$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/4BBA96965CD511EE9A078180C4F9AE02.roa File: 4BBA96965CD511EE9A078180C4F9AE02.roa (raw, json) Hash identifier: WW5v8VEKPHY5cRU6NklWON7UCKUk27Vdm5aFanhH4uA= Subject key identifier: 4E:A0:F8:A7:33:3F:29:8B:07:5C:1D:07:A1:E5:ED:A9:8E:99:AC:0B Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02F0 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/4BBA96965CD511EE9A078180C4F9AE02.roa Signing time: Tue 17 Mar 2026 01:34:40 +0000 ROA not before: Tue 17 Mar 2026 01:34:40 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 139883 IP address blocks: 166.120.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Mar 17 01:34:40 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b8afb0-6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:09:46:91:3d:e7:de:d9:c4:2d:69:6b:02:bb: 10:2f:93:fd:88:b7:e1:7a:82:a9:1e:35:ad:80:f8: cb:3d:8a:89:c9:bf:7f:d5:6d:59:dd:41:88:8e:2e: 18:b5:37:2e:7a:52:28:84:e8:aa:63:f8:f0:de:dc: 86:a0:59:e8:4c:50:fc:79:c6:dd:25:e5:f5:ee:1f: fa:dc:7f:4b:3d:5f:4b:16:2e:9d:5b:80:fe:ea:e0: 2d:12:c6:96:d1:ce:94:b8:74:80:bf:6d:77:b1:14: 6b:1c:89:9b:19:da:91:22:57:4f:89:e7:0a:f2:5e: 96:ee:1c:2b:de:48:5f:f0:39:29:bd:e8:ee:84:a6: f0:36:25:b3:52:58:1c:1a:aa:e7:37:b8:e9:76:a7: bb:2c:fd:9e:91:d9:90:5c:24:e2:21:73:6a:85:e1: 5c:9f:0e:b5:66:d7:c4:fe:6b:d8:ce:bc:d6:fe:bb: 08:d4:87:da:1a:67:2a:ab:ed:b4:b1:ed:25:bc:5e: 91:95:1b:fc:1a:a7:7f:f4:2b:ec:cc:64:fc:94:57: 70:49:5a:c6:6b:ba:c4:84:e3:c6:7b:bd:ef:45:10: ef:ea:7b:a0:2c:be:02:6b:56:48:26:58:69:02:62: df:c3:00:c2:a8:df:f5:83:9c:fd:ab:aa:f9:02:5f: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:F8:A7:33:3F:29:8B:07:5C:1D:07:A1:E5:ED:A9:8E:99:AC:0B X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/4BBA96965CD511EE9A078180C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 166.120.128.0/24 Signature Algorithm: sha256WithRSAEncryption 15:2f:16:6e:c5:9c:52:74:47:bb:9f:dd:ce:a6:48:02:4b:01: dd:2d:8c:02:f4:6b:62:43:e5:27:23:f7:1b:e1:08:2d:b8:04: d1:17:18:70:0e:c5:fb:ea:24:5c:8d:66:f7:77:af:4e:e1:a5: 6f:a7:15:7b:4c:3a:35:bc:d0:d9:fa:46:95:8f:35:a7:bd:bb: c6:3e:35:8d:b9:6d:e7:cf:7c:24:d9:1c:01:94:5e:14:3e:9c: ab:0e:76:0a:52:e3:aa:0f:3b:43:62:7d:da:40:ff:2b:ac:d9: 0b:a2:3b:65:9a:5c:86:92:71:22:c1:9b:82:71:59:ab:f1:a7: 9a:f3:66:91:5e:98:b6:6f:e5:6c:4d:47:15:14:d5:68:4c:3d: 96:00:fc:25:63:0a:67:41:e2:27:05:8b:5a:de:d1:b4:b6:61: 8a:6e:d8:63:20:43:60:41:b3:e3:79:2d:d6:c5:73:7d:ee:d7: f3:a0:9d:d5:83:aa:b8:ea:4e:8d:9f:21:17:a5:32:4e:c0:bc: 61:5d:fe:62:de:76:49:1e:43:31:96:f1:f4:f6:ef:6d:f4:67: 6a:50:9d:ed:ad:8f:54:d3:16:8a:71:9b:03:37:85:eb:bd:e9: 24:28:51:04:07:c0:74:77:50:ca:ff:dc:8d:5f:e0:dc:a0:be: 66:81:53:a7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwMzE3MDEzNDQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4YWZiMC02ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtglGkT3n3tnELWlrArsQL5P9iLfheoKpHjWtgPjLPYqJyb9/1W1Z3UGIji4Y tTcuelIohOiqY/jw3tyGoFnoTFD8ecbdJeX17h/63H9LPV9LFi6dW4D+6uAtEsaW 0c6UuHSAv213sRRrHImbGdqRIldPiecK8l6W7hwr3khf8DkpvejuhKbwNiWzUlgc GqrnN7jpdqe7LP2ekdmQXCTiIXNqheFcnw61ZtfE/mvYzrzW/rsI1IfaGmcqq+20 se0lvF6RlRv8Gqd/9CvszGT8lFdwSVrGa7rEhOPGe73vRRDv6nugLL4Ca1ZIJlhp AmLfwwDCqN/1g5z9q6r5Al9K0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE6g+Kcz PymLB1wdB6Hl7amOmawLMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvNEJCQTk2OTY1 Q0Q1MTFFRTlBMDc4MTgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApniAMA0GCSqGSIb3DQEBCwUAA4IBAQAVLxZuxZxSdEe7n93OpkgC SwHdLYwC9GtiQ+UnI/cb4QgtuATRFxhwDsX76iRcjWb3d69O4aVvpxV7TDo1vNDZ +kaVjzWnvbvGPjWNuW3nz3wk2RwBlF4UPpyrDnYKUuOqDztDYn3aQP8rrNkLojtl mlyGknEiwZuCcVmr8aea82aRXpi2b+VsTUcVFNVoTD2WAPwlYwpnQeInBYta3tG0 tmGKbthjIENgQbPjeS3WxXN97tfzoJ3Vg6q46k6NnyEXpTJOwLxhXf5i3nZJHkMx lvH09u9t9GdqUJ3trY9U0xaKcZsDN4XrvekkKFEEB8B0d1DK/9yNX+DcoL5mgVOn -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:42 2026 by rpki-client