$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa File: BB117C7263E311EC8B936683C4F9AE02.roa (raw, json) Hash identifier: BDY+tTl3TuwXrylCYo3XOFeIqIvU/rdroQJ1GS/dnGM= Subject key identifier: AC:C8:E0:FA:BB:74:23:1E:67:98:CE:FA:50:62:1D:1A:8C:AE:4D:B4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EF3 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:34:50 +0000 ROA not before: Fri 02 Oct 2026 15:34:50 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 24066 IP address blocks: 117.122.124.0/22 maxlen: 24 203.119.36.0/22 maxlen: 24 2001:dc8:c000::/48 maxlen: 48 2001:dc8:c001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28403 (0x6ef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:34:50 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf1a-cac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:ed:7d:51:62:9b:c5:8f:84:1e:4e:48:b2: 86:bc:9e:20:c9:63:38:f0:de:62:8d:f4:eb:89:34: f6:e9:72:b7:9b:86:fe:e8:63:3c:62:b9:5a:34:8d: 39:1a:bb:8f:af:8f:9c:f4:76:51:6a:eb:a5:b5:62: 44:67:d6:26:5d:3c:52:6d:bc:3d:6e:3e:83:1a:e5: a5:2f:6c:d3:f3:23:c3:5e:b0:32:14:69:eb:8d:f8: 08:81:74:93:65:bb:43:db:a0:76:ef:5a:93:75:b3: 35:19:74:50:0c:27:91:d6:e3:86:cd:a8:0a:79:be: 34:12:90:f5:9a:4e:b6:f0:af:7a:37:e2:7d:13:41: 48:27:88:7c:35:2e:ec:78:3a:a4:6f:da:0f:a4:3e: fe:84:e9:a4:45:f2:3a:b8:c0:f1:27:1d:ec:1d:a0: a4:fa:d5:c9:ae:d3:4d:b3:d2:46:a5:c2:96:2f:49: e4:30:93:7c:b0:dd:22:29:95:24:15:94:2b:4c:b4: 82:c2:46:00:37:f5:e5:67:df:fd:51:c5:2e:2a:ac: 4d:d2:b4:9d:02:3f:55:cf:c9:c1:d0:49:ac:51:25: e6:00:f3:c5:94:5e:d0:d6:29:16:12:5e:af:f9:fe: 1e:0d:68:46:06:bd:7b:d4:61:f5:9c:fe:8e:af:e2: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C8:E0:FA:BB:74:23:1E:67:98:CE:FA:50:62:1D:1A:8C:AE:4D:B4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BB117C7263E311EC8B936683C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.122.124.0/22 203.119.36.0/22 IPv6: 2001:dc8:c000::/47 Signature Algorithm: sha256WithRSAEncryption 76:3b:97:6f:85:ab:68:9a:41:9d:a3:ab:61:19:83:05:22:bd: c9:c5:17:34:64:3e:cf:d7:c8:46:a1:c3:b4:76:d6:fb:fd:5c: a2:19:34:bb:94:4b:e0:02:ef:b1:12:18:b6:ec:9b:a0:c8:70: 5a:a9:31:b9:7b:c4:f1:a1:30:a0:6a:71:52:3c:21:69:2f:d3: 15:d1:5e:47:79:f5:43:b6:b6:84:d6:49:b7:c2:21:ff:5a:86: 01:0d:78:b0:9d:b3:41:c9:04:e0:3c:5b:e2:9b:ed:19:5f:82: eb:37:56:06:8d:2a:19:34:7f:49:3a:55:67:73:47:62:cd:69: 6b:74:95:9b:9e:99:f1:72:f8:e9:67:c2:22:33:03:9c:9c:9d: c6:d5:b9:57:76:db:f4:aa:5b:65:81:01:8c:47:22:5b:05:6b: 51:7d:c2:6d:ed:51:17:83:70:1f:75:d3:22:81:72:1f:9d:73: 8b:f0:d5:22:33:09:98:38:26:08:df:56:be:38:b3:a8:84:0b: 53:1f:18:db:8b:55:f5:02:79:b1:7c:74:48:15:77:6c:d6:97: 81:64:90:28:7d:ed:e3:05:d3:fb:d5:9d:e1:69:d4:67:8e:cb: 10:0f:e6:2e:73:d3:ed:0c:77:d3:4f:e6:09:81:e0:ca:34:09: 6c:66:21:44 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICbvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNDUwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YxYS1jYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FDtfVFim8WPhB5OSLKGvJ4gyWM48N5ijfTriTT26XK3m4b+6GM8YrlaNI05 GruPr4+c9HZRauultWJEZ9YmXTxSbbw9bj6DGuWlL2zT8yPDXrAyFGnrjfgIgXST ZbtD26B271qTdbM1GXRQDCeR1uOGzagKeb40EpD1mk628K96N+J9E0FIJ4h8NS7s eDqkb9oPpD7+hOmkRfI6uMDxJx3sHaCk+tXJrtNNs9JGpcKWL0nkMJN8sN0iKZUk FZQrTLSCwkYAN/XlZ9/9UcUuKqxN0rSdAj9Vz8nB0EmsUSXmAPPFlF7Q1ikWEl6v +f4eDWhGBr171GH1nP6Or+JVzwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFKzI4Pq7 dCMeZ5jO+lBiHRqMrk20MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkIxMTdDNzI2 M0UzMTFFQzhCOTM2NjgzQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCdXp8AwQCy3ckMA8EAgACMAkDBwEgAQ3IwAAwDQYJKoZIhvcNAQEL BQADggEBAHY7l2+Fq2iaQZ2jq2EZgwUivcnFFzRkPs/XyEahw7R21vv9XKIZNLuU S+AC77ESGLbsm6DIcFqpMbl7xPGhMKBqcVI8IWkv0xXRXkd59UO2toTWSbfCIf9a hgENeLCds0HJBOA8W+Kb7Rlfgus3VgaNKhk0f0k6VWdzR2LNaWt0lZuemfFy+Oln wiIzA5ycncbVuVd22/SqW2WBAYxHIlsFa1F9wm3tUReDcB910yKBch+dc4vw1SIz CZg4JgjfVr44s6iEC1MfGNuLVfUCebF8dEgVd2zWl4FkkCh97eMF0/vVneFp1GeO yxAP5i5z0+0Md9NP5gmB4Mo0CWxmIUQ= -----END CERTIFICATE-----Generated at Mon Oct 5 12:50:47 2026 by rpki-client