$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/4EC5B52480B811EBBEE2CA7FC4F9AE02.roa File: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (raw, json) Hash identifier: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk= Subject key identifier: 3D:E0:F9:22:0D:CD:03:17:50:C2:D7:A1:25:D4:9B:DA:64:57:1F:78 Certificate issuer: /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Certificate serial: 06FF Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/4EC5B52480B811EBBEE2CA7FC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:32:07 +0000 ROA not before: Thu 30 Oct 2025 22:12:46 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133206 IP address blocks: 148.59.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8 Validity Not Before: Oct 30 22:12:46 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a431c7-8d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:99:c7:2d:6b:06:4a:ac:bc:94:26:bf:f0: 23:bb:5c:74:8c:d6:bd:d0:a1:ff:17:39:a9:2f:64: ba:53:60:4d:ec:8f:43:17:b1:48:d0:c3:ac:3e:72: fb:5c:63:2d:20:f8:5a:70:97:3f:e8:e0:14:51:fb: a4:34:4d:ba:a4:04:50:95:b8:5c:04:0b:89:4d:20: 4c:f2:7c:a6:46:c1:fa:ba:9a:ba:b3:e2:bc:87:2f: 43:3c:82:63:e4:cb:93:cc:10:fb:0f:6a:eb:76:84: 83:b7:62:76:9a:01:1b:24:8b:0f:29:98:61:5d:45: 43:d0:2c:ef:ef:4b:1f:e0:7f:07:d5:fa:1e:0b:a7: 7c:91:7a:fe:80:26:0f:55:0a:d5:1c:10:57:09:cd: 85:d7:39:0b:75:be:8c:1f:6c:d1:87:07:04:40:7e: b4:4b:9c:fb:bd:ae:bc:c1:2a:06:bf:08:15:f0:17: b1:00:c7:b7:2d:e7:88:58:74:80:0a:b0:bb:e8:e7: be:20:9b:f1:a7:9c:ba:be:65:f9:3a:d8:3a:5c:9a: 29:a8:a4:66:63:e0:01:bf:4d:0c:79:00:fe:9e:24: bf:c4:ba:07:eb:a0:01:55:a1:e4:7e:22:82:a8:5c: d6:f9:d8:06:f1:51:92:6b:bb:41:4c:56:de:d1:44: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:F9:22:0D:CD:03:17:50:C2:D7:A1:25:D4:9B:DA:64:57:1F:78 X509v3 Authority Key Identifier: keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/4EC5B52480B811EBBEE2CA7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 148.59.94.0/24 Signature Algorithm: sha256WithRSAEncryption 19:40:ec:69:9a:55:c8:22:6f:f2:6c:f8:45:8f:ef:d2:b6:07: 01:53:ae:d2:9a:e7:d2:5c:1f:df:fb:c8:2e:a3:dd:99:5c:0f: cb:85:e1:a5:8d:18:93:67:35:4d:42:64:9e:15:4d:95:a4:01: c8:cc:a7:4e:3d:54:f9:0c:9e:87:1c:b4:cc:d2:37:2f:65:36: 6e:30:1e:59:c3:81:29:f5:70:b7:b4:bb:79:7a:57:5a:e6:57: 23:c3:46:ef:42:7d:1e:5d:ce:53:4b:2d:27:61:62:50:83:c6: a4:85:87:f8:16:ee:0f:9f:ce:3f:f8:72:21:9b:b7:0b:cb:ec: bd:24:64:77:c1:df:94:1f:11:b1:ad:45:cc:78:94:b8:ef:2f: f6:e1:8c:91:73:1e:b5:0e:a9:cb:b9:4e:0c:76:90:e2:2b:b0: f5:59:eb:dc:52:c9:ca:1b:2f:3c:c4:68:3d:32:51:d5:6d:70: 6b:ee:64:40:dd:9b:a2:bd:96:89:f1:48:a1:b9:fc:2f:9f:44: 4b:56:3d:f2:37:da:a4:89:6d:ac:ec:f7:de:ac:17:b6:47:58: bd:73:8a:44:c5:87:d4:dc:74:0a:50:34:62:ce:96:a8:d7:5f: d9:af:b7:8e:41:a1:f0:49:f7:61:87:88:40:62:79:01:05:21: f7:1d:76:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC NjY3QjcyQTgwHhcNMjUxMDMwMjIxMjQ2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzFjNy04ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BKZxy1rBkqsvJQmv/Aju1x0jNa90KH/FzmpL2S6U2BN7I9DF7FI0MOsPnL7 XGMtIPhacJc/6OAUUfukNE26pARQlbhcBAuJTSBM8nymRsH6upq6s+K8hy9DPIJj 5MuTzBD7D2rrdoSDt2J2mgEbJIsPKZhhXUVD0Czv70sf4H8H1foeC6d8kXr+gCYP VQrVHBBXCc2F1zkLdb6MH2zRhwcEQH60S5z7va68wSoGvwgV8BexAMe3LeeIWHSA CrC76Oe+IJvxp5y6vmX5Otg6XJopqKRmY+ABv00MeQD+niS/xLoH66ABVaHkfiKC qFzW+dgG8VGSa7tBTFbe0USo/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD3g+SIN zQMXUMLXoSXUm9pkVx94MB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNEQzUvRTlGMjkyQzY4MEI2MTFFQkJFQ0JGMzc5QzRGOUFFMDIvNEVDNUI1MjQ4 MEI4MTFFQkJFRTJDQTdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAlDteMA0GCSqGSIb3DQEBCwUAA4IBAQAZQOxpmlXIIm/ybPhFj+/S tgcBU67SmufSXB/f+8guo92ZXA/LheGljRiTZzVNQmSeFU2VpAHIzKdOPVT5DJ6H HLTM0jcvZTZuMB5Zw4Ep9XC3tLt5elda5lcjw0bvQn0eXc5TSy0nYWJQg8akhYf4 Fu4Pn84/+HIhm7cLy+y9JGR3wd+UHxGxrUXMeJS47y/24YyRcx61DqnLuU4MdpDi K7D1WevcUsnKGy88xGg9MlHVbXBr7mRA3ZuivZaJ8Uihufwvn0RLVj3yN9qkiW2s 7PferBe2R1i9c4pExYfU3HQKUDRizpao11/Zr7eOQaHwSfdhh4hAYnkBBSH3HXYe -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:13 2026 by rpki-client