$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/40D442EAE8AB11F0A6A9087C576F56BC.roa File: 40D442EAE8AB11F0A6A9087C576F56BC.roa (raw, json) Hash identifier: J+grBZv2f2vW+6Wrgx+E2EvMx79KcsidrY0ScC6dwSA= Subject key identifier: C5:73:A8:2F:7C:86:C1:63:58:6A:09:0E:63:A2:C7:6C:ED:D7:24:D6 Certificate issuer: /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Certificate serial: DB Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/40D442EAE8AB11F0A6A9087C576F56BC.roa Signing time: Sat 07 Feb 2026 06:24:42 +0000 ROA not before: Sat 07 Feb 2026 06:24:42 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58062 IP address blocks: 161.248.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D Validity Not Before: Feb 7 06:24:42 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6986daaa-7d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:1d:9a:60:a3:b9:62:f2:3c:54:ec:a1:a6: 63:65:2e:6e:bb:35:c7:43:a4:a8:01:37:fd:57:b1: 97:43:41:46:4e:ac:13:18:9b:b5:94:98:ce:8c:93: 3d:0c:3a:9c:dc:95:a8:ca:2f:7e:5a:01:b3:27:89: 8a:df:bc:6a:3d:95:6a:bb:33:03:61:3e:9d:ba:6e: ea:48:5e:e3:b7:85:3e:2a:43:59:2f:64:a9:5e:54: da:fc:6d:8b:b5:e2:8a:75:99:bd:2e:5a:28:5c:c2: 1a:94:1a:cb:a3:b8:65:86:84:31:9d:1b:a6:c8:01: ba:b7:a8:fc:79:db:6d:2e:cd:be:ad:96:97:8a:81: df:aa:ee:6f:2d:60:eb:19:12:0d:7d:d8:c7:b6:16: 55:5a:8d:fc:8c:76:ee:7e:ab:b5:2a:fc:13:d4:3e: af:2f:82:db:4b:d5:5a:74:f3:0a:06:1e:f5:3a:14: 52:ff:f7:f2:7b:99:a3:af:f7:16:5a:00:66:4d:a0: 3f:71:c4:fb:9b:f9:39:b5:78:d5:a3:47:29:6e:f7: a7:eb:41:40:8a:7a:9c:66:8b:d3:af:f7:5c:70:5e: f2:6f:c1:af:e1:1a:7a:53:3e:4b:07:ca:20:2a:be: af:20:85:70:7d:4c:45:39:fa:10:c0:8c:7d:d2:26: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:73:A8:2F:7C:86:C1:63:58:6A:09:0E:63:A2:C7:6C:ED:D7:24:D6 X509v3 Authority Key Identifier: keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/40D442EAE8AB11F0A6A9087C576F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.137.0/24 Signature Algorithm: sha256WithRSAEncryption 67:ee:51:a2:d4:07:5e:08:f3:df:87:44:ad:83:c0:0b:45:5c: 35:84:53:53:76:12:c7:d1:3c:7b:47:89:3e:70:de:f9:13:ff: f6:63:b8:59:42:74:6e:89:bb:7d:cd:55:bb:3a:a2:cb:b7:64: 97:59:83:6b:5a:88:ab:76:9e:a7:a3:49:50:5a:ad:a3:bf:f3: 11:6f:a8:53:9d:2b:0a:94:82:f0:d7:53:c9:d6:d2:ff:19:66: 8c:bd:3b:82:61:a5:aa:99:b4:f3:d5:4d:10:ee:8e:0d:c0:d4: a4:24:f5:5c:f4:91:e4:4f:0d:96:cf:fb:a8:3f:95:4e:5a:9d: c2:e4:b2:37:79:22:f9:b6:22:62:10:32:d3:8c:e5:ec:65:d3: 68:9f:c8:d4:ef:b4:bb:44:79:68:47:1b:93:e1:32:c1:62:43: 2b:1c:2a:6e:42:fc:f3:b6:5e:dd:81:76:89:3d:66:ac:86:e6: 16:ad:6f:7d:0b:2d:ca:01:34:7f:c7:a2:80:79:b6:20:04:bf: 85:91:2d:c7:3c:00:d4:7a:47:6d:c6:93:75:af:fc:19:4b:7a: 93:ce:51:d2:f5:ba:90:b8:d4:d5:d3:c5:e2:87:8a:b5:b7:cf: 02:0f:2d:37:11:95:41:c0:ac:fd:c5:8e:37:1a:9f:8f:a4:9c: 78:35:1b:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx ODdCQUMxMTAvBgNVBAUTKDdCNjI2MjBCRkVCMzhDRUI2NEQyMTBDOTgwNURDMjQ4 MDQxNTcwN0QwHhcNMjYwMjA3MDYyNDQyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg2ZGFhYS03ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHMdmmCjuWLyPFTsoaZjZS5uuzXHQ6SoATf9V7GXQ0FGTqwTGJu1lJjOjJM9 DDqc3JWoyi9+WgGzJ4mK37xqPZVquzMDYT6dum7qSF7jt4U+KkNZL2SpXlTa/G2L teKKdZm9LlooXMIalBrLo7hlhoQxnRumyAG6t6j8edttLs2+rZaXioHfqu5vLWDr GRINfdjHthZVWo38jHbufqu1KvwT1D6vL4LbS9VadPMKBh71OhRS//fye5mjr/cW WgBmTaA/ccT7m/k5tXjVo0cpbven60FAinqcZovTr/dccF7yb8Gv4Rp6Uz5LB8og Kr6vIIVwfUxFOfoQwIx90ibBHQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMVzqC98 hsFjWGoJDmOix2zt1yTWMB8GA1UdIwQYMBaAFHtiYgv+s4zrZNIQyYBdwkgEFXB9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9CRTMxOEZCMEQw MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9lMkppQ182empPdGswaERKZ0YzQ1NBUVZj SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODdCQUMvQkUzMThGQjBEMDJDMTFFRkI1NTg0OTE1QzRGOUFFMDIvNDBENDQyRUFF OEFCMTFGMEE2QTkwODdDNTc2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACh+IkwDQYJKoZIhvcNAQELBQADggEBAGfuUaLUB14I89+H RK2DwAtFXDWEU1N2EsfRPHtHiT5w3vkT//ZjuFlCdG6Ju33NVbs6osu3ZJdZg2ta iKt2nqejSVBaraO/8xFvqFOdKwqUgvDXU8nW0v8ZZoy9O4JhpaqZtPPVTRDujg3A 1KQk9Vz0keRPDZbP+6g/lU5ancLksjd5Ivm2ImIQMtOM5exl02ifyNTvtLtEeWhH G5PhMsFiQyscKm5C/PO2Xt2Bdok9ZqyG5hatb30LLcoBNH/HooB5tiAEv4WRLcc8 ANR6R23Gk3Wv/BlLepPOUdL1upC41NXTxeKHirW3zwIPLTcRlUHArP3Fjjcan4+k nHg1Gx0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:26:20 2026 by rpki-client