$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa File: A59FFB3EB7D711EF9ED0C324C4F9AE02.roa (raw, json) Hash identifier: 6KLtFcE2fvWR+tw55m57pBI0diDqJjyzD/r4YO1tgys= Subject key identifier: B8:EF:7D:51:99:CF:3F:ED:45:A3:8E:3B:67:56:43:DB:2C:E1:1F:51 Certificate issuer: /CN=A91C8485/serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Certificate serial: F9 Authority key identifier: A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:11:17 +0000 ROA not before: Tue 01 Jul 2025 07:43:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 40310 IP address blocks: 45.248.140.0/24 maxlen: 24 45.248.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8485, serialNumber=A588786E2FD88CFAAF53AAA296C364460EE6EA6D Validity Not Before: Jul 1 07:43:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59a85-6234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:b1:de:84:8f:18:76:eb:01:27:fa:2d:07: 36:94:46:0b:ff:e7:31:34:ba:1e:46:21:ec:29:01: 08:2e:2e:92:c3:37:d3:d5:43:97:52:24:58:d5:3f: 53:df:8b:3f:c3:1b:17:3d:be:46:0c:13:94:8b:52: 67:f7:16:dc:91:6d:e8:39:b7:58:97:87:3f:79:c0: 79:59:13:ab:b7:70:16:c3:4b:1e:35:52:73:53:9e: 88:2c:eb:19:25:77:ee:f7:6d:23:ce:21:b4:84:01: 73:9b:a5:88:79:d1:f3:49:a8:dc:b6:92:21:6e:62: 00:a1:f0:2a:b0:aa:44:9e:0b:1d:ed:fc:b1:50:58: 84:00:a9:1e:41:9b:39:a6:b6:d5:a6:6d:b3:4e:a1: 5f:c3:2a:72:00:fb:50:ec:52:dd:af:72:43:b2:df: 2f:2c:65:47:40:e2:52:ca:a0:b0:78:1c:41:08:96: 1a:00:2d:76:11:69:45:59:6c:26:50:bb:11:55:fb: 76:39:b5:33:9d:6d:db:98:60:50:9d:0c:ea:3c:e2: 5f:a7:12:85:ed:02:74:fb:dd:79:d1:0d:f8:99:6e: ab:8e:24:46:57:bf:24:a8:3f:23:33:4c:82:b6:1e: d1:8e:27:93:65:77:2d:62:f6:d8:94:e0:f2:32:a5: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EF:7D:51:99:CF:3F:ED:45:A3:8E:3B:67:56:43:DB:2C:E1:1F:51 X509v3 Authority Key Identifier: keyid:A5:88:78:6E:2F:D8:8C:FA:AF:53:AA:A2:96:C3:64:46:0E:E6:EA:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/pYh4bi_YjPqvU6qilsNkRg7m6m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYh4bi_YjPqvU6qilsNkRg7m6m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8485/2DBCEF46B41211EFB8E6E773C4F9AE02/A59FFB3EB7D711EF9ED0C324C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.140.0/24 45.248.142.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:7e:2e:98:d7:88:ff:d7:31:f9:f0:a9:6a:96:42:fb:1c:55: 97:be:03:96:48:94:38:75:a8:93:84:3a:8a:e1:e9:ba:a0:2c: 36:b9:cc:24:30:86:d5:34:c8:63:46:3b:94:52:f7:66:57:45: 79:6a:54:4b:bb:68:25:77:a4:f0:68:2b:d1:2d:ed:f5:41:14: 9e:86:b8:70:42:fc:32:5a:8d:d6:19:db:b9:d8:ca:2f:4d:ad: bb:38:3a:6d:05:37:09:10:5a:dc:01:8b:d4:1c:32:c0:0b:68: 60:10:37:fd:f0:01:22:88:ad:c6:88:e6:80:23:05:c9:75:3e: c6:db:d0:c4:02:86:0f:ef:a3:5c:03:ea:0c:1e:af:38:6c:df: b2:79:59:59:63:40:7a:ac:10:b9:76:aa:e2:c6:ff:b0:65:57: 3f:0d:c4:58:f0:77:70:5d:ba:74:70:3f:79:01:67:c5:17:aa: 31:f1:b9:2a:52:3e:17:35:cb:e2:58:98:d4:7d:95:b7:d3:4f: c3:19:ce:f6:c6:84:5a:0d:a4:dc:6c:35:b4:de:7a:ae:ad:b3: de:41:e5:6e:9e:ab:26:c9:3f:c3:4a:ef:af:18:53:20:6e:04: d0:97:98:bd:25:aa:3b:79:99:82:b8:00:d4:a6:27:b5:88:e0: e7:e9:2e:cc -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg0ODUxMTAvBgNVBAUTKEE1ODg3ODZFMkZEODhDRkFBRjUzQUFBMjk2QzM2NDQ2 MEVFNkVBNkQwHhcNMjUwNzAxMDc0MzM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWE4NS02MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsl2x3oSPGHbrASf6LQc2lEYL/+cxNLoeRiHsKQEILi6SwzfT1UOXUiRY1T9T 34s/wxsXPb5GDBOUi1Jn9xbckW3oObdYl4c/ecB5WROrt3AWw0seNVJzU56ILOsZ JXfu920jziG0hAFzm6WIedHzSajctpIhbmIAofAqsKpEngsd7fyxUFiEAKkeQZs5 prbVpm2zTqFfwypyAPtQ7FLdr3JDst8vLGVHQOJSyqCweBxBCJYaAC12EWlFWWwm ULsRVft2ObUznW3bmGBQnQzqPOJfpxKF7QJ0+9150Q34mW6rjiRGV78kqD8jM0yC th7RjieTZXctYvbYlODyMqXknwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLjvfVGZ zz/tRaOOO2dWQ9ss4R9RMB8GA1UdIwQYMBaAFKWIeG4v2Iz6r1OqopbDZEYO5upt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODQ4NS8yREJDRUY0NkI0 MTIxMUVGQjhFNkU3NzNDNEY5QUUwMi9wWWg0YmlfWWpQcXZVNnFpbHNOa1JnN202 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BZaDRiaV9ZalBxdlU2cWlsc05rUmc3bTZtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg0ODUvMkRCQ0VGNDZCNDEyMTFFRkI4RTZFNzczQzRGOUFFMDIvQTU5RkZCM0VC N0Q3MTFFRjlFRDBDMzI0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQALfiMAwQBLfiOMA0GCSqGSIb3DQEBCwUAA4IBAQB9fi6Y14j/1zH5 8KlqlkL7HFWXvgOWSJQ4daiThDqK4em6oCw2ucwkMIbVNMhjRjuUUvdmV0V5alRL u2gld6TwaCvRLe31QRSehrhwQvwyWo3WGdu52MovTa27ODptBTcJEFrcAYvUHDLA C2hgEDf98AEiiK3GiOaAIwXJdT7G29DEAoYP76NcA+oMHq84bN+yeVlZY0B6rBC5 dqrixv+wZVc/DcRY8HdwXbp0cD95AWfFF6ox8bkqUj4XNcviWJjUfZW300/DGc72 xoRaDaTcbDW03nqurbPeQeVunqsmyT/DSu+vGFMgbgTQl5i9Jao7eZmCuADUpie1 iODn6S7M -----END CERTIFICATE-----Generated at Tue Mar 3 02:11:45 2026 by rpki-client