$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa File: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (raw, json) Hash identifier: I8tb2z2Hm/oVZ+/EtUi2cTvMADHbbnwoMnZaKJ+3/z0= Subject key identifier: 87:73:37:EC:09:28:3D:00:72:B8:B1:25:62:EB:C7:C0:E1:7A:3D:E1 Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 0110 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa Signing time: Tue 16 Jun 2026 15:12:39 +0000 ROA not before: Tue 16 Jun 2026 15:12:39 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 56194 IP address blocks: 161.248.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Jun 16 15:12:39 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a3167e7-84d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:2a:aa:91:69:27:d7:41:6f:ac:82:6a:10: 78:99:e4:9f:71:61:ff:5e:d6:f8:62:99:ed:87:91: 0c:bd:0e:4f:16:1c:de:f2:44:b1:41:37:cf:24:eb: 7b:3f:84:5e:c3:16:cc:6b:40:8c:01:fd:2f:59:32: bd:4a:a4:ee:03:22:bf:d5:b9:ab:37:bb:5c:f8:b2: 25:07:49:b9:29:f9:42:a4:d4:a4:89:ca:b1:59:52: c8:c7:8b:75:51:80:d1:7a:6b:c7:e5:79:0c:32:5b: 1c:b3:1b:c3:ac:76:97:62:13:35:f9:89:12:16:e3: a6:01:51:28:08:43:a9:6a:76:75:b2:6e:7b:97:21: 16:c6:e5:aa:11:8a:6b:e3:c7:50:e4:87:34:dd:73: 49:1b:7d:1a:81:cb:c1:3a:ab:90:8b:7d:16:84:0f: 40:5f:01:cb:92:f6:d7:05:47:6e:16:28:53:73:50: 27:e7:51:f6:e1:ad:2c:eb:e7:52:cf:26:71:0f:d7: 7a:e0:44:54:8c:44:fc:ca:45:19:cf:fc:52:06:bc: cb:7a:3d:fb:4b:94:fc:ad:59:82:91:20:a3:aa:42: 86:cf:e6:ee:e5:02:54:38:95:23:94:ef:86:ca:76: b6:79:c6:d2:a3:36:6e:6b:26:b4:9a:dc:c0:ab:14: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:73:37:EC:09:28:3D:00:72:B8:B1:25:62:EB:C7:C0:E1:7A:3D:E1 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.252.0/23 Signature Algorithm: sha256WithRSAEncryption 22:53:22:ce:64:dd:a9:80:4f:47:d1:c2:23:66:6a:aa:c8:cf: d7:03:ae:38:a2:fb:4a:88:1d:7f:69:70:71:4a:c7:ef:c9:2a: 98:c4:91:09:1f:58:17:20:a0:14:ff:f1:85:8e:27:6d:ac:45: 3c:4c:3a:d7:25:96:80:0d:41:62:f2:fb:d9:f4:a3:20:83:11: 39:49:70:84:34:c7:e1:45:dc:6d:57:19:d9:2b:63:31:c5:98: 9b:3c:29:29:a1:22:b3:5e:04:6a:aa:51:d4:1c:82:7f:6c:8f: c5:22:00:f2:f7:cf:fa:39:ff:2f:63:d7:d9:fa:92:48:17:47: 9d:27:ca:9d:9c:52:1f:03:56:dd:2b:96:c4:d6:8d:f7:7f:35: 9b:b2:fb:4a:31:08:05:b7:ea:f3:4d:fe:0f:ab:94:fb:a9:ec: 24:e0:92:ef:cf:eb:65:93:a3:21:0f:4a:de:97:bc:46:b1:3e: af:61:13:fe:59:7d:7d:23:2d:15:cb:17:3e:0c:f2:e0:74:85: 24:e9:0a:3b:e3:19:c5:37:29:82:c7:a7:9d:cd:7f:01:b3:c9: ba:23:b3:31:c2:27:06:99:5e:67:25:99:ee:49:a8:01:3c:6f: fc:d2:83:f8:32:e8:6e:f9:f8:25:43:18:4c:5b:cc:b9:91:35: 57:09:ba:9a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjYwNjE2MTUxMjM5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTMxNjdlNy04NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AAqqpFpJ9dBb6yCahB4meSfcWH/Xtb4Ypnth5EMvQ5PFhze8kSxQTfPJOt7 P4RewxbMa0CMAf0vWTK9SqTuAyK/1bmrN7tc+LIlB0m5KflCpNSkicqxWVLIx4t1 UYDRemvH5XkMMlscsxvDrHaXYhM1+YkSFuOmAVEoCEOpanZ1sm57lyEWxuWqEYpr 48dQ5Ic03XNJG30agcvBOquQi30WhA9AXwHLkvbXBUduFihTc1An51H24a0s6+dS zyZxD9d64ERUjET8ykUZz/xSBrzLej37S5T8rVmCkSCjqkKGz+bu5QJUOJUjlO+G yna2ecbSozZuaya0mtzAqxRDsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIdzN+wJ KD0AcrixJWLrx8Dhej3hMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REE4OTgvNDA3QTI1RUFEODdGMTFFRjkxQ0M1MzQ2QzRGOUFFMDIvMjJCNEQxNzA1 QUY5MTFGMDlGRjNEMzBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofj8MA0GCSqGSIb3DQEBCwUAA4IBAQAiUyLOZN2pgE9H0cIjZmqq yM/XA644ovtKiB1/aXBxSsfvySqYxJEJH1gXIKAU//GFjidtrEU8TDrXJZaADUFi 8vvZ9KMggxE5SXCENMfhRdxtVxnZK2MxxZibPCkpoSKzXgRqqlHUHIJ/bI/FIgDy 98/6Of8vY9fZ+pJIF0edJ8qdnFIfA1bdK5bE1o33fzWbsvtKMQgFt+rzTf4Pq5T7 qewk4JLvz+tlk6MhD0rel7xGsT6vYRP+WX19Iy0Vyxc+DPLgdIUk6Qo74xnFNymC x6edzX8Bs8m6I7MxwicGmV5nJZnuSagBPG/80oP4Muhu+fglQxhMW8y5kTVXCbqa -----END CERTIFICATE-----Generated at Wed Jun 17 11:01:39 2026 by rpki-client