c9:0c:3b:e3: 07:9d:f8:96:14:52:5e:6e:ac:7a:91:31:9f:1f:0b:a8:47:7c: b5:f6:7e:fd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4 RDdERUI2OTQwHhcNMjYwMTI4MjMxOTEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhOTk2ZS1hMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+UE8we08cMHfqsGM/Ho3fAkeZThNhkEj/lnnHyzN8jmsXQv/UFmzZ6ITCXnI V/+nPPQr+5lH1LBHV8LGMPIkg4Y/i0oV4JVzhMfB3+3hg0pDQZLaHDDVxhq/hxPn zlYyoZD8uBFEFvX3PJvJ0in8MmAFJesE4wbTouRKANTk5kdnGv6jxhwC9Zb4ncLd 8YeNCs2pP+YjO44ls3fB9CjLTKYSY3bW/psvIHHYiySRmcuwR0Rj/UDfy9RCF6Cn 1D/ysqAOIvGZfjVh7ug1UPA9F3KqFzZSO6juSaTUbpZmLvgjb2q6Onp1+3KIIUwI BpegqI/2kmoaNFK7kg7GNp74WQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK9wACRu fxhNaYpxWXHuIXDN+tAMMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDODMvMjBBNjEzN0VDQzk5MTFFRjg3NDM3RTA5QzRGOUFFMDIvQ0VFNzBFODRE REZCMTFFRkI2ODBFMjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACh+GowDQYJKoZIhvcNAQELBQADggEBAHDnigehXq1zpKuy UHGMfMf0c2o1KynRmNf1UwoDMdLpCH+rOIgTfBWvS61Z6gVsv33gVil3o7v2L9gB CHv85AQoVlQ2ZaWvd8kEcfi4HQAltq/F2NIBPBQX7Gnjm/wSxBrUMnqT+UafB+2Q KrLmNangmfDQ5RqB/tyXkK45MADmQ42wcCMA6ys5mtq3S2UJvFzs4v5jCoX+o0rI OwgP1YkJd1V+NEG3WXHV3Kw3kfbPEIgZsMcgtY3/JzX2NX/VYV7H3VZD+GnVGSy0 iH9qTohI4a95SGk7LzpH0b+H1p9SK2n34sqMyQw74wed+JYUUl5urHqRMZ8fC6hH fLX2fv0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:36 2026 by rpki-client