$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/2DA549EAE23E11EFB267422EC4F9AE02.roa File: 2DA549EAE23E11EFB267422EC4F9AE02.roa (raw, json) Hash identifier: Mr9U/6ZYvZu9qU4Dm1rrpvinPfnT7chjtNPRoJwGxK8= Subject key identifier: 1A:15:95:8C:E9:49:52:5B:6F:70:E5:CC:55:99:E1:9F:BE:0F:E3:93 Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: D7 Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/2DA549EAE23E11EFB267422EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:59:07 +0000 ROA not before: Sun 03 Aug 2025 00:05:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142577 IP address blocks: 161.248.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Aug 3 00:05:46 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42a0b-0980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:db:a6:1b:0f:72:9e:62:4b:16:1a:31:29: cc:31:88:51:45:c4:8b:cd:e6:5d:f7:5a:94:9c:f3: 32:de:65:6c:31:09:4f:cd:3a:c3:ce:d2:14:61:0a: e1:55:50:54:e3:0b:90:27:00:25:f1:3f:5a:23:ff: 3c:97:ec:ec:d9:26:b8:9f:fa:e3:74:6a:8e:91:fc: c1:9f:50:4e:b9:03:89:fe:26:42:0a:f2:35:11:0c: d3:0f:ac:87:54:5e:57:9d:40:32:7c:b9:de:53:a7: 98:8f:c7:dd:1a:17:86:79:28:a2:d8:b9:81:f4:c6: 95:ff:d6:bb:77:50:40:de:fc:dc:7a:cf:ed:10:38: dd:61:dd:81:09:35:7c:51:f1:be:ea:de:9c:e5:f7: c8:39:63:e4:0c:ce:d2:33:cd:45:08:e2:19:d8:b3: d6:4a:a0:6b:81:bf:ae:42:5c:f1:59:06:7a:b2:46: 14:b8:04:98:e7:c1:eb:cd:67:bd:3a:c2:e9:6f:68: 76:2a:56:e2:d1:6e:b2:21:cf:15:16:03:17:ee:da: 57:33:03:b5:a8:00:5b:d8:ef:37:a6:c2:7c:98:99: 40:23:53:0a:ee:71:b3:1a:3f:dd:7f:78:d4:cd:12: 20:c4:8b:d5:a2:41:6e:39:ed:92:12:b3:35:bd:d2: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:15:95:8C:E9:49:52:5B:6F:70:E5:CC:55:99:E1:9F:BE:0F:E3:93 X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/2DA549EAE23E11EFB267422EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.241.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ff:ea:fd:c5:85:40:05:bb:61:99:5b:d1:83:a7:cc:ad:8c: e5:8d:88:45:f2:29:eb:f5:83:25:7d:d9:e8:c3:3e:51:ad:31: e9:43:1f:20:88:d6:60:95:e5:e6:1f:4f:7d:c1:fd:6b:dd:54: 47:57:d5:b5:d4:63:cf:7e:a3:26:f6:e6:30:f2:a1:17:53:24: 18:45:22:34:5b:8e:e3:05:a9:8a:e3:9b:67:0d:05:f1:19:5f: 35:3a:ea:bc:48:d0:ec:b2:e0:4b:a9:fe:f2:40:87:79:5f:95: 2a:0c:ef:87:05:44:d6:b9:36:f7:4f:76:ba:f5:7a:89:46:d1: 63:6c:94:fc:5f:5d:28:28:87:2f:84:bb:51:fe:6d:f0:60:fa: 6b:b8:3b:db:0f:17:03:5f:0c:59:10:99:06:12:e1:f3:f2:38: fe:17:ab:3f:68:52:6b:a8:d3:bc:90:d9:e0:55:8c:70:b1:7b: 8f:6c:d9:ff:66:94:a4:54:a6:93:ce:46:f0:bf:b6:c6:ca:cc: a6:2d:42:b8:2b:78:9f:52:49:8d:4a:bc:00:29:83:12:35:9c: 7d:86:90:83:7f:47:9f:b1:ac:ff:ac:4b:be:32:7d:51:1c:f5: a3:3e:db:b2:b3:e3:2e:6a:c2:dd:6d:9c:bd:81:ea:ec:38:a7: 08:3d:55:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDA4MzU4NzQ5NzhCQTMwOUVEN0RBNDY3M0U3NzM5RDkz MjJGMjYyOUIwHhcNMjUwODAzMDAwNTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmEwYi0wOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41vbphsPcp5iSxYaMSnMMYhRRcSLzeZd91qUnPMy3mVsMQlPzTrDztIUYQrh VVBU4wuQJwAl8T9aI/88l+zs2Sa4n/rjdGqOkfzBn1BOuQOJ/iZCCvI1EQzTD6yH VF5XnUAyfLneU6eYj8fdGheGeSii2LmB9MaV/9a7d1BA3vzces/tEDjdYd2BCTV8 UfG+6t6c5ffIOWPkDM7SM81FCOIZ2LPWSqBrgb+uQlzxWQZ6skYUuASY58HrzWe9 OsLpb2h2Klbi0W6yIc8VFgMX7tpXMwO1qABb2O83psJ8mJlAI1MK7nGzGj/df3jU zRIgxIvVokFuOe2SErM1vdJMvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBoVlYzp SVJbb3DlzFWZ4Z++D+OTMB8GA1UdIwQYMBaAFAg1h0l4ujCe19pGc+dznZMi8mKb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi83RDJCMURGMEQ3 RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1KN1gya1p6NTNPZGt5THlZ cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwMEYvN0QyQjFERjBEN0QwMTFFRjlFRkM5MTBEQzRGOUFFMDIvMkRBNTQ5RUFF MjNFMTFFRkIyNjc0MjJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofjxMA0GCSqGSIb3DQEBCwUAA4IBAQBL/+r9xYVABbthmVvRg6fM rYzljYhF8inr9YMlfdnowz5RrTHpQx8giNZgleXmH099wf1r3VRHV9W11GPPfqMm 9uYw8qEXUyQYRSI0W47jBamK45tnDQXxGV81Ouq8SNDssuBLqf7yQId5X5UqDO+H BUTWuTb3T3a69XqJRtFjbJT8X10oKIcvhLtR/m3wYPpruDvbDxcDXwxZEJkGEuHz 8jj+F6s/aFJrqNO8kNngVYxwsXuPbNn/ZpSkVKaTzkbwv7bGysymLUK4K3ifUkmN SrwAKYMSNZx9hpCDf0efsaz/rEu+Mn1RHPWjPtuys+MuasLdbZy9gersOKcIPVUj -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:29 2026 by rpki-client