$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/3E41E766FA6411EFB8C12C50C4F9AE02.roa File: 3E41E766FA6411EFB8C12C50C4F9AE02.roa (raw, json) Hash identifier: QwSj57WxC7TB25I/8HX7ku8jZUCgQ6cEZ8ddjhtIf0I= Subject key identifier: C3:20:D8:74:D2:F5:34:54:13:CF:EF:75:A7:FC:55:C5:28:0E:C6:09 Certificate issuer: /CN=A91A995E/serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Certificate serial: C1 Authority key identifier: 56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/3E41E766FA6411EFB8C12C50C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:17:02 +0000 ROA not before: Fri 09 Jan 2026 06:24:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134182 IP address blocks: 161.248.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=56E394AF1B5ACB8FF482C8C60269FEA0E4C427BE Validity Not Before: Jan 9 06:24:18 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4202e-a4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:96:6d:b2:01:2b:d5:77:e2:2e:ca:3e:41:51: 9f:f4:e4:f9:8f:5c:9d:33:8f:56:00:73:55:28:42: f7:e2:e0:f3:86:ec:d2:2a:a7:04:f2:8c:53:a9:21: a0:0d:3b:93:33:7d:80:4a:e8:f6:50:25:ce:9b:d3: b4:a3:18:69:0f:64:3e:f9:38:50:8c:32:aa:20:c6: 2d:12:0e:79:df:fa:00:69:2f:ea:0c:31:87:42:c6: d1:fc:ba:a4:a5:4a:30:74:23:2a:17:73:38:9b:65: f9:66:2e:68:bd:5e:52:06:e0:1b:70:58:0a:7a:ce: c1:e4:e9:7b:bf:06:f4:7d:4f:33:9a:3b:da:9f:b2: 4c:e2:08:91:95:86:4d:41:8b:4f:98:a0:c5:b3:29: 47:07:aa:38:6d:18:10:2a:f9:14:65:5a:66:f4:dd: d4:69:94:a2:0b:3e:7f:7a:2d:2d:36:d7:53:ff:26: 15:a8:9c:c2:07:14:35:63:ea:82:48:95:56:50:9e: 96:ca:3c:75:56:43:a2:55:46:e5:6d:a5:c8:80:3a: ad:cf:54:c2:24:1a:d2:59:30:87:d5:53:89:a3:96: 28:d7:08:23:44:c9:ab:1c:3b:d9:be:b4:65:b4:ee: 4d:9c:07:fc:09:1e:f0:74:b4:28:33:5d:df:38:0a: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:20:D8:74:D2:F5:34:54:13:CF:EF:75:A7:FC:55:C5:28:0E:C6:09 X509v3 Authority Key Identifier: keyid:56:E3:94:AF:1B:5A:CB:8F:F4:82:C8:C6:02:69:FE:A0:E4:C4:27:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/VuOUrxtay4_0gsjGAmn-oOTEJ74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VuOUrxtay4_0gsjGAmn-oOTEJ74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/2E7AF298FA6211EF95555C0EC4F9AE02/3E41E766FA6411EFB8C12C50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.25.0/24 Signature Algorithm: sha256WithRSAEncryption 80:d2:80:e8:cf:b0:43:aa:51:ee:42:51:b9:36:0a:e5:fc:5d: cc:60:3a:31:c1:2a:cf:d6:44:44:4b:c9:43:2d:d9:e7:22:d3: c9:45:5f:fb:7b:8e:74:a1:d8:30:94:3c:55:a3:65:3a:e7:8d: a1:06:75:87:1f:0e:7c:f4:04:6b:56:e9:c6:09:3c:a7:a1:7a: 6f:92:9c:92:c1:a7:5f:15:7e:f3:17:2c:9c:f0:b1:b9:94:d4: a7:69:7e:3b:17:42:b6:08:39:ed:74:0e:38:af:59:2d:be:9f: 0f:45:41:7f:ff:c6:54:c9:27:02:c8:65:02:8b:5d:72:c7:c0: 4b:65:69:d2:27:e9:ce:d9:4a:4a:7d:43:5d:26:41:c9:0e:e1: 6a:d7:67:a7:aa:e5:40:b7:ec:1d:76:55:25:c2:1d:a5:ff:e9: 15:15:9c:4f:c6:77:ce:cf:dd:3f:3a:60:23:b4:31:7f:77:15: 79:9c:31:e7:86:a0:c2:be:84:c7:62:e8:ba:72:17:0b:7f:aa: f5:fb:cb:fc:3b:49:5b:18:54:cc:d3:00:39:fe:a4:e3:5b:8b: 95:20:ef:2e:3c:f0:b3:9a:18:c0:b1:7a:f2:bf:28:de:63:33: 01:28:fa:8a:52:f0:78:71:f9:cc:11:9e:1e:6c:93:81:b4:bb: 73:32:b0:18 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5NUUxMTAvBgNVBAUTKDU2RTM5NEFGMUI1QUNCOEZGNDgyQzhDNjAyNjlGRUEw RTRDNDI3QkUwHhcNMjYwMTA5MDYyNDE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjAyZS1hNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk5ZtsgEr1XfiLso+QVGf9OT5j1ydM49WAHNVKEL34uDzhuzSKqcE8oxTqSGg DTuTM32ASuj2UCXOm9O0oxhpD2Q++ThQjDKqIMYtEg553/oAaS/qDDGHQsbR/Lqk pUowdCMqF3M4m2X5Zi5ovV5SBuAbcFgKes7B5Ol7vwb0fU8zmjvan7JM4giRlYZN QYtPmKDFsylHB6o4bRgQKvkUZVpm9N3UaZSiCz5/ei0tNtdT/yYVqJzCBxQ1Y+qC SJVWUJ6Wyjx1VkOiVUblbaXIgDqtz1TCJBrSWTCH1VOJo5Yo1wgjRMmrHDvZvrRl tO5NnAf8CR7wdLQoM13fOArI5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMMg2HTS 9TRUE8/vdaf8VcUoDsYJMB8GA1UdIwQYMBaAFFbjlK8bWsuP9ILIxgJp/qDkxCe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk1RS8yRTdBRjI5OEZB NjIxMUVGOTU1NTVDMEVDNEY5QUUwMi9WdU9Vcnh0YXk0XzBnc2pHQW1uLW9PVEVK NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1Z1T1VyeHRheTRfMGdzakdBbW4tb09URUo3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk5NUUvMkU3QUYyOThGQTYyMTFFRjk1NTU1QzBFQzRGOUFFMDIvM0U0MUU3NjZG QTY0MTFFRkI4QzEyQzUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofgZMA0GCSqGSIb3DQEBCwUAA4IBAQCA0oDoz7BDqlHuQlG5Ngrl /F3MYDoxwSrP1kRES8lDLdnnItPJRV/7e450odgwlDxVo2U6542hBnWHHw589ARr VunGCTynoXpvkpySwadfFX7zFyyc8LG5lNSnaX47F0K2CDntdA44r1ktvp8PRUF/ /8ZUyScCyGUCi11yx8BLZWnSJ+nO2UpKfUNdJkHJDuFq12enquVAt+wddlUlwh2l /+kVFZxPxnfOz90/OmAjtDF/dxV5nDHnhqDCvoTHYui6chcLf6r1+8v8O0lbGFTM 0wA5/qTjW4uVIO8uPPCzmhjAsXryvyjeYzMBKPqKUvB4cfnMEZ4ebJOBtLtzMrAY -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:55 2026 by rpki-client