$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa File: B91AACE86C8A11EEA934912FC4F9AE02.roa (raw, json) Hash identifier: Uq1r1G4tm1AaUsLNtGMF+1xso19V+ldz4OeRvJIott0= Subject key identifier: B0:72:B2:88:B4:D2:50:3D:FF:AB:10:11:59:96:3E:7C:02:2C:68:D6 Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 0733 Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:05:24 +0000 ROA not before: Wed 16 Jul 2025 23:34:10 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 209854 IP address blocks: 118.99.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Jul 16 23:34:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a463c4-c1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:72:bd:a1:72:83:ae:99:22:62:0e:24:70: 27:89:cf:8c:f7:2f:6f:2a:eb:99:22:20:07:71:fd: 9c:ce:ac:d5:d4:0d:0a:40:da:9d:c5:9f:5a:c7:00: a8:11:78:63:5e:3c:74:99:6c:c4:eb:30:34:e0:1f: e0:b3:16:6c:19:1f:c6:92:37:55:41:d5:18:51:32: 37:69:6b:1d:ac:98:dc:dc:f9:7d:ed:c2:cd:7b:a6: 02:9a:90:13:79:2d:03:ff:4a:29:5f:23:b7:e7:64: 7d:ba:28:79:79:63:fa:15:aa:1c:fc:68:77:07:a0: 6f:7d:21:ac:27:bf:d2:55:87:62:91:da:c8:a8:ea: c8:74:89:fa:07:92:da:75:c6:10:0a:85:6e:91:5a: 22:cc:eb:15:97:00:26:27:0b:ef:eb:59:ba:c5:eb: 61:8a:4f:4c:31:30:ac:b2:1a:11:2b:d9:3f:3b:6b: 09:2d:68:e9:e4:61:fc:4e:01:0f:df:45:e4:1a:75: ea:f0:a5:ba:7a:16:eb:1c:fb:67:c4:48:e7:1f:44: fc:ef:84:69:29:68:9f:2f:23:7f:25:88:f0:cf:8d: 96:bc:90:80:e1:1d:74:e5:aa:07:13:0f:4a:ec:ed: bc:29:99:75:ba:35:3d:05:d1:dc:c6:ef:bb:e1:f3: 96:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:72:B2:88:B4:D2:50:3D:FF:AB:10:11:59:96:3E:7C:02:2C:68:D6 X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/B91AACE86C8A11EEA934912FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 118.99.2.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:ed:ce:3b:81:ba:ab:23:8d:14:4d:5c:ea:68:52:2d:79:ba: 87:a0:e3:d8:c7:46:af:1f:bf:3f:23:15:52:0d:71:3e:84:b0: a8:0c:e6:25:9b:54:7f:66:77:f9:72:f5:fb:b7:c4:84:ec:ce: b0:66:e0:1d:10:0d:82:b5:99:1d:a4:0b:0e:dd:e5:ee:a2:e5: c3:a9:a0:e3:c9:63:cc:48:ef:1f:12:3a:8d:d8:0f:f7:e6:72: f1:9e:ad:a1:9a:68:92:f9:ea:6a:f2:df:62:ea:96:2b:48:cd: fc:b4:98:2b:17:72:ef:b4:9b:c5:f6:87:f8:ee:d4:9b:9b:3f: b2:08:cc:b2:c8:b4:27:4f:43:01:a5:70:87:cb:11:cb:57:70: b6:c3:c0:76:89:a4:ee:ae:1b:b7:ff:d8:7b:ff:01:b0:21:16: 3b:bd:e6:43:f7:bf:8a:d1:4c:21:f1:db:02:fe:2e:b7:94:d1: 52:dd:1b:e0:82:d7:7e:77:9e:58:45:fd:c7:6a:05:b5:8a:76: 01:b3:c9:de:51:ec:fd:d2:3b:d6:58:95:0b:0c:4e:12:04:88: 33:1a:10:df:1c:f6:84:97:88:02:a7:b5:f8:11:fe:6d:1d:c1: 55:35:35:e8:9b:2e:be:64:36:1f:f2:18:fb:f3:44:9d:05:9d: b3:46:40:19 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjUwNzE2MjMzNDEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjNjNC1jMWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQdyvaFyg66ZImIOJHAnic+M9y9vKuuZIiAHcf2czqzV1A0KQNqdxZ9axwCo EXhjXjx0mWzE6zA04B/gsxZsGR/GkjdVQdUYUTI3aWsdrJjc3Pl97cLNe6YCmpAT eS0D/0opXyO352R9uih5eWP6Faoc/Gh3B6BvfSGsJ7/SVYdikdrIqOrIdIn6B5La dcYQCoVukVoizOsVlwAmJwvv61m6xethik9MMTCsshoRK9k/O2sJLWjp5GH8TgEP 30XkGnXq8KW6ehbrHPtnxEjnH0T874RpKWifLyN/JYjwz42WvJCA4R105aoHEw9K 7O28KZl1ujU9BdHcxu+74fOWawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLBysoi0 0lA9/6sQEVmWPnwCLGjWMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvQjkxQUFDRTg2 QzhBMTFFRUE5MzQ5MTJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdmMCMA0GCSqGSIb3DQEBCwUAA4IBAQAL7c47gbqrI40UTVzqaFIt ebqHoOPYx0avH78/IxVSDXE+hLCoDOYlm1R/Znf5cvX7t8SE7M6wZuAdEA2CtZkd pAsO3eXuouXDqaDjyWPMSO8fEjqN2A/35nLxnq2hmmiS+epq8t9i6pYrSM38tJgr F3LvtJvF9of47tSbmz+yCMyyyLQnT0MBpXCHyxHLV3C2w8B2iaTurhu3/9h7/wGw IRY7veZD97+K0Uwh8dsC/i63lNFS3Rvggtd+d55YRf3HagW1inYBs8neUez90jvW WJULDE4SBIgzGhDfHPaEl4gCp7X4Ef5tHcFVNTXomy6+ZDYf8hj780SdBZ2zRkAZ -----END CERTIFICATE-----Generated at Mon Mar 2 15:16:14 2026 by rpki-client