$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa File: 2DED29046A8E11EF948C2811C4F9AE02.roa (raw, json) Hash identifier: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k= Subject key identifier: 25:A1:5F:E2:83:5E:19:48:8A:87:96:B7:CC:DF:CF:CF:B0:6D:16:74 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 35AC Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa Signing time: Sat 30 May 2026 15:10:30 +0000 ROA not before: Sat 30 May 2026 15:10:30 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 10139 IP address blocks: 121.1.0.0/20 maxlen: 24 121.1.16.0/20 maxlen: 24 121.1.32.0/19 maxlen: 24 121.54.0.0/17 maxlen: 24 125.60.128.0/17 maxlen: 24 175.158.192.0/18 maxlen: 24 175.176.0.0/17 maxlen: 24 203.84.160.0/19 maxlen: 24 203.87.128.0/17 maxlen: 24 203.111.224.0/20 maxlen: 24 203.201.180.0/24 maxlen: 24 2407:9800:2000::/36 maxlen: 36 2407:9800:5000::/36 maxlen: 36 2407:9800:6000::/36 maxlen: 36 2407:9800:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 14:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13740 (0x35ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: May 30 15:10:30 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a1afde6-4789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:8e:77:c6:9e:80:76:fe:57:45:4a:1f:d4: f6:08:94:cf:85:ad:65:cd:04:66:99:1c:78:8c:0e: 12:e6:a5:39:66:2f:44:e1:92:3c:95:44:50:5d:c2: 92:e3:ef:c7:e3:75:4b:b7:ae:b2:d4:b3:d0:d0:91: 95:e8:64:80:64:b0:fc:40:7f:64:6a:b3:96:fe:48: 18:b3:3a:5d:0e:61:75:3a:d6:e9:92:af:7b:91:9f: b5:14:ab:b7:1d:7f:1f:f8:cc:54:b5:19:5a:bc:0b: e8:7b:ff:a7:51:b8:23:61:ac:64:b2:23:6c:d8:76: 4f:46:f4:f7:1e:2e:74:8e:1b:6b:0e:f8:63:f4:4c: d2:2c:44:34:7a:79:b2:98:4f:51:ef:e2:7a:ac:8e: 7a:d5:0a:1b:b1:11:93:b5:9b:ac:55:8e:04:34:ce: c8:89:3b:4a:79:2a:b4:46:c4:53:b4:1d:08:af:27: e7:ec:a2:8a:25:f0:5d:e9:36:62:e5:82:92:48:d0: 9e:b3:19:5a:69:1f:7a:54:6f:23:0f:ce:87:cf:17: 9d:6c:04:2f:4c:18:d6:1e:78:7c:e4:f8:72:72:be: d1:2d:e1:9f:68:5e:f9:51:6e:29:f3:c9:b4:65:ea: b6:1c:50:95:34:c9:fb:76:56:21:79:0d:31:a6:f6: e0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A1:5F:E2:83:5E:19:48:8A:87:96:B7:CC:DF:CF:CF:B0:6D:16:74 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.1.0.0/18 121.54.0.0/17 125.60.128.0/17 175.158.192.0/18 175.176.0.0/17 203.84.160.0/19 203.87.128.0/17 203.111.224.0/20 203.201.180.0/24 IPv6: 2407:9800:2000::/36 2407:9800:5000::-2407:9800:6fff:ffff:ffff:ffff:ffff:ffff 2407:9800:9000::/36 Signature Algorithm: sha256WithRSAEncryption 53:e2:55:b6:f7:18:b9:bc:e0:e9:49:f3:62:c0:82:67:3f:d7: 87:50:5c:80:77:2c:69:e4:e7:d3:77:d2:6e:93:02:d7:73:75: 33:e2:34:39:e4:e6:85:3f:0b:2d:45:24:51:00:0c:35:4b:84: 3e:29:e8:ff:34:2c:87:8f:82:a1:47:ad:73:80:52:b2:27:e2: 32:2d:e2:2a:ed:4b:49:9d:fe:99:a0:42:ce:23:c5:0d:9d:6c: c0:92:4c:aa:78:9b:10:eb:f5:e5:c3:91:38:62:08:7b:44:23: 79:45:24:7a:34:0f:f2:41:cb:c5:52:21:9b:25:c9:eb:a7:45: c0:0f:b6:4c:b7:ea:d7:58:00:4e:b7:95:69:89:57:c6:67:eb: b5:fc:c2:e0:e5:c0:b7:e0:1b:8c:c4:38:ed:da:29:e4:36:c4: aa:3b:74:49:87:5d:88:eb:37:70:0c:d5:9f:4b:b8:a5:8f:ce: 78:e0:91:08:3c:fd:c7:6e:4b:f0:ed:af:10:10:9b:76:d9:83: a3:1e:93:e7:b4:c5:10:f6:66:80:45:39:75:87:b5:30:68:5c: e0:d8:54:04:6c:a6:56:d4:25:d6:d8:06:74:87:68:a1:e4:ce: 9f:9f:21:12:86:e8:44:b7:6b:86:a9:09:11:2c:8a:c3:6f:a8: e1:56:38:d9 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjYwNTMwMTUxMDMwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTFhZmRlNi00Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEyOd8aegHb+V0VKH9T2CJTPha1lzQRmmRx4jA4S5qU5Zi9E4ZI8lURQXcKS 4+/H43VLt66y1LPQ0JGV6GSAZLD8QH9karOW/kgYszpdDmF1Otbpkq97kZ+1FKu3 HX8f+MxUtRlavAvoe/+nUbgjYaxksiNs2HZPRvT3Hi50jhtrDvhj9EzSLEQ0enmy mE9R7+J6rI561QobsRGTtZusVY4ENM7IiTtKeSq0RsRTtB0Iryfn7KKKJfBd6TZi 5YKSSNCesxlaaR96VG8jD86HzxedbAQvTBjWHnh85Phycr7RLeGfaF75UW4p88m0 Zeq2HFCVNMn7dlYheQ0xpvbgEQIDAQABo4ICujCCArYwHQYDVR0OBBYEFCWhX+KD XhlIioeWt8zfz8+wbRZ0MB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZERDgvRjA0ODUyNDIxRDg2MTFFMjg2MTE4Q0RFMDhCMDJDRDIvMkRFRDI5MDQ2 QThFMTFFRjk0OEMyODExQzRGOUFFMDIucm9hMHkGCCsGAQUFBwEHAQH/BGowaDA8 BAIAATA2AwQGeQEAAwQHeTYAAwQHfTyAAwQGr57AAwQHr7AAAwQFy1SgAwQHy1eA AwQEy2/gAwQAy8m0MCgEAgACMCIDBgQkB5gAIDAQAwYEJAeYAFADBgQkB5gAYAMG BCQHmACQMA0GCSqGSIb3DQEBCwUAA4IBAQBT4lW29xi5vODpSfNiwIJnP9eHUFyA dyxp5OfTd9JukwLXc3Uz4jQ55OaFPwstRSRRAAw1S4Q+Kej/NCyHj4KhR61zgFKy J+IyLeIq7UtJnf6ZoELOI8UNnWzAkkyqeJsQ6/Xlw5E4Ygh7RCN5RSR6NA/yQcvF UiGbJcnrp0XAD7ZMt+rXWABOt5VpiVfGZ+u1/MLg5cC34BuMxDjt2inkNsSqO3RJ h12I6zdwDNWfS7ilj8544JEIPP3Hbkvw7a8QEJt22YOjHpPntMUQ9maARTl1h7Uw aFzg2FQEbKZW1CXW2AZ0h2ih5M6fnyEShuhEt2uGqQkRLIrDb6jhVjjZ -----END CERTIFICATE-----Generated at Sat Jun 6 17:00:45 2026 by rpki-client