$ rpki-client -vvf rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/8C8A116864C711F1BDA217606747A888.roa File: 8C8A116864C711F1BDA217606747A888.roa (raw, json) Hash identifier: v31BV8YDFzkibtthWswD4fXEomccJphmRyKnJM8sGck= Subject key identifier: 2F:3F:AC:89:9C:2D:4C:B1:06:D3:D1:68:B6:A0:C4:1B:E2:2D:B4:41 Certificate issuer: /CN=A91F090C/serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Certificate serial: 1C Authority key identifier: 8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/8C8A116864C711F1BDA217606747A888.roa Signing time: Wed 10 Jun 2026 12:31:47 +0000 ROA not before: Wed 10 Jun 2026 12:31:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45176 IP address blocks: 119.15.156.0/22 maxlen: 22 119.15.156.0/24 maxlen: 24 119.15.157.0/24 maxlen: 24 119.15.158.0/24 maxlen: 24 119.15.159.0/24 maxlen: 24 2405:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 19:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F090C, serialNumber=8AEE29DB2FE91407FE40E4BE78C40626D7E18FB1 Validity Not Before: Jun 10 12:31:47 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a295933-4077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:68:f5:ba:ae:4a:b5:99:16:8c:6e:e2:b8:c0: d8:16:01:12:c5:bb:39:f0:52:f2:ff:41:4d:df:63: ab:29:54:80:20:45:1e:fe:6b:41:b9:77:98:ba:5e: 1c:68:92:5f:32:9a:3d:5a:30:77:fe:2c:70:0a:99: 79:4d:d1:7f:4f:24:eb:a8:22:37:79:51:ec:b6:85: 55:1c:f6:e4:cb:4a:ff:38:55:e9:f9:c2:f1:b8:75: 10:72:bb:e9:47:b0:8e:05:18:83:50:a3:c3:70:f4: 6c:de:4f:8e:a7:41:21:72:3c:22:30:40:f5:8a:82: c7:66:95:fb:f7:55:37:6f:6e:5e:6d:30:4a:9a:7f: b9:d2:63:73:e7:26:e8:73:5c:8e:8a:e2:d2:3e:e7: e5:d3:dc:0e:a6:02:69:7e:27:91:32:be:41:48:a2: f2:1e:c0:da:89:d9:13:a2:17:24:19:67:bd:cb:89: 62:75:31:1a:a3:27:f4:94:e0:07:e7:3e:93:f6:19: c8:5a:ce:39:61:19:e0:a5:f3:1f:90:5d:ce:3a:82: b7:fa:20:fc:00:24:26:4b:f0:5d:7e:74:95:3a:c1: 14:69:7a:81:8e:8e:ae:0d:0d:59:05:ed:60:38:9e: 20:9e:e3:6e:ef:d9:30:cf:3f:f7:6d:2c:f4:c9:7f: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:AC:89:9C:2D:4C:B1:06:D3:D1:68:B6:A0:C4:1B:E2:2D:B4:41 X509v3 Authority Key Identifier: keyid:8A:EE:29:DB:2F:E9:14:07:FE:40:E4:BE:78:C4:06:26:D7:E1:8F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/iu4p2y_pFAf-QOS-eMQGJtfhj7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iu4p2y_pFAf-QOS-eMQGJtfhj7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F090C/B7C4E9365D2911EAB054FF3BC4F9AE02/8C8A116864C711F1BDA217606747A888.roa sbgp-ipAddrBlock: critical IPv4: 119.15.156.0/22 IPv6: 2405:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:56:4b:8b:d8:1c:33:8f:b9:7a:59:73:49:41:37:72:66:ac: a6:92:41:75:d3:39:c8:c4:9d:ae:2a:4e:6c:82:a3:31:1a:01: 08:64:2b:af:22:fc:23:8b:21:92:7d:94:0f:91:7b:11:ec:cf: 50:db:47:45:dc:0f:73:16:41:e6:1f:18:bb:8e:8c:3d:4d:d5: 1d:4f:44:08:87:4a:c9:a7:e3:c0:0a:f2:77:5e:29:18:dd:82: c5:a3:30:50:c8:59:6b:9f:7a:dd:98:43:96:74:86:f4:79:f6: 17:ab:73:c6:3a:48:05:c0:e3:5d:d0:dd:83:17:63:f1:38:44: 6e:c1:66:24:c7:31:ac:ca:69:6d:29:cb:1e:1f:38:83:ae:29: 0a:90:65:ed:c4:5b:12:ed:47:d8:5b:c2:75:15:05:b7:6f:e5: 14:16:ca:c4:43:5d:2a:e8:17:74:87:24:92:16:a2:b6:05:5c: 1c:6e:42:a5:af:76:a6:7c:86:c4:25:9d:8a:de:fb:bf:dd:91: 36:20:f6:c2:86:18:b8:c8:82:b8:95:2d:8b:d5:a7:66:3f:79: 32:8c:7d:a4:dd:e3:18:1b:e4:5a:60:04:69:c2:2e:bc:c5:91: 73:35:02:39:ca:1a:ba:f2:17:6b:14:60:d1:db:6d:51:a8:d9: 05:0e:bc:da -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDkwQzExMC8GA1UEBRMoOEFFRTI5REIyRkU5MTQwN0ZFNDBFNEJFNzhDNDA2MjZE N0UxOEZCMTAeFw0yNjA2MTAxMjMxNDdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMjk1OTMzLTQwNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjaPW6rkq1mRaMbuK4wNgWARLFuznwUvL/QU3fY6spVIAgRR7+a0G5d5i6Xhxo kl8ymj1aMHf+LHAKmXlN0X9PJOuoIjd5Uey2hVUc9uTLSv84Ven5wvG4dRByu+lH sI4FGINQo8Nw9GzeT46nQSFyPCIwQPWKgsdmlfv3VTdvbl5tMEqaf7nSY3PnJuhz XI6K4tI+5+XT3A6mAml+J5EyvkFIovIewNqJ2ROiFyQZZ73LiWJ1MRqjJ/SU4Afn PpP2GchazjlhGeCl8x+QXc46grf6IPwAJCZL8F1+dJU6wRRpeoGOjq4NDVkF7WA4 niCe427v2TDPP/dtLPTJfwDrAgMBAAGjggJvMIICazAdBgNVHQ4EFgQULz+siZwt TLEG09FotqDEG+IttEEwHwYDVR0jBBgwFoAUiu4p2y/pFAf+QOS+eMQGJtfhj7Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOTBDL0I3QzRFOTM2NUQy OTExRUFCMDU0RkYzQkM0RjlBRTAyL2l1NHAyeV9wRkFmLVFPUy1lTVFHSnRmaGo3 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaXU0cDJ5X3BGQWYtUU9TLWVNUUdKdGZoajdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDkwQy9CN0M0RTkzNjVEMjkxMUVBQjA1NEZGM0JDNEY5QUUwMi84QzhBMTE2ODY0 QzcxMUYxQkRBMjE3NjA2NzQ3QTg4OC5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAJ3D5wwDQQCAAIwBwMFACQF28AwDQYJKoZIhvcNAQELBQADggEBADxW S4vYHDOPuXpZc0lBN3JmrKaSQXXTOcjEna4qTmyCozEaAQhkK68i/COLIZJ9lA+R exHsz1DbR0XcD3MWQeYfGLuOjD1N1R1PRAiHSsmn48AK8ndeKRjdgsWjMFDIWWuf et2YQ5Z0hvR59herc8Y6SAXA413Q3YMXY/E4RG7BZiTHMazKaW0pyx4fOIOuKQqQ Ze3EWxLtR9hbwnUVBbdv5RQWysRDXSroF3SHJJIWorYFXBxuQqWvdqZ8hsQlnYre +7/dkTYg9sKGGLjIgriVLYvVp2Y/eTKMfaTd4xgb5FpgBGnCLrzFkXM1AjnKGrry F2sUYNHbbVGo2QUOvNo= -----END CERTIFICATE-----Generated at Sat Jun 13 09:15:02 2026 by rpki-client