$ rpki-client -vvf rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/9FA4EC40947B11F0A24B7978C4F9AE02.roa File: 9FA4EC40947B11F0A24B7978C4F9AE02.roa (raw, json) Hash identifier: JYmB4W7W6lFlMOSoZJ8ec6FnKgwdp6+4B00V/u5Ps2s= Subject key identifier: 5E:4A:3C:34:34:86:BF:5A:F2:B5:6F:C2:B8:F0:E8:F1:98:3D:FF:FA Certificate issuer: /CN=A911FC14/serialNumber=BCA8DEFB62AF7403407707C7E7F57A2BC8E84004 Certificate serial: 02 Authority key identifier: BC:A8:DE:FB:62:AF:74:03:40:77:07:C7:E7:F5:7A:2B:C8:E8:40:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKje-2KvdANAdwfH5_V6K8joQAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/9FA4EC40947B11F0A24B7978C4F9AE02.roa Signing time: Thu 18 Sep 2025 10:38:33 +0000 ROA not before: Thu 18 Sep 2025 10:38:33 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136141 IP address blocks: 121.200.220.0/24 maxlen: 24 121.200.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.crl rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKje-2KvdANAdwfH5_V6K8joQAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 10:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FC14, serialNumber=BCA8DEFB62AF7403407707C7E7F57A2BC8E84004 Validity Not Before: Sep 18 10:38:33 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68cbe129-5411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:eb:aa:0e:f3:59:4a:98:ab:d4:94:24:7d: a9:71:e2:4d:13:37:fa:51:0a:0a:e0:79:d8:61:4f: 89:b1:11:ca:f5:cf:97:83:56:02:d6:59:a0:18:ea: 73:2a:18:24:c4:cd:1d:f3:8a:ee:9a:f2:6a:26:91: 0d:d7:4d:aa:ce:87:9b:54:a6:94:ce:ac:88:b2:10: a5:ba:18:9d:aa:d2:d0:e1:14:47:e5:c5:93:8a:99: 52:a1:6c:93:0b:26:90:c5:fa:fb:c1:0d:37:a4:ed: 94:45:e3:ec:4a:7d:74:8e:86:a3:46:2f:84:4e:0a: 26:3c:a6:92:56:ce:c8:83:e6:2b:04:a3:a1:1c:52: 95:93:e2:63:3a:b7:20:a6:3b:f5:60:e3:05:16:8e: c3:b1:8d:eb:e9:89:c2:4e:e6:89:c2:20:0f:43:8e: 26:08:58:e7:4c:86:e1:3c:67:80:da:5f:49:54:f3: af:1e:05:1a:05:99:d0:85:80:82:31:87:c0:cf:db: f8:e1:e0:86:45:7b:df:1e:3c:df:9d:ec:54:6b:0a: a7:74:d0:89:9a:e0:54:86:1a:4a:4f:48:70:1b:ce: ef:bf:ef:fb:83:0e:96:64:44:cb:ae:7e:55:81:57: b0:58:1c:8f:71:9d:d9:ea:38:98:2f:db:00:14:58: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4A:3C:34:34:86:BF:5A:F2:B5:6F:C2:B8:F0:E8:F1:98:3D:FF:FA X509v3 Authority Key Identifier: keyid:BC:A8:DE:FB:62:AF:74:03:40:77:07:C7:E7:F5:7A:2B:C8:E8:40:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/vKje-2KvdANAdwfH5_V6K8joQAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKje-2KvdANAdwfH5_V6K8joQAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FC14/12530BC4947B11F094B09A77C4F9AE02/9FA4EC40947B11F0A24B7978C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.220.0/23 Signature Algorithm: sha256WithRSAEncryption c2:91:d7:2b:e4:08:6d:64:ca:95:17:83:4d:6a:30:e0:f1:df: 93:eb:84:45:5f:16:fe:b0:ea:bb:5a:14:52:f6:d1:10:26:c3: 2b:69:41:34:13:8c:2e:24:b6:93:1a:92:aa:1b:72:94:9d:84: 89:aa:80:21:83:82:68:b5:38:2b:df:08:ed:68:23:31:90:a9: 62:c4:2a:49:10:93:cc:5e:ac:8d:6d:a1:e0:1d:eb:c9:40:8a: c7:22:0d:83:2d:1f:16:1e:d2:bf:41:2f:7b:86:e5:fd:90:25: f3:5a:4f:92:57:a7:a2:b1:d9:e3:16:e4:a3:a2:65:db:81:ae: f6:0f:75:7b:f7:b8:cb:a5:3a:db:13:2e:3b:f0:17:8b:d5:04: b5:cc:a6:56:f6:38:04:f5:0f:cd:2e:f4:6c:b4:da:1a:bb:93: 6c:a8:09:d4:f9:31:4f:be:7e:d0:cd:6e:2f:c8:95:13:94:ce: 99:1b:84:f1:e1:f4:3f:a5:9e:b7:b1:40:9d:7b:b1:0e:94:3d: 88:1f:b2:81:91:6a:3f:a1:e9:9b:a0:84:c4:61:73:8c:4a:7d: 04:db:1f:9c:64:49:98:60:85:48:4f:d5:dc:78:d6:43:a3:59: 90:d0:8e:cc:ae:94:c9:2a:26:70:6d:5c:f0:d2:22:5b:7b:35: 72:12:05:41 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RkMxNDExMC8GA1UEBRMoQkNBOERFRkI2MkFGNzQwMzQwNzcwN0M3RTdGNTdBMkJD OEU4NDAwNDAeFw0yNTA5MTgxMDM4MzNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Y2JlMTI5LTU0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvK+uqDvNZSpir1JQkfalx4k0TN/pRCgrgedhhT4mxEcr1z5eDVgLWWaAY6nMq GCTEzR3ziu6a8momkQ3XTarOh5tUppTOrIiyEKW6GJ2q0tDhFEflxZOKmVKhbJML JpDF+vvBDTek7ZRF4+xKfXSOhqNGL4ROCiY8ppJWzsiD5isEo6EcUpWT4mM6tyCm O/Vg4wUWjsOxjevpicJO5onCIA9DjiYIWOdMhuE8Z4DaX0lU868eBRoFmdCFgIIx h8DP2/jh4IZFe98ePN+d7FRrCqd00Ima4FSGGkpPSHAbzu+/7/uDDpZkRMuuflWB V7BYHI9xndnqOJgv2wAUWB3bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXko8NDSG v1rytW/CuPDo8Zg9//owHwYDVR0jBBgwFoAUvKje+2KvdANAdwfH5/V6K8joQAQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGQzE0LzEyNTMwQkM0OTQ3 QjExRjA5NEIwOUE3N0M0RjlBRTAyL3ZLamUtMkt2ZEFOQWR3Zkg1X1Y2Szhqb1FB US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdktqZS0yS3ZkQU5BZHdmSDVfVjZLOGpvUUFRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkMxNC8xMjUzMEJDNDk0N0IxMUYwOTRCMDlBNzdDNEY5QUUwMi85RkE0RUM0MDk0 N0IxMUYwQTI0Qjc5NzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAXnI3DANBgkqhkiG9w0BAQsFAAOCAQEAwpHXK+QIbWTKlReD TWow4PHfk+uERV8W/rDqu1oUUvbRECbDK2lBNBOMLiS2kxqSqhtylJ2EiaqAIYOC aLU4K98I7WgjMZCpYsQqSRCTzF6sjW2h4B3ryUCKxyINgy0fFh7Sv0Eve4bl/ZAl 81pPklenorHZ4xbko6Jl24Gu9g91e/e4y6U62xMuO/AXi9UEtcymVvY4BPUPzS70 bLTaGruTbKgJ1PkxT75+0M1uL8iVE5TOmRuE8eH0P6Wet7FAnXuxDpQ9iB+ygZFq P6Hpm6CExGFzjEp9BNsfnGRJmGCFSE/V3HjWQ6NZkNCOzK6UySomcG1c8NIiW3s1 chIFQQ== -----END CERTIFICATE-----Generated at Fri Sep 19 02:53:24 2025 by rpki-client