$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa File: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (raw, json) Hash identifier: nR67KyM6zhg0ctw9Zmeo8USAQc68JHdkUOtG0YAeUC0= Subject key identifier: CA:ED:38:66:28:9D:1E:DE:61:81:B3:79:93:3E:F2:45:D5:F3:06:CF Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 0689 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:48:51 +0000 ROA not before: Fri 12 Sep 2025 23:04:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 11158 IP address blocks: 117.103.120.0/24 maxlen: 24 117.103.121.0/24 maxlen: 24 117.103.122.0/24 maxlen: 24 117.103.123.0/24 maxlen: 24 117.103.126.0/24 maxlen: 24 117.103.127.0/24 maxlen: 24 119.31.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Sep 12 23:04:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46df3-0f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:d4:ee:ce:c4:cf:ad:a7:53:04:69:de:4e: b9:03:74:df:4e:44:02:e1:c0:38:1c:e8:ed:05:fb: b2:f9:2c:aa:b5:7f:c7:4b:25:1f:27:ea:8e:99:da: 7e:ae:b3:65:1d:23:e0:d2:7b:59:7e:e7:77:39:81: 30:05:f4:8b:15:49:19:82:8e:32:62:3c:35:ce:61: e3:00:ba:1a:01:e7:0c:f0:7f:34:d3:8a:08:fc:05: bd:33:a2:90:1d:a0:4b:c6:3d:98:ee:a8:f2:41:ca: 7f:38:6e:1b:21:07:37:17:77:4f:dd:8f:52:96:de: 81:f6:41:1b:ae:87:18:d4:14:25:79:5e:c4:44:e7: 31:b5:7a:1c:10:e5:46:f6:48:19:7b:31:8c:5d:b1: b5:ee:f9:6e:e0:c9:9d:95:18:24:87:c2:95:25:0b: 63:0c:f0:1e:d5:bd:92:39:6b:55:19:5c:26:5b:c3: fd:34:d5:35:ec:61:ef:0c:1b:54:86:a6:e0:7d:b3: d4:31:2c:ac:17:42:cc:81:c2:6d:5b:4b:ca:87:22: 49:04:70:d7:88:c4:a3:a4:08:c2:9e:2f:dd:a9:20: 27:2d:f1:52:4f:5d:0b:c3:02:f5:1b:82:68:e8:b1: 26:40:71:72:cf:a5:6e:83:17:d5:8b:65:c0:30:b2: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:ED:38:66:28:9D:1E:DE:61:81:B3:79:93:3E:F2:45:D5:F3:06:CF X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.103.120.0/22 117.103.126.0/23 119.31.160.0/24 Signature Algorithm: sha256WithRSAEncryption 24:0e:32:ee:9b:b7:dc:ba:ee:48:6d:84:dd:7d:3d:89:ab:59: 96:82:ba:8a:ff:8b:da:f3:dd:30:a1:e1:96:79:3b:a6:8f:11: 8a:cb:a3:ca:c4:6c:0d:3f:63:d9:52:b4:8a:9b:74:27:39:b0: b0:0d:e4:89:c7:7a:e2:b6:f5:b4:78:e7:31:a2:b5:9c:88:66: d8:f6:54:d8:78:76:d6:42:f9:1b:b3:a8:d4:e1:b6:27:cf:ba: d5:63:50:3a:cd:37:3d:e2:ec:eb:31:cf:09:97:85:67:e8:0a: 4e:bf:57:1b:0d:c5:54:7f:cc:53:54:4d:3c:e3:7e:7d:31:2c: 8f:36:6c:fa:58:e1:96:d3:ea:18:95:f9:43:ed:ea:2d:df:20: 6f:83:ff:28:ed:68:65:f0:a9:a7:91:6e:f6:1b:be:25:69:8b: 19:47:4a:dc:78:34:3b:3d:2c:ba:3a:e8:6b:57:97:21:4b:6d: e4:2a:46:76:a0:77:46:3b:97:6d:f0:a1:a9:e9:a9:55:10:fe: 67:df:08:32:b9:34:94:6f:d4:ce:c8:4b:a0:56:76:0b:67:ef: de:c0:1e:d4:84:0a:ad:ce:56:6f:c1:12:05:0c:64:e2:15:6d: 2a:b8:54:7b:35:d5:be:7f:61:3d:0a:97:93:6f:7b:6b:17:e8: 3a:ee:62:70 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUwOTEyMjMwNDEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRmMy0wZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43DU7s7Ez62nUwRp3k65A3TfTkQC4cA4HOjtBfuy+SyqtX/HSyUfJ+qOmdp+ rrNlHSPg0ntZfud3OYEwBfSLFUkZgo4yYjw1zmHjALoaAecM8H8004oI/AW9M6KQ HaBLxj2Y7qjyQcp/OG4bIQc3F3dP3Y9Slt6B9kEbrocY1BQleV7EROcxtXocEOVG 9kgZezGMXbG17vlu4MmdlRgkh8KVJQtjDPAe1b2SOWtVGVwmW8P9NNU17GHvDBtU hqbgfbPUMSysF0LMgcJtW0vKhyJJBHDXiMSjpAjCni/dqSAnLfFST10LwwL1G4Jo 6LEmQHFyz6VugxfVi2XAMLLdWQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMrtOGYo nR7eYYGzeZM+8kXV8wbPMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvREQ0NkJCOTJF REFCMTFFREJFOTFCQjgyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCdWd4AwQBdWd+AwQAdx+gMA0GCSqGSIb3DQEBCwUAA4IBAQAkDjLu m7fcuu5IbYTdfT2Jq1mWgrqK/4va890woeGWeTumjxGKy6PKxGwNP2PZUrSKm3Qn ObCwDeSJx3ritvW0eOcxorWciGbY9lTYeHbWQvkbs6jU4bYnz7rVY1A6zTc94uzr Mc8Jl4Vn6ApOv1cbDcVUf8xTVE084359MSyPNmz6WOGW0+oYlflD7eot3yBvg/8o 7Whl8KmnkW72G74laYsZR0rceDQ7PSy6OuhrV5chS23kKkZ2oHdGO5dt8KGp6alV EP5n3wgyuTSUb9TOyEugVnYLZ+/ewB7UhAqtzlZvwRIFDGTiFW0quFR7NdW+f2E9 CpeTb3trF+g67mJw -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:14 2026 by rpki-client