$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa File: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (raw, json) Hash identifier: 7P9pyFCTS/t0qweS0jyrRCsqRn3dhSbxLGM4XwOvypc= Subject key identifier: E8:43:13:48:AC:78:BD:FD:A7:AA:A9:75:D1:76:7A:76:12:06:DC:FB Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: E1 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:14:00 +0000 ROA not before: Tue 27 Jan 2026 05:28:11 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137943 IP address blocks: 161.248.50.0/23 maxlen: 23 161.248.50.0/24 maxlen: 24 161.248.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Jan 27 05:28:11 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41f78-75ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:9e:a4:42:4f:70:b4:64:3f:3c:26:a7:06: c2:54:80:c7:1e:fc:3e:20:07:37:c9:b2:4c:b4:d7: 82:57:a2:1e:fe:85:fa:dd:36:27:d7:5d:98:b5:71: df:ed:43:0f:b9:0e:24:f8:98:c4:8e:08:ed:09:6c: e6:7a:d5:d2:c0:d6:de:c8:1c:28:74:71:39:fd:db: af:e9:76:b8:a0:c4:8e:70:82:e1:92:3d:1b:5a:a1: 89:27:32:42:12:51:cf:2e:52:59:77:94:ac:30:b6: ac:f4:5f:a9:55:47:8a:b4:87:ce:ea:e9:25:5d:3d: 8c:f9:f1:7f:17:4c:60:36:dd:f6:c7:93:f8:fc:1b: 99:5d:ae:01:2a:28:c4:c9:dd:e4:a5:8d:a6:35:cd: b3:f0:4a:d2:9c:0d:ca:c8:d5:04:0d:f9:a3:06:78: e8:4f:e5:25:67:da:30:8a:b1:fe:f6:ed:e5:18:f2: 45:31:78:67:b1:ee:8f:00:04:39:c0:75:72:89:c9: a8:19:e6:5a:c0:8e:d3:8d:90:ae:ea:4c:89:30:f2: 8c:84:ca:9d:69:41:0a:f9:75:ce:99:ee:03:5e:4d: e7:c7:a9:f0:e7:a2:a1:13:c8:7f:0d:9d:cf:ec:c7: a9:5f:a4:fc:f1:ea:16:a8:3f:2f:96:97:31:6e:10: c5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:43:13:48:AC:78:BD:FD:A7:AA:A9:75:D1:76:7A:76:12:06:DC:FB X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/E29CD82EC58B11EFBA44DE34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.50.0/23 Signature Algorithm: sha256WithRSAEncryption 05:59:77:f9:53:09:39:79:fe:48:11:2d:e0:76:8f:b7:be:c4: 98:b1:d4:d9:24:68:ca:9d:31:dd:f9:ca:55:f2:0d:c4:04:a5: 92:00:49:e4:e2:16:3f:2e:0b:ac:83:4b:86:e4:f6:75:c7:cc: 3d:b6:6b:57:ff:52:d9:cf:3e:74:ee:40:1e:8d:7f:36:9e:c8: cc:2e:b6:7d:ae:46:49:e1:0b:91:81:3f:e3:53:ec:08:53:9f: a0:af:f8:1f:bb:4a:65:1d:8c:d8:61:c5:51:86:41:82:f6:38: 94:1d:b8:b8:31:4e:f9:db:45:28:03:1d:30:b6:89:14:81:dd: e8:ea:52:4c:c8:b2:59:6d:26:fc:6f:c1:39:2f:38:fc:04:a0: 03:55:dc:8f:ae:23:6a:31:74:20:96:3a:d1:e0:1d:40:8d:4b: 38:f8:f5:66:70:27:aa:6b:35:32:09:d1:b1:9d:9a:61:3c:fb: 63:70:b2:46:d6:8f:e0:0e:06:32:29:65:10:73:d7:25:26:2e: 6c:0a:ce:c1:c8:55:99:5f:ec:92:1c:73:17:61:23:09:ea:d8: 76:91:7c:6d:e7:c2:d5:05:e5:bd:fb:c8:67:b4:08:78:35:df: 84:71:f0:58:e7:9e:b0:e1:15:ba:22:7c:58:bb:02:64:58:d5: b1:37:fc:81 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDY1QThEMDhCMkVDOEY0MkQ0M0I5QUE3QTQyMzUxNzJC QjdFRDE2NjUwHhcNMjYwMTI3MDUyODExWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWY3OC03NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGGepEJPcLRkPzwmpwbCVIDHHvw+IAc3ybJMtNeCV6Ie/oX63TYn112YtXHf 7UMPuQ4k+JjEjgjtCWzmetXSwNbeyBwodHE5/duv6Xa4oMSOcILhkj0bWqGJJzJC ElHPLlJZd5SsMLas9F+pVUeKtIfO6uklXT2M+fF/F0xgNt32x5P4/BuZXa4BKijE yd3kpY2mNc2z8ErSnA3KyNUEDfmjBnjoT+UlZ9owirH+9u3lGPJFMXhnse6PAAQ5 wHVyicmoGeZawI7TjZCu6kyJMPKMhMqdaUEK+XXOme4DXk3nx6nw56KhE8h/DZ3P 7MepX6T88eoWqD8vlpcxbhDF5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOhDE0is eL39p6qpddF2enYSBtz7MB8GA1UdIwQYMBaAFGWo0IsuyPQtQ7mqekI1Fyu37RZl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82NEJBNEJBOEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlDMUR1YXA2UWpVWEs3ZnRG bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3REMvNjRCQTRCQThDNThCMTFFRkI4N0U1RjMzQzRGOUFFMDIvRTI5Q0Q4MkVD NThCMTFFRkJBNDRERTM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgyMA0GCSqGSIb3DQEBCwUAA4IBAQAFWXf5Uwk5ef5IES3gdo+3 vsSYsdTZJGjKnTHd+cpV8g3EBKWSAEnk4hY/Lgusg0uG5PZ1x8w9tmtX/1LZzz50 7kAejX82nsjMLrZ9rkZJ4QuRgT/jU+wIU5+gr/gfu0plHYzYYcVRhkGC9jiUHbi4 MU7520UoAx0wtokUgd3o6lJMyLJZbSb8b8E5Lzj8BKADVdyPriNqMXQgljrR4B1A jUs4+PVmcCeqazUyCdGxnZphPPtjcLJG1o/gDgYyKWUQc9clJi5sCs7ByFWZX+yS HHMXYSMJ6th2kXxt58LVBeW9+8hntAh4Nd+EcfBY556w4RW6InxYuwJkWNWxN/yB -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:34 2026 by rpki-client