$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa File: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (raw, json) Hash identifier: TcpO2pAwWZUV4OPE5KsxCXepxeEGE8042tINqAbe+zE= Subject key identifier: B5:5A:BB:07:76:34:81:77:A6:1B:D0:05:89:33:34:7D:FC:FF:50:7D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 020B Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa Signing time: Fri 03 Apr 2026 03:36:03 +0000 ROA not before: Fri 03 Apr 2026 03:36:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45671 IP address blocks: 43.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: Apr 3 03:36:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cf35a3-c315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:17:0f:1b:40:ca:b8:73:65:df:33:dd:15: d2:16:64:70:bc:98:86:b9:81:ee:b0:7a:60:3f:26: df:67:b2:5f:9c:18:15:28:c1:de:2e:f4:0b:f1:0e: 6a:b4:05:0c:29:35:7d:e2:1c:b5:e5:72:30:be:3e: e7:06:21:cf:26:4c:ad:36:af:b3:c2:0f:b3:bc:bf: ed:24:19:50:5d:ab:36:2d:4a:78:86:4c:f6:66:50: a4:cd:d6:c4:0f:d3:ef:21:71:86:3f:ff:7d:f5:08: b4:47:f6:0e:43:74:0a:f8:26:c3:ad:00:ae:08:4d: 58:d3:13:0d:ab:ba:12:ed:bb:98:68:23:14:28:e1: a6:b7:af:c8:6e:3e:76:f0:92:d1:47:6a:7e:58:fa: 48:81:bd:0b:21:16:f4:6e:39:2d:b7:f8:61:d3:cc: 9b:d9:60:45:6b:7b:1d:da:67:07:13:32:96:94:8d: e3:aa:83:7a:27:87:c9:71:ae:e5:f4:0b:1c:bf:3b: 4f:55:6a:49:25:5f:a5:d1:8e:2c:6f:27:e0:91:04: e5:82:5e:98:49:57:b9:82:7a:cb:86:a3:c4:33:15: 8e:39:00:a9:ea:82:61:24:3b:d6:ff:1d:7f:c5:95: 90:9d:2a:30:32:09:08:74:79:19:ad:1f:6a:7d:06: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5A:BB:07:76:34:81:77:A6:1B:D0:05:89:33:34:7D:FC:FF:50:7D X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/BBBEDEF46C8211EE866F5A78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.99.0/24 Signature Algorithm: sha256WithRSAEncryption 04:be:15:d5:bf:59:54:ae:09:4f:a3:95:9a:65:04:8d:b4:4a: a6:20:9c:80:ef:ee:9f:bb:31:09:50:32:62:df:e5:c2:5f:ef: 92:75:67:ec:8d:50:01:74:53:58:92:f6:81:4e:37:43:59:88: c5:7b:f0:9a:02:49:5e:bd:c0:02:b8:fc:94:e1:c2:bc:bf:45: d8:04:b2:fd:c0:78:ce:14:49:f5:a5:5b:e3:c6:f9:db:36:6c: 66:2f:bb:cb:8e:b3:db:6d:d0:b0:b0:26:67:9c:2c:f5:f0:f7: d6:0f:61:b8:8c:07:62:30:4f:b9:84:54:b1:e9:2a:8f:3d:44: fc:7a:92:fb:d5:91:21:3c:a4:c3:5f:07:c8:0e:22:9d:50:b5: 4c:5f:b1:d0:ee:a0:60:da:4d:0d:c4:d8:c1:77:3f:26:64:0b: 43:5b:84:fd:26:72:1c:17:e5:9a:80:59:45:da:15:7c:08:67: ae:f3:7a:26:2a:f9:ef:82:aa:5e:0b:ef:3d:0d:ec:80:b3:b2: 3a:2e:42:30:64:60:45:43:2e:2c:44:44:e1:ba:3e:35:fb:ff: 37:b8:58:0d:52:e3:9d:26:24:a1:84:6f:29:e9:ad:58:70:5b: 87:cc:26:8f:51:5d:1d:8d:9f:d2:ec:70:50:96:8a:76:f1:ed: 90:6b:59:9a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjYwNDAzMDMzNjAzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNmMzVhMy1jMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCMXDxtAyrhzZd8z3RXSFmRwvJiGuYHusHpgPybfZ7JfnBgVKMHeLvQL8Q5q tAUMKTV94hy15XIwvj7nBiHPJkytNq+zwg+zvL/tJBlQXas2LUp4hkz2ZlCkzdbE D9PvIXGGP/999Qi0R/YOQ3QK+CbDrQCuCE1Y0xMNq7oS7buYaCMUKOGmt6/Ibj52 8JLRR2p+WPpIgb0LIRb0bjktt/hh08yb2WBFa3sd2mcHEzKWlI3jqoN6J4fJca7l 9AscvztPVWpJJV+l0Y4sbyfgkQTlgl6YSVe5gnrLhqPEMxWOOQCp6oJhJDvW/x1/ xZWQnSowMgkIdHkZrR9qfQYoNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLVauwd2 NIF3phvQBYkzNH38/1B9MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2MjMvQTI1RDQ4OUU1MDQ3MTFFRUI2NzczNjVEQzRGOUFFMDIvQkJCRURFRjQ2 QzgyMTFFRTg2NkY1QTc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK+9jMA0GCSqGSIb3DQEBCwUAA4IBAQAEvhXVv1lUrglPo5WaZQSN tEqmIJyA7+6fuzEJUDJi3+XCX++SdWfsjVABdFNYkvaBTjdDWYjFe/CaAklevcAC uPyU4cK8v0XYBLL9wHjOFEn1pVvjxvnbNmxmL7vLjrPbbdCwsCZnnCz18PfWD2G4 jAdiME+5hFSx6SqPPUT8epL71ZEhPKTDXwfIDiKdULVMX7HQ7qBg2k0NxNjBdz8m ZAtDW4T9JnIcF+WagFlF2hV8CGeu83omKvnvgqpeC+89DeyAs7I6LkIwZGBFQy4s REThuj41+/83uFgNUuOdJiShhG8p6a1YcFuHzCaPUV0djZ/S7HBQlop28e2Qa1ma -----END CERTIFICATE-----Generated at Sat Apr 18 02:47:21 2026 by rpki-client