$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/854C34B410A611F1B36A7FF1393D8C67.roa File: 854C34B410A611F1B36A7FF1393D8C67.roa (raw, json) Hash identifier: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc= Subject key identifier: D3:91:06:62:54:57:4A:85:64:D5:DE:F7:E8:5F:B7:B7:20:0C:E3:CF Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: E3 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/854C34B410A611F1B36A7FF1393D8C67.roa Signing time: Sun 01 Mar 2026 16:14:16 +0000 ROA not before: Mon 23 Feb 2026 10:58:01 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153525 IP address blocks: 161.248.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Feb 23 10:58:01 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a465d8-48cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:31:e7:5e:47:f7:5d:20:1f:77:67:5d:0c: 33:22:d6:7a:f7:ad:5f:00:5a:49:95:ad:d3:ac:44: 42:00:0b:b0:4f:e8:4b:b9:fd:00:b1:d8:2a:33:00: e8:45:53:b2:ae:73:a8:5e:5d:02:0f:aa:f0:d1:8f: 90:4a:a4:35:27:1b:a8:59:61:e9:5b:24:85:55:f6: a9:eb:f3:16:3e:e2:eb:bc:c1:3a:ac:93:55:ae:27: 19:96:72:7f:b6:27:4e:94:29:3c:7d:08:87:98:14: b8:7e:dd:e4:fc:ea:36:ce:69:7a:b8:0f:6a:28:67: 28:8e:33:f6:34:ad:04:36:be:50:00:d1:7c:2c:c1: 9b:36:44:e3:0f:b3:d9:75:4d:24:02:50:0e:8c:06: 8b:b9:44:f8:cd:3d:15:f6:f8:fd:b5:86:46:25:5e: bf:80:d4:c5:be:aa:16:cf:d1:70:ce:62:bf:ca:82: 55:74:be:c5:10:22:33:b7:6b:b7:65:a4:33:ec:71: 10:e2:d6:11:9b:30:4f:12:79:b2:16:78:38:15:8b: aa:79:e5:d9:69:c6:55:78:3d:7f:41:5b:64:7e:dc: 02:f2:7b:6a:fa:cd:3f:5b:84:f8:0f:3d:2a:e5:64: ec:22:1e:71:f4:40:73:37:12:34:43:63:ab:39:8f: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:91:06:62:54:57:4A:85:64:D5:DE:F7:E8:5F:B7:B7:20:0C:E3:CF X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/854C34B410A611F1B36A7FF1393D8C67.roa sbgp-ipAddrBlock: critical IPv4: 161.248.186.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:5f:fb:c1:61:e6:e1:f8:e9:a5:25:f3:bd:89:1f:60:32:8a: c4:c8:1b:cd:68:5a:66:9a:5c:f0:0a:f5:7b:a7:8e:66:bf:d0: aa:87:7e:ed:7e:9b:4f:82:aa:ab:33:52:b6:66:b8:de:5d:a7: f8:85:bb:a2:69:15:02:57:e1:ed:50:b2:7b:a3:2d:dd:af:4f: cf:79:b4:d9:d7:fe:9d:f3:ee:aa:47:e7:43:98:bb:ec:62:84: eb:06:e1:ae:f1:2c:e5:7f:55:4d:f1:00:e1:2b:81:f1:ce:a1: 01:5d:e7:35:0d:5a:4c:ad:4e:0e:25:f8:8b:8b:90:fe:70:c4: f8:3d:75:9b:d9:ad:be:9e:a9:b5:52:ce:7d:0b:64:2e:c2:f8: 24:de:3b:f4:75:cf:f6:d4:9b:c8:70:96:7d:cc:9b:6e:47:28: c4:64:2d:fb:69:96:82:44:d9:0c:d4:fa:e3:7a:e6:d0:9e:6c: 53:8d:54:42:70:5a:87:c0:15:1c:e1:11:19:ba:48:74:28:4b: f0:82:4e:45:78:f8:5a:30:33:ad:d5:cf:85:0b:df:9f:b1:d0: 3b:30:fd:13:62:72:d8:28:b4:c3:53:e1:67:9b:69:22:e0:17: 90:81:a4:41:9e:0c:af:d6:8b:e2:09:9f:31:9e:49:90:23:51: 54:83:d8:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjYwMjIzMTA1ODAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjVkOC00OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiYx515H910gH3dnXQwzItZ6961fAFpJla3TrERCAAuwT+hLuf0AsdgqMwDo RVOyrnOoXl0CD6rw0Y+QSqQ1JxuoWWHpWySFVfap6/MWPuLrvME6rJNVricZlnJ/ tidOlCk8fQiHmBS4ft3k/Oo2zml6uA9qKGcojjP2NK0ENr5QANF8LMGbNkTjD7PZ dU0kAlAOjAaLuUT4zT0V9vj9tYZGJV6/gNTFvqoWz9FwzmK/yoJVdL7FECIzt2u3 ZaQz7HEQ4tYRmzBPEnmyFng4FYuqeeXZacZVeD1/QVtkftwC8ntq+s0/W4T4Dz0q 5WTsIh5x9EBzNxI0Q2OrOY/GXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNORBmJU V0qFZNXe9+hft7cgDOPPMB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg1NTMvQTU5QkZGRTREMkVEMTFFRjhERUU1MTIwQzRGOUFFMDIvODU0QzM0QjQx MEE2MTFGMUIzNkE3RkYxMzkzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofi6MA0GCSqGSIb3DQEBCwUAA4IBAQAOX/vBYebh+OmlJfO9iR9g MorEyBvNaFpmmlzwCvV7p45mv9Cqh37tfptPgqqrM1K2ZrjeXaf4hbuiaRUCV+Ht ULJ7oy3dr0/PebTZ1/6d8+6qR+dDmLvsYoTrBuGu8Szlf1VN8QDhK4HxzqEBXec1 DVpMrU4OJfiLi5D+cMT4PXWb2a2+nqm1Us59C2Quwvgk3jv0dc/21JvIcJZ9zJtu RyjEZC37aZaCRNkM1PrjeubQnmxTjVRCcFqHwBUc4REZukh0KEvwgk5FePhaMDOt 1c+FC9+fsdA7MP0TYnLYKLTDU+Fnm2ki4BeQgaRBngyv1oviCZ8xnkmQI1FUg9gn -----END CERTIFICATE-----Generated at Mon Mar 2 16:43:17 2026 by rpki-client