$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa File: FBD80F88F92111EAABA5882BC4F9AE02.roa (raw, json) Hash identifier: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo= Subject key identifier: 10:9B:14:08:98:CB:B3:CA:6F:84:3B:BD:0F:82:06:53:06:73:21:0E Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 31DE Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa Signing time: Wed 30 Apr 2025 15:52:25 +0000 ROA not before: Wed 30 Apr 2025 15:52:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40009 IP address blocks: 121.244.74.0/23 maxlen: 23 121.244.136.0/24 maxlen: 24 121.244.137.0/24 maxlen: 24 121.244.172.0/24 maxlen: 24 121.244.173.0/24 maxlen: 24 121.244.190.0/23 maxlen: 23 121.244.204.0/24 maxlen: 24 121.244.205.0/24 maxlen: 24 203.200.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12766 (0x31de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68124739-7750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:73:79:8a:7c:80:09:17:2b:58:f9:52:3f:74: f5:0d:96:a2:51:55:30:d4:ba:3b:45:c3:8c:7e:ec: 6c:cb:dd:35:24:c9:75:55:2a:10:e4:3c:37:b7:6d: 88:4f:d3:a2:b8:65:e4:f4:a5:fa:84:dc:79:a6:27: 83:06:17:ee:29:07:b6:e9:01:f1:8c:53:06:3e:9f: 17:13:0d:56:8d:2e:4e:ad:70:1b:d7:bd:b0:6a:e4: 9e:6c:0a:90:41:bb:8f:c6:99:47:df:fb:cf:70:59: 68:a2:9c:a8:af:c8:ea:6a:0e:27:84:1c:b2:1b:fc: 39:ab:44:02:59:33:a7:09:2b:87:b1:6c:da:ba:e7: 79:50:07:c1:34:6a:9c:65:32:bd:d7:86:f2:c5:f8: b6:57:25:ea:79:9f:f7:05:84:c0:c6:63:3b:80:d3: 4d:55:30:ab:48:99:70:07:97:a1:17:fa:c7:26:ce: f4:8f:98:c4:73:86:8e:90:c4:17:e8:d6:85:af:ac: f9:c1:ea:31:c6:90:00:e5:cd:f9:94:1a:d2:1f:7f: a8:ca:10:67:b9:20:36:e2:1c:c1:35:ba:4e:57:cc: c5:68:96:b9:b2:15:57:b1:6f:e4:4e:26:9c:88:02: cd:ab:2c:f1:19:82:13:6d:3d:49:2a:d8:ef:39:4d: 6c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9B:14:08:98:CB:B3:CA:6F:84:3B:BD:0F:82:06:53:06:73:21:0E X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.244.74.0/23 121.244.136.0/23 121.244.172.0/23 121.244.190.0/23 121.244.204.0/23 203.200.108.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a7:d0:0d:f6:cc:39:3c:dd:77:a0:96:9a:09:aa:10:33:75: 49:5a:d5:c2:c7:3c:6f:31:bc:f6:b4:68:b9:95:1c:ab:7d:95: cd:aa:b9:bb:4f:55:f1:1e:91:67:11:37:34:7a:d4:3c:d0:47: 9a:22:27:3c:d1:c0:63:11:75:ef:c1:f7:1d:3c:01:75:1a:bb: d2:5c:e9:aa:8d:ae:5c:3d:c5:1a:66:52:33:73:88:4b:d5:9d: b4:ed:18:cd:06:0e:19:6c:18:13:eb:9a:5a:02:2e:c5:d7:2c: 1f:79:b0:68:4b:11:95:cf:bd:49:2b:77:82:e9:94:4a:aa:a2: 47:86:aa:90:f1:1d:36:f1:05:ad:93:50:7c:ff:cb:d4:24:08: 00:d7:3f:f1:34:40:f0:16:76:fa:78:18:2e:03:86:34:9d:8d: 6b:67:64:0a:4d:c3:2e:e0:df:1e:d2:7c:27:39:da:8e:7e:b7: bf:69:4b:ac:0b:f0:32:47:e8:96:2c:d0:b6:c8:e9:ce:8f:ff: 95:29:c0:3c:35:c2:53:cc:6f:c9:1a:01:41:d7:4d:0f:bd:46: be:7e:27:5d:87:45:5b:fe:b6:60:d1:41:e4:be:15:88:bb:ba: 78:d5:df:d5:6c:82:d1:de:95:2a:65:9f:ae:3d:f3:b5:f9:2b: 17:4b:c5:35 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICMd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjUwNDMwMTU1MjI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNDczOS03NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHN5inyACRcrWPlSP3T1DZaiUVUw1Lo7RcOMfuxsy901JMl1VSoQ5Dw3t22I T9OiuGXk9KX6hNx5pieDBhfuKQe26QHxjFMGPp8XEw1WjS5OrXAb172wauSebAqQ QbuPxplH3/vPcFloopyor8jqag4nhByyG/w5q0QCWTOnCSuHsWzauud5UAfBNGqc ZTK914byxfi2VyXqeZ/3BYTAxmM7gNNNVTCrSJlwB5ehF/rHJs70j5jEc4aOkMQX 6NaFr6z5weoxxpAA5c35lBrSH3+oyhBnuSA24hzBNbpOV8zFaJa5shVXsW/kTiac iALNqyzxGYITbT1JKtjvOU1sEQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFBCbFAiY y7PKb4Q7vQ+CBlMGcyEOMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvRkJEODBGODhG OTIxMTFFQUFCQTU4ODJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAF59EoDBAF59IgDBAF59KwDBAF59L4DBAF59MwDBADLyGww DQYJKoZIhvcNAQELBQADggEBAAmn0A32zDk83XeglpoJqhAzdUla1cLHPG8xvPa0 aLmVHKt9lc2qubtPVfEekWcRNzR61DzQR5oiJzzRwGMRde/B9x08AXUau9Jc6aqN rlw9xRpmUjNziEvVnbTtGM0GDhlsGBPrmloCLsXXLB95sGhLEZXPvUkrd4LplEqq okeGqpDxHTbxBa2TUHz/y9QkCADXP/E0QPAWdvp4GC4DhjSdjWtnZApNwy7g3x7S fCc52o5+t79pS6wL8DJH6JYs0LbI6c6P/5UpwDw1wlPMb8kaAUHXTQ+9Rr5+J12H RVv+tmDRQeS+FYi7unjV39VsgtHelSpln64987X5KxdLxTU= -----END CERTIFICATE-----Generated at Fri Oct 24 06:43:30 2025 by rpki-client