$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/D6B9385EACC011F19308CC8D6511F970.roa File: D6B9385EACC011F19308CC8D6511F970.roa (raw, json) Hash identifier: u+DXYVjLCll7ilsoFengKrajZwvFgK6HVRL/3pZYwJ8= Subject key identifier: A5:F5:C9:E6:95:BD:D9:DD:80:A0:BB:94:82:C7:88:B8:ED:32:56:D2 Certificate issuer: /CN=A918E84C/serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072 Certificate serial: 02 Authority key identifier: AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/D6B9385EACC011F19308CC8D6511F970.roa Signing time: Thu 10 Sep 2026 02:39:26 +0000 ROA not before: Thu 10 Sep 2026 02:39:26 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 400619 IP address blocks: 161.248.86.0/24 maxlen: 24 161.248.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E84C, serialNumber=AD84469C2ECFBBDC92A27C9BF3C7F73A4DA53072 Validity Not Before: Sep 10 02:39:26 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6aa2185e-7729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:e7:cc:86:63:98:b4:d1:26:92:61:67:cf: a4:36:da:05:6d:79:08:1e:3b:93:1f:21:59:82:a6: 0b:73:c3:e1:d5:77:ac:13:46:60:70:53:76:bf:06: c1:d4:aa:4f:8f:1f:1d:9d:71:54:bd:cb:96:46:d9: 63:f1:08:b3:78:29:78:59:0e:7c:93:00:a0:d1:b4: 76:a7:53:2f:6f:cf:02:f7:41:1f:11:39:06:95:8d: d1:97:92:9b:05:b3:4a:92:40:d1:d7:bc:62:23:68: 45:b4:a9:69:13:70:02:ac:90:15:f8:9e:4d:78:bd: 8a:3e:d8:7c:4f:84:3d:15:7d:ef:20:d1:92:01:60: 02:cb:f8:61:cd:dd:41:82:39:d2:3f:d5:d0:f9:95: da:a0:a9:03:5c:8f:91:86:f4:8c:73:81:76:16:12: b1:0a:77:d4:f2:4a:bc:9d:ee:cd:e4:d9:f0:63:4d: 39:a2:03:d2:40:5a:9e:3f:5c:d4:36:0d:32:c6:b8: 5e:62:63:63:8b:37:0d:26:65:a3:65:8d:23:be:19: ec:f4:d9:f3:49:94:7f:aa:e3:40:22:b2:d6:83:67: 71:65:7d:9a:1a:b3:cd:56:c5:62:ef:f0:ea:ad:5f: 54:15:c0:64:8e:e0:90:3d:9c:4e:62:0b:14:fe:03: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F5:C9:E6:95:BD:D9:DD:80:A0:BB:94:82:C7:88:B8:ED:32:56:D2 X509v3 Authority Key Identifier: keyid:AD:84:46:9C:2E:CF:BB:DC:92:A2:7C:9B:F3:C7:F7:3A:4D:A5:30:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/rYRGnC7Pu9ySonyb88f3Ok2lMHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYRGnC7Pu9ySonyb88f3Ok2lMHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E84C/64267EE6ACC011F1BDA75F776511F970/D6B9385EACC011F19308CC8D6511F970.roa sbgp-ipAddrBlock: critical IPv4: 161.248.86.0/23 Signature Algorithm: sha256WithRSAEncryption 73:60:64:d1:fb:8b:eb:7b:5d:1a:e8:e3:ea:87:31:62:29:7d: 1e:8a:3c:af:55:ce:5d:bc:6e:15:7b:ce:a8:da:fb:0d:5c:4a: d0:15:b1:0a:aa:6e:c8:d2:3e:fb:1b:95:4d:a7:26:07:e1:cb: a4:11:81:c0:97:20:7a:20:39:35:27:b2:da:cf:8a:94:63:27: 3e:5d:eb:7d:84:5b:70:56:af:4a:2e:57:cc:11:f1:09:77:25: d3:95:d3:f9:8c:0d:9a:91:e6:2d:60:b4:b7:a7:1a:a4:e4:ac: a9:43:89:da:bc:82:83:1a:10:02:6d:49:95:02:2b:15:90:af: 20:5c:63:2e:d2:49:7d:2e:78:6d:65:08:5f:e3:1c:fc:4a:1f: cc:c9:4a:34:cc:c8:33:fa:4f:da:22:0b:be:2d:39:06:be:c2: 77:28:5e:5f:cf:b1:50:7d:de:d0:0f:3e:20:78:29:18:61:9a: 21:f7:1d:cc:0c:75:14:e1:6f:59:d5:b1:d5:5c:55:52:10:9e: f5:23:4b:3a:01:d9:f9:7e:e8:25:5e:89:00:a8:04:eb:d0:be: b8:93:7f:99:60:c2:9f:d3:2b:b9:8d:6a:5d:3c:66:c1:08:bb: 6a:87:30:92:11:17:83:91:f8:b1:81:33:08:6c:98:3e:14:d6: fa:3d:6f:1c -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTg0QzExMC8GA1UEBRMoQUQ4NDQ2OUMyRUNGQkJEQzkyQTI3QzlCRjNDN0Y3M0E0 REE1MzA3MjAeFw0yNjA5MTAwMjM5MjZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTIxODVlLTc3MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJmufMhmOYtNEmkmFnz6Q22gVteQgeO5MfIVmCpgtzw+HVd6wTRmBwU3a/BsHU qk+PHx2dcVS9y5ZG2WPxCLN4KXhZDnyTAKDRtHanUy9vzwL3QR8ROQaVjdGXkpsF s0qSQNHXvGIjaEW0qWkTcAKskBX4nk14vYo+2HxPhD0Vfe8g0ZIBYALL+GHN3UGC OdI/1dD5ldqgqQNcj5GG9IxzgXYWErEKd9TySryd7s3k2fBjTTmiA9JAWp4/XNQ2 DTLGuF5iY2OLNw0mZaNljSO+Gez02fNJlH+q40AistaDZ3FlfZoas81WxWLv8Oqt X1QVwGSO4JA9nE5iCxT+A1JxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUpfXJ5pW9 2d2AoLuUgseIuO0yVtIwHwYDVR0jBBgwFoAUrYRGnC7Pu9ySonyb88f3Ok2lMHIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFODRDLzY0MjY3RUU2QUND MDExRjFCREE3NUY3NzY1MTFGOTcwL3JZUkduQzdQdTl5U29ueWI4OGYzT2sybE1I SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcllSR25DN1B1OXlTb255Yjg4ZjNPazJsTUhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0Qy82NDI2N0VFNkFDQzAxMUYxQkRBNzVGNzc2NTExRjk3MC9ENkI5Mzg1RUFD QzAxMUYxOTMwOENDOEQ2NTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGh+FYwDQYJKoZIhvcNAQELBQADggEBAHNgZNH7i+t7XRro4+qHMWIp fR6KPK9Vzl28bhV7zqja+w1cStAVsQqqbsjSPvsblU2nJgfhy6QRgcCXIHogOTUn strPipRjJz5d632EW3BWr0ouV8wR8Ql3JdOV0/mMDZqR5i1gtLenGqTkrKlDidq8 goMaEAJtSZUCKxWQryBcYy7SSX0ueG1lCF/jHPxKH8zJSjTMyDP6T9oiC74tOQa+ wncoXl/PsVB93tAPPiB4KRhhmiH3HcwMdRThb1nVsdVcVVIQnvUjSzoB2fl+6CVe iQCoBOvQvriTf5lgwp/TK7mNal08ZsEIu2qHMJIRF4OR+LGBMwhsmD4U1vo9bxw= -----END CERTIFICATE-----Generated at Sun Sep 20 16:15:16 2026 by rpki-client