$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CFF8393A232C11F0B9CB2044C4F9AE02.roa File: CFF8393A232C11F0B9CB2044C4F9AE02.roa (raw, json) Hash identifier: nEmNA11Dyl7nTFmnZC9S6fy/8rzvC71ench9nRz81iE= Subject key identifier: 1E:C1:09:A2:1B:EC:27:C8:AE:C9:80:50:8E:3C:55:E7:80:A8:66:4A Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0C8C Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CFF8393A232C11F0B9CB2044C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:59:29 +0000 ROA not before: Mon 02 Feb 2026 19:15:36 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136908 IP address blocks: 117.121.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E, serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Validity Not Before: Feb 2 19:15:36 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46261-1a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:de:66:87:26:f5:cf:d1:6c:1e:05:4c:12: fb:5a:64:15:92:aa:19:8a:37:2c:24:3a:9d:98:28: 82:78:93:a3:2c:ce:b0:e2:46:59:3c:16:37:56:48: 9c:6e:2b:11:36:52:00:67:45:ca:6e:5b:34:ee:79: e3:89:f7:64:4e:f2:b0:d5:4f:27:25:2e:0a:bd:3e: d6:b8:35:45:80:ae:94:c5:cd:db:85:21:ad:a4:0f: 83:33:d6:1b:f1:c8:6b:11:dd:04:08:39:4f:62:18: 42:49:6e:39:2c:e2:89:49:2a:28:3a:07:08:e8:5c: 9b:0c:12:3e:ed:c5:4d:00:33:bb:2d:51:4d:4c:17: 70:a1:81:46:84:99:46:8c:c2:3e:cd:71:3e:39:3e: ac:dc:b0:78:57:9f:c2:3b:33:a3:fb:31:2e:7b:02: 67:31:95:a0:e2:d4:5e:84:34:8b:d0:1c:04:a9:c5: c5:d8:5d:60:bf:6c:9c:b7:40:ab:6d:bc:69:54:1c: 46:6d:55:a0:64:71:c0:64:cf:6f:83:69:01:94:50: 57:76:df:2a:ea:02:ab:d6:1d:eb:95:c0:94:6c:6e: c2:a3:01:36:3a:48:71:22:3c:69:55:8f:0d:f8:65: d0:4c:43:b8:f4:5b:e0:96:dc:c6:fa:b1:9c:6d:9a: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C1:09:A2:1B:EC:27:C8:AE:C9:80:50:8E:3C:55:E7:80:A8:66:4A X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CFF8393A232C11F0B9CB2044C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.121.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:db:a6:c4:65:e4:c2:e4:ae:3b:dd:ca:74:7b:c5:3a:62:a4: 25:23:28:c8:aa:30:31:15:4a:d6:75:5b:b8:15:ee:7f:ed:17: 17:68:54:a7:2d:31:85:e3:2d:e3:2d:da:67:63:9f:4d:1f:1f: 73:05:a5:36:0b:f7:c0:6d:d5:08:28:a6:26:3a:22:b3:62:f9: 85:98:f4:77:1c:5e:ba:26:a6:6c:95:f6:10:bf:c5:06:f4:12: a0:2d:65:7b:31:a3:5d:98:10:18:c5:be:95:d5:ae:8e:f2:f6: 1a:b4:dd:b1:78:58:22:0e:c1:c3:06:ca:0d:1b:dd:54:7a:cd: 79:9b:e3:71:b3:f6:61:c3:e1:43:c2:80:4c:92:4f:a3:e9:ff: b5:be:67:b4:f7:43:06:84:5a:44:f0:69:3f:d4:e8:15:06:31: da:1f:e6:8a:96:ae:ac:29:6f:5f:17:ce:7c:5b:69:0d:b5:8a: 64:b9:6e:71:77:ca:b7:2d:b1:73:a2:2e:d9:e6:96:9e:1d:81: 24:d5:c8:22:6d:11:0e:5f:d5:00:07:d1:68:d9:b0:05:79:9e: a3:40:50:f1:30:12:f0:18:22:d1:a1:23:a2:82:e7:d4:63:1a: 86:e0:4f:79:23:f1:91:9f:57:68:41:8f:86:ff:38:f7:57:c5: bc:be:a8:00 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjYwMjAyMTkxNTM2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjI2MS0xYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhveZocm9c/RbB4FTBL7WmQVkqoZijcsJDqdmCiCeJOjLM6w4kZZPBY3Vkic bisRNlIAZ0XKbls07nnjifdkTvKw1U8nJS4KvT7WuDVFgK6Uxc3bhSGtpA+DM9Yb 8chrEd0ECDlPYhhCSW45LOKJSSooOgcI6FybDBI+7cVNADO7LVFNTBdwoYFGhJlG jMI+zXE+OT6s3LB4V5/COzOj+zEuewJnMZWg4tRehDSL0BwEqcXF2F1gv2yct0Cr bbxpVBxGbVWgZHHAZM9vg2kBlFBXdt8q6gKr1h3rlcCUbG7CowE2OkhxIjxpVY8N +GXQTEO49FvgltzG+rGcbZpfPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB7BCaIb 7CfIrsmAUI48VeeAqGZKMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvQ0ZGODM5M0Ey MzJDMTFGMEI5Q0IyMDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdXnmMA0GCSqGSIb3DQEBCwUAA4IBAQAd26bEZeTC5K473cp0e8U6 YqQlIyjIqjAxFUrWdVu4Fe5/7RcXaFSnLTGF4y3jLdpnY59NHx9zBaU2C/fAbdUI KKYmOiKzYvmFmPR3HF66JqZslfYQv8UG9BKgLWV7MaNdmBAYxb6V1a6O8vYatN2x eFgiDsHDBsoNG91Ues15m+Nxs/Zhw+FDwoBMkk+j6f+1vme090MGhFpE8Gk/1OgV BjHaH+aKlq6sKW9fF858W2kNtYpkuW5xd8q3LbFzoi7Z5paeHYEk1cgibREOX9UA B9Fo2bAFeZ6jQFDxMBLwGCLRoSOigufUYxqG4E95I/GRn1doQY+G/zj3V8W8vqgA -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:25 2026 by rpki-client