$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa File: 0A4D6250833411ECBB74C786C4F9AE02.roa (raw, json) Hash identifier: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs= Subject key identifier: F1:41:E6:45:AA:EB:46:1D:F0:36:22:28:7A:A8:FC:23:E9:D6:22:C7 Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 048D Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:09:22 +0000 ROA not before: Fri 31 Oct 2025 00:44:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141435 IP address blocks: 149.234.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Oct 31 00:44:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a464b2-cd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cb:b3:16:f8:3a:1f:fe:02:2a:25:2b:0f:15: e5:30:05:f5:ac:0f:a3:4e:3f:3d:37:df:f2:f4:a3: 89:c3:e0:99:bf:a1:78:a6:49:ec:89:84:bc:f8:b1: 55:98:66:22:46:60:d6:1b:68:f9:71:aa:56:a9:2a: 61:77:e8:b3:74:db:21:00:e2:52:d0:ed:8c:c5:4d: c9:b5:69:ae:1c:8d:eb:c0:9d:0c:cf:59:13:e4:88: 01:b3:72:dd:7d:69:bb:5e:96:e9:1c:69:63:c3:7c: 9d:4f:6e:20:6a:d3:28:35:a3:3b:20:5f:14:0b:78: 8a:6f:69:74:5b:24:3f:c6:62:ff:55:64:55:4c:71: 5a:87:85:4f:70:06:fd:13:0d:cc:19:7a:1b:24:20: fd:aa:82:9b:2f:a3:98:fb:31:17:26:c2:77:01:18: 51:dc:23:09:1a:7f:0d:16:fb:50:11:22:e5:02:5a: 07:c3:3e:50:fe:07:a8:fd:01:07:31:1c:cd:e8:b3: b3:b9:15:5c:94:0b:4d:d8:e5:d1:d5:c8:ad:3b:c2: be:3e:25:e3:69:a1:55:67:b7:a4:88:e4:ab:23:aa: c1:63:3c:ce:d7:e4:bf:a3:9d:2e:de:fd:42:d3:14: 2d:35:4d:e9:71:49:81:5f:2f:65:d2:e6:c6:0b:ec: dc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:41:E6:45:AA:EB:46:1D:F0:36:22:28:7A:A8:FC:23:E9:D6:22:C7 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0A4D6250833411ECBB74C786C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 149.234.189.0/24 Signature Algorithm: sha256WithRSAEncryption 15:c3:7c:4f:99:29:0a:60:a4:07:3c:eb:e9:dd:93:10:ca:b1: 04:81:1c:5e:4e:03:21:2f:c3:10:7c:7b:42:ed:8c:b3:ef:89: 8f:dc:41:28:19:63:61:bb:d5:d0:6d:fa:d3:e9:a9:07:cc:6f: 06:00:3b:f2:e6:61:9c:e4:b2:ef:3c:04:0d:3e:04:db:e2:54: a4:16:e0:db:65:a3:e1:f5:1e:bf:01:38:3e:98:f6:27:de:77: 1f:87:65:01:9c:9f:d5:b7:dc:a7:5b:98:ae:34:9a:c9:30:89: 1d:1f:ab:92:19:2b:ea:aa:52:43:50:d9:a8:76:ae:dc:24:3f: 7f:0d:ef:86:d7:3e:f8:46:4f:b2:c4:88:e7:93:9c:8b:32:be: 6d:43:43:21:87:c6:87:4c:ad:ec:1f:b9:05:a2:08:e3:59:e4: 06:c7:5b:0a:fa:3c:d5:cb:c9:29:20:61:4d:ec:53:45:2b:4c: 52:2f:57:53:ba:ad:a6:24:82:91:ae:5d:df:8f:50:e4:52:a9: 10:90:1d:d8:5b:ff:f4:ad:5f:43:0a:73:1b:19:a7:aa:50:95: 76:ae:ae:2d:df:fa:c0:21:03:b8:8b:f1:b0:69:dc:eb:e3:2e: 22:16:30:a5:fe:84:69:ef:af:c2:11:33:52:38:9f:c7:19:ac: 3a:10:03:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjUxMDMxMDA0NDM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjRiMi1jZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMuzFvg6H/4CKiUrDxXlMAX1rA+jTj89N9/y9KOJw+CZv6F4pknsiYS8+LFV mGYiRmDWG2j5capWqSphd+izdNshAOJS0O2MxU3JtWmuHI3rwJ0Mz1kT5IgBs3Ld fWm7XpbpHGljw3ydT24gatMoNaM7IF8UC3iKb2l0WyQ/xmL/VWRVTHFah4VPcAb9 Ew3MGXobJCD9qoKbL6OY+zEXJsJ3ARhR3CMJGn8NFvtQESLlAloHwz5Q/geo/QEH MRzN6LOzuRVclAtN2OXR1citO8K+PiXjaaFVZ7ekiOSrI6rBYzzO1+S/o50u3v1C 0xQtNU3pcUmBXy9l0ubGC+zcCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPFB5kWq 60Yd8DYiKHqo/CPp1iLHMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk2QzQvRjNEREVFREU4MzMwMTFFQzhGRjM5MzgzQzRGOUFFMDIvMEE0RDYyNTA4 MzM0MTFFQ0JCNzRDNzg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAleq9MA0GCSqGSIb3DQEBCwUAA4IBAQAVw3xPmSkKYKQHPOvp3ZMQ yrEEgRxeTgMhL8MQfHtC7Yyz74mP3EEoGWNhu9XQbfrT6akHzG8GADvy5mGc5LLv PAQNPgTb4lSkFuDbZaPh9R6/ATg+mPYn3ncfh2UBnJ/Vt9ynW5iuNJrJMIkdH6uS GSvqqlJDUNmodq7cJD9/De+G1z74Rk+yxIjnk5yLMr5tQ0Mhh8aHTK3sH7kFogjj WeQGx1sK+jzVy8kpIGFN7FNFK0xSL1dTuq2mJIKRrl3fj1DkUqkQkB3YW//0rV9D CnMbGaeqUJV2rq4t3/rAIQO4i/Gwadzr4y4iFjCl/oRp76/CETNSOJ/HGaw6EAPb -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:00 2026 by rpki-client