$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA8B530463E311EC8B936683C4F9AE02.roa File: BA8B530463E311EC8B936683C4F9AE02.roa (raw, json) Hash identifier: ohR0bgBeOXHuEyzQ2jLKroAQOMxLM2AnadST+HF/au4= Subject key identifier: B9:38:F1:27:4B:62:90:3D:99:75:02:BB:63:D1:9A:A8:48:81:DD:BE Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6D67 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA8B530463E311EC8B936683C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:21:27 +0000 ROA not before: Fri 02 Oct 2026 15:21:27 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131123 IP address blocks: 117.122.3.0/24 maxlen: 24 2001:dc8:2003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28007 (0x6d67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:21:27 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcbf7-b6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:17:59:19:40:3e:1c:b4:dc:af:c2:35:b8: 5d:22:08:ca:d1:fb:9a:bd:5c:1b:93:3f:89:22:75: f5:27:1f:6d:2d:f8:b8:31:64:e5:73:95:ab:34:d9: cc:9f:8a:38:4d:04:00:c8:0c:39:b5:5e:00:6d:85: 50:8d:f1:af:92:e6:0b:d5:ec:29:94:29:38:8f:95: 9b:1e:26:f6:f5:49:6e:46:b9:b7:50:6a:f5:d6:be: d8:6b:26:b7:8c:e9:3f:69:5c:75:93:78:bf:96:15: eb:a3:4c:9e:76:67:3a:46:97:ec:2e:73:6d:3a:03: 42:6b:50:e8:a1:f2:ef:66:cd:45:ba:68:1f:f4:67: ee:c5:e4:40:98:19:6f:bb:27:57:c6:ff:12:d1:6a: 93:ab:fc:00:1a:04:36:f2:76:da:6f:f2:af:58:13: 81:47:41:67:4f:2f:15:97:0e:33:48:f7:aa:fe:13: 93:6f:ca:24:7f:4b:d1:7d:14:64:5a:66:ad:81:17: 1f:b9:b2:7d:41:36:33:49:14:88:92:6d:57:8e:f2: 27:0c:8b:98:f9:ed:00:7f:c6:bd:8b:92:f4:58:54: f1:a8:8c:66:a2:0e:93:ca:88:e0:77:fa:41:0b:d7: 8d:46:ab:23:62:b5:1b:8a:4f:3e:cf:fd:c1:b7:63: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:38:F1:27:4B:62:90:3D:99:75:02:BB:63:D1:9A:A8:48:81:DD:BE X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA8B530463E311EC8B936683C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.122.3.0/24 IPv6: 2001:dc8:2003::/48 Signature Algorithm: sha256WithRSAEncryption 68:76:72:f9:bb:54:f9:e9:02:a6:6f:15:cb:44:5a:f6:33:6e: fd:d5:b3:1b:bc:7c:b0:a8:b2:57:7b:3d:dc:22:47:64:a1:a4: a5:33:4c:4a:d7:86:79:4a:41:2e:2d:5b:e4:d9:32:af:62:55: 1a:0c:05:6f:4f:4b:bc:a0:dc:27:e8:3d:4b:15:2e:79:7f:a2: 36:4c:c9:bd:8f:7a:79:08:cf:42:50:ad:3b:a3:ae:d2:a0:02: 4e:49:ba:1d:b6:9a:ec:93:cf:d4:e2:07:49:4b:24:4d:57:5d: bf:4f:cb:b6:cd:07:96:9c:65:90:b6:6d:49:05:94:11:2c:d0: 6f:09:8e:a4:5c:9d:f6:12:12:ca:e5:4b:c7:34:49:76:df:21: da:eb:dd:03:0b:97:63:69:c2:53:3a:52:6d:b6:2a:27:cf:df: 1d:0f:85:d1:6a:c2:d6:00:97:3e:f1:8e:a5:de:6e:c7:7d:34: 81:8a:88:de:c8:02:ff:35:ad:0d:7a:cb:82:7d:44:f1:9d:a9: 31:3f:89:c4:4a:c4:3a:58:17:c1:a2:72:0b:6f:01:f4:92:48: 74:5c:f5:17:6a:1e:58:48:6c:6e:a3:55:b0:fa:df:41:5b:c1: 72:79:a2:6b:44:a2:95:d4:73:44:65:47:12:85:a4:67:00:e1: 09:1e:7c:8f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICbWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUyMTI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2JmNy1iNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAwXWRlAPhy03K/CNbhdIgjK0fuavVwbkz+JInX1Jx9tLfi4MWTlc5WrNNnM n4o4TQQAyAw5tV4AbYVQjfGvkuYL1ewplCk4j5WbHib29UluRrm3UGr11r7Yaya3 jOk/aVx1k3i/lhXro0yedmc6RpfsLnNtOgNCa1DoofLvZs1Fumgf9GfuxeRAmBlv uydXxv8S0WqTq/wAGgQ28nbab/KvWBOBR0FnTy8Vlw4zSPeq/hOTb8okf0vRfRRk WmatgRcfubJ9QTYzSRSIkm1XjvInDIuY+e0Af8a9i5L0WFTxqIxmog6Tyojgd/pB C9eNRqsjYrUbik8+z/3Bt2PQ8wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLk48SdL YpA9mXUCu2PRmqhIgd2+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkE4QjUzMDQ2 M0UzMTFFQzhCOTM2NjgzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAdXoDMA8EAgACMAkDBwAgAQ3IIAMwDQYJKoZIhvcNAQELBQADggEB AGh2cvm7VPnpAqZvFctEWvYzbv3Vsxu8fLCosld7PdwiR2ShpKUzTErXhnlKQS4t W+TZMq9iVRoMBW9PS7yg3CfoPUsVLnl/ojZMyb2PenkIz0JQrTujrtKgAk5Juh22 muyTz9TiB0lLJE1XXb9Py7bNB5acZZC2bUkFlBEs0G8JjqRcnfYSEsrlS8c0SXbf Idrr3QMLl2NpwlM6Um22KifP3x0PhdFqwtYAlz7xjqXebsd9NIGKiN7IAv81rQ16 y4J9RPGdqTE/icRKxDpYF8GicgtvAfSSSHRc9RdqHlhIbG6jVbD630FbwXJ5omtE opXUc0RlRxKFpGcA4QkefI8= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:59 2026 by rpki-client