$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/B3F95F9A24C411F0A4C45287C4F9AE02.roa File: B3F95F9A24C411F0A4C45287C4F9AE02.roa (raw, json) Hash identifier: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8= Subject key identifier: 94:93:28:E7:AC:64:CE:85:94:FF:E0:3B:3B:E5:E6:3A:88:A8:80:CC Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Certificate serial: A5 Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/B3F95F9A24C411F0A4C45287C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:15:24 +0000 ROA not before: Thu 05 Feb 2026 16:26:07 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139698 IP address blocks: 161.248.58.0/23 maxlen: 23 161.248.58.0/24 maxlen: 24 161.248.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693 Validity Not Before: Feb 5 16:26:07 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4580b-3aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:e6:bf:7b:4f:a0:cc:54:5d:2e:79:c2:69: 51:00:04:29:cb:3d:cc:69:9b:31:d0:dd:44:69:f9: 08:4d:02:97:6b:25:3e:b5:68:15:71:16:ee:47:7c: 74:e3:1c:ef:73:dd:8e:84:f2:4c:b7:ff:5b:3c:5d: 0d:e6:b1:46:e0:cb:06:46:74:ed:eb:08:f3:43:b7: eb:bd:88:be:7e:c5:93:16:70:fc:53:de:68:3a:b4: c3:a6:47:71:80:b1:9e:7d:3b:1b:ae:2a:91:e4:dd: 1b:77:09:15:ed:bf:72:2c:71:ce:1a:ad:e9:48:8a: 9d:5a:30:cf:a5:e3:6f:6a:17:97:a1:c0:0d:a1:9c: 61:d7:7c:01:1a:e5:30:ee:4d:67:29:a9:34:65:1c: 8a:ed:0d:3a:8e:4e:87:28:23:3f:ec:ec:3e:c2:16: b4:0a:a4:de:36:86:6f:a8:a2:97:70:3b:b4:45:8d: e9:f6:9e:a6:38:82:fd:1b:48:08:20:03:4b:eb:0c: 2f:e9:23:6d:c7:0a:be:20:23:5d:61:6e:31:c7:8a: 8d:97:db:d3:b8:47:27:6d:9e:c3:61:45:b1:cb:f6: 7a:71:ad:09:41:bb:2a:46:d1:a6:5f:87:0c:66:79: 36:02:ca:3a:25:ab:ee:2e:40:12:b3:81:d9:01:69: e3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:93:28:E7:AC:64:CE:85:94:FF:E0:3B:3B:E5:E6:3A:88:A8:80:CC X509v3 Authority Key Identifier: keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/B3F95F9A24C411F0A4C45287C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.58.0/23 Signature Algorithm: sha256WithRSAEncryption 71:46:ef:6e:45:39:a4:21:4b:1d:88:c9:6d:1b:27:4e:73:57: 83:e6:16:7c:90:cf:29:b4:34:39:08:61:16:45:1f:30:31:3d: e1:f3:93:44:27:d5:dd:e8:1c:f8:e4:06:c5:aa:de:f0:51:c7: ee:8f:fd:88:cf:84:66:b3:4f:6e:c0:f3:03:56:ab:bc:32:08: c3:de:19:ab:82:67:6b:7e:ae:a3:bf:ea:2b:4a:f0:86:0f:4b: c9:29:0b:c3:13:56:0b:5a:a1:74:8b:6b:5b:b7:bc:98:be:aa: 6b:ac:4a:44:e6:1e:cc:d3:25:e7:6f:7b:7c:16:63:07:d8:90: 0a:1f:f3:b5:ca:fa:47:a5:f4:44:76:39:bf:1c:28:8c:5e:7a: b8:e8:8a:84:b5:02:26:a7:d6:17:0d:c4:c5:02:9e:aa:3e:5c: d0:5c:f0:dd:ed:45:fa:6e:87:23:16:8f:70:ea:bf:e2:1d:71: 0f:92:4f:93:5e:ff:44:93:58:4f:33:32:8c:e6:67:fb:9c:f6: b1:b6:0d:ba:dd:b7:76:06:70:e5:ad:73:db:bc:5c:be:3e:7c: 4f:a9:14:b9:16:39:86:c8:a5:c5:75:ed:b7:0c:ca:7a:c5:46: 75:f8:61:fa:3a:42:f9:0a:3b:dc:c1:a9:57:53:6a:96:04:10: 1f:5e:bf:d2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZCNEIxMTAvBgNVBAUTKDJBMDBGRDVENUVBRUY4MUYzMkIwMEIyRTVDODJDNUVD REFDMTI2OTMwHhcNMjYwMjA1MTYyNjA3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTgwYi0zYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUzmv3tPoMxUXS55wmlRAAQpyz3MaZsx0N1EafkITQKXayU+tWgVcRbuR3x0 4xzvc92OhPJMt/9bPF0N5rFG4MsGRnTt6wjzQ7frvYi+fsWTFnD8U95oOrTDpkdx gLGefTsbriqR5N0bdwkV7b9yLHHOGq3pSIqdWjDPpeNvaheXocANoZxh13wBGuUw 7k1nKak0ZRyK7Q06jk6HKCM/7Ow+wha0CqTeNoZvqKKXcDu0RY3p9p6mOIL9G0gI IANL6wwv6SNtxwq+ICNdYW4xx4qNl9vTuEcnbZ7DYUWxy/Z6ca0JQbsqRtGmX4cM Znk2Aso6JavuLkASs4HZAWnjYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJSTKOes ZM6FlP/gOzvl5jqIqIDMMB8GA1UdIwQYMBaAFCoA/V1ervgfMrALLlyCxezawSaT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkI0Qi9CQjQyQzFERTI0 QzMxMUYwOTZDNjg0ODFDNEY5QUUwMi9LZ0Q5WFY2dS1COHlzQXN1WElMRjdOckJK cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tnRDlYVjZ1LUI4eXNBc3VYSUxGN05yQkpwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZCNEIvQkI0MkMxREUyNEMzMTFGMDk2QzY4NDgxQzRGOUFFMDIvQjNGOTVGOUEy NEM0MTFGMEE0QzQ1Mjg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofg6MA0GCSqGSIb3DQEBCwUAA4IBAQBxRu9uRTmkIUsdiMltGydO c1eD5hZ8kM8ptDQ5CGEWRR8wMT3h85NEJ9Xd6Bz45AbFqt7wUcfuj/2Iz4Rms09u wPMDVqu8MgjD3hmrgmdrfq6jv+orSvCGD0vJKQvDE1YLWqF0i2tbt7yYvqprrEpE 5h7M0yXnb3t8FmMH2JAKH/O1yvpHpfREdjm/HCiMXnq46IqEtQImp9YXDcTFAp6q PlzQXPDd7UX6bocjFo9w6r/iHXEPkk+TXv9Ek1hPMzKM5mf7nPaxtg263bd2BnDl rXPbvFy+PnxPqRS5FjmGyKXFde23DMp6xUZ1+GH6OkL5CjvcwalXU2qWBBAfXr/S -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:54 2026 by rpki-client