$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/8FEA9564C2AE11EB94777A0CC4F9AE02.roa File: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (raw, json) Hash identifier: /CLRSnh9CYZydXvA+OqGb8vFSm9uhhWBDEam371xnzI= Subject key identifier: 0B:10:88:60:2B:D0:0B:23:13:42:7A:58:89:33:45:17:C0:F7:18:3D Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0831 Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/8FEA9564C2AE11EB94777A0CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:24:44 +0000 ROA not before: Thu 12 Jun 2025 21:38:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134202 IP address blocks: 45.117.228.0/22 maxlen: 22 45.117.228.0/24 maxlen: 24 45.117.229.0/24 maxlen: 24 45.117.231.0/24 maxlen: 24 103.58.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Jun 12 21:38:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4300c-7179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:2b:f5:5f:fe:06:d5:57:c0:2e:9b:e5:d4: 0a:13:bb:e4:ef:ec:c2:16:56:e7:c8:21:3f:5e:cb: 9c:13:4f:59:ad:72:47:16:55:a2:12:c4:8f:37:28: 9d:ce:ec:55:53:f9:aa:a4:ba:86:30:59:80:f8:03: 78:f3:66:1b:c7:80:a8:d9:41:83:57:13:85:fa:34: 6a:db:78:10:1e:7b:0b:65:77:0e:c4:77:19:a3:6a: 6b:61:47:4b:48:d1:3b:d0:9b:36:d2:ff:dd:42:b3: 43:83:7e:34:21:e6:2a:46:ec:27:19:fd:ea:47:9b: f3:21:2f:31:75:8e:d5:40:a3:5b:d4:9c:36:05:de: 2e:2e:93:9b:ce:a1:40:26:49:ae:3b:bb:59:bd:11: 50:b6:2b:7d:19:a5:20:6b:35:bd:63:cf:c9:2b:02: 8e:90:33:6b:33:e6:c6:b9:7a:0f:2d:6d:66:da:a4: 78:fe:8d:e6:13:f9:4e:9d:e1:5b:94:62:75:2e:3e: da:fb:04:a5:b1:9c:95:49:81:00:34:8e:f3:15:ed: e6:4b:43:dd:ad:f1:1d:d4:54:85:5c:49:4f:c7:76: b8:87:79:4e:0a:ea:14:91:1f:8e:a6:27:a8:98:94: 09:5b:8b:04:50:73:e7:e1:48:bc:55:1a:cb:8b:6e: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:10:88:60:2B:D0:0B:23:13:42:7A:58:89:33:45:17:C0:F7:18:3D X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/8FEA9564C2AE11EB94777A0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.228.0/22 103.58.16.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:ee:e3:29:2a:cb:d0:bd:a1:c6:be:a0:e7:ae:65:a6:46:b5: 91:08:22:c6:17:97:1d:9a:6f:36:82:35:b3:16:66:a6:6a:e5: 83:d5:41:e5:bd:2f:fb:6e:bd:b1:3c:14:4e:de:fb:1f:f5:c3: ca:a2:03:92:27:69:94:2c:2a:ce:73:9c:ae:f2:d1:89:56:22: 8a:3b:23:54:0e:28:04:0b:fe:16:2b:a3:4f:0f:95:18:85:ab: a3:82:4a:7c:26:cd:70:97:7f:ac:6a:43:db:1e:45:cb:5e:35: ae:0e:b1:b3:7b:5d:00:7b:20:b5:12:1e:37:84:ef:a5:0b:45: c2:f0:f7:5f:39:de:1f:92:15:bb:db:45:9e:d3:b9:a0:06:af: d6:42:35:36:28:28:cc:9c:7d:bb:a8:7b:c2:22:a4:49:54:98: ab:15:66:16:43:26:cb:77:cc:4c:96:19:33:03:17:86:67:98: 3f:20:30:61:75:63:8a:4e:81:e2:29:0e:f3:1f:83:c8:9f:02: de:74:39:f2:b7:12:11:9d:86:87:a8:59:27:a6:42:35:cc:e9: 29:a7:39:b8:3e:a8:b1:e0:60:ce:49:85:ee:02:6d:f1:31:3a: be:29:04:f9:88:07:05:52:f9:2b:eb:7d:72:60:1f:62:28:c3: 47:17:8b:19 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjUwNjEyMjEzODU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzAwYy03MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyg8r9V/+BtVXwC6b5dQKE7vk7+zCFlbnyCE/XsucE09ZrXJHFlWiEsSPNyid zuxVU/mqpLqGMFmA+AN482Ybx4Co2UGDVxOF+jRq23gQHnsLZXcOxHcZo2prYUdL SNE70Js20v/dQrNDg340IeYqRuwnGf3qR5vzIS8xdY7VQKNb1Jw2Bd4uLpObzqFA JkmuO7tZvRFQtit9GaUgazW9Y8/JKwKOkDNrM+bGuXoPLW1m2qR4/o3mE/lOneFb lGJ1Lj7a+wSlsZyVSYEANI7zFe3mS0PdrfEd1FSFXElPx3a4h3lOCuoUkR+Opieo mJQJW4sEUHPn4Ui8VRrLi257TwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAsQiGAr 0AsjE0J6WIkzRRfA9xg9MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCNTkvQjY4QjkwRDYwRENBMTFFQkE3QzJFMjJEQzRGOUFFMDIvOEZFQTk1NjRD MkFFMTFFQjk0Nzc3QTBDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXXkAwQCZzoQMA0GCSqGSIb3DQEBCwUAA4IBAQBd7uMpKsvQvaHG vqDnrmWmRrWRCCLGF5cdmm82gjWzFmamauWD1UHlvS/7br2xPBRO3vsf9cPKogOS J2mULCrOc5yu8tGJViKKOyNUDigEC/4WK6NPD5UYhaujgkp8Js1wl3+sakPbHkXL XjWuDrGze10AeyC1Eh43hO+lC0XC8PdfOd4fkhW720We07mgBq/WQjU2KCjMnH27 qHvCIqRJVJirFWYWQybLd8xMlhkzAxeGZ5g/IDBhdWOKToHiKQ7zH4PInwLedDny txIRnYaHqFknpkI1zOkppzm4Pqix4GDOSYXuAm3xMTq+KQT5iAcFUvkr631yYB9i KMNHF4sZ -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:33 2026 by rpki-client