$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/87BF5BF6BD3411EB99D25F26C4F9AE02.roa File: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (raw, json) Hash identifier: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo= Subject key identifier: B9:57:7B:22:2A:E5:20:5E:33:49:08:35:C5:C3:69:4B:19:77:3E:8F Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 068C Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/87BF5BF6BD3411EB99D25F26C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:48:54 +0000 ROA not before: Fri 12 Sep 2025 23:04:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38304 IP address blocks: 119.31.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Sep 12 23:04:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46df6-6ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:e4:e8:36:d5:8f:db:e4:2d:cf:f2:40:bb: 7c:da:a8:e9:b0:16:b4:fb:52:86:96:7f:10:44:4e: 14:36:d0:97:37:fe:99:1b:59:0b:86:34:0a:2c:68: 49:d9:c0:e0:38:b0:fb:7f:c4:07:4a:d8:ab:23:f2: e0:c3:c8:20:2a:a7:4a:57:d7:1e:23:8f:1f:2b:61: d3:19:ad:d1:29:e0:3b:23:89:0f:be:39:36:23:19: 28:99:f2:f2:c7:7f:7b:32:4c:62:a6:91:fb:94:5c: 41:0e:a9:f6:4c:43:19:39:99:aa:55:6b:76:2c:aa: c3:dc:c2:1d:cb:78:09:71:ef:6a:a6:18:30:bb:c2: 24:ff:e3:80:43:22:7b:d6:de:04:10:22:f1:12:de: 20:ac:69:db:dc:95:50:50:96:9f:7e:22:49:7a:01: ef:11:8f:a0:b1:7a:c1:86:56:d1:ae:d8:c3:b0:34: 96:27:c0:e8:5b:4a:e4:26:b9:6c:b0:bf:a0:49:e0: 35:2c:07:14:ba:4b:de:cc:9b:0b:0b:c5:1c:5e:e9: c6:67:88:ed:62:3f:a0:ae:f3:d6:32:6b:dd:b7:3b: c1:b9:b6:29:b6:8c:5b:1e:2b:01:0c:63:37:19:da: 76:f2:81:73:65:12:82:3d:ae:e0:53:0b:04:b2:25: 03:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:7B:22:2A:E5:20:5E:33:49:08:35:C5:C3:69:4B:19:77:3E:8F X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/87BF5BF6BD3411EB99D25F26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.31.173.0/24 Signature Algorithm: sha256WithRSAEncryption a0:30:1f:a9:fb:c6:33:5a:63:78:8e:86:d6:bf:ab:62:ea:ed: 30:e3:15:5f:0d:47:f4:ac:b6:c9:ab:32:ad:d9:cb:b6:0a:b9: 42:17:4c:73:49:e6:3f:f9:20:39:cb:5f:4e:a1:77:59:eb:12: d2:b4:ef:9f:5c:1b:3a:38:15:2d:5c:72:82:ca:f8:39:be:ac: 60:15:ae:bb:95:1a:72:24:9d:62:41:75:a6:f3:b0:ba:8f:a2: d9:c6:c6:b7:e0:f6:36:e5:ca:8e:73:22:45:00:46:4a:cd:38: a9:20:7e:39:e8:f3:5e:b3:90:50:a8:15:07:53:d8:49:5e:55: 06:7b:27:ca:f1:93:65:40:57:2a:dd:9b:6b:85:9d:d8:eb:8f: 46:85:8b:34:34:74:10:6a:49:c1:91:02:ef:12:a1:15:82:65: 00:ab:6e:84:0b:d4:b0:5e:68:59:1f:01:0e:20:e4:6a:a8:27: e7:08:07:f5:1f:f8:44:b4:e3:ec:5f:3a:c5:9d:4e:e0:32:80: d9:af:8b:85:a7:3f:c8:14:ba:dd:30:a0:61:34:07:be:4d:64: 27:6a:42:d5:ae:e6:ed:64:30:e0:99:8b:6c:49:7c:9d:96:a1: ee:09:45:8f:cd:72:a1:bf:e7:cc:37:fa:5d:07:02:56:e9:ce: fe:53:57:c5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUwOTEyMjMwNDE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRmNi02ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnvk6DbVj9vkLc/yQLt82qjpsBa0+1KGln8QRE4UNtCXN/6ZG1kLhjQKLGhJ 2cDgOLD7f8QHStirI/Lgw8ggKqdKV9ceI48fK2HTGa3RKeA7I4kPvjk2IxkomfLy x397MkxippH7lFxBDqn2TEMZOZmqVWt2LKrD3MIdy3gJce9qphgwu8Ik/+OAQyJ7 1t4EECLxEt4grGnb3JVQUJaffiJJegHvEY+gsXrBhlbRrtjDsDSWJ8DoW0rkJrls sL+gSeA1LAcUukvezJsLC8UcXunGZ4jtYj+grvPWMmvdtzvBubYptoxbHisBDGM3 Gdp28oFzZRKCPa7gUwsEsiUDOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLlXeyIq 5SBeM0kINcXDaUsZdz6PMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvODdCRjVCRjZC RDM0MTFFQjk5RDI1RjI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdx+tMA0GCSqGSIb3DQEBCwUAA4IBAQCgMB+p+8YzWmN4jobWv6ti 6u0w4xVfDUf0rLbJqzKt2cu2CrlCF0xzSeY/+SA5y19OoXdZ6xLStO+fXBs6OBUt XHKCyvg5vqxgFa67lRpyJJ1iQXWm87C6j6LZxsa34PY25cqOcyJFAEZKzTipIH45 6PNes5BQqBUHU9hJXlUGeyfK8ZNlQFcq3ZtrhZ3Y649GhYs0NHQQaknBkQLvEqEV gmUAq26EC9SwXmhZHwEOIORqqCfnCAf1H/hEtOPsXzrFnU7gMoDZr4uFpz/IFLrd MKBhNAe+TWQnakLVrubtZDDgmYtsSXydlqHuCUWPzXKhv+fMN/pdBwJW6c7+U1fF -----END CERTIFICATE-----Generated at Mon Mar 2 17:14:15 2026 by rpki-client