$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa File: 97834674B8C511F0A874F663C4F9AE02.roa (raw, json) Hash identifier: 26Gc47qWjDTC53MNNE9xaiVTfxfy+II3G+DNkYRVJGI= Subject key identifier: 1B:64:1B:F7:BE:06:CE:10:BC:2D:3E:5C:7E:8B:25:C1:99:8E:19:26 Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D04 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa Signing time: Mon 03 Nov 2025 14:58:44 +0000 ROA not before: Mon 03 Nov 2025 14:58:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149765 IP address blocks: 123.136.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Nov 3 14:58:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6908c324-5c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6c:d1:3d:65:47:03:47:bf:d5:a1:f1:2c:52: 1d:4c:16:29:50:c1:56:02:29:f4:b3:96:30:ff:3c: b6:fa:9a:0c:5a:9a:60:69:07:f9:14:49:13:7a:9d: 84:3d:a2:23:25:50:e9:63:a0:e7:3a:2f:f8:85:71: 34:93:6b:45:ea:38:ab:fd:8a:5c:fd:97:23:95:e0: 49:cb:df:54:ca:3d:77:b6:9a:b4:7a:99:33:ef:7e: f3:bc:f5:16:01:91:c6:85:44:f8:5d:a6:96:02:c9: 05:5f:80:ae:eb:c3:84:22:6f:77:e0:c9:61:c3:7b: 39:5d:fe:49:40:7e:7b:d2:7d:08:0c:2c:b0:d4:f7: dc:34:f7:27:ab:b3:a5:c7:fa:ee:ba:dd:f3:59:3c: 33:ad:68:aa:13:f5:23:96:b0:36:c5:ff:e0:bf:ec: ad:2b:1a:d5:77:b7:8b:e6:2a:fc:fd:bc:c4:bb:31: 94:e0:14:23:e8:e0:bc:0a:30:56:c0:f5:28:9d:4b: 7d:3f:3f:bf:c1:19:7f:83:f8:4d:5e:3b:c5:e1:fe: 44:86:33:01:06:12:2b:a3:29:13:d7:b3:c1:38:81: 23:2c:b6:1a:17:6d:e6:9d:88:c1:29:5c:73:b7:82: 7c:1c:db:71:8e:45:80:02:30:69:ae:06:e7:a3:cd: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:64:1B:F7:BE:06:CE:10:BC:2D:3E:5C:7E:8B:25:C1:99:8E:19:26 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/97834674B8C511F0A874F663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.136.28.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:20:4a:49:eb:f7:ac:1e:14:9a:45:97:cf:80:3c:d3:ad:b1: 62:9d:58:56:7d:54:21:61:95:c8:fb:f8:76:18:5a:63:d1:31: 18:34:63:75:5f:bf:5a:fa:e0:b2:c0:d8:dd:04:27:4c:72:4a: 54:fb:f0:c3:ea:e6:b2:e0:d2:6f:27:4f:cf:24:cf:0f:d3:a9: 5f:d9:32:ab:db:1d:b5:3f:b6:d4:ae:bc:1c:ec:63:db:d5:91: 78:8e:5c:ae:86:af:20:49:78:39:57:64:81:5a:5a:76:50:15: d4:c6:4c:d0:2a:ed:4b:94:1c:d0:9c:2a:b0:d4:fc:6a:ee:a1: 71:dc:58:c2:fd:e8:dc:25:e9:a6:69:bf:ff:62:bb:f3:cb:a1: 67:15:5f:26:17:33:34:c2:b9:eb:4e:98:a9:4a:09:67:b5:a1: c1:ea:4c:c5:f8:e2:be:b7:a4:a9:d8:27:30:50:a0:88:93:23: c9:71:5a:68:51:5b:54:4b:d3:62:b7:ca:25:8c:ca:30:37:e9: 71:1a:aa:c8:ee:16:8d:cd:43:60:93:cb:0b:33:db:40:a6:e8: a6:14:31:49:9d:4b:92:43:7c:5a:23:1e:98:18:63:4d:f3:08: be:09:c7:14:3a:b7:26:fb:39:04:34:45:41:d9:1b:91:75:d6: 9e:89:36:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMTAzMTQ1ODQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4YzMyNC01YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mzRPWVHA0e/1aHxLFIdTBYpUMFWAin0s5Yw/zy2+poMWppgaQf5FEkTep2E PaIjJVDpY6DnOi/4hXE0k2tF6jir/Ypc/ZcjleBJy99Uyj13tpq0epkz737zvPUW AZHGhUT4XaaWAskFX4Cu68OEIm934Mlhw3s5Xf5JQH570n0IDCyw1PfcNPcnq7Ol x/ruut3zWTwzrWiqE/UjlrA2xf/gv+ytKxrVd7eL5ir8/bzEuzGU4BQj6OC8CjBW wPUonUt9Pz+/wRl/g/hNXjvF4f5EhjMBBhIroykT17PBOIEjLLYaF23mnYjBKVxz t4J8HNtxjkWAAjBprgbno82RIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBtkG/e+ Bs4QvC0+XH6LJcGZjhkmMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjcwOEYvNTZEQjBGMjRGMTYzMTFFOTlEQkVERjY1QzRGOUFFMDIvOTc4MzQ2NzRC OEM1MTFGMEE4NzRGNjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7iBwwDQYJKoZIhvcNAQELBQADggEBAJ4gSknr96weFJpF l8+APNOtsWKdWFZ9VCFhlcj7+HYYWmPRMRg0Y3Vfv1r64LLA2N0EJ0xySlT78MPq 5rLg0m8nT88kzw/TqV/ZMqvbHbU/ttSuvBzsY9vVkXiOXK6GryBJeDlXZIFaWnZQ FdTGTNAq7UuUHNCcKrDU/GruoXHcWML96Nwl6aZpv/9iu/PLoWcVXyYXMzTCuetO mKlKCWe1ocHqTMX44r63pKnYJzBQoIiTI8lxWmhRW1RL02K3yiWMyjA36XEaqsju Fo3NQ2CTywsz20Cm6KYUMUmdS5JDfFojHpgYY03zCL4JxxQ6tyb7OQQ0RUHZG5F1 1p6JNhU= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:31 2025 by rpki-client