$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/4C51E1D4F7E511EF9A28D363C4F9AE02.roa File: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (raw, json) Hash identifier: pKM2r60kiKPj1EOj5o/9P1X4OcOTkc7kjSEawMzaPfo= Subject key identifier: 1E:F2:1E:FE:17:02:B0:9A:4B:88:B7:A6:53:AF:99:40:E9:97:57:A0 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: C3 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/4C51E1D4F7E511EF9A28D363C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:52:10 +0000 ROA not before: Fri 27 Feb 2026 06:25:22 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153551 IP address blocks: 161.248.246.0/23 maxlen: 23 161.248.246.0/24 maxlen: 24 161.248.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Feb 27 06:25:22 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a41a5a-ba8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:bd:c2:d3:e6:b8:89:66:2e:a2:16:7e:9a: 84:ae:16:84:c4:8e:b8:25:3e:47:1a:e1:a5:7d:ca: bc:2c:a3:23:4f:22:f1:d4:47:3e:0e:89:49:3e:4b: ab:e2:01:95:c3:af:d6:51:9a:5d:82:43:15:1d:05: 29:98:10:16:74:8e:ba:9b:25:41:e3:96:f0:bc:1d: 58:27:28:92:df:ce:47:b0:c6:d9:b8:5b:77:ff:19: 13:2d:26:f6:e0:23:1a:4b:05:39:d2:4f:4f:d7:0c: f2:82:52:78:87:e6:71:a2:cd:84:86:55:87:62:9f: 50:ce:f8:b7:73:fb:a6:c9:4a:99:b9:9c:1c:08:4a: ca:e1:ab:a5:b3:ee:b8:5b:28:ef:de:a4:94:bb:00: 4c:6a:e6:c0:e3:49:f8:2f:ff:95:f7:5d:5d:d5:64: 95:98:00:78:63:9b:f6:b6:2e:8e:25:8b:ff:73:8e: de:31:89:74:3e:07:85:7b:64:17:d9:03:25:78:0f: 13:5f:1b:62:e0:a2:95:b1:7f:4a:c5:55:38:8d:44: 19:fa:49:5d:34:6c:69:ec:fa:2d:5e:02:2d:ae:55: f4:96:f4:1f:92:82:fc:2f:0f:36:30:ff:fd:41:b3: 80:3f:dd:d5:d9:e4:0d:40:62:bd:2b:4e:ce:4f:29: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F2:1E:FE:17:02:B0:9A:4B:88:B7:A6:53:AF:99:40:E9:97:57:A0 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/4C51E1D4F7E511EF9A28D363C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.246.0/23 Signature Algorithm: sha256WithRSAEncryption 42:45:28:bb:8c:ed:71:68:ba:62:ad:db:f4:48:30:76:5d:ea: b0:26:90:60:f6:94:eb:9d:76:08:ab:12:68:38:92:6e:ad:a3: 35:7b:41:62:9a:40:dc:c1:1a:40:45:ae:02:7b:e6:05:53:7a: 35:41:63:5b:9a:d8:0d:41:30:75:3d:48:9c:07:d9:8d:2b:5a: 1f:c3:b0:43:3d:29:d3:44:0c:58:2a:18:a3:60:08:d3:b5:86: a9:00:cf:79:15:41:17:4f:84:f8:95:2a:86:5d:8e:d4:b5:0c: 45:c1:d2:ce:5d:da:58:74:59:9a:78:28:74:c4:09:d4:71:df: f4:f3:4f:5a:50:cf:01:35:d2:ff:8c:73:fb:f9:38:1f:95:43: 77:88:1c:fd:03:ba:c2:9a:bb:40:b1:b4:8a:cf:1f:19:2d:ee: 88:fa:7f:63:25:d8:25:66:b4:9e:0b:b5:c0:4a:55:a9:6b:39: e3:8f:65:30:a7:51:68:d4:d2:b5:11:60:bb:31:2e:77:ea:48: c1:6b:ef:39:f0:b3:64:8c:d6:f4:39:90:be:17:9e:0c:d8:43: e9:f8:94:ba:3d:b2:d1:a3:06:9c:17:f4:fe:38:1a:1b:20:10: 0b:79:11:3d:d3:50:cb:1a:29:4e:03:44:cf:10:20:9f:be:2a: f8:d5:92:d2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKEE1Qzk4NzAyNEQwQThFQUMwOTY0MDlGRDk5RUMzMkVD OTA0NzBCQTMwHhcNMjYwMjI3MDYyNTIyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWE1YS1iYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZK9wtPmuIlmLqIWfpqErhaExI64JT5HGuGlfcq8LKMjTyLx1Ec+DolJPkur 4gGVw6/WUZpdgkMVHQUpmBAWdI66myVB45bwvB1YJyiS385HsMbZuFt3/xkTLSb2 4CMaSwU50k9P1wzyglJ4h+Zxos2EhlWHYp9Qzvi3c/umyUqZuZwcCErK4auls+64 Wyjv3qSUuwBMaubA40n4L/+V911d1WSVmAB4Y5v2ti6OJYv/c47eMYl0PgeFe2QX 2QMleA8TXxti4KKVsX9KxVU4jUQZ+kldNGxp7PotXgItrlX0lvQfkoL8Lw82MP/9 QbOAP93V2eQNQGK9K07OTykdJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB7yHv4X ArCaS4i3plOvmUDpl1egMB8GA1UdIwQYMBaAFKXJhwJNCo6sCWQJ/ZnsMuyQRwuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni84OTMzMTQ4QUY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2pxd0paQW45bWV3eTdKQkhD Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRCODYvODkzMzE0OEFGN0UzMTFFRjhBREE4QTQxQzRGOUFFMDIvNEM1MUUxRDRG N0U1MTFFRjlBMjhEMzYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofj2MA0GCSqGSIb3DQEBCwUAA4IBAQBCRSi7jO1xaLpirdv0SDB2 XeqwJpBg9pTrnXYIqxJoOJJuraM1e0FimkDcwRpARa4Ce+YFU3o1QWNbmtgNQTB1 PUicB9mNK1ofw7BDPSnTRAxYKhijYAjTtYapAM95FUEXT4T4lSqGXY7UtQxFwdLO XdpYdFmaeCh0xAnUcd/0809aUM8BNdL/jHP7+TgflUN3iBz9A7rCmrtAsbSKzx8Z Le6I+n9jJdglZrSeC7XASlWpaznjj2Uwp1Fo1NK1EWC7MS536kjBa+858LNkjNb0 OZC+F54M2EPp+JS6PbLRowacF/T+OBobIBALeRE901DLGilOA0TPECCfvir41ZLS -----END CERTIFICATE-----Generated at Mon Mar 2 09:57:22 2026 by rpki-client