$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/A42925E8DFDA11EFB5E94125C4F9AE02.roa File: A42925E8DFDA11EFB5E94125C4F9AE02.roa (raw, json) Hash identifier: K2TvGLjfCFrt3Go6555wRjXixN52lQy9jV9yBNlUFTY= Subject key identifier: E4:ED:12:DD:6D:76:D9:24:89:94:F3:CA:5D:F1:74:00:01:F0:BA:EF Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: CA Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/A42925E8DFDA11EFB5E94125C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:58:11 +0000 ROA not before: Fri 31 Jan 2025 13:52:42 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153527 IP address blocks: 161.248.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Jan 31 13:52:42 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3e382-3b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:89:24:74:27:c8:45:1c:b3:c6:eb:c9:fe:e3: 05:ad:e2:aa:1d:6a:cf:2f:8b:7e:09:10:e2:f4:0a: 6e:8e:9f:bd:43:2c:e0:0e:18:45:15:f5:39:dc:5f: 53:f2:6a:99:97:c7:5d:d9:c0:c5:1e:82:4c:80:44: 6d:2a:55:46:10:f4:f8:c8:dd:0c:3b:fe:a2:9d:61: 54:d8:d9:8c:d5:2b:1c:76:19:cc:a8:29:a1:dc:f8: b3:b8:a6:7a:e7:00:fb:31:be:d1:55:55:f8:05:23: 6e:63:aa:3c:55:70:6a:40:72:54:a5:67:71:35:de: 2b:93:24:e4:6e:c7:b0:9b:3e:2c:9f:34:79:0b:b1: d5:e0:c8:08:50:3c:ed:35:64:f8:3c:31:05:47:10: 5e:5c:2c:e8:f2:9a:31:7c:56:a9:39:5d:7d:1c:f9: 10:04:1d:22:90:12:c4:9b:be:5f:a8:b3:53:e8:bc: 63:a5:eb:03:7b:d0:e5:00:f6:5a:c5:cf:aa:c2:73: b0:60:b1:f0:c5:04:c6:cf:ba:14:b9:27:5c:cf:fe: 30:d2:d0:51:f4:ee:25:2a:8b:87:57:ef:24:c8:fe: 0c:ca:69:6e:e8:f0:65:f9:19:7b:e5:be:de:1e:30: 1a:71:18:3e:cf:f6:15:8e:62:49:6d:07:3b:03:e4: 21:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:ED:12:DD:6D:76:D9:24:89:94:F3:CA:5D:F1:74:00:01:F0:BA:EF X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/A42925E8DFDA11EFB5E94125C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.202.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:b1:6a:20:6c:75:16:fb:f6:10:72:8a:84:b2:39:17:cf:26: 5e:ff:4b:bb:c8:4f:60:25:07:a6:af:41:c6:e3:a4:37:60:1f: a1:a2:b0:7e:19:7f:62:49:28:a6:12:e1:f4:0d:1b:95:e4:06: 85:4f:8b:d7:1c:92:08:2d:11:cd:8e:59:f4:bf:de:31:2e:a8: 74:69:e2:ff:17:07:d8:4f:45:d7:21:2a:b6:96:5d:cd:0d:ba: 8b:ef:db:62:3c:c3:da:9a:cd:f6:97:8c:05:f3:18:9b:25:99: de:15:25:b7:cc:0c:3a:43:5f:30:26:1f:61:f2:d3:cf:69:49: 5e:d5:d5:20:09:ea:e5:61:6b:c1:e5:07:85:03:3c:f1:18:ea: d1:6b:a3:16:a2:32:06:34:f0:bb:f8:3b:7e:37:23:87:4e:93: 69:62:3d:69:74:f4:59:4e:43:cc:95:4e:8a:7a:7d:69:53:2e: 65:67:78:e4:a5:5a:37:bd:d9:32:25:d5:b8:c1:0f:c9:e6:f3: 46:bf:e9:0e:04:93:64:62:9f:fd:1b:ac:13:42:48:ad:33:38: fb:59:ef:28:4d:2f:b1:45:0b:d9:7a:42:3f:65:74:e3:5a:54: 6f:89:2b:d8:53:c0:00:b3:ee:58:c9:0f:f6:dc:6f:4a:e8:ea: 79:29:ba:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjUwMTMxMTM1MjQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTM4Mi0zYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IkkdCfIRRyzxuvJ/uMFreKqHWrPL4t+CRDi9Apujp+9QyzgDhhFFfU53F9T 8mqZl8dd2cDFHoJMgERtKlVGEPT4yN0MO/6inWFU2NmM1SscdhnMqCmh3PizuKZ6 5wD7Mb7RVVX4BSNuY6o8VXBqQHJUpWdxNd4rkyTkbsewmz4snzR5C7HV4MgIUDzt NWT4PDEFRxBeXCzo8poxfFapOV19HPkQBB0ikBLEm75fqLNT6LxjpesDe9DlAPZa xc+qwnOwYLHwxQTGz7oUuSdcz/4w0tBR9O4lKouHV+8kyP4Mymlu6PBl+Rl75b7e HjAacRg+z/YVjmJJbQc7A+QhNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOTtEt1t dtkkiZTzyl3xdAAB8LrvMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5RjUvMzI4M0U3RDRERkRBMTFFRjhCNDc4NjI0QzRGOUFFMDIvQTQyOTI1RThE RkRBMTFFRkI1RTk0MTI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofjKMA0GCSqGSIb3DQEBCwUAA4IBAQBesWogbHUW+/YQcoqEsjkX zyZe/0u7yE9gJQemr0HG46Q3YB+horB+GX9iSSimEuH0DRuV5AaFT4vXHJIILRHN jln0v94xLqh0aeL/FwfYT0XXISq2ll3NDbqL79tiPMPams32l4wF8xibJZneFSW3 zAw6Q18wJh9h8tPPaUle1dUgCerlYWvB5QeFAzzxGOrRa6MWojIGNPC7+Dt+NyOH TpNpYj1pdPRZTkPMlU6Ken1pUy5lZ3jkpVo3vdkyJdW4wQ/J5vNGv+kOBJNkYp/9 G6wTQkitMzj7We8oTS+xRQvZekI/ZXTjWlRviSvYU8AAs+5YyQ/23G9K6Op5KbrM -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:16 2026 by rpki-client