$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/89EA22F0C67011EFAE929D0DC4F9AE02.roa File: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (raw, json) Hash identifier: asV3a1c6VrK8k0isv/f9SebJ6GZWMfn0WuCFD7ypZSU= Subject key identifier: D0:B2:68:C0:4C:0F:CE:04:19:12:1C:CB:72:91:93:12:72:CD:EB:A2 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: DF Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/89EA22F0C67011EFAE929D0DC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:25:56 +0000 ROA not before: Sun 01 Mar 2026 08:25:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135609 IP address blocks: 161.248.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Mar 1 08:25:56 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3f813-3b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:4e:2b:9b:6d:92:40:47:d3:24:84:f2:0e: a7:01:72:6e:de:ec:91:fa:e0:87:6d:1b:05:2d:fc: c9:0c:1b:9e:59:12:9d:7c:32:c8:aa:73:8b:94:31: 2e:bc:be:12:19:2a:34:55:df:9d:45:fe:28:7e:ba: 65:01:f6:45:87:f7:a1:76:8a:63:ef:83:ce:e5:6e: a7:a6:37:0b:3f:d8:75:38:5d:9d:56:cb:52:41:b4: d8:0d:83:ea:b5:ca:c3:5c:7f:32:ee:a6:88:7b:6f: 34:11:a4:a5:4f:c4:cf:ab:7e:a2:52:e6:54:bb:4f: be:7b:01:d6:a8:df:e3:e6:41:33:b5:4e:14:2c:a1: 9c:7f:82:f2:64:1b:59:17:92:7b:f6:43:7e:7f:12: e3:cf:80:c7:86:33:84:46:70:a3:cf:fb:ac:22:6c: 75:a5:91:a6:3e:24:fb:7e:44:cc:45:e3:2a:12:c9: ee:b1:8f:21:02:e4:0f:11:6e:2b:b0:15:ad:29:37: 71:21:73:87:91:25:42:98:5b:66:9d:90:7a:e2:1b: a0:2f:39:70:22:1e:b2:6e:dd:59:77:53:3f:7b:c6: 31:08:47:de:8e:ca:aa:5f:62:8c:1c:01:6a:89:ef: ac:c8:c1:fd:21:fb:44:0a:fd:48:fd:f7:71:a2:7e: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B2:68:C0:4C:0F:CE:04:19:12:1C:CB:72:91:93:12:72:CD:EB:A2 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/89EA22F0C67011EFAE929D0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.8.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1f:69:14:75:50:bd:01:66:4d:bc:df:f1:66:a1:7a:e2:62: 61:30:78:92:82:e3:7a:29:02:9b:2d:c3:65:d3:57:bb:7e:f3: a5:bd:5f:49:1e:90:51:bb:a6:13:57:85:6c:43:fc:73:80:da: 39:58:ab:79:57:4f:b5:ae:df:c2:f6:7f:c8:09:a7:26:bd:00: a0:09:b5:0b:78:e2:fd:19:73:3c:2b:71:17:93:d7:51:38:f8: 94:b4:bc:8a:82:79:40:39:cb:25:3d:c1:8a:ad:6a:3e:cc:59: ca:ce:b2:65:11:37:65:53:17:51:56:55:e2:63:c3:d2:f1:4f: f5:13:99:88:52:f2:66:96:63:a0:84:a7:14:40:f8:ff:3e:90: 5e:96:fd:9c:49:8f:90:cc:ad:99:2f:89:30:f3:5a:5d:d0:b3: 36:78:69:31:fc:c8:95:bb:48:f3:28:13:9e:22:45:b6:da:46: 83:7b:49:a3:50:95:6c:03:80:71:d8:04:63:fe:eb:25:6f:92: a6:ea:c1:21:07:38:8a:1a:e4:de:3e:38:a4:df:bf:ba:97:37: 34:cc:1c:2b:c5:c2:fd:a1:34:e4:54:7d:f0:71:fa:01:34:f4: f0:ca:0b:9f:03:e3:af:f5:38:09:6b:b9:f2:9e:43:f9:e0:4d: 3b:34:9a:80 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEJDRDVBQkQ5QzkxQ0ExRTdGMkM0NTU1NzA1QjI5NDA0 RjUwNUJEQzUwHhcNMjYwMzAxMDgyNTU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjgxMy0zYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUxOK5ttkkBH0ySE8g6nAXJu3uyR+uCHbRsFLfzJDBueWRKdfDLIqnOLlDEu vL4SGSo0Vd+dRf4ofrplAfZFh/ehdopj74PO5W6npjcLP9h1OF2dVstSQbTYDYPq tcrDXH8y7qaIe280EaSlT8TPq36iUuZUu0++ewHWqN/j5kEztU4ULKGcf4LyZBtZ F5J79kN+fxLjz4DHhjOERnCjz/usImx1pZGmPiT7fkTMReMqEsnusY8hAuQPEW4r sBWtKTdxIXOHkSVCmFtmnZB64hugLzlwIh6ybt1Zd1M/e8YxCEfejsqqX2KMHAFq ie+syMH9IftECv1I/fdxon4e4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNCyaMBM D84EGRIcy3KRkxJyzeuiMB8GA1UdIwQYMBaAFLzVq9nJHKHn8sRVVwWylAT1Bb3F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xMkRFOEE1RUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi92TldyMmNrY29lZnl4RlZYQmJLVUJQVUZ2 Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZjVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYyODEvMTJERThBNUVDNjZFMTFFRkE3ODdGODY1QzRGOUFFMDIvODlFQTIyRjBD NjcwMTFFRkFFOTI5RDBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofgIMA0GCSqGSIb3DQEBCwUAA4IBAQBfH2kUdVC9AWZNvN/xZqF6 4mJhMHiSguN6KQKbLcNl01e7fvOlvV9JHpBRu6YTV4VsQ/xzgNo5WKt5V0+1rt/C 9n/ICacmvQCgCbULeOL9GXM8K3EXk9dROPiUtLyKgnlAOcslPcGKrWo+zFnKzrJl ETdlUxdRVlXiY8PS8U/1E5mIUvJmlmOghKcUQPj/PpBelv2cSY+QzK2ZL4kw81pd 0LM2eGkx/MiVu0jzKBOeIkW22kaDe0mjUJVsA4Bx2ARj/uslb5Km6sEhBziKGuTe Pjik37+6lzc0zBwrxcL9oTTkVH3wcfoBNPTwygufA+Ov9TgJa7nynkP54E07NJqA -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:42 2026 by rpki-client