$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa File: BBA122A063E311EC8B936683C4F9AE02.roa (raw, json) Hash identifier: I2u6v6jFPF3OgWuHK5SIHBa42EZchVm8ihwtOQ2GYvU= Subject key identifier: 23:07:F4:E6:21:F8:15:FE:B7:2A:9E:50:E5:E4:FB:38:D3:52:2B:C4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5EEC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:20:17 +0000 ROA not before: Thu 28 Aug 2025 14:57:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38737 IP address blocks: 203.119.68.0/22 maxlen: 24 2001:dc8:d000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24300 (0x5eec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d21-ca1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:68:a6:e5:2e:02:a3:80:b0:dc:59:3d:68: e8:a5:97:5a:10:de:71:f7:ad:fc:dd:09:6f:5e:7e: 23:a5:06:42:ce:94:3c:c5:4c:30:62:b0:fd:64:53: b7:3c:b9:2f:d1:9a:4a:7e:62:96:1f:35:24:d5:30: 86:fe:28:62:ff:11:2a:78:38:07:d2:f8:fd:3e:9c: 7f:6e:be:f7:40:c7:6b:9c:9d:53:95:46:23:7b:70: c8:5c:a7:68:93:cb:9f:df:16:a2:22:ec:5b:24:a3: 09:79:bd:d9:99:be:7e:7e:db:c1:36:64:eb:0b:b2: dc:22:12:c0:f0:e2:5c:9c:4e:d4:67:83:9b:9e:93: 24:be:4b:bf:6c:97:bf:f7:7e:77:ec:42:0b:dc:c7: 32:81:4e:dd:4c:bb:e9:c5:bd:e0:20:20:40:f4:bc: 0c:43:bb:d8:72:f5:b1:c6:a0:8c:12:e2:8a:93:3e: 71:64:79:18:bd:10:60:ab:98:87:bf:e9:04:f4:a6: 2f:5b:c0:68:c5:73:99:c1:4c:a8:f0:1d:23:90:48: 66:74:f3:53:0a:50:b5:ba:c5:61:5d:08:79:2b:0a: 21:f4:59:3b:fe:71:00:cd:06:87:1c:59:b5:fe:4a: e7:b4:b1:bd:84:9e:16:ec:1c:29:cb:e8:ef:9a:b0: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:F4:E6:21:F8:15:FE:B7:2A:9E:50:E5:E4:FB:38:D3:52:2B:C4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBA122A063E311EC8B936683C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.119.68.0/22 IPv6: 2001:dc8:d000::/48 Signature Algorithm: sha256WithRSAEncryption b5:fd:d6:3e:88:5b:ef:47:e8:35:3d:b3:94:1f:49:e1:ae:51: a3:32:b8:31:45:72:ab:5a:7b:86:69:03:05:da:d2:c8:1a:0f: 04:68:23:34:60:e2:8f:57:dd:76:d6:d8:8a:f1:1d:dc:94:f5: f9:1b:65:73:c0:b6:79:06:a3:82:34:e1:d7:03:ed:1d:64:0f: e5:a2:71:d7:3d:e4:92:eb:34:0e:aa:e0:bc:e2:f1:01:93:7d: 9a:29:46:49:62:35:66:29:98:97:f2:4a:86:35:88:b8:a9:f1: e6:a2:25:93:74:6f:61:61:ae:7d:98:f2:cb:97:b3:6d:fe:36: 44:50:6e:27:32:d8:93:54:29:44:f6:25:c7:05:ae:81:4e:92: ec:a7:15:49:35:30:ff:fc:a2:e5:56:ed:b0:24:8d:86:7a:1e: 3d:6c:38:d0:92:c3:7e:e7:49:dd:51:a5:1b:56:9f:7b:d2:d8: cf:bc:cf:bd:9c:4b:fd:88:40:c0:dd:2d:67:59:1b:9e:01:d3: 8a:5e:c9:c0:50:32:d7:0b:5b:ca:68:8a:88:02:db:8a:fa:5b: 15:bb:64:e1:e6:9b:0a:d2:99:5a:80:21:bb:83:d8:21:b8:51: c8:b9:0d:aa:f8:c3:97:e8:fa:5a:9e:39:f1:c2:52:0f:fe:6b: e4:fe:28:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICXuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQyMS1jYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvtopuUuAqOAsNxZPWjopZdaEN5x96383QlvXn4jpQZCzpQ8xUwwYrD9ZFO3 PLkv0ZpKfmKWHzUk1TCG/ihi/xEqeDgH0vj9Ppx/br73QMdrnJ1TlUYje3DIXKdo k8uf3xaiIuxbJKMJeb3Zmb5+ftvBNmTrC7LcIhLA8OJcnE7UZ4ObnpMkvku/bJe/ 93537EIL3McygU7dTLvpxb3gICBA9LwMQ7vYcvWxxqCMEuKKkz5xZHkYvRBgq5iH v+kE9KYvW8BoxXOZwUyo8B0jkEhmdPNTClC1usVhXQh5Kwoh9Fk7/nEAzQaHHFm1 /krntLG9hJ4W7Bwpy+jvmrCPfwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCMH9OYh +BX+tyqeUOXk+zjTUivEMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkJBMTIyQTA2 M0UzMTFFQzhCOTM2NjgzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCy3dEMA8EAgACMAkDBwAgAQ3I0AAwDQYJKoZIhvcNAQELBQADggEB ALX91j6IW+9H6DU9s5QfSeGuUaMyuDFFcqtae4ZpAwXa0sgaDwRoIzRg4o9X3XbW 2IrxHdyU9fkbZXPAtnkGo4I04dcD7R1kD+Wicdc95JLrNA6q4Lzi8QGTfZopRkli NWYpmJfySoY1iLip8eaiJZN0b2Fhrn2Y8suXs23+NkRQbicy2JNUKUT2JccFroFO kuynFUk1MP/8ouVW7bAkjYZ6Hj1sONCSw37nSd1RpRtWn3vS2M+8z72cS/2IQMDd LWdZG54B04peycBQMtcLW8poiogC24r6WxW7ZOHmmwrSmVqAIbuD2CG4Uci5Dar4 w5fo+lqeOfHCUg/+a+T+KGM= -----END CERTIFICATE-----Generated at Sat Mar 7 22:47:06 2026 by rpki-client