$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa File: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (raw, json) Hash identifier: 5vDKPCNaPzEtEVT7LOtWJpYKKhlnZvgcsaGE/gZdgy8= Subject key identifier: 20:A0:71:0F:2C:B8:75:5D:5D:0D:C7:EB:F3:4B:86:92:70:F3:F5:65 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 3550 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:21:27 +0000 ROA not before: Thu 11 Sep 2025 03:53:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 4646 IP address blocks: 117.18.67.0/24 maxlen: 24 117.18.72.0/24 maxlen: 24 117.18.78.0/24 maxlen: 24 124.248.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Sep 11 03:53:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a46787-63a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:54:a0:5e:6d:e4:cc:7f:f4:59:b9:e1:dc: ab:ea:c9:c0:c3:7b:c9:2e:d8:67:40:66:14:dc:e1: 06:bb:43:d9:96:91:16:88:36:73:23:38:40:9e:3a: 6c:c6:94:a1:f2:4e:e7:87:7b:59:22:08:44:05:6c: 01:7f:e2:e3:4d:70:af:dc:ca:cb:05:d3:9e:1e:45: 8f:e7:71:d7:d9:1a:08:4f:09:a4:c1:ed:50:6a:92: 11:3a:c0:83:e3:1a:d4:73:9c:03:a0:92:f8:86:ea: 5d:7a:b0:30:be:23:69:6b:d8:4d:41:a0:5d:64:c2: b5:98:ea:b9:80:9e:d8:fa:f8:34:d3:97:68:6c:d0: 8a:a6:e4:58:0a:98:7c:d6:1b:0b:b9:0f:0f:2b:fa: c6:c8:32:68:de:29:0b:ae:1b:59:47:15:02:08:92: 8d:4a:0e:bf:5b:11:13:2b:2e:d7:59:13:36:9f:ca: 11:d2:9e:52:0c:1c:fa:58:33:89:0f:0e:75:aa:0b: 34:53:fe:81:66:fd:a1:b6:d9:95:09:2a:8b:8d:a6: 01:f4:f0:11:51:88:eb:bc:c0:82:8d:b3:51:e7:63: 48:43:31:82:fa:6f:cb:1e:f3:ac:cc:3b:0b:c9:c5: 4e:f0:9b:cb:63:23:74:21:15:64:9a:7d:2a:a2:63: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A0:71:0F:2C:B8:75:5D:5D:0D:C7:EB:F3:4B:86:92:70:F3:F5:65 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.18.67.0/24 117.18.72.0/24 117.18.78.0/24 124.248.207.0/24 Signature Algorithm: sha256WithRSAEncryption 71:17:5b:bf:79:ee:b8:75:1a:4f:e3:47:57:5d:a3:90:b4:f0: 4b:03:e5:1d:49:5c:38:6a:f8:6b:08:bf:0b:ed:7e:3b:cf:70: 10:89:a2:0e:81:04:1b:45:35:57:41:53:ea:d9:80:bc:85:49: 29:f0:50:f9:d6:d3:ce:4a:13:63:f2:57:00:8e:23:14:da:6d: 2b:22:23:f2:1a:3d:ac:1e:1c:9b:eb:af:66:09:ce:0c:1f:71: 5b:8d:39:3a:7c:59:24:5e:85:58:e1:15:09:d4:9c:76:ac:af: 81:03:bd:59:bc:51:62:16:28:78:f2:29:f9:22:c5:31:af:9e: 10:ae:3b:c4:ab:4a:6f:da:b5:f3:73:80:4a:5f:67:ce:8c:8b: 56:53:0a:86:5d:11:6f:d9:43:59:9c:92:b9:b4:18:72:8a:f3: ab:c8:20:ea:1f:31:74:74:b1:f8:fa:68:9c:07:73:05:b0:29: 87:b6:a3:c5:62:c8:c3:0c:c5:5c:67:fd:d4:ee:69:49:3a:77: 96:d9:7d:42:ed:5c:00:39:2f:68:90:74:f2:a2:54:55:6f:7a: 5f:5e:bc:46:1e:41:ac:5b:74:e1:46:f8:5e:6c:ef:7b:81:95: 2f:82:1b:b4:a3:97:a4:d2:7c:c4:27:dd:1a:cf:88:b2:44:d3: 96:70:c1:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjUwOTExMDM1MzAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njc4Ny02M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgBUoF5t5Mx/9Fm54dyr6snAw3vJLthnQGYU3OEGu0PZlpEWiDZzIzhAnjps xpSh8k7nh3tZIghEBWwBf+LjTXCv3MrLBdOeHkWP53HX2RoITwmkwe1QapIROsCD 4xrUc5wDoJL4hupderAwviNpa9hNQaBdZMK1mOq5gJ7Y+vg005dobNCKpuRYCph8 1hsLuQ8PK/rGyDJo3ikLrhtZRxUCCJKNSg6/WxETKy7XWRM2n8oR0p5SDBz6WDOJ Dw51qgs0U/6BZv2httmVCSqLjaYB9PARUYjrvMCCjbNR52NIQzGC+m/LHvOszDsL ycVO8JvLYyN0IRVkmn0qomO5JQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFCCgcQ8s uHVdXQ3H6/NLhpJw8/VlMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0ODQvNkZGMERERTAxRDk0MTFFMjlERUNCNUY4MDhCMDJDRDIvRkZDODlERjhD RUNEMTFFRUE0QUE2RDQ0QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAdRJDAwQAdRJIAwQAdRJOAwQAfPjPMA0GCSqGSIb3DQEBCwUAA4IB AQBxF1u/ee64dRpP40dXXaOQtPBLA+UdSVw4avhrCL8L7X47z3AQiaIOgQQbRTVX QVPq2YC8hUkp8FD51tPOShNj8lcAjiMU2m0rIiPyGj2sHhyb669mCc4MH3FbjTk6 fFkkXoVY4RUJ1Jx2rK+BA71ZvFFiFih48in5IsUxr54QrjvEq0pv2rXzc4BKX2fO jItWUwqGXRFv2UNZnJK5tBhyivOryCDqHzF0dLH4+micB3MFsCmHtqPFYsjDDMVc Z/3U7mlJOneW2X1C7VwAOS9okHTyolRVb3pfXrxGHkGsW3ThRvhebO97gZUvghu0 o5ek0nzEJ90az4iyRNOWcMHi -----END CERTIFICATE-----Generated at Mon Mar 2 14:02:30 2026 by rpki-client