$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa File: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (raw, json) Hash identifier: yN9o2rrsZJddQeoKflSWXEmDgLtMFJiSuAQ+s2rn58I= Subject key identifier: 61:9D:68:BD:61:4D:6D:04:53:4E:B2:69:7F:EF:32:D2:B9:B0:61:76 Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 01F3 Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:15:37 +0000 ROA not before: Thu 03 Apr 2025 04:01:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45671 IP address blocks: 43.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Apr 3 04:01:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a47439-be41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:04:8f:10:b3:ad:2d:02:41:13:7f:fa:87:54: 7f:f5:b2:e6:74:46:c9:dc:05:09:b6:cb:19:2f:49: 4e:b7:0d:50:c8:89:e8:9f:00:69:40:54:87:27:f0: 15:0f:6a:77:6d:12:ed:ae:bc:75:d8:63:79:ae:7a: b9:4d:40:34:b0:e5:eb:4c:4b:fe:2a:3e:c8:df:90: 59:cb:cd:b1:ec:1c:bb:44:ba:59:7e:66:2d:08:3f: 78:7e:07:3f:17:42:97:bf:64:8c:dd:71:a9:f9:6d: d7:d1:7f:90:01:95:dd:56:40:19:ae:15:e3:b3:7e: 89:96:53:58:7a:bc:5d:86:c8:e9:30:07:1f:a5:5d: dd:6f:b5:39:5d:d5:bb:ab:a3:b7:1b:1e:1a:3f:0d: a0:78:95:9e:23:28:cb:73:c5:36:f4:12:e9:61:61: 01:e8:2b:03:a3:c5:92:66:7d:6a:6e:2f:d8:ab:a9: 85:73:85:c9:ff:1a:5f:35:4b:4e:a0:c5:4a:6c:99: f9:7f:21:70:1a:fa:dc:ac:49:5e:3c:ee:7e:73:76: 4c:c9:6e:6d:68:37:d3:45:cd:d0:3a:8a:5f:12:74: 48:90:9d:92:d5:c2:07:ec:77:51:63:11:fd:84:19: 42:7f:6a:8b:cb:0c:c6:a3:33:56:ae:3e:85:a6:fa: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:68:BD:61:4D:6D:04:53:4E:B2:69:7F:EF:32:D2:B9:B0:61:76 X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.99.0/24 Signature Algorithm: sha256WithRSAEncryption ca:69:67:c3:62:81:6f:25:47:7b:d6:4c:0f:f2:64:4f:b3:c8: ed:4b:4b:a7:a5:35:4f:6a:ff:b1:c4:2c:4b:77:a4:a2:4c:26: fe:c9:29:24:e1:69:ca:9a:91:f8:bf:b1:ea:e0:8a:80:5b:ea: 50:ad:53:f8:34:d9:b2:57:bd:46:ee:ef:bd:1c:d2:c1:d2:2c: 48:44:1a:5d:fc:1b:7c:e9:04:e2:c7:3b:2a:13:ab:c0:33:c5: 03:72:70:f1:70:69:89:fc:5e:a5:e6:7d:29:5f:db:09:c5:3b: 04:b5:c8:a3:47:d0:46:c8:50:56:6b:7e:2d:0c:7b:97:e3:bb: 8c:d6:b3:63:5a:da:ec:fa:5b:65:83:47:8d:66:46:30:6d:b0: 66:a2:f9:1a:3b:1e:97:fa:df:99:7a:03:d6:40:69:f1:7d:67: c2:c6:c9:aa:c5:57:cf:e4:45:d0:a5:45:8f:e0:04:ec:f5:13: b0:6e:36:c8:b7:27:d2:16:0d:45:ad:53:6d:c0:60:19:f4:84: 53:2e:b9:ae:ba:c5:34:d0:02:36:c9:ce:52:c4:28:58:d0:e5: 56:11:d4:4a:ef:b6:9d:d6:eb:99:4f:74:00:12:5f:02:3c:ed: 76:c0:97:9a:9a:c8:6c:00:60:59:19:76:80:02:ae:6a:a0:fe: 11:cb:ff:d6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjUwNDAzMDQwMTMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzQzOS1iZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gSPELOtLQJBE3/6h1R/9bLmdEbJ3AUJtssZL0lOtw1QyInonwBpQFSHJ/AV D2p3bRLtrrx12GN5rnq5TUA0sOXrTEv+Kj7I35BZy82x7By7RLpZfmYtCD94fgc/ F0KXv2SM3XGp+W3X0X+QAZXdVkAZrhXjs36JllNYerxdhsjpMAcfpV3db7U5XdW7 q6O3Gx4aPw2geJWeIyjLc8U29BLpYWEB6CsDo8WSZn1qbi/Yq6mFc4XJ/xpfNUtO oMVKbJn5fyFwGvrcrElePO5+c3ZMyW5taDfTRc3QOopfEnRIkJ2S1cIH7HdRYxH9 hBlCf2qLywzGozNWrj6Fpvp6cQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGGdaL1h TW0EU06yaX/vMtK5sGF2MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2MjMvQTI1RDQ4OUU1MDQ3MTFFRUI2NzczNjVEQzRGOUFFMDIvQkJCRURFRjQ2 QzgyMTFFRTg2NkY1QTc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+9jMA0GCSqGSIb3DQEBCwUAA4IBAQDKaWfDYoFvJUd71kwP8mRP s8jtS0unpTVPav+xxCxLd6SiTCb+ySkk4WnKmpH4v7Hq4IqAW+pQrVP4NNmyV71G 7u+9HNLB0ixIRBpd/Bt86QTixzsqE6vAM8UDcnDxcGmJ/F6l5n0pX9sJxTsEtcij R9BGyFBWa34tDHuX47uM1rNjWtrs+ltlg0eNZkYwbbBmovkaOx6X+t+ZegPWQGnx fWfCxsmqxVfP5EXQpUWP4ATs9ROwbjbItyfSFg1FrVNtwGAZ9IRTLrmuusU00AI2 yc5SxChY0OVWEdRK77ad1uuZT3QAEl8CPO12wJeamshsAGBZGXaAAq5qoP4Ry//W -----END CERTIFICATE-----Generated at Mon Mar 2 02:54:50 2026 by rpki-client