$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa File: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (raw, json) Hash identifier: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE= Subject key identifier: 54:C2:1A:A2:91:A3:8B:1E:FD:6C:E8:29:35:3C:BF:DB:80:15:D9:B9 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: E1 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:10:18 +0000 ROA not before: Wed 28 Jan 2026 23:19:10 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55479 IP address blocks: 161.248.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 23:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Jan 28 23:19:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a5a85a-6030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:77:ee:42:4b:32:8b:28:30:13:92:40:a6: e7:4f:80:32:f0:0e:10:3c:d0:e0:1f:8c:bc:ad:a5: 95:fa:ac:e4:f8:cf:eb:b4:b2:2f:e3:db:90:60:31: c4:1f:d7:02:c9:86:ae:f1:61:37:00:91:c1:55:54: 03:7d:92:ea:d3:38:01:f5:31:7c:76:a6:62:db:66: 3b:eb:73:3e:48:ad:03:fe:c0:f9:00:f1:eb:ae:61: e8:c3:b0:cd:47:dc:36:61:ed:3e:a4:88:49:05:7e: 6c:9e:d7:f6:34:d5:ad:c6:7f:f6:67:15:56:b3:3b: 2a:b7:13:3d:a6:ed:9e:3e:7a:16:51:59:27:fa:63: 5b:c9:0c:b4:8e:7b:63:28:68:48:93:59:e8:84:0f: cc:04:89:6e:b3:34:83:df:dc:d4:e5:6b:df:f7:6f: 1f:cc:31:7c:2f:73:47:2d:ba:7e:38:be:d6:f2:be: e7:18:dd:34:6d:e6:3e:61:72:b7:8d:8a:af:b0:3b: ab:92:96:eb:a5:5c:f7:2e:16:e8:bc:51:33:c3:29: 79:47:76:bd:cc:27:73:61:47:54:9e:ca:47:e5:7e: 99:b6:30:5d:b6:30:be:80:06:7a:0d:a6:d9:5b:de: 05:da:f5:0e:0e:c5:66:7e:57:e2:61:8c:85:9f:22: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C2:1A:A2:91:A3:8B:1E:FD:6C:E8:29:35:3C:BF:DB:80:15:D9:B9 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.106.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:67:cd:fd:cf:2a:80:e2:7c:a9:74:52:6f:d2:91:82:94:fe: f7:f3:98:40:fa:a3:af:0b:29:35:cd:a7:db:33:03:6a:eb:73: d9:a3:bc:02:b5:65:f7:d5:a9:3e:2b:3b:52:41:37:ea:8f:79: d2:aa:bb:67:71:41:20:f5:88:b1:57:af:d5:be:99:0e:6b:df: 8e:ce:a8:4b:fd:9f:c7:ef:82:f3:15:f9:d5:8f:03:df:db:3e: e2:6b:26:c6:d9:74:a9:c6:aa:bb:73:a7:36:25:f5:a9:d3:e8: 63:24:51:3a:c2:55:f5:66:99:78:3b:83:8d:be:ae:09:d9:1c: d1:0d:ca:85:c3:e6:ff:27:d3:8c:07:b1:32:a6:ca:c2:e8:b8: a6:64:3e:ce:87:8e:e6:2f:ca:89:f6:56:bf:b2:88:15:a2:e8: 08:f0:e9:89:cc:3a:fb:df:84:bc:3f:06:64:fc:af:15:4f:d1: e7:07:f1:7a:78:be:5a:71:b1:7c:8d:62:6f:b7:1e:43:68:2d: 84:47:ed:5c:9b:ac:b8:83:d2:25:7f:7a:b0:28:bc:0e:43:61: fa:35:21:da:71:99:2a:fb:69:66:94:a0:dc:43:47:e9:e2:d5: f5:95:06:b0:87:bd:5d:5c:74:ec:d7:3f:d0:64:b5:b4:f3:62: 78:3a:ec:0a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4 RDdERUI2OTQwHhcNMjYwMTI4MjMxOTEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTg1YS02MDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNx37kJLMosoMBOSQKbnT4Ay8A4QPNDgH4y8raWV+qzk+M/rtLIv49uQYDHE H9cCyYau8WE3AJHBVVQDfZLq0zgB9TF8dqZi22Y763M+SK0D/sD5APHrrmHow7DN R9w2Ye0+pIhJBX5sntf2NNWtxn/2ZxVWszsqtxM9pu2ePnoWUVkn+mNbyQy0jntj KGhIk1nohA/MBIluszSD39zU5Wvf928fzDF8L3NHLbp+OL7W8r7nGN00beY+YXK3 jYqvsDurkpbrpVz3LhbovFEzwyl5R3a9zCdzYUdUnspH5X6ZtjBdtjC+gAZ6DabZ W94F2vUODsVmflfiYYyFnyKZ0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFTCGqKR o4se/WzoKTU8v9uAFdm5MB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDODMvMjBBNjEzN0VDQzk5MTFFRjg3NDM3RTA5QzRGOUFFMDIvQ0VFNzBFODRE REZCMTFFRkI2ODBFMjVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofhqMA0GCSqGSIb3DQEBCwUAA4IBAQBOZ839zyqA4nypdFJv0pGC lP7385hA+qOvCyk1zafbMwNq63PZo7wCtWX31ak+KztSQTfqj3nSqrtncUEg9Yix V6/VvpkOa9+OzqhL/Z/H74LzFfnVjwPf2z7iaybG2XSpxqq7c6c2JfWp0+hjJFE6 wlX1Zpl4O4ONvq4J2RzRDcqFw+b/J9OMB7EypsrC6LimZD7Oh47mL8qJ9la/sogV ougI8OmJzDr734S8PwZk/K8VT9HnB/F6eL5acbF8jWJvtx5DaC2ER+1cm6y4g9Il f3qwKLwOQ2H6NSHacZkq+2lmlKDcQ0fp4tX1lQawh71dXHTs1z/QZLW082J4OuwK -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:05 2026 by rpki-client