$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/8A941156D7E211EFBF26DA72C4F9AE02.roa File: 8A941156D7E211EFBF26DA72C4F9AE02.roa (raw, json) Hash identifier: UZCERNruPtgrrK+OYbHFA8i9cAcCHqIOlldjCtyuoQo= Subject key identifier: 79:86:28:08:E6:CD:11:8F:64:49:42:D1:03:92:2F:16:41:DF:5E:91 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: DA Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/8A941156D7E211EFBF26DA72C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:16:11 +0000 ROA not before: Thu 15 Jan 2026 06:24:25 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153523 IP address blocks: 161.248.188.0/24 maxlen: 24 161.248.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Jan 15 06:24:25 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a43c1b-224b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:36:71:32:c1:f8:57:0f:21:39:81:0a:37: 01:50:d4:48:1a:4a:7b:cd:50:bb:41:67:3c:95:88: b5:b0:33:89:0f:ed:7d:37:c6:86:30:1b:13:23:b8: 8e:8c:86:d3:92:45:8e:5e:21:e9:ec:20:53:82:92: a3:bd:05:c7:e4:0b:97:af:6e:ce:89:ff:4f:9b:be: e0:58:61:c2:c3:68:4e:ac:56:f3:6a:a3:56:23:bd: c0:83:77:3c:44:39:bf:36:4f:6c:31:8d:7b:eb:5c: 9a:1a:49:ba:91:3d:25:48:8a:b4:99:2d:a2:48:46: db:eb:0d:e0:08:33:70:34:20:b6:8b:23:2c:1d:79: e5:d2:eb:59:65:cc:e8:74:bc:0a:a2:9d:c6:b7:3d: 99:7a:55:81:04:78:a6:57:24:74:60:f0:1a:e3:b8: e7:6b:fb:e2:20:a4:db:08:23:8a:32:52:d5:ea:c8: 51:7e:23:b5:06:97:88:a0:31:cb:7e:d0:f0:50:10: 53:1b:d4:a1:09:c9:76:d7:88:95:42:41:23:6b:d2: 58:f1:67:c6:f7:3c:ad:ea:3d:63:6a:0b:15:fd:59: ee:59:b6:9f:34:73:83:d2:b5:e5:88:59:6a:e2:3c: c9:08:66:ab:82:0c:df:41:de:f8:e9:d7:a2:6c:1f: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:86:28:08:E6:CD:11:8F:64:49:42:D1:03:92:2F:16:41:DF:5E:91 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/8A941156D7E211EFBF26DA72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.188.0/23 Signature Algorithm: sha256WithRSAEncryption 07:a3:c0:fd:55:b8:8f:bd:e9:4a:b5:90:3e:6a:0f:88:14:47: ce:96:2f:14:12:d0:8f:87:c2:6a:49:42:8b:78:db:89:ac:17: aa:49:f5:d4:a8:93:2f:f5:9f:9e:11:8e:7c:4d:5b:ad:82:d4: 73:29:24:f1:67:eb:da:3a:a6:fb:7f:e0:44:3e:98:03:ca:86: 47:fe:82:bf:16:2f:7d:b1:06:52:25:2b:82:96:f9:d4:9d:60: f0:c8:01:3e:af:d3:84:2d:57:67:90:34:29:c7:43:aa:8b:35: eb:1c:a1:4e:35:93:3f:5e:d0:8a:d6:e5:9e:a9:08:70:a5:d8: 09:75:51:c7:37:8a:7c:23:8e:00:b9:93:7e:73:a1:ad:ba:38: 29:d3:7e:91:be:81:60:ae:e7:66:d3:d9:d4:8a:5a:eb:20:76: 38:91:fc:4b:37:7b:99:c5:3c:15:37:a6:02:36:6c:c4:71:7c: 6b:a1:17:41:45:cb:02:c6:f5:3e:cd:14:78:47:a7:17:4b:57: 0f:de:5c:81:4f:a7:a6:93:4a:f6:b1:5f:94:c4:f9:b4:6e:79: b3:27:3e:9b:75:38:e9:78:be:5a:09:0f:af:60:5a:f0:bb:98: 8b:b0:f7:e3:e6:07:62:75:cf:20:cf:60:cc:92:51:97:2f:8c: d0:7a:d6:f7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRkYxMTAvBgNVBAUTKDVFRkRFOThDNEZCRjhEMTE4N0I2ODU4RUJDODFGMDYy NUIyOTMxNjAwHhcNMjYwMTE1MDYyNDI1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2MxYi0yMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3M2cTLB+FcPITmBCjcBUNRIGkp7zVC7QWc8lYi1sDOJD+19N8aGMBsTI7iO jIbTkkWOXiHp7CBTgpKjvQXH5AuXr27Oif9Pm77gWGHCw2hOrFbzaqNWI73Ag3c8 RDm/Nk9sMY1761yaGkm6kT0lSIq0mS2iSEbb6w3gCDNwNCC2iyMsHXnl0utZZczo dLwKop3Gtz2ZelWBBHimVyR0YPAa47jna/viIKTbCCOKMlLV6shRfiO1BpeIoDHL ftDwUBBTG9ShCcl214iVQkEja9JY8WfG9zyt6j1jagsV/VnuWbafNHOD0rXliFlq 4jzJCGarggzfQd746deibB8aCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHmGKAjm zRGPZElC0QOSLxZB316RMB8GA1UdIwQYMBaAFF796YxPv40Rh7aFjryB8GJbKTFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNGRi8yMEJFMUEzMEQ3 RTAxMUVGOEIxNzNEMkZDNEY5QUUwMi9YdjNwakUtX2pSR0h0b1dPdklId1lsc3BN V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1XQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlDRkYvMjBCRTFBMzBEN0UwMTFFRjhCMTczRDJGQzRGOUFFMDIvOEE5NDExNTZE N0UyMTFFRkJGMjZEQTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofi8MA0GCSqGSIb3DQEBCwUAA4IBAQAHo8D9VbiPvelKtZA+ag+I FEfOli8UEtCPh8JqSUKLeNuJrBeqSfXUqJMv9Z+eEY58TVutgtRzKSTxZ+vaOqb7 f+BEPpgDyoZH/oK/Fi99sQZSJSuClvnUnWDwyAE+r9OELVdnkDQpx0OqizXrHKFO NZM/XtCK1uWeqQhwpdgJdVHHN4p8I44AuZN+c6Gtujgp036RvoFgrudm09nUilrr IHY4kfxLN3uZxTwVN6YCNmzEcXxroRdBRcsCxvU+zRR4R6cXS1cP3lyBT6emk0r2 sV+UxPm0bnmzJz6bdTjpeL5aCQ+vYFrwu5iLsPfj5gdidc8gz2DMklGXL4zQetb3 -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:49 2026 by rpki-client