$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB2394DC700C11EFB7E58677C4F9AE02.roa File: CB2394DC700C11EFB7E58677C4F9AE02.roa (raw, json) Hash identifier: ybopFgutiDTRl9dZT+UbK+yCq9/pbXywVGncH2/J8gk= Subject key identifier: 38:54:81:A5:2B:82:20:41:DE:D0:7D:0C:9C:75:AB:46:FC:6E:BB:5E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EF0 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB2394DC700C11EFB7E58677C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:34:44 +0000 ROA not before: Fri 02 Oct 2026 15:34:44 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 23962 IP address blocks: 117.122.116.0/22 maxlen: 24 2001:dc8:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28400 (0x6ef0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:34:44 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcf14-395a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4d:2c:d7:ae:2e:38:f4:7c:cc:68:fa:81:e0: 72:19:4d:27:26:c9:a2:cf:1f:93:0b:3f:24:7e:0b: cb:71:43:68:de:ef:b8:5b:7a:88:5f:fe:45:39:b7: 65:19:2f:d6:af:10:69:a1:67:12:3c:8c:6d:e8:04: ff:c4:2c:3e:5a:d0:d4:05:8c:62:55:f8:60:f6:db: 6d:8c:52:aa:cb:96:10:b5:07:cf:0f:41:37:04:f5: d6:1f:01:25:e1:41:d7:1c:c9:1a:0c:34:76:b9:af: 7c:8e:c5:7c:cd:11:a6:5d:46:ca:2c:ee:fd:36:34: 1a:21:bf:62:f0:06:1a:96:05:62:c7:14:21:8e:f2: 69:0d:d0:93:f6:9b:e6:3e:32:fe:1c:b1:68:97:de: 86:fc:c2:a1:72:25:e4:41:a1:56:af:31:04:db:6b: c1:41:98:59:0f:17:ed:41:74:79:a9:37:39:ac:a2: 83:1c:2f:d7:e2:3b:2a:9b:b3:90:0e:d8:8f:d5:70: 37:f4:27:78:ec:9b:91:ad:6e:76:da:e7:64:df:9b: aa:74:33:fa:b8:89:35:04:1f:d3:ec:9f:53:b2:d3: ef:9e:8d:1d:13:e6:ed:55:8e:34:03:e1:c8:e9:e6: 2d:ad:31:36:33:52:70:c2:ed:86:93:29:af:36:ec: df:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:54:81:A5:2B:82:20:41:DE:D0:7D:0C:9C:75:AB:46:FC:6E:BB:5E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB2394DC700C11EFB7E58677C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.122.116.0/22 IPv6: 2001:dc8:3000::/48 Signature Algorithm: sha256WithRSAEncryption bf:fc:c8:7a:32:ff:ad:2c:4b:a0:3d:af:79:c2:2a:f1:5f:86: c9:0b:d5:c4:ce:4a:b4:8b:9e:f8:a2:e1:cc:3c:b4:a8:e1:4b: ff:26:9c:31:e0:05:dd:db:ab:e2:03:7f:ca:c6:c7:58:c0:32: c5:cb:0b:8d:64:f8:02:d0:aa:47:7c:a4:5f:b3:dc:13:8b:28: f1:7d:e9:b8:0c:a7:7d:ec:26:3d:6f:1f:79:39:01:91:33:0a: c8:70:18:15:59:dd:6b:51:83:84:d9:8c:bc:eb:60:5c:2e:14: ba:3a:2b:66:fe:00:75:48:92:f5:f3:6b:f3:fb:49:c6:8d:16: 01:af:2b:99:3a:51:94:39:a3:bc:e5:2c:e2:1a:15:6d:08:e1: 9f:ad:31:ee:0f:23:17:a7:e7:7b:5e:37:22:45:19:ef:ea:ed: 6a:ed:e3:d1:4e:32:31:f1:f4:bc:75:26:4b:44:68:49:e4:60: 45:79:1e:1f:1d:2a:8d:0c:df:fb:fa:23:88:2c:10:50:f6:51: 9f:65:b9:24:2e:da:f4:d0:ed:11:53:aa:0f:ee:a7:ba:fe:a5: 04:92:f8:a8:51:c6:f8:d6:47:a7:12:f1:da:dc:99:13:ce:a2: d1:50:10:40:75:02:6f:87:0b:49:d5:b6:82:70:f9:3e:6e:30: d1:09:00:d7 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICbvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzNDQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2YxNC0zOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU0s164uOPR8zGj6geByGU0nJsmizx+TCz8kfgvLcUNo3u+4W3qIX/5FObdl GS/WrxBpoWcSPIxt6AT/xCw+WtDUBYxiVfhg9tttjFKqy5YQtQfPD0E3BPXWHwEl 4UHXHMkaDDR2ua98jsV8zRGmXUbKLO79NjQaIb9i8AYalgVixxQhjvJpDdCT9pvm PjL+HLFol96G/MKhciXkQaFWrzEE22vBQZhZDxftQXR5qTc5rKKDHC/X4jsqm7OQ DtiP1XA39Cd47JuRrW522udk35uqdDP6uIk1BB/T7J9TstPvno0dE+btVY40A+HI 6eYtrTE2M1Jwwu2GkymvNuzfrwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDhUgaUr giBB3tB9DJx1q0b8brteMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0IyMzk0REM3 MDBDMTFFRkI3RTU4Njc3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCdXp0MA8EAgACMAkDBwAgAQ3IMAAwDQYJKoZIhvcNAQELBQADggEB AL/8yHoy/60sS6A9r3nCKvFfhskL1cTOSrSLnvii4cw8tKjhS/8mnDHgBd3bq+ID f8rGx1jAMsXLC41k+ALQqkd8pF+z3BOLKPF96bgMp33sJj1vH3k5AZEzCshwGBVZ 3WtRg4TZjLzrYFwuFLo6K2b+AHVIkvXza/P7ScaNFgGvK5k6UZQ5o7zlLOIaFW0I 4Z+tMe4PIxen53teNyJFGe/q7Wrt49FOMjHx9Lx1JktEaEnkYEV5Hh8dKo0M3/v6 I4gsEFD2UZ9luSQu2vTQ7RFTqg/up7r+pQSS+KhRxvjWR6cS8drcmRPOotFQEEB1 Am+HC0nVtoJw+T5uMNEJANc= -----END CERTIFICATE-----Generated at Sat Oct 24 18:46:17 2026 by rpki-client