$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/870862B2222011EFACCDE81BC4F9AE02.roa File: 870862B2222011EFACCDE81BC4F9AE02.roa (raw, json) Hash identifier: ciVFB0KvpDvAViK7hnqW2d1Z4F4bwONdYRVuRaAOg9A= Subject key identifier: B6:A3:7B:CC:47:E6:46:52:5A:73:59:33:F8:C6:D1:0D:89:56:34:2A Certificate issuer: /CN=A91B7292/serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Certificate serial: 0191 Authority key identifier: C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/870862B2222011EFACCDE81BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:10:09 +0000 ROA not before: Fri 09 Jan 2026 04:22:49 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 208770 IP address blocks: 123.108.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7292, serialNumber=C2FC6448564EC6526B91B2FE23B4FD58342D20F4 Validity Not Before: Jan 9 04:22:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a456d1-01c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:4e:be:c1:0a:b7:4d:73:88:94:f6:c4:cc: 54:e9:f7:16:80:f5:d6:71:b3:0b:59:cb:f9:28:08: 99:34:e7:2c:35:fb:ca:02:38:fe:36:e7:41:36:a1: 0c:24:cd:51:ab:2b:0c:00:eb:2c:b5:d8:1f:d5:83: f3:2a:67:8f:ad:a6:8e:f0:3b:7a:0a:c2:4e:da:e6: c0:65:81:c0:d1:1b:6c:36:72:58:13:f9:4f:ba:9c: 7c:e6:70:07:64:b2:ea:5d:62:1e:51:f4:0b:8c:5e: 4a:62:31:b2:67:ab:dc:8e:6d:5d:bb:bb:3c:d6:a6: 7e:23:87:77:13:bd:65:55:fc:74:55:df:7d:b3:be: b7:f5:eb:df:89:26:70:65:e5:1f:98:6e:00:eb:58: c2:40:c8:30:67:e1:9d:84:85:90:3d:6f:ae:53:ac: f2:5c:e0:04:5d:76:9c:19:81:0a:49:97:01:e1:86: b9:dd:1e:90:73:e2:80:9e:ad:5f:bd:4e:09:d5:13: 93:62:f1:b7:df:42:aa:02:57:a6:31:d1:c7:9e:7d: 65:0b:0d:4a:39:99:75:8a:11:ee:41:37:9e:f9:17: 9d:d7:a0:be:0e:45:46:ec:f7:3d:c9:8f:8e:3d:d2: b1:a1:ee:df:ac:bf:7e:54:61:d2:90:7b:2b:02:fa: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:7B:CC:47:E6:46:52:5A:73:59:33:F8:C6:D1:0D:89:56:34:2A X509v3 Authority Key Identifier: keyid:C2:FC:64:48:56:4E:C6:52:6B:91:B2:FE:23:B4:FD:58:34:2D:20:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvxkSFZOxlJrkbL-I7T9WDQtIPQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7292/03B88ADAD14A11EE99DE2B52C4F9AE02/870862B2222011EFACCDE81BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.108.112.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:9a:4f:1a:2c:d4:01:82:af:75:d3:82:09:bb:06:31:1d:3e: fb:5a:73:93:5d:ea:f5:b6:d1:d2:cc:d2:e1:d7:c9:17:7f:dc: af:1a:31:84:6d:59:fc:e7:c2:d6:2e:a9:67:66:8d:cf:09:3c: 6b:c4:fa:24:42:18:d0:86:c9:a7:17:de:35:b0:5a:de:83:13: fb:da:c6:9a:93:a9:14:39:9f:7c:53:52:03:3f:de:ee:99:1f: a5:72:83:e5:bc:98:a6:6f:d3:40:e2:d3:8d:78:dd:55:30:3e: b4:5c:8e:d0:7e:e7:c6:2f:9c:a3:b7:28:c5:2c:59:c7:9b:a0: 7b:0c:9e:e5:7c:52:30:d6:e2:92:89:ec:1c:39:36:ce:da:23: 6a:9f:f8:5d:3c:73:06:96:f0:3f:a7:13:d3:f3:69:54:ce:81: 5f:4b:9c:41:11:0a:ab:ee:2e:b3:44:5e:93:08:fb:1b:d9:6c: 22:4a:23:42:95:33:8e:df:5a:10:a4:6c:c3:a5:92:e0:f3:b3: 79:dd:2d:25:e8:4f:1c:ae:05:de:9a:e7:43:ae:af:c1:5c:88: f5:f4:48:f8:90:c8:6d:a6:41:72:5c:0e:cc:2d:c7:d7:b5:97: 70:6b:b5:3c:52:1f:e9:e3:38:e0:98:ed:f3:3a:82:6d:0f:26: b6:3f:3c:43 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyOTIxMTAvBgNVBAUTKEMyRkM2NDQ4NTY0RUM2NTI2QjkxQjJGRTIzQjRGRDU4 MzQyRDIwRjQwHhcNMjYwMTA5MDQyMjQ5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZkMS0wMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2lOvsEKt01ziJT2xMxU6fcWgPXWcbMLWcv5KAiZNOcsNfvKAjj+NudBNqEM JM1RqysMAOsstdgf1YPzKmePraaO8Dt6CsJO2ubAZYHA0RtsNnJYE/lPupx85nAH ZLLqXWIeUfQLjF5KYjGyZ6vcjm1du7s81qZ+I4d3E71lVfx0Vd99s7639evfiSZw ZeUfmG4A61jCQMgwZ+GdhIWQPW+uU6zyXOAEXXacGYEKSZcB4Ya53R6Qc+KAnq1f vU4J1ROTYvG330KqAlemMdHHnn1lCw1KOZl1ihHuQTee+Red16C+DkVG7Pc9yY+O PdKxoe7frL9+VGHSkHsrAvrHhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLaje8xH 5kZSWnNZM/jG0Q2JVjQqMB8GA1UdIwQYMBaAFML8ZEhWTsZSa5Gy/iO0/Vg0LSD0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzI5Mi8wM0I4OEFEQUQx NEExMUVFOTlERTJCNTJDNEY5QUUwMi93dnhrU0ZaT3hsSnJrYkwtSTdUOVdEUXRJ UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2eGtTRlpPeGxKcmtiTC1JN1Q5V0RRdElQUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcyOTIvMDNCODhBREFEMTRBMTFFRTk5REUyQjUyQzRGOUFFMDIvODcwODYyQjIy MjIwMTFFRkFDQ0RFODFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCe2xwMA0GCSqGSIb3DQEBCwUAA4IBAQAumk8aLNQBgq9104IJuwYx HT77WnOTXer1ttHSzNLh18kXf9yvGjGEbVn858LWLqlnZo3PCTxrxPokQhjQhsmn F941sFregxP72saak6kUOZ98U1IDP97umR+lcoPlvJimb9NA4tONeN1VMD60XI7Q fufGL5yjtyjFLFnHm6B7DJ7lfFIw1uKSiewcOTbO2iNqn/hdPHMGlvA/pxPT82lU zoFfS5xBEQqr7i6zRF6TCPsb2WwiSiNClTOO31oQpGzDpZLg87N53S0l6E8crgXe mudDrq/BXIj19Ej4kMhtpkFyXA7MLcfXtZdwa7U8Uh/p4zjgmO3zOoJtDya2PzxD -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:11 2026 by rpki-client