$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/238E8C4CC3E111F1B4BD797A6011F970.roa File: 238E8C4CC3E111F1B4BD797A6011F970.roa (raw, json) Hash identifier: v2dqaDmkSOB93qynjlOD/K+n30ovcJEVdwe83FFVB1o= Subject key identifier: B3:5E:A6:CF:F3:9F:8A:91:10:72:B7:69:A9:9B:B9:07:E8:DC:91:1C Certificate issuer: /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Certificate serial: 0164 Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/238E8C4CC3E111F1B4BD797A6011F970.roa Signing time: Fri 09 Oct 2026 12:58:36 +0000 ROA not before: Fri 09 Oct 2026 12:58:36 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 150180 IP address blocks: 161.248.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9 Validity Not Before: Oct 9 12:58:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6ac8e4fc-a7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:2a:1d:d0:44:df:93:5b:12:d6:6b:29:70: 3b:a7:5e:ae:ce:ce:38:e1:79:ae:8d:d6:23:a9:78: c2:2d:94:57:0c:75:86:35:2b:dc:3a:fd:6e:ce:1f: 04:71:6e:25:62:1b:cd:5e:ef:97:a1:15:c2:e4:48: 45:66:07:2c:9c:ad:a1:12:48:a5:49:ca:f5:84:5d: a3:25:fe:4d:0a:5d:fe:f7:49:13:52:f3:87:98:de: c0:6a:ed:3b:60:21:e1:e5:c7:03:9d:73:b8:0c:d3: fb:d3:82:c6:78:5c:bc:ed:71:35:97:52:98:d4:89: d4:2a:1b:09:61:ec:eb:08:00:61:1f:e8:26:f3:27: 9d:98:b3:d0:00:a6:02:32:c3:84:02:52:6a:d1:4e: 5d:0c:45:da:13:90:91:3f:ec:29:1c:00:2b:49:60: a9:96:21:01:6b:02:a9:f4:a6:9e:51:cc:2c:17:a8: 7d:cb:39:b3:f6:19:73:1e:10:d7:63:7c:40:58:8e: b7:84:e8:cc:9b:bc:4d:75:78:00:d1:cd:b9:6b:20: 5e:2d:91:9a:d6:01:78:7e:58:73:58:49:8d:74:7c: 03:d9:14:8f:65:d8:b3:3f:37:57:db:3c:0d:71:93: 2c:37:14:08:69:2b:49:9a:42:d9:b6:59:88:57:d2: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5E:A6:CF:F3:9F:8A:91:10:72:B7:69:A9:9B:B9:07:E8:DC:91:1C X509v3 Authority Key Identifier: keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/238E8C4CC3E111F1B4BD797A6011F970.roa sbgp-ipAddrBlock: critical IPv4: 161.248.6.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:f5:e9:7e:41:dd:6f:4f:fd:c0:ef:15:b9:99:f9:c9:08:97: a0:ea:11:c2:81:22:d5:75:8e:8d:f0:dc:4e:a8:79:c8:28:23: e8:d0:96:6f:c7:24:7f:1b:64:cd:24:b9:0f:df:53:2d:19:2b: 22:08:e4:2f:0e:61:1d:9a:02:72:1f:9a:bb:b0:12:f3:40:d6: b9:8c:0c:20:ac:41:df:48:88:a0:5a:09:2d:66:79:fe:6b:aa: e5:82:4b:2c:76:93:9c:53:08:c9:85:b8:54:ae:d0:02:4b:11: 3b:d1:6b:31:99:e8:c5:95:77:ba:a7:a0:43:e0:79:db:f5:52: 97:e8:f4:96:e4:7a:13:d2:0e:de:a9:13:a0:88:f3:f3:9f:b2: 2a:55:92:15:e3:7f:f0:64:3c:f0:ff:1d:db:92:f7:34:8e:c5: ac:99:c9:08:e6:af:b5:5c:c8:3d:d6:70:09:8c:df:e1:96:c2: 57:35:8e:0b:2c:de:c0:26:a3:c5:e4:ed:78:ee:45:db:de:e8: fb:e8:4f:ce:93:c3:28:ea:e7:ac:0f:05:2f:f0:32:c4:16:94: 09:0e:3e:db:04:85:5a:8d:11:d7:0f:33:8c:54:23:79:ca:70: d9:d3:2a:fe:37:82:10:8f:b5:85:a7:67:e1:e8:26:75:63:94: 85:e5:28:8c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzMDcxMTAvBgNVBAUTKDRCMDkyREYxMDQyODBGNDVCQzNGMjc5NkY0MDFDQzJC NEM2MTQ0RTkwHhcNMjYxMDA5MTI1ODM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4ZTRmYy1hN2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHkqHdBE35NbEtZrKXA7p16uzs444XmujdYjqXjCLZRXDHWGNSvcOv1uzh8E cW4lYhvNXu+XoRXC5EhFZgcsnK2hEkilScr1hF2jJf5NCl3+90kTUvOHmN7Aau07 YCHh5ccDnXO4DNP704LGeFy87XE1l1KY1InUKhsJYezrCABhH+gm8yedmLPQAKYC MsOEAlJq0U5dDEXaE5CRP+wpHAArSWCpliEBawKp9KaeUcwsF6h9yzmz9hlzHhDX Y3xAWI63hOjMm7xNdXgA0c25ayBeLZGa1gF4flhzWEmNdHwD2RSPZdizPzdX2zwN cZMsNxQIaStJmkLZtlmIV9JvzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLNeps/z n4qREHK3aambuQfo3JEcMB8GA1UdIwQYMBaAFEsJLfEEKA9FvD8nlvQBzCtMYUTp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODMwNy8yQkM5MjQ1MEJF Q0QxMUVGOThDNzQxMzJDNEY5QUUwMi9Td2t0OFFRb0QwVzhQeWVXOUFITUsweGhS T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1N3a3Q4UVFvRDBXOFB5ZVc5QUhNSzB4aFJPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgzMDcvMkJDOTI0NTBCRUNEMTFFRjk4Qzc0MTMyQzRGOUFFMDIvMjM4RThDNEND M0UxMTFGMUI0QkQ3OTdBNjAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgGMA0GCSqGSIb3DQEBCwUAA4IBAQAb9el+Qd1vT/3A7xW5mfnJ CJeg6hHCgSLVdY6N8NxOqHnIKCPo0JZvxyR/G2TNJLkP31MtGSsiCOQvDmEdmgJy H5q7sBLzQNa5jAwgrEHfSIigWgktZnn+a6rlgkssdpOcUwjJhbhUrtACSxE70Wsx mejFlXe6p6BD4Hnb9VKX6PSW5HoT0g7eqROgiPPzn7IqVZIV43/wZDzw/x3bkvc0 jsWsmckI5q+1XMg91nAJjN/hlsJXNY4LLN7AJqPF5O147kXb3uj76E/Ok8Mo6ues DwUv8DLEFpQJDj7bBIVajRHXDzOMVCN5ynDZ0yr+N4IQj7WFp2fh6CZ1Y5SF5SiM -----END CERTIFICATE-----Generated at Tue Oct 20 18:36:27 2026 by rpki-client