$ rpki-client -vvvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/CA248416C6F811F1807540055311F970.roa File: CA248416C6F811F1807540055311F970.roa (raw, json) Hash identifier: PApZnZkbhq9tGRTNJVNR0D1hL9+9UlkMk41eNAygOsw= Subject key identifier: EB:49:56:DA:E2:D7:B3:C5:E4:B5:26:6D:2D:FF:88:9C:10:24:9F:89 Certificate issuer: /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Certificate serial: 01E6 Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/CA248416C6F811F1807540055311F970.roa Signing time: Tue 13 Oct 2026 11:25:27 +0000 ROA not before: Tue 13 Oct 2026 11:25:27 +0000 ROA not after: Wed 31 Oct 2029 00:00:00 +0000 asID: 18055 IP address blocks: 161.146.160.0/24 maxlen: 24 161.146.161.0/24 maxlen: 24 161.146.192.0/19 maxlen: 24 161.146.224.0/20 maxlen: 20 161.146.235.0/24 maxlen: 24 161.146.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 04:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F Validity Not Before: Oct 13 11:25:27 2026 GMT Not After : Oct 31 00:00:00 2029 GMT Subject: CN=6ace1527-6e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:b9:1a:bc:99:fc:f8:0d:0a:95:21:3d:fd: e7:8c:a4:0a:37:96:4e:e0:4d:1b:9d:d9:bd:18:28: fc:06:29:ac:0b:e2:2d:94:2b:dd:68:79:9a:f2:86: 7f:ba:c0:7d:5f:28:9a:7a:2a:b7:c8:04:b6:ee:8c: 76:2c:f1:d9:b3:08:24:f8:d3:68:c8:90:8c:c6:2c: 38:ad:de:48:e2:b2:00:58:4c:5c:0d:6f:d0:bb:37: 84:2d:2d:46:57:e6:70:d1:1d:09:73:5e:26:f1:96: c8:00:83:a2:0e:e9:e9:b0:45:b5:85:d6:6c:a8:e3: be:2c:9b:72:bd:a8:73:b0:8b:10:51:f6:db:2c:3d: 30:48:b4:f6:9a:f3:ac:c4:c3:56:18:50:e9:ff:b2: af:5f:a1:b2:13:f7:ba:cc:b4:60:1c:c1:b5:0b:52: c5:f5:a1:3a:ba:84:4c:5d:a0:c6:89:1b:2c:6a:9c: 8e:21:ca:62:24:5d:ad:85:5a:7a:46:99:7b:dc:80: 2d:c6:99:73:b6:81:0a:be:91:e1:69:c0:e2:ca:18: 5f:c8:e0:48:3a:19:02:07:e1:f1:1f:72:e0:c6:6d: ee:cb:fb:30:6d:a8:89:72:7f:62:16:09:74:8c:72: f6:cc:d3:21:09:9e:dd:7e:3b:85:f9:cb:12:92:c7: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:49:56:DA:E2:D7:B3:C5:E4:B5:26:6D:2D:FF:88:9C:10:24:9F:89 X509v3 Authority Key Identifier: keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/CA248416C6F811F1807540055311F970.roa sbgp-ipAddrBlock: critical IPv4: 161.146.160.0/23 161.146.192.0-161.146.239.255 Signature Algorithm: sha256WithRSAEncryption 2d:83:85:7a:29:46:61:42:7f:b3:c5:77:ca:e6:99:fe:7e:2d: 6f:cb:fd:f7:1f:9e:7c:bb:f5:23:35:bf:d1:74:f9:9a:2a:32: 09:93:74:5e:0b:11:8d:45:dd:6d:35:f7:1e:f1:79:9b:2d:48: 32:b1:00:f2:66:7e:86:20:72:af:29:a1:05:2c:63:19:f8:be: 7d:3e:9b:40:b0:30:f1:a6:bc:ed:f1:93:9a:fb:b5:4b:47:fb: 5c:19:43:76:b7:0b:fd:43:c4:7f:bb:0a:da:47:72:60:e2:3b: 63:85:3d:fb:c4:9a:1d:15:2b:1a:9c:ad:43:cc:d1:e9:e1:62: 74:6f:5a:16:7b:2e:af:d2:4e:18:a1:3b:ac:f3:aa:2f:10:35: 89:40:7d:bf:9a:a9:84:af:92:ca:fc:bc:c0:18:cd:e3:64:ff: 0c:15:dd:94:09:4d:53:fa:ae:65:4a:c2:2d:2d:aa:ca:b4:07: d0:dd:67:1f:7b:d3:bb:15:09:69:cf:a3:fe:01:33:2b:b7:fa: 8a:66:cc:17:55:87:99:a8:c1:03:fc:85:0a:3d:f2:2e:67:40: 92:5d:ef:4d:05:07:e4:80:d2:f2:8b:e9:59:19:ce:30:d1:b9: 9d:15:a1:cd:88:ee:9c:0f:0a:d0:ae:52:b0:f2:ee:1f:db:0e: df:3f:f7:32 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0MUMxMTAvBgNVBAUTKDc5RDYzMDVGQTIyRkZERjdFMzUxMDY3NDk3ODYyQzY0 QTE2NTQ3MkYwHhcNMjYxMDEzMTEyNTI3WhcNMjkxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNlMTUyNy02ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqi5GryZ/PgNCpUhPf3njKQKN5ZO4E0bndm9GCj8BimsC+ItlCvdaHma8oZ/ usB9Xyiaeiq3yAS27ox2LPHZswgk+NNoyJCMxiw4rd5I4rIAWExcDW/QuzeELS1G V+Zw0R0Jc14m8ZbIAIOiDunpsEW1hdZsqOO+LJtyvahzsIsQUfbbLD0wSLT2mvOs xMNWGFDp/7KvX6GyE/e6zLRgHMG1C1LF9aE6uoRMXaDGiRssapyOIcpiJF2thVp6 Rpl73IAtxplztoEKvpHhacDiyhhfyOBIOhkCB+HxH3Lgxm3uy/swbaiJcn9iFgl0 jHL2zNMhCZ7dfjuF+csSksfrZQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOtJVtri 17PF5LUmbS3/iJwQJJ+JMB8GA1UdIwQYMBaAFHnWMF+iL/3341EGdJeGLGShZUcv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQxQy81M0FBQjRFNkU3 MkYxMUVFQjcyQzZFNjhDNEY5QUUwMi9lZFl3WDZJdl9mZmpVUVowbDRZc1pLRmxS eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VkWXdYNkl2X2ZmalVRWjBsNFlzWktGbFJ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0MUMvNTNBQUI0RTZFNzJGMTFFRUI3MkM2RTY4QzRGOUFFMDIvQ0EyNDg0MTZD NkY4MTFGMTgwNzU0MDA1NTMxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQBoZKgMAwDBAahksADBAShkuAwDQYJKoZIhvcNAQELBQADggEBAC2D hXopRmFCf7PFd8rmmf5+LW/L/fcfnny79SM1v9F0+ZoqMgmTdF4LEY1F3W019x7x eZstSDKxAPJmfoYgcq8poQUsYxn4vn0+m0CwMPGmvO3xk5r7tUtH+1wZQ3a3C/1D xH+7CtpHcmDiO2OFPfvEmh0VKxqcrUPM0enhYnRvWhZ7Lq/SThihO6zzqi8QNYlA fb+aqYSvksr8vMAYzeNk/wwV3ZQJTVP6rmVKwi0tqsq0B9DdZx9707sVCWnPo/4B Myu3+opmzBdVh5mowQP8hQo98i5nQJJd700FB+SA0vKL6VkZzjDRuZ0Voc2I7pwP CtCuUrDy7h/bDt8/9zI= -----END CERTIFICATE-----Generated at Mon Oct 19 22:45:51 2026 by rpki-client