$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa File: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (raw, json) Hash identifier: INnaV0pNcRBw1wlHuRp8r9xMtrJx1g7hzwjOKtk2crw= Subject key identifier: 77:9F:F7:03:A9:66:84:09:FF:4F:18:92:55:D1:4E:F4:2A:03:1F:C7 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 3566 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa Signing time: Thu 02 Apr 2026 15:13:02 +0000 ROA not before: Thu 02 Apr 2026 15:13:02 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 4646 IP address blocks: 117.18.67.0/24 maxlen: 24 117.18.72.0/24 maxlen: 24 117.18.78.0/24 maxlen: 24 124.248.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13670 (0x3566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Apr 2 15:13:02 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ce877e-69da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:17:eb:58:f6:90:5c:3c:a9:4d:fa:92:b6: 88:8b:ab:6b:8c:8e:cc:0b:df:26:e7:b3:4a:0d:1d: 52:40:37:36:b8:91:02:e9:f4:be:b6:0b:31:d0:0a: 3c:f4:3e:42:fc:76:27:ff:3d:ef:9a:ed:4a:5a:bc: ca:53:8d:b3:2a:2b:3b:5e:0c:e0:c4:cc:1a:c5:20: 43:ed:0d:4e:f0:ca:c2:8d:ea:ea:84:56:51:79:01: 54:63:2c:86:55:14:c8:87:3a:ed:27:10:e6:00:8b: ab:8b:d3:a4:37:78:bd:4c:0b:15:b1:4e:02:de:6d: c9:36:e4:9b:9a:4d:9d:18:e9:f7:ec:d8:eb:86:41: bd:68:f8:6f:0a:12:29:9a:a1:52:7d:ee:50:b4:94: 0e:0b:56:d1:92:4a:37:f7:b5:6c:94:ae:f0:d2:fa: 65:9d:6d:10:09:78:51:15:0a:c6:f1:95:46:0f:b5: 2a:d3:82:11:9f:07:51:34:4d:f9:8e:f5:6e:ce:e3: 00:e0:e2:d2:2d:cb:9d:3f:83:db:8b:bc:38:dd:7c: 0a:0e:d2:45:1b:97:76:06:40:dc:8a:0a:d3:ed:e5: da:eb:4b:4a:19:fe:11:c7:4e:36:51:14:0b:7a:cc: 01:66:7c:89:a1:b0:4f:c8:c6:c5:51:e5:d0:f9:da: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9F:F7:03:A9:66:84:09:FF:4F:18:92:55:D1:4E:F4:2A:03:1F:C7 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.18.67.0/24 117.18.72.0/24 117.18.78.0/24 124.248.207.0/24 Signature Algorithm: sha256WithRSAEncryption 18:9e:bb:37:52:3b:05:07:dd:2f:d5:00:d4:37:9b:49:ab:be: 3c:2c:8d:c8:e4:75:f7:86:4a:be:2d:06:71:bb:99:ef:96:6b: d1:09:a1:3f:93:ba:d6:cf:5c:2e:d8:8a:cd:07:46:e1:4d:a4: 4a:da:90:92:21:65:32:56:6a:e6:4d:83:51:3a:e5:d5:ee:c9: 8b:cf:da:ba:e9:2a:14:4f:7d:63:41:2d:92:d3:8c:fb:4e:51: c3:f2:52:0c:78:ff:fe:b4:cb:bb:71:dc:56:31:57:b7:e3:a5: d7:16:85:b5:bb:20:eb:ee:af:78:f5:db:41:66:62:71:b7:15: 1c:64:3c:69:67:b4:94:ed:84:68:31:e8:9a:c5:c6:36:27:ae: be:88:2e:91:b0:8a:76:a9:b1:6c:25:18:e0:0a:6e:09:48:96: 22:df:73:fa:f8:c0:93:7d:3a:4c:0d:4a:cd:2f:4d:26:b7:6f: 87:d0:04:f3:b3:d2:05:36:3e:93:ae:8c:79:0d:f2:c7:b6:d5: 75:37:36:0b:02:da:fd:a4:82:ee:57:98:be:d0:4b:75:dc:e1: 6e:75:73:14:4e:68:92:5b:e9:73:ed:b0:a5:1b:d5:bb:a0:11: 2a:32:ea:ff:bc:d2:04:b6:50:8d:99:8a:70:1d:61:f5:29:cd: a3:b8:fe:2a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICNWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwNDAyMTUxMzAyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlODc3ZS02OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LEX61j2kFw8qU36kraIi6trjI7MC98m57NKDR1SQDc2uJEC6fS+tgsx0Ao8 9D5C/HYn/z3vmu1KWrzKU42zKis7XgzgxMwaxSBD7Q1O8MrCjerqhFZReQFUYyyG VRTIhzrtJxDmAIuri9OkN3i9TAsVsU4C3m3JNuSbmk2dGOn37NjrhkG9aPhvChIp mqFSfe5QtJQOC1bRkko397VslK7w0vplnW0QCXhRFQrG8ZVGD7Uq04IRnwdRNE35 jvVuzuMA4OLSLcudP4Pbi7w43XwKDtJFG5d2BkDcigrT7eXa60tKGf4Rx042URQL eswBZnyJobBPyMbFUeXQ+dq9MQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHef9wOp ZoQJ/08YklXRTvQqAx/HMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0ODQvNkZGMERERTAxRDk0MTFFMjlERUNCNUY4MDhCMDJDRDIvRkZDODlERjhD RUNEMTFFRUE0QUE2RDQ0QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAdRJDAwQAdRJIAwQAdRJOAwQAfPjPMA0GCSqGSIb3DQEBCwUAA4IB AQAYnrs3UjsFB90v1QDUN5tJq748LI3I5HX3hkq+LQZxu5nvlmvRCaE/k7rWz1wu 2IrNB0bhTaRK2pCSIWUyVmrmTYNROuXV7smLz9q66SoUT31jQS2S04z7TlHD8lIM eP/+tMu7cdxWMVe346XXFoW1uyDr7q949dtBZmJxtxUcZDxpZ7SU7YRoMeiaxcY2 J66+iC6RsIp2qbFsJRjgCm4JSJYi33P6+MCTfTpMDUrNL00mt2+H0ATzs9IFNj6T rox5DfLHttV1NzYLAtr9pILuV5i+0Et13OFudXMUTmiSW+lz7bClG9W7oBEqMur/ vNIEtlCNmYpwHWH1Kc2juP4q -----END CERTIFICATE-----Generated at Sat Apr 18 04:17:31 2026 by rpki-client