$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/BB8B992A1B6011F0AFD7AF11C4F9AE02.roa File: BB8B992A1B6011F0AFD7AF11C4F9AE02.roa (raw, json) Hash identifier: gCQsxZNTWJdexJQs/f6ie8h5A7xmqB+IkDiAih01sSU= Subject key identifier: BA:E1:67:C1:9F:9C:11:FF:48:9E:6D:17:0B:39:53:7C:E0:CD:4A:AC Certificate issuer: /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D Certificate serial: 062C Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/BB8B992A1B6011F0AFD7AF11C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:16:26 +0000 ROA not before: Sat 19 Jul 2025 00:05:31 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7473 IP address blocks: 101.234.31.0/24 maxlen: 24 101.234.32.0/24 maxlen: 24 101.234.33.0/24 maxlen: 24 101.234.34.0/24 maxlen: 24 101.234.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676D4, serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D Validity Not Before: Jul 19 00:05:31 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a44a3a-c816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:f0:d7:ab:83:f6:3d:0c:76:d6:d0:7c:66: 51:c1:06:7e:0c:0f:ff:20:c2:d0:81:28:d7:d0:ec: 11:d8:e1:49:24:38:50:e0:33:fd:23:ef:39:60:b2: db:80:39:ca:c7:dd:54:75:47:c3:36:e5:dc:11:35: 57:ab:87:49:9c:c5:12:aa:27:73:fa:05:b8:49:10: d7:29:b0:03:31:08:c3:c9:dd:3f:d0:01:fe:82:76: fa:0e:34:de:30:61:d3:c1:11:36:dc:6e:6e:31:da: 67:29:d4:72:f3:fb:7f:41:4f:16:f2:66:16:81:df: c1:82:ce:eb:e6:0e:ec:0a:c0:84:5b:f0:bd:d9:5a: 12:72:19:f6:66:63:f8:d2:f9:f5:b7:61:c6:ef:45: 90:6f:b1:7d:a0:11:a7:e0:8f:4b:e9:36:17:0b:c4: 86:29:57:b6:e4:d8:e9:64:21:8d:8a:0f:61:41:df: 96:9a:84:eb:5d:f7:e2:59:20:fc:14:a3:93:55:5a: 3a:fd:f4:29:ee:1b:5f:fc:27:e4:12:54:75:60:b9: 38:2f:d4:ed:14:12:d0:1c:f0:90:1c:92:da:38:eb: 6d:82:34:ed:5c:b3:c5:6b:7c:ba:a3:44:d3:0c:c4: db:57:1a:0f:62:35:5a:0b:c5:c6:c3:6f:89:57:5b: fa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:67:C1:9F:9C:11:FF:48:9E:6D:17:0B:39:53:7C:E0:CD:4A:AC X509v3 Authority Key Identifier: keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/BB8B992A1B6011F0AFD7AF11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.234.31.0-101.234.34.255 101.234.40.0/24 Signature Algorithm: sha256WithRSAEncryption ca:df:fb:f5:44:90:50:fa:81:ae:e5:b0:40:e8:2e:61:68:40: 88:5d:62:e1:ea:ef:d9:bc:89:9f:45:e6:ad:20:f1:db:f2:c2: a6:94:e2:a0:77:20:a5:2d:86:37:85:82:54:a4:8c:96:76:e1: 84:e8:f2:6a:3f:49:1b:18:9e:4b:e3:47:27:52:44:e9:65:e7: 90:2c:03:0c:73:5a:9e:87:f1:9f:b5:27:4a:66:b0:49:9d:49: 37:f2:f8:a1:9e:d4:9a:ce:28:0c:d8:f2:fe:73:f6:ce:59:0d: 9a:ae:6f:f8:bf:91:9e:11:e4:94:ab:b6:c5:8d:f0:7c:02:52: e1:a8:97:12:89:2d:ed:ac:42:11:da:8c:ab:c5:ff:00:8e:77: a5:a7:da:69:16:9e:e5:b8:4e:37:83:82:d9:96:74:68:aa:45: f5:ed:46:de:c7:03:4e:30:56:5f:24:03:52:23:d5:57:ad:a9: ee:4d:80:67:03:6d:0f:1f:5e:3c:bc:74:4e:bf:c8:b2:aa:a5: 5c:1c:86:b1:45:e3:b3:d2:c7:b9:02:72:75:2a:c5:bc:01:15: 43:c5:a1:42:a7:2d:ae:de:f4:35:78:09:92:26:8e:16:55:b1: 19:da:5d:13:ab:da:ad:55:30:47:f5:c9:1c:7c:6f:1b:16:14: 1b:55:46:61 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc2RDQxMTAvBgNVBAUTKDgzNUE2Qzk2QjIwOTI0QzdFNUQ4RjEyRjA2REI5REQy M0UyNTJGNUQwHhcNMjUwNzE5MDAwNTMxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGEzYS1jODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYnw16uD9j0MdtbQfGZRwQZ+DA//IMLQgSjX0OwR2OFJJDhQ4DP9I+85YLLb gDnKx91UdUfDNuXcETVXq4dJnMUSqidz+gW4SRDXKbADMQjDyd0/0AH+gnb6DjTe MGHTwRE23G5uMdpnKdRy8/t/QU8W8mYWgd/Bgs7r5g7sCsCEW/C92VoSchn2ZmP4 0vn1t2HG70WQb7F9oBGn4I9L6TYXC8SGKVe25NjpZCGNig9hQd+WmoTrXffiWSD8 FKOTVVo6/fQp7htf/CfkElR1YLk4L9TtFBLQHPCQHJLaOOttgjTtXLPFa3y6o0TT DMTbVxoPYjVaC8XGw2+JV1v63QIDAQABo4ICbjCCAmowHQYDVR0OBBYEFLrhZ8Gf nBH/SJ5tFws5U3zgzUqsMB8GA1UdIwQYMBaAFINabJayCSTH5djxLwbbndI+JS9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZENC9FMTdFQ0UyRUUy RTYxMUVCQjc1OTZBNzVDNEY5QUUwMi9nMXBzbHJJSkpNZmwyUEV2QnR1ZDBqNGxM MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxcHNscklKSk1mbDJQRXZCdHVkMGo0bEwxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njc2RDQvRTE3RUNFMkVFMkU2MTFFQkI3NTk2QTc1QzRGOUFFMDIvQkI4Qjk5MkEx QjYwMTFGMEFGRDdBRjExQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBABl6h8DBABl6iIDBABl6igwDQYJKoZIhvcNAQELBQADggEBAMrf +/VEkFD6ga7lsEDoLmFoQIhdYuHq79m8iZ9F5q0g8dvywqaU4qB3IKUthjeFglSk jJZ24YTo8mo/SRsYnkvjRydSROll55AsAwxzWp6H8Z+1J0pmsEmdSTfy+KGe1JrO KAzY8v5z9s5ZDZqub/i/kZ4R5JSrtsWN8HwCUuGolxKJLe2sQhHajKvF/wCOd6Wn 2mkWnuW4TjeDgtmWdGiqRfXtRt7HA04wVl8kA1Ij1Vetqe5NgGcDbQ8fXjy8dE6/ yLKqpVwchrFF47PSx7kCcnUqxbwBFUPFoUKnLa7e9DV4CZImjhZVsRnaXROr2q1V MEf1yRx8bxsWFBtVRmE= -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:22 2026 by rpki-client