$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/BEE96BA212A811F1A54B75AE3D3D8C67.roa File: BEE96BA212A811F1A54B75AE3D3D8C67.roa (raw, json) Hash identifier: /SEWCKuQ68wowgWrkDXt8HCOPB77auVAxoefhm+aSXY= Subject key identifier: 61:16:6B:60:E6:C6:22:59:8B:F8:21:2F:47:D1:C8:EE:C8:87:96:A1 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02F2 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/BEE96BA212A811F1A54B75AE3D3D8C67.roa Signing time: Tue 17 Mar 2026 01:34:44 +0000 ROA not before: Tue 17 Mar 2026 01:34:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150673 IP address blocks: 166.120.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Mar 17 01:34:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b8afb4-8b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:31:7e:c7:0a:02:e4:82:ac:2e:46:5c:c0:83: 05:e5:e3:3d:2a:17:b0:d5:55:03:8f:80:a2:6c:45: 3b:96:38:fa:33:4d:57:a4:2d:b2:f9:ae:d8:e9:9c: 9f:1b:89:c5:e2:65:05:43:78:61:71:10:15:ce:f2: 36:70:77:2c:56:c9:d5:71:0a:1d:15:70:91:04:5e: 26:f4:73:30:1c:9f:03:95:75:1d:9e:62:0e:94:5d: 48:62:42:81:5f:25:c4:49:9a:28:d4:79:a5:1e:c2: 83:f3:0b:4b:79:d9:f7:b0:04:9d:55:ff:98:7f:60: 0e:8e:9e:c4:0d:18:58:99:56:28:3e:52:c9:47:4c: b4:d7:3d:bd:d6:36:63:07:09:3a:81:f4:64:11:cf: ca:34:b5:29:2b:f2:c4:3c:1c:b4:0e:57:c8:0a:8a: 86:51:3a:17:b4:5a:b7:81:24:2c:3a:01:39:c7:2a: 99:67:49:c9:79:6f:55:6a:2c:d6:be:37:c5:0c:50: 72:8b:d9:bf:b5:af:23:15:48:42:f1:98:ff:46:d3: 92:5e:15:e0:8b:43:fd:59:70:98:32:2f:67:c9:89: 45:28:b9:c6:80:89:90:0c:08:64:54:9f:45:80:d5: bd:f3:27:45:04:ae:28:ec:46:3e:3d:9e:94:2e:1c: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:16:6B:60:E6:C6:22:59:8B:F8:21:2F:47:D1:C8:EE:C8:87:96:A1 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/BEE96BA212A811F1A54B75AE3D3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 166.120.196.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a5:12:a7:2b:92:61:67:73:57:e0:d9:bf:1a:b9:4c:68:54: b3:1c:d2:75:d4:87:11:1e:e3:9c:62:01:14:6b:19:80:96:2e: 91:f3:9d:f1:61:e1:8d:37:95:8b:dc:11:8d:5d:16:05:55:e2: 6b:f1:cf:3e:51:a4:c7:64:9c:f1:e0:75:82:73:ac:9c:83:b4: a7:73:a8:77:5d:99:2b:f9:1f:4c:64:e7:0c:e8:87:b0:51:48: b8:db:dd:f9:17:2d:2b:46:38:59:b0:5a:35:7f:10:de:d1:13: b7:f0:95:03:ef:63:e7:42:11:e5:4e:ef:16:37:72:87:50:da: 81:93:a4:1e:72:5d:3a:07:e1:7e:9e:00:65:e7:57:1b:e6:53: d2:70:1f:b6:c9:10:15:76:07:8d:e8:cd:71:f5:68:2a:49:4b: a4:09:c0:bf:88:4d:28:a3:0d:89:e1:83:10:2a:fd:0e:df:dd: ea:c9:99:6b:b5:90:d5:7c:b4:e9:de:1c:03:34:a4:70:8e:13: a1:e6:93:5c:a0:54:3b:38:eb:f9:b1:0a:fa:52:49:55:25:b6: cf:8d:85:1a:8f:ce:b1:fa:51:ff:20:f9:b0:bd:48:5d:ae:95: 76:fd:d9:b9:56:15:d6:83:b9:04:7d:7f:93:49:32:e2:71:12: 6f:12:64:4f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwMzE3MDEzNDQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4YWZiNC04YjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzF+xwoC5IKsLkZcwIMF5eM9Khew1VUDj4CibEU7ljj6M01XpC2y+a7Y6Zyf G4nF4mUFQ3hhcRAVzvI2cHcsVsnVcQodFXCRBF4m9HMwHJ8DlXUdnmIOlF1IYkKB XyXESZoo1HmlHsKD8wtLedn3sASdVf+Yf2AOjp7EDRhYmVYoPlLJR0y01z291jZj Bwk6gfRkEc/KNLUpK/LEPBy0DlfICoqGUToXtFq3gSQsOgE5xyqZZ0nJeW9VaizW vjfFDFByi9m/ta8jFUhC8Zj/RtOSXhXgi0P9WXCYMi9nyYlFKLnGgImQDAhkVJ9F gNW98ydFBK4o7EY+PZ6ULhztkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGEWa2Dm xiJZi/ghL0fRyO7Ih5ahMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvQkVFOTZCQTIx MkE4MTFGMUE1NEI3NUFFM0QzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCpnjEMA0GCSqGSIb3DQEBCwUAA4IBAQARpRKnK5JhZ3NX4Nm/GrlM aFSzHNJ11IcRHuOcYgEUaxmAli6R853xYeGNN5WL3BGNXRYFVeJr8c8+UaTHZJzx 4HWCc6ycg7Snc6h3XZkr+R9MZOcM6IewUUi42935Fy0rRjhZsFo1fxDe0RO38JUD 72PnQhHlTu8WN3KHUNqBk6Qecl06B+F+ngBl51cb5lPScB+2yRAVdgeN6M1x9Wgq SUukCcC/iE0oow2J4YMQKv0O393qyZlrtZDVfLTp3hwDNKRwjhOh5pNcoFQ7OOv5 sQr6UklVJbbPjYUaj86x+lH/IPmwvUhdrpV2/dm5VhXWg7kEfX+TSTLicRJvEmRP -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:28 2026 by rpki-client