$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/904AABCEC5DD11F19868C2C43711F970.roa File: 904AABCEC5DD11F19868C2C43711F970.roa (raw, json) Hash identifier: IPaIQSF613vIYK81k+MNSPbwNJrbOPleh0mWl21/lwA= Subject key identifier: 49:94:65:1F:28:14:DA:D7:A0:5C:DF:3C:A6:E7:AF:EC:CF:A2:DA:74 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 02DB Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/904AABCEC5DD11F19868C2C43711F970.roa Signing time: Mon 12 Oct 2026 01:38:03 +0000 ROA not before: Mon 12 Oct 2026 01:38:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 55803 IP address blocks: 203.24.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: Oct 12 01:38:02 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6acc39fa-b2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:c2:8d:42:0c:0c:38:f5:ac:db:ff:ed:25: f2:de:25:67:ea:d6:91:dc:60:aa:ef:dd:90:9b:bf: 34:d7:e9:37:be:ff:61:f0:a0:ed:5b:0f:cf:1f:08: 5f:5a:3c:45:76:f9:74:c5:ed:b2:48:a9:5d:55:47: 3b:e0:67:74:4f:84:d1:77:92:f9:e3:5c:f2:62:02: 5a:a4:89:92:07:88:32:51:b5:87:32:c7:bf:fa:c4: f8:12:81:11:71:62:c6:37:93:91:84:c1:0b:f7:7a: 4c:c1:cc:34:33:bb:a2:18:1e:5b:eb:d1:3a:7f:82: 0e:42:fa:88:0e:c9:15:93:6b:27:c8:80:b9:69:10: b5:2b:61:01:d2:6c:64:3f:3d:be:81:66:b4:73:b3: e2:a3:3d:86:7b:26:19:7b:01:ee:05:6d:d1:21:ab: 6c:d5:54:21:09:3d:b1:3c:81:f4:ea:9e:cc:e8:95: eb:0f:80:fc:77:23:da:8a:ba:97:2a:bc:91:25:d4: b8:9f:35:6a:ab:e4:6c:65:ac:48:47:0c:34:76:01: 13:42:f3:59:a4:4a:88:61:19:24:97:ee:4a:40:62: a8:ec:da:26:7c:f2:8e:44:39:e2:78:21:7b:af:58: ef:ac:49:0d:6c:f9:0f:02:8b:b7:91:0e:70:e4:47: 79:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:94:65:1F:28:14:DA:D7:A0:5C:DF:3C:A6:E7:AF:EC:CF:A2:DA:74 X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/904AABCEC5DD11F19868C2C43711F970.roa sbgp-ipAddrBlock: critical IPv4: 203.24.117.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:87:ac:10:6b:9e:9d:46:6c:b7:a4:5e:c4:60:fb:23:d4:a0: 83:4c:9f:d1:9e:84:8d:8a:bf:44:64:c6:20:d3:5c:1c:51:98: 01:3c:9a:37:ea:28:7f:ff:21:a5:fe:f2:f1:76:b0:2d:55:7b: 67:6d:87:12:9a:43:54:e7:12:90:dc:fa:f4:11:56:d5:4a:1e: 9d:37:ea:0c:3c:a6:5e:fd:47:b9:b8:74:37:24:71:43:90:c7: ca:d9:c5:8a:99:f6:a3:d6:6b:cc:71:9c:aa:03:0f:fa:51:2a: 92:8b:24:1b:ba:ec:b7:67:f0:4c:a7:f6:a1:ee:45:16:43:bc: e7:04:eb:1b:da:fe:a3:b8:50:90:f2:e8:cd:24:03:6c:74:1d: 58:de:b2:9a:a6:33:0a:68:09:10:51:62:63:ac:01:b7:d2:d8: 79:98:8b:be:d6:16:cc:09:bc:3c:54:45:22:d1:59:a0:4d:ec: e2:80:ee:22:90:9e:96:e4:1a:9f:6a:9d:75:ea:a7:fb:41:e0: 5d:58:b0:1e:f6:9e:7a:c0:c0:79:32:03:99:4f:6d:36:0f:15: 0b:16:2d:37:c5:19:01:00:df:7c:c2:0d:91:2e:e6:83:10:3a: 94:3c:44:ff:a5:32:3f:f6:53:93:4a:17:43:af:e5:d4:c1:97: ae:77:b8:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjYxMDEyMDEzODAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNjMzlmYS1iMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1bCjUIMDDj1rNv/7SXy3iVn6taR3GCq792Qm7801+k3vv9h8KDtWw/PHwhf WjxFdvl0xe2ySKldVUc74Gd0T4TRd5L541zyYgJapImSB4gyUbWHMse/+sT4EoER cWLGN5ORhMEL93pMwcw0M7uiGB5b69E6f4IOQvqIDskVk2snyIC5aRC1K2EB0mxk Pz2+gWa0c7Pioz2GeyYZewHuBW3RIats1VQhCT2xPIH06p7M6JXrD4D8dyPairqX KryRJdS4nzVqq+RsZaxIRww0dgETQvNZpEqIYRkkl+5KQGKo7NomfPKORDnieCF7 r1jvrEkNbPkPAou3kQ5w5Ed5PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEmUZR8o FNrXoFzfPKbnr+zPotp0MB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk5MTYvMjM5REM0MjY2MThCMTFFRDg4QUJCQzIyQzRGOUFFMDIvOTA0QUFCQ0VD NUREMTFGMTk4NjhDMkM0MzcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxh1MA0GCSqGSIb3DQEBCwUAA4IBAQCMh6wQa56dRmy3pF7EYPsj 1KCDTJ/RnoSNir9EZMYg01wcUZgBPJo36ih//yGl/vLxdrAtVXtnbYcSmkNU5xKQ 3Pr0EVbVSh6dN+oMPKZe/Ue5uHQ3JHFDkMfK2cWKmfaj1mvMcZyqAw/6USqSiyQb uuy3Z/BMp/ah7kUWQ7znBOsb2v6juFCQ8ujNJANsdB1Y3rKapjMKaAkQUWJjrAG3 0th5mIu+1hbMCbw8VEUi0VmgTezigO4ikJ6W5Bqfap116qf7QeBdWLAe9p56wMB5 MgOZT202DxULFi03xRkBAN98wg2RLuaDEDqUPET/pTI/9lOTShdDr+XUwZeud7jg -----END CERTIFICATE-----Generated at Sun Nov 15 18:59:21 2026 by rpki-client