$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa File: 81ACB3888C9611EE88DE0726C4F9AE02.roa (raw, json) Hash identifier: 5hF+q7XbUKv2CQ3ZjbUmUSi84dri46X8An8jADY9swI= Subject key identifier: 46:DF:05:F3:58:E7:AE:60:3D:DC:23:97:FE:45:AD:75:F0:10:A9:C7 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 374F Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa Signing time: Sun 04 Oct 2026 15:17:56 +0000 ROA not before: Sun 04 Oct 2026 15:17:56 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 135027 IP address blocks: 117.121.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 14:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14159 (0x374f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Oct 4 15:17:56 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac26e24-d922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:8a:1a:28:3c:ad:ac:51:4f:ab:2d:72:df: 2e:a4:fe:f2:63:13:13:de:94:92:79:56:43:d4:4f: 1f:f2:d7:70:3f:93:2b:b5:73:30:cf:24:89:0d:d4: 2a:ab:c7:d3:af:a2:60:da:f9:4a:af:e7:79:a7:d7: bb:57:48:ce:aa:0f:e4:20:72:56:82:4b:b4:3e:ba: 29:70:b7:cf:42:34:fb:e1:5f:7d:07:a3:18:3c:03: 3c:e5:58:3c:62:8d:0c:70:c1:5c:9b:2f:0d:55:3f: cd:10:1b:dd:2b:19:ac:aa:ed:ed:0b:51:70:e2:8d: 78:63:0a:37:ca:6e:10:a4:6d:a0:48:97:5d:5f:c5: a9:6b:0a:c5:10:97:24:1e:8a:e5:b3:6a:f0:28:00: 05:c3:c2:0c:d4:c7:f8:3b:fe:71:db:53:a8:95:70: 49:af:be:ab:69:17:6d:6f:46:15:ef:c5:70:75:c0: fb:be:f6:ce:5d:73:a0:dd:aa:9c:a1:7b:20:52:66: d6:f0:b1:58:52:84:eb:9c:f9:68:ee:fd:7d:28:fa: 8f:1d:de:72:16:e1:32:b7:e5:09:0b:2c:fd:2e:07: 0d:80:90:bb:88:94:b1:af:8b:50:d6:33:3d:7d:f0: 5b:54:30:59:ee:dc:7f:f7:c0:3b:d1:75:21:82:0b: e3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DF:05:F3:58:E7:AE:60:3D:DC:23:97:FE:45:AD:75:F0:10:A9:C7 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.121.243.0/24 Signature Algorithm: sha256WithRSAEncryption 48:3f:37:1a:ca:d0:25:68:fc:0c:bf:d4:c4:1d:9f:c2:6d:3e: 00:87:a4:ae:cf:06:29:75:f8:14:18:88:09:32:cf:aa:ac:6c: 2b:f6:0f:60:a5:63:27:b7:52:9d:ca:fd:b5:7a:e4:e0:75:de: d7:2a:b5:23:9f:c6:af:04:e7:dc:08:bd:86:fe:ee:3b:13:61: c4:30:84:93:7a:37:b8:26:f2:da:f8:9d:0d:53:d9:7e:82:4f: cb:95:83:ff:37:a4:0e:27:40:0e:94:89:87:e1:58:ab:8f:c1: 30:49:2f:fc:7d:14:18:a5:dc:34:14:f0:32:d1:0f:85:9b:b4: c7:b9:74:d5:7d:b9:eb:a1:38:81:54:f4:b9:0c:d1:74:64:dd: 8f:84:b3:7a:17:ca:11:2d:35:ad:f1:31:6c:7c:26:d1:08:a1: fb:7a:31:b2:1e:55:87:e0:06:fd:0f:4f:0c:55:5f:a4:af:a3: 90:12:d9:98:12:95:ec:09:3e:ee:44:fe:7e:f4:a3:86:8a:01: 4b:9f:18:cd:e9:60:e9:63:bf:48:42:31:7e:2c:6c:67:8c:55: e9:88:7a:46:c6:20:72:13:80:e5:0c:bd:20:e2:2c:6c:ee:e9: 05:39:d3:20:41:cb:4e:73:58:a2:ab:7a:a2:54:f7:3e:d1:e8: b0:70:8b:7e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICN08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjYxMDA0MTUxNzU2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyNmUyNC1kOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsImKGig8raxRT6stct8upP7yYxMT3pSSeVZD1E8f8tdwP5MrtXMwzySJDdQq q8fTr6Jg2vlKr+d5p9e7V0jOqg/kIHJWgku0PropcLfPQjT74V99B6MYPAM85Vg8 Yo0McMFcmy8NVT/NEBvdKxmsqu3tC1Fw4o14Ywo3ym4QpG2gSJddX8WpawrFEJck Horls2rwKAAFw8IM1Mf4O/5x21OolXBJr76raRdtb0YV78VwdcD7vvbOXXOg3aqc oXsgUmbW8LFYUoTrnPlo7v19KPqPHd5yFuEyt+UJCyz9LgcNgJC7iJSxr4tQ1jM9 ffBbVDBZ7tx/98A70XUhggvjJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEbfBfNY 565gPdwjl/5FrXXwEKnHMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvODFBQ0IzODg4 Qzk2MTFFRTg4REUwNzI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdXnzMA0GCSqGSIb3DQEBCwUAA4IBAQBIPzcaytAlaPwMv9TEHZ/C bT4Ah6SuzwYpdfgUGIgJMs+qrGwr9g9gpWMnt1Kdyv21euTgdd7XKrUjn8avBOfc CL2G/u47E2HEMISTeje4JvLa+J0NU9l+gk/LlYP/N6QOJ0AOlImH4Virj8EwSS/8 fRQYpdw0FPAy0Q+Fm7THuXTVfbnroTiBVPS5DNF0ZN2PhLN6F8oRLTWt8TFsfCbR CKH7ejGyHlWH4Ab9D08MVV+kr6OQEtmYEpXsCT7uRP5+9KOGigFLnxjN6WDpY79I QjF+LGxnjFXpiHpGxiByE4DlDL0g4ixs7ukFOdMgQctOc1iiq3qiVPc+0eiwcIt+ -----END CERTIFICATE-----Generated at Sat Oct 24 10:27:57 2026 by rpki-client