$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa File: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (raw, json) Hash identifier: fajAFqylWikP3Jikl5nRrG0DTxFJf4fODLkvijKh8uw= Subject key identifier: 9F:7D:F7:C9:AE:95:A4:7F:68:A7:46:32:46:E9:91:E8:A3:FD:F4:B2 Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 1102 Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa Signing time: Sat 24 May 2025 17:49:46 +0000 ROA not before: Sat 24 May 2025 17:49:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45622 IP address blocks: 121.97.54.0/24 maxlen: 24 121.97.55.0/24 maxlen: 24 121.97.56.0/24 maxlen: 24 121.97.59.0/24 maxlen: 24 125.212.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 17:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4354 (0x1102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: May 24 17:49:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683206b9-a914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:06:92:8d:45:50:34:0a:c1:25:56:bf:77: 3f:e2:48:c7:08:ad:dd:3e:f7:67:ef:d5:48:ff:ee: 7f:aa:94:4e:7f:0b:5b:fb:89:7b:5e:19:9a:3b:ee: 60:51:a5:1d:5a:d2:f4:b8:51:9a:f8:2d:3e:4c:a7: 68:7f:f5:43:8c:50:b9:c3:54:72:74:2a:e4:72:c6: eb:00:54:e2:e9:7f:64:6f:a0:58:c7:fc:eb:b1:3f: 44:f7:e0:12:b8:ac:0d:96:19:2d:b2:ae:b1:24:11: 07:e9:e3:3b:7c:f3:59:18:0f:ed:32:ee:5e:44:f4: 86:91:d5:37:99:0e:2c:8a:37:7d:9d:3e:aa:01:96: 83:14:16:62:f9:c4:85:f5:78:e8:2c:77:b2:a7:33: ad:5c:53:a8:df:fc:0c:09:d8:3e:49:d0:05:34:57: 42:9b:62:73:ea:a2:71:4e:d0:a2:2a:7d:b7:ec:df: 71:47:b6:a1:32:91:0e:99:a3:3b:8b:08:44:ed:4c: 92:55:c1:70:8a:a0:7a:a6:49:a3:c4:19:5f:62:78: b7:33:9c:5a:44:03:e0:3e:ae:49:54:9a:d2:74:ef: a5:16:2b:ad:9c:9c:81:49:4e:09:d0:67:19:bb:df: cd:22:5d:76:89:68:6a:16:b6:91:4b:d5:fe:1c:03: 6a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7D:F7:C9:AE:95:A4:7F:68:A7:46:32:46:E9:91:E8:A3:FD:F4:B2 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.97.54.0-121.97.56.255 121.97.59.0/24 125.212.56.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:03:75:8b:d1:7f:55:7a:06:24:ca:6c:88:66:3f:1c:5e:c1: 4b:aa:5f:27:62:4a:5a:e9:c4:d4:4e:70:b7:35:e4:55:ec:09: 27:ee:94:b8:8b:4e:2b:0a:80:35:0e:0b:27:0b:c7:19:8b:00: 0f:c4:38:60:4f:5a:be:bf:f6:22:91:20:87:83:f6:7c:c4:ff: 7a:e2:33:e5:43:cb:ad:08:ac:7a:2a:05:5f:7b:0a:ed:76:6b: 9e:b9:30:01:5c:30:dd:4a:a7:45:bb:ac:a8:6f:55:ee:4b:57: 20:2d:68:9a:41:53:95:ab:e7:c3:32:21:14:6f:20:a0:69:66: e0:f3:74:6e:a9:d8:99:bb:5d:eb:b6:91:4e:c1:e8:0b:01:f1: d5:4f:41:04:0a:77:3f:2b:21:a6:63:0c:f0:d3:7b:f3:48:74: 1b:7f:7b:b6:63:b6:53:f0:57:a1:33:ea:02:18:bc:19:ab:a7: 4d:7c:85:a8:4b:50:0c:84:c0:b0:57:2a:41:d4:f5:00:ad:65: 22:87:b5:8a:8f:b1:00:cf:fe:2d:67:42:db:18:7e:49:ff:2b: a5:f1:bd:21:b4:59:f1:8e:7b:7e:52:e7:bf:97:ad:ca:58:3e: 34:b2:73:c4:21:ca:36:fb:a9:39:3e:48:17:d5:f3:b8:48:45: 7d:d9:54:12 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICEQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUwNTI0MTc0OTQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMyMDZiOS1hOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xUGko1FUDQKwSVWv3c/4kjHCK3dPvdn79VI/+5/qpROfwtb+4l7XhmaO+5g UaUdWtL0uFGa+C0+TKdof/VDjFC5w1RydCrkcsbrAFTi6X9kb6BYx/zrsT9E9+AS uKwNlhktsq6xJBEH6eM7fPNZGA/tMu5eRPSGkdU3mQ4sijd9nT6qAZaDFBZi+cSF 9XjoLHeypzOtXFOo3/wMCdg+SdAFNFdCm2Jz6qJxTtCiKn237N9xR7ahMpEOmaM7 iwhE7UySVcFwiqB6pkmjxBlfYni3M5xaRAPgPq5JVJrSdO+lFiutnJyBSU4J0GcZ u9/NIl12iWhqFraRS9X+HANqYQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFJ9998mu laR/aKdGMkbpkeij/fSyMB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5QkMvODkyODk3MzAyRTkwMTFFOTkxNzc5NjBGQzRGOUFFMDIvOERGREY4QUUy RTk1MTFFOTg5NkVGQTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAXlhNgMEAHlhOAMEAHlhOwMEAH3UODANBgkqhkiG9w0B AQsFAAOCAQEADQN1i9F/VXoGJMpsiGY/HF7BS6pfJ2JKWunE1E5wtzXkVewJJ+6U uItOKwqANQ4LJwvHGYsAD8Q4YE9avr/2IpEgh4P2fMT/euIz5UPLrQiseioFX3sK 7XZrnrkwAVww3UqnRbusqG9V7ktXIC1omkFTlavnwzIhFG8goGlm4PN0bqnYmbtd 67aRTsHoCwHx1U9BBAp3PyshpmMM8NN780h0G397tmO2U/BXoTPqAhi8GaunTXyF qEtQDITAsFcqQdT1AK1lIoe1io+xAM/+LWdC2xh+Sf8rpfG9IbRZ8Y57flLnv5et ylg+NLJzxCHKNvupOT5IF9XzuEhFfdlUEg== -----END CERTIFICATE-----Generated at Sat Jun 7 05:37:19 2025 by rpki-client