$ rpki-client -vvvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/06EBCBDE9C8811F1A918E08B5411F970.roa File: 06EBCBDE9C8811F1A918E08B5411F970.roa (raw, json) Hash identifier: gH9uwAxPYcJXVioCTcBeU7x4aSFAnH8dyB82k/ZhDLc= Subject key identifier: AE:19:C6:86:86:84:46:2A:8A:67:35:DF:D4:44:55:B7:BB:74:6A:3E Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 0126 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/06EBCBDE9C8811F1A918E08B5411F970.roa Signing time: Thu 20 Aug 2026 11:12:27 +0000 ROA not before: Thu 20 Aug 2026 11:12:27 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 154504 IP address blocks: 161.248.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Aug 20 11:12:27 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a86e11b-5994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:05:0b:98:8c:84:94:3f:64:56:54:13:01:c4: 80:07:c8:a9:ca:3f:4e:d4:d1:a9:b6:d0:63:80:98: 1c:5b:65:64:01:cf:2e:d6:d1:c8:25:fc:0e:83:2f: 86:94:81:24:88:37:ea:bb:e8:17:de:74:65:56:0b: d1:21:92:9c:5a:c5:c1:d3:0a:c1:ce:e8:a8:5d:7a: 5b:49:09:1b:ca:6e:14:36:97:44:27:d9:0a:4b:59: f5:b5:ec:82:b1:5c:d4:7c:86:1c:b8:85:de:c7:65: eb:24:fc:69:8d:ea:2a:5b:55:49:3c:ad:48:fc:23: 1e:2e:b1:74:58:aa:6f:e0:81:ce:d9:8a:11:f5:a8: 44:e0:63:69:3f:20:de:3c:e1:a6:07:e4:dc:de:24: 15:9b:80:2c:bc:f3:fd:75:98:6a:70:62:a9:d1:05: df:5e:92:87:bb:bd:cc:92:84:3d:d1:c6:20:2c:94: be:0e:1f:6c:e8:df:60:86:02:ea:1c:a0:6b:4a:74: 21:77:22:06:b0:11:1d:38:65:20:7c:ce:b1:cf:52: 64:06:b1:44:ef:d0:e7:4c:e5:f0:86:91:59:c7:cb: 05:78:d7:9a:2d:1a:6e:97:42:99:b6:f3:92:2e:f4: 87:61:e1:cb:71:a0:68:26:95:5f:ed:47:e6:d6:c7: af:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:19:C6:86:86:84:46:2A:8A:67:35:DF:D4:44:55:B7:BB:74:6A:3E X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/06EBCBDE9C8811F1A918E08B5411F970.roa sbgp-ipAddrBlock: critical IPv4: 161.248.203.0/24 Signature Algorithm: sha256WithRSAEncryption 06:b7:03:a7:c4:34:09:58:5c:67:1f:eb:3c:53:15:e4:65:72: 92:fd:2b:4b:ae:93:d8:65:83:56:9b:99:f8:1a:b1:d0:d8:74: 80:45:27:be:3f:6d:dc:42:42:13:f4:69:c2:e7:13:11:c7:f5: bf:f6:a5:1a:0d:f0:b3:1e:4f:60:8e:88:b3:77:9c:b0:a4:d4: 3c:bc:e7:8d:d3:0b:c5:a7:d5:54:11:bd:f7:23:8e:3d:55:28: 41:e9:01:53:53:ae:22:dc:2c:51:b5:70:62:f5:25:81:4b:b7: e1:e9:bc:6c:cc:12:77:05:f3:3e:c4:03:b2:7f:0d:d0:0d:4c: b4:ce:00:69:44:6c:f8:1f:d6:c8:71:ea:69:8a:56:05:6d:01: bb:18:f5:0a:fa:75:10:96:e4:ce:ba:87:8d:3a:4f:4f:a4:11: 7e:db:e1:48:e5:ef:bf:29:00:c4:f2:41:27:ff:93:1e:25:6d: 56:36:0b:01:5f:f4:7f:8b:4c:82:10:30:2f:ed:80:11:60:31: d5:2b:74:8d:d8:ed:fc:ec:7d:c2:bc:07:6c:9b:74:52:71:4d: a2:74:e4:3e:0d:8d:a9:fc:1c:72:0e:a8:be:70:2f:03:b9:f0: 26:2c:9f:21:ab:08:49:f7:ea:3d:e8:9a:17:71:2a:12:a2:8a: e8:0a:5f:96 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx REIyRjkzN0EwHhcNMjYwODIwMTExMjI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg2ZTExYi01OTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQULmIyElD9kVlQTAcSAB8ipyj9O1NGpttBjgJgcW2VkAc8u1tHIJfwOgy+G lIEkiDfqu+gX3nRlVgvRIZKcWsXB0wrBzuioXXpbSQkbym4UNpdEJ9kKS1n1teyC sVzUfIYcuIXex2XrJPxpjeoqW1VJPK1I/CMeLrF0WKpv4IHO2YoR9ahE4GNpPyDe POGmB+Tc3iQVm4AsvPP9dZhqcGKp0QXfXpKHu73MkoQ90cYgLJS+Dh9s6N9ghgLq HKBrSnQhdyIGsBEdOGUgfM6xz1JkBrFE79DnTOXwhpFZx8sFeNeaLRpul0KZtvOS LvSHYeHLcaBoJpVf7Ufm1sevbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK4ZxoaG hEYqimc139REVbe7dGo+MB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5RjUvMzI4M0U3RDRERkRBMTFFRjhCNDc4NjI0QzRGOUFFMDIvMDZFQkNCREU5 Qzg4MTFGMUE5MThFMDhCNTQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAofjLMA0GCSqGSIb3DQEBCwUAA4IBAQAGtwOnxDQJWFxnH+s8UxXk ZXKS/StLrpPYZYNWm5n4GrHQ2HSARSe+P23cQkIT9GnC5xMRx/W/9qUaDfCzHk9g joizd5ywpNQ8vOeN0wvFp9VUEb33I449VShB6QFTU64i3CxRtXBi9SWBS7fh6bxs zBJ3BfM+xAOyfw3QDUy0zgBpRGz4H9bIceppilYFbQG7GPUK+nUQluTOuoeNOk9P pBF+2+FI5e+/KQDE8kEn/5MeJW1WNgsBX/R/i0yCEDAv7YARYDHVK3SN2O387H3C vAdsm3RScU2idOQ+DY2p/BxyDqi+cC8DufAmLJ8hqwhJ9+o96JoXcSoSooroCl+W -----END CERTIFICATE-----Generated at Fri Sep 11 12:03:14 2026 by rpki-client