$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/B56BC994E18A11EF94F99968C4F9AE02.roa File: B56BC994E18A11EF94F99968C4F9AE02.roa (raw, json) Hash identifier: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA= Subject key identifier: 8E:D3:D1:7B:5A:D4:34:05:E4:87:65:E0:CE:B2:E9:E2:76:61:B9:7C Certificate issuer: /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Certificate serial: E2 Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/B56BC994E18A11EF94F99968C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:14:15 +0000 ROA not before: Fri 23 Jan 2026 05:25:11 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 151983 IP address blocks: 161.248.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE Validity Not Before: Jan 23 05:25:11 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a465d7-ae3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:06:0e:32:3d:3a:9a:cc:7c:07:35:b2:55:70: f1:ad:db:b4:1c:d7:d6:3a:f0:39:7e:fb:35:2d:14: 96:21:3d:56:5f:d9:8d:1d:c0:ce:dd:c9:45:c2:8d: 8f:b0:1b:2a:4d:1f:96:5d:29:4d:ae:82:b4:e5:9e: a1:51:7f:87:5d:80:84:ea:52:1a:a7:ba:0f:f2:ee: c6:8b:b3:0f:0d:90:fa:93:32:5b:d5:72:cc:fe:3c: 1c:09:78:67:72:79:93:75:8f:74:7c:d2:78:fa:f3: 88:c1:21:36:1f:ed:49:cf:8c:cf:a1:4a:f3:e5:7c: 25:39:98:fc:aa:9f:8a:5a:5e:a8:d7:95:31:4f:4a: fb:47:19:3a:d4:bd:28:a0:a3:6f:35:bb:a8:32:87: 12:4a:01:f7:4e:c6:55:31:9c:f6:df:93:d9:5b:12: 88:a9:a5:21:ef:84:0e:c5:4d:1c:6b:65:b1:31:2b: 41:25:09:71:eb:59:6e:dc:a0:6a:3d:9c:a1:26:9e: ec:58:35:88:90:d4:2b:12:2b:58:64:2d:ee:6b:a5: 56:d3:55:6b:67:4d:c3:18:3d:9d:59:d9:0c:99:66: db:6f:0e:6f:6c:2d:24:c1:df:3f:79:e6:5d:11:7a: 7d:58:65:dc:a4:b8:55:4e:59:0d:a4:12:43:3e:1b: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D3:D1:7B:5A:D4:34:05:E4:87:65:E0:CE:B2:E9:E2:76:61:B9:7C X509v3 Authority Key Identifier: keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/B56BC994E18A11EF94F99968C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.187.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f6:03:ce:d9:43:7f:34:f3:35:ec:03:5c:22:d8:cf:0b:72: 74:2a:cd:09:e8:d2:9b:c8:65:04:0b:80:1b:32:2b:08:7e:ad: 42:ca:bd:b4:ee:06:67:9c:2f:40:f0:f5:b6:ea:dd:f3:dc:bd: 32:31:ed:ac:2e:e4:db:6e:a5:cf:b7:bd:18:1b:74:f0:fa:32: 49:ea:cb:1f:1f:22:e8:e3:74:e8:4b:0f:60:36:14:62:53:d5: f8:6e:2c:e8:f8:cc:63:dd:0e:bf:01:a0:42:64:eb:77:b6:31: 72:16:c0:5e:a5:e8:a9:83:2a:2a:e6:fe:56:16:a4:bf:d5:31: aa:e2:c0:b4:95:63:ef:37:a6:d5:9a:b2:92:c3:63:0f:9b:29: ae:29:2f:42:44:b6:73:a8:3d:80:21:3b:90:4f:36:67:19:b0: 7c:e9:ed:eb:af:5e:43:ff:18:67:f9:a8:91:86:55:ae:e2:d4: a8:8d:b4:5e:9d:44:c5:58:09:49:54:a2:73:68:a2:f9:63:5a: 10:86:ec:ed:2c:52:1d:aa:bc:be:52:9e:63:65:55:04:ef:08: 14:e8:6b:eb:b4:1e:15:e9:69:37:b3:39:c4:44:dd:48:4d:ee: b3:ae:45:21:dd:40:8d:18:02:24:78:04:63:eb:b0:08:76:af: b6:3e:17:72 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg1NTMxMTAvBgNVBAUTKDkzMERERjQxMDEwNjkwM0JFQjk5MTlDOTlCREUwMTYz ODcwNjU1QUUwHhcNMjYwMTIzMDUyNTExWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjVkNy1hZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+QYOMj06msx8BzWyVXDxrdu0HNfWOvA5fvs1LRSWIT1WX9mNHcDO3clFwo2P sBsqTR+WXSlNroK05Z6hUX+HXYCE6lIap7oP8u7Gi7MPDZD6kzJb1XLM/jwcCXhn cnmTdY90fNJ4+vOIwSE2H+1Jz4zPoUrz5XwlOZj8qp+KWl6o15UxT0r7Rxk61L0o oKNvNbuoMocSSgH3TsZVMZz235PZWxKIqaUh74QOxU0ca2WxMStBJQlx61lu3KBq PZyhJp7sWDWIkNQrEitYZC3ua6VW01VrZ03DGD2dWdkMmWbbbw5vbC0kwd8/eeZd EXp9WGXcpLhVTlkNpBJDPhuaewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI7T0Xta 1DQF5Idl4M6y6eJ2Ybl8MB8GA1UdIwQYMBaAFJMN30EBBpA765kZyZveAWOHBlWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODU1My9BNTlCRkZFNEQy RUQxMUVGOERFRTUxMjBDNEY5QUUwMi9rdzNmUVFFR2tEdnJtUm5KbTk0Qlk0Y0dW YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t3M2ZRUUVHa0R2cm1SbkptOTRCWTRjR1ZhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTg1NTMvQTU5QkZGRTREMkVEMTFFRjhERUU1MTIwQzRGOUFFMDIvQjU2QkM5OTRF MThBMTFFRjk0Rjk5OTY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofi7MA0GCSqGSIb3DQEBCwUAA4IBAQAL9gPO2UN/NPM17ANcItjP C3J0Ks0J6NKbyGUEC4AbMisIfq1Cyr207gZnnC9A8PW26t3z3L0yMe2sLuTbbqXP t70YG3Tw+jJJ6ssfHyLo43ToSw9gNhRiU9X4bizo+Mxj3Q6/AaBCZOt3tjFyFsBe peipgyoq5v5WFqS/1TGq4sC0lWPvN6bVmrKSw2MPmymuKS9CRLZzqD2AITuQTzZn GbB86e3rr15D/xhn+aiRhlWu4tSojbRenUTFWAlJVKJzaKL5Y1oQhuztLFIdqry+ Up5jZVUE7wgU6GvrtB4V6Wk3sznERN1ITe6zrkUh3UCNGAIkeARj67AIdq+2Phdy -----END CERTIFICATE-----Generated at Mon Mar 2 15:56:58 2026 by rpki-client