$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/BF556A5AD00911F08CA8E011C4F9AE02.roa File: BF556A5AD00911F08CA8E011C4F9AE02.roa (raw, json) Hash identifier: BaXk/hJbR9SRkovDK683Jt8jKKdSrrVLCbAV4lpGXs0= Subject key identifier: 47:2A:F3:D8:55:D9:E4:25:65:E4:D2:6E:2F:8F:34:4D:CC:6E:2A:76 Certificate issuer: /CN=A917BEDF/serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Certificate serial: 30 Authority key identifier: 38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/BF556A5AD00911F08CA8E011C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:55:42 +0000 ROA not before: Wed 03 Dec 2025 05:34:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132103 IP address blocks: 144.79.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEDF, serialNumber=38BCD4F9F83A1AD09B6887DBED804B180C3A16FC Validity Not Before: Dec 3 05:34:33 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d4de-239a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:2e:c6:29:cd:05:b5:2f:0e:15:c3:47:9e: 88:9d:5c:43:17:c3:f8:47:7b:d7:10:20:03:e0:ec: 9c:00:f0:70:a9:3f:d6:a5:39:f2:d5:d4:c3:c1:d8: a8:92:05:db:bc:1f:e5:2c:fe:ec:8f:73:26:1b:a3: 40:ef:ac:60:23:c1:8b:24:41:c1:9c:63:c4:8f:79: 0f:75:87:d7:5d:ca:49:ae:21:55:4e:d9:f0:b6:d8: 37:e7:ec:40:b2:16:58:57:63:ea:bc:51:52:b9:6c: b0:ad:49:cd:ac:f0:37:db:38:bd:31:80:34:f8:0e: 25:29:43:90:9e:91:51:2b:7c:dc:d7:fd:df:3e:fb: 84:bc:99:ae:29:a7:fc:b2:20:96:60:c2:30:a1:b9: 80:fc:99:97:6f:71:57:51:f5:9f:87:3f:22:20:02: 0e:89:fe:10:bc:2c:fd:76:59:c4:bc:16:82:12:a5: 93:14:14:b3:b1:81:90:1b:78:b6:c5:10:cc:e9:a4: db:8a:d6:81:84:dd:1b:d0:34:0d:4f:a0:a3:ba:0f: 86:78:d0:57:b1:76:cb:7f:69:b2:8b:a1:79:6e:e7: 1b:cb:4f:4c:4a:3c:c8:ef:ec:8b:82:c4:70:d4:39: de:bc:7d:10:92:23:3e:aa:c4:c3:e4:a4:8b:8a:e6: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2A:F3:D8:55:D9:E4:25:65:E4:D2:6E:2F:8F:34:4D:CC:6E:2A:76 X509v3 Authority Key Identifier: keyid:38:BC:D4:F9:F8:3A:1A:D0:9B:68:87:DB:ED:80:4B:18:0C:3A:16:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OLzU-fg6GtCbaIfb7YBLGAw6Fvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEDF/247B5CBAD00911F0BE600E6BC4F9AE02/BF556A5AD00911F08CA8E011C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.79.44.0/24 Signature Algorithm: sha256WithRSAEncryption 79:45:64:95:65:05:9a:8f:a3:18:ea:c1:48:4a:34:31:fb:25: 92:e1:74:e9:48:4d:ac:4b:4e:d9:77:7b:e7:a2:f9:cc:19:e5: e5:da:de:d6:45:18:e8:45:c9:5e:f2:52:0c:8a:bc:18:df:ee: 92:ba:a5:3c:63:76:87:43:4d:59:e9:85:cc:7d:29:72:5a:f2: f3:b4:18:db:14:28:73:85:b2:62:1d:84:ce:66:b7:2b:b4:ca: 8d:d8:89:4b:60:d5:3f:4f:12:62:3f:a0:c0:8a:3e:54:27:ff: d0:17:f4:de:aa:59:d3:1b:07:26:68:74:21:90:49:a4:25:0c: 6b:77:5f:62:01:db:b6:3d:fe:ed:b0:cd:f5:d1:e0:e1:93:ad: ff:cd:19:76:8f:d0:a5:83:0a:22:3a:bd:0b:65:cf:4a:15:ad: a8:10:2c:de:06:a4:05:b5:2e:b8:3f:17:05:9d:5f:dd:e6:82: 2d:95:51:20:23:68:de:0f:d3:6e:e8:7f:5b:3d:37:92:b2:85: dd:f8:00:af:21:c5:99:f6:23:6a:bd:ca:ac:e2:03:e1:31:bc: ef:25:02:60:37:9b:8a:7e:cc:da:64:0e:de:59:ac:06:e1:a3: 00:76:46:63:8f:eb:0f:5d:dc:ee:29:ee:22:b9:c4:78:d2:45: c4:bd:02:98 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QkVERjExMC8GA1UEBRMoMzhCQ0Q0RjlGODNBMUFEMDlCNjg4N0RCRUQ4MDRCMTgw QzNBMTZGQzAeFw0yNTEyMDMwNTM0MzNaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNGRlLTIzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8oy7GKc0FtS8OFcNHnoidXEMXw/hHe9cQIAPg7JwA8HCpP9alOfLV1MPB2KiS Bdu8H+Us/uyPcyYbo0DvrGAjwYskQcGcY8SPeQ91h9ddykmuIVVO2fC22Dfn7ECy FlhXY+q8UVK5bLCtSc2s8DfbOL0xgDT4DiUpQ5CekVErfNzX/d8++4S8ma4pp/yy IJZgwjChuYD8mZdvcVdR9Z+HPyIgAg6J/hC8LP12WcS8FoISpZMUFLOxgZAbeLbF EMzppNuK1oGE3RvQNA1PoKO6D4Z40Fexdst/abKLoXlu5xvLT0xKPMjv7IuCxHDU Od68fRCSIz6qxMPkpIuK5vUdAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQURyrz2FXZ 5CVl5NJuL480TcxuKnYwHwYDVR0jBBgwFoAUOLzU+fg6GtCbaIfb7YBLGAw6Fvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCRURGLzI0N0I1Q0JBRDAw OTExRjBCRTYwMEU2QkM0RjlBRTAyL09MelUtZmc2R3RDYmFJZmI3WUJMR0F3NkZ2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT0x6VS1mZzZHdENiYUlmYjdZQkxHQXc2RnZ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVERi8yNDdCNUNCQUQwMDkxMUYwQkU2MDBFNkJDNEY5QUUwMi9CRjU1NkE1QUQw MDkxMUYwOENBOEUwMTFDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACQTywwDQYJKoZIhvcNAQELBQADggEBAHlFZJVlBZqPoxjqwUhKNDH7 JZLhdOlITaxLTtl3e+ei+cwZ5eXa3tZFGOhFyV7yUgyKvBjf7pK6pTxjdodDTVnp hcx9KXJa8vO0GNsUKHOFsmIdhM5mtyu0yo3YiUtg1T9PEmI/oMCKPlQn/9AX9N6q WdMbByZodCGQSaQlDGt3X2IB27Y9/u2wzfXR4OGTrf/NGXaP0KWDCiI6vQtlz0oV ragQLN4GpAW1Lrg/FwWdX93mgi2VUSAjaN4P027of1s9N5Kyhd34AK8hxZn2I2q9 yqziA+ExvO8lAmA3m4p+zNpkDt5ZrAbhowB2RmOP6w9d3O4p7iK5xHjSRcS9Apg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:18 2026 by rpki-client