$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa File: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (raw, json) Hash identifier: osZQLIbEE9CPRDR3SQRnuDCeiOuIIdsDuYiVKSiLftE= Subject key identifier: 3A:FA:09:4B:0A:17:C0:20:5D:0D:19:F5:C3:98:3A:95:02:FC:C6:D2 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 35B9 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa Signing time: Wed 09 Sep 2026 02:59:39 +0000 ROA not before: Wed 09 Sep 2026 02:59:39 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 4646 IP address blocks: 117.18.67.0/24 maxlen: 24 117.18.72.0/24 maxlen: 24 117.18.74.0/24 maxlen: 24 117.18.78.0/24 maxlen: 24 124.248.196.0/24 maxlen: 24 124.248.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Sep 9 02:59:39 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6aa0cb9b-934c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ec:4d:22:d6:25:9f:70:7e:7c:bd:c3:70:8f: fc:7a:d9:9b:ba:c8:74:aa:34:91:97:a5:0c:7a:d7: 4d:a6:73:fb:41:32:3c:b3:1a:4a:59:f6:33:73:46: 55:7b:8f:dd:73:06:f0:e6:a4:b1:49:fc:b8:11:c7: 6a:71:0d:c2:7b:50:9e:74:76:8b:56:3d:40:93:46: 0a:55:54:35:28:e8:6a:32:0b:86:96:37:dc:c5:2e: 3b:47:14:98:da:84:d8:ee:7b:f7:37:2d:5d:36:2a: 61:f0:88:13:6a:df:da:32:9c:12:7c:aa:d2:88:29: 96:fb:80:e2:07:e7:a1:a7:9c:8a:c0:65:eb:2b:47: f9:12:a9:b2:30:01:2d:f7:62:a1:00:75:07:0d:52: a1:78:4f:55:c9:2d:3d:86:b8:4a:ff:dc:49:3c:98: 23:e8:54:81:cd:8a:95:75:4e:9e:4e:4b:ce:fb:31: eb:cd:7b:e6:50:1a:2b:44:42:9a:a9:27:a0:95:c5: 22:29:64:00:37:d7:78:e1:a7:72:f6:5a:2a:c7:be: c3:d4:e2:44:9f:bf:33:7d:c8:8b:c0:2d:0e:14:30: ed:d9:e1:b2:24:e1:d7:20:c9:72:46:ca:f2:01:d0: 0c:12:00:69:98:b5:dc:a1:04:94:a0:5b:60:bd:5a: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FA:09:4B:0A:17:C0:20:5D:0D:19:F5:C3:98:3A:95:02:FC:C6:D2 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.18.67.0/24 117.18.72.0/24 117.18.74.0/24 117.18.78.0/24 124.248.196.0/24 124.248.207.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:84:88:fb:eb:09:65:6e:d8:2a:a0:e0:3b:8a:b6:c2:77:a0: 1d:aa:fc:c2:fc:e5:70:ea:92:46:e8:2e:cf:20:fc:f3:17:e4: 4b:0b:3c:34:20:be:02:54:6f:6e:cb:7f:63:4a:23:bc:16:5b: de:4d:9f:3c:f6:c5:87:98:8e:66:6a:a8:33:32:68:f8:cb:3d: 46:f1:cc:d1:ab:59:de:8d:5c:41:ec:bd:ce:6a:8d:09:cd:09: 92:f5:36:05:20:95:f0:08:fb:0e:25:e4:8c:1f:99:6b:fe:30: da:0e:60:16:85:49:b0:af:76:77:ae:95:7f:fe:3a:4e:6a:35: 77:21:6a:13:38:f1:e9:07:2a:a7:c8:af:e9:ef:5d:24:c6:4f: b6:25:af:d8:8a:07:d7:79:79:0e:55:92:d2:b8:13:55:91:da: 07:11:47:07:29:a2:4f:fc:89:67:3d:40:fb:a6:e3:49:90:38: cd:ce:07:92:5d:a3:45:a2:36:56:76:66:2d:e9:94:a0:44:0f: f2:e2:ae:ac:06:2f:85:d8:e3:2e:18:23:c4:32:4c:fd:3f:38: 1f:f0:ae:19:a3:58:d3:cf:7d:fe:6d:0a:2f:87:b6:29:3b:62: 3a:a9:87:ca:b6:9d:78:b9:7d:19:d8:be:d0:f3:04:e7:94:73: 51:0c:07:65 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjYwOTA5MDI1OTM5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwY2I5Yi05MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+xNItYln3B+fL3DcI/8etmbush0qjSRl6UMetdNpnP7QTI8sxpKWfYzc0ZV e4/dcwbw5qSxSfy4EcdqcQ3Ce1CedHaLVj1Ak0YKVVQ1KOhqMguGljfcxS47RxSY 2oTY7nv3Ny1dNiph8IgTat/aMpwSfKrSiCmW+4DiB+ehp5yKwGXrK0f5EqmyMAEt 92KhAHUHDVKheE9VyS09hrhK/9xJPJgj6FSBzYqVdU6eTkvO+zHrzXvmUBorREKa qSeglcUiKWQAN9d44ady9loqx77D1OJEn78zfciLwC0OFDDt2eGyJOHXIMlyRsry AdAMEgBpmLXcoQSUoFtgvVoDXQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDr6CUsK F8AgXQ0Z9cOYOpUC/MbSMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0ODQvNkZGMERERTAxRDk0MTFFMjlERUNCNUY4MDhCMDJDRDIvRkZDODlERjhD RUNEMTFFRUE0QUE2RDQ0QzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAdRJDAwQAdRJIAwQAdRJKAwQAdRJOAwQAfPjEAwQAfPjPMA0GCSqG SIb3DQEBCwUAA4IBAQCdhIj76wllbtgqoOA7irbCd6AdqvzC/OVw6pJG6C7PIPzz F+RLCzw0IL4CVG9uy39jSiO8FlveTZ889sWHmI5maqgzMmj4yz1G8czRq1nejVxB 7L3Oao0JzQmS9TYFIJXwCPsOJeSMH5lr/jDaDmAWhUmwr3Z3rpV//jpOajV3IWoT OPHpByqnyK/p710kxk+2Ja/YigfXeXkOVZLSuBNVkdoHEUcHKaJP/IlnPUD7puNJ kDjNzgeSXaNFojZWdmYt6ZSgRA/y4q6sBi+F2OMuGCPEMkz9Pzgf8K4Zo1jTz33+ bQovh7YpO2I6qYfKtp14uX0Z2L7Q8wTnlHNRDAdl -----END CERTIFICATE-----Generated at Sat Sep 26 04:08:52 2026 by rpki-client