$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/BB3AB704BBA411F1A8727FFB5511F970.roa File: BB3AB704BBA411F1A8727FFB5511F970.roa (raw, json) Hash identifier: 0HrLyf58XCQJHvGtUILx98rEBkTpFIMFV3WCfp76htk= Subject key identifier: 9B:0C:5A:B3:09:08:C7:E6:85:D3:73:D1:5A:CF:17:2F:0C:CE:5C:5D Certificate issuer: /CN=A91CCCF4/serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED Certificate serial: A8 Authority key identifier: AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/BB3AB704BBA411F1A8727FFB5511F970.roa Signing time: Tue 29 Sep 2026 01:26:02 +0000 ROA not before: Tue 29 Sep 2026 01:26:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139656 IP address blocks: 125.236.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCCF4, serialNumber=AD5A3F996BCDA19B8FD692B1AFC8A70AE3333CED Validity Not Before: Sep 29 01:26:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6abb13aa-e258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:36:79:37:1d:0f:df:15:e3:57:40:84:25: 9e:8f:cb:f4:ba:67:77:bd:35:90:dd:e4:39:41:7d: 2d:71:1d:6c:d5:a7:26:29:95:25:dc:3d:c0:a0:9f: 79:17:fb:e0:5e:c1:b7:09:09:b0:7b:b3:3b:22:f4: f0:dd:d1:86:11:12:28:c6:d8:0f:05:10:3c:fd:6e: 30:81:8e:fa:0d:52:ad:9b:f0:ae:37:36:21:b0:34: a4:ff:0e:54:40:43:96:af:79:b2:9f:0f:23:8b:61: 17:7d:0f:4c:e7:a5:3e:85:9f:bf:84:ba:8b:f8:09: 03:b4:5d:4a:79:56:ca:67:6c:00:a1:29:4c:3c:81: bd:2f:17:a8:b5:b9:2b:17:9a:d5:af:d7:14:ec:58: 2e:34:01:2c:7c:28:6f:db:f2:5b:cc:e8:5e:fe:34: 95:68:1f:42:bc:34:d1:4e:c1:5d:b1:4c:54:54:4d: 90:bc:c5:64:85:5a:44:c2:20:c0:9b:3a:95:a8:b8: 2f:f9:ee:51:4a:bd:43:2d:b2:7b:f9:e6:04:05:e3: 76:26:c2:5e:92:93:b7:61:40:1a:2c:9c:84:95:c4: b9:f3:1c:3e:80:e7:07:0b:39:d3:b7:14:e7:24:68: c4:a7:78:a8:6b:6e:b1:cc:4e:0d:64:dc:fe:a4:f9: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0C:5A:B3:09:08:C7:E6:85:D3:73:D1:5A:CF:17:2F:0C:CE:5C:5D X509v3 Authority Key Identifier: keyid:AD:5A:3F:99:6B:CD:A1:9B:8F:D6:92:B1:AF:C8:A7:0A:E3:33:3C:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/rVo_mWvNoZuP1pKxr8inCuMzPO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVo_mWvNoZuP1pKxr8inCuMzPO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCCF4/AAD57936F0F111F0BD6DF555436F56BC/BB3AB704BBA411F1A8727FFB5511F970.roa sbgp-ipAddrBlock: critical IPv4: 125.236.52.0/24 Signature Algorithm: sha256WithRSAEncryption 25:27:70:ff:56:5f:d2:ec:78:6f:02:6b:d5:89:9a:da:02:82: 79:9e:af:06:e5:de:d2:a0:d6:4f:dd:c8:3d:43:d1:05:09:7a: 6f:5b:af:e1:55:2f:ea:eb:c7:e2:0a:36:f5:4d:aa:fc:5e:c1: 52:1f:f5:e0:16:e1:ec:a9:52:07:26:75:9d:ac:0c:2e:87:2a: 9c:c9:a1:48:fa:e1:a5:a0:a5:6d:9f:67:43:32:ae:8d:a7:99: b5:c4:3f:07:ad:b2:7e:11:9a:c9:45:19:7a:e5:1e:f1:8a:18: 8b:73:4f:7d:7d:25:3c:19:c1:24:1b:2a:b2:60:75:9d:8c:e0: 28:a6:65:65:36:c2:81:3f:0e:eb:3e:00:17:4b:97:bf:aa:49: f2:5a:d5:76:5a:b4:77:aa:b0:7c:69:93:f6:2d:08:26:03:a6: 54:c4:7a:49:52:3e:0d:f0:81:6a:a7:71:6c:c5:db:6b:25:aa: da:29:3a:35:d7:69:39:23:03:d0:af:f2:66:b0:04:26:1a:ef: de:e9:b0:de:b3:bf:61:b9:cf:95:9a:e1:c4:80:a2:0f:39:83: 80:8f:4d:10:7b:36:e1:22:18:27:f8:a6:74:b9:1a:be:6f:f1: cf:42:16:74:e3:20:85:b4:5d:40:f8:1c:d7:7b:fd:b8:b2:68: d4:3e:7e:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NDRjQxMTAvBgNVBAUTKEFENUEzRjk5NkJDREExOUI4RkQ2OTJCMUFGQzhBNzBB RTMzMzNDRUQwHhcNMjYwOTI5MDEyNjAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJiMTNhYS1lMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGs2eTcdD98V41dAhCWej8v0umd3vTWQ3eQ5QX0tcR1s1acmKZUl3D3AoJ95 F/vgXsG3CQmwe7M7IvTw3dGGERIoxtgPBRA8/W4wgY76DVKtm/CuNzYhsDSk/w5U QEOWr3mynw8ji2EXfQ9M56U+hZ+/hLqL+AkDtF1KeVbKZ2wAoSlMPIG9Lxeotbkr F5rVr9cU7FguNAEsfChv2/JbzOhe/jSVaB9CvDTRTsFdsUxUVE2QvMVkhVpEwiDA mzqVqLgv+e5RSr1DLbJ7+eYEBeN2JsJekpO3YUAaLJyElcS58xw+gOcHCznTtxTn JGjEp3ioa26xzE4NZNz+pPlBnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJsMWrMJ CMfmhdNz0VrPFy8MzlxdMB8GA1UdIwQYMBaAFK1aP5lrzaGbj9aSsa/IpwrjMzzt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0NGNC9BQUQ1NzkzNkYw RjExMUYwQkQ2REY1NTU0MzZGNTZCQy9yVm9fbVd2Tm9adVAxcEt4cjhpbkN1TXpQ TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWb19tV3ZOb1p1UDFwS3hyOGluQ3VNelBPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NDRjQvQUFENTc5MzZGMEYxMTFGMEJENkRGNTU1NDM2RjU2QkMvQkIzQUI3MDRC QkE0MTFGMUE4NzI3RkZCNTUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAfew0MA0GCSqGSIb3DQEBCwUAA4IBAQAlJ3D/Vl/S7HhvAmvViZra AoJ5nq8G5d7SoNZP3cg9Q9EFCXpvW6/hVS/q68fiCjb1Tar8XsFSH/XgFuHsqVIH JnWdrAwuhyqcyaFI+uGloKVtn2dDMq6Np5m1xD8HrbJ+EZrJRRl65R7xihiLc099 fSU8GcEkGyqyYHWdjOAopmVlNsKBPw7rPgAXS5e/qknyWtV2WrR3qrB8aZP2LQgm A6ZUxHpJUj4N8IFqp3FsxdtrJaraKTo112k5IwPQr/JmsAQmGu/e6bDes79huc+V muHEgKIPOYOAj00QezbhIhgn+KZ0uRq+b/HPQhZ04yCFtF1A+BzXe/24smjUPn5O -----END CERTIFICATE-----Generated at Wed Oct 14 06:49:42 2026 by rpki-client