$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa File: 81ACB3888C9611EE88DE0726C4F9AE02.roa (raw, json) Hash identifier: SGgawQJ8e+bc7GkpKZMh+cEtFBap2rFAVcln1BmNOkI= Subject key identifier: BE:2E:98:78:DB:16:5D:52:F2:1F:F5:22:D2:90:B4:CD:AB:23:9E:59 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3623 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa Signing time: Tue 02 Sep 2025 15:01:17 +0000 ROA not before: Tue 02 Sep 2025 15:01:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135027 IP address blocks: 117.121.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13859 (0x3623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b706bd-737e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:4b:60:ec:d9:1b:26:33:44:9e:77:d0:a4: 62:e7:10:08:d2:12:4d:5b:1e:a2:ab:eb:3f:4e:4d: 08:05:4d:8d:a7:a6:48:bc:3d:61:0f:4b:c3:6a:b1: 07:1c:83:1e:4c:55:fe:0c:ca:2f:75:93:63:8a:b4: 9d:42:fe:e0:5c:2d:ce:62:09:a0:91:27:cf:6c:04: 2b:93:92:19:1b:ba:07:81:a0:de:20:52:21:d1:0a: b8:fb:f7:60:9d:79:ac:0e:03:4b:77:28:e1:26:17: d4:d5:21:4c:76:16:04:7a:67:4d:0d:af:03:fa:ef: 73:ed:1a:4c:b1:ad:e2:4f:27:5d:0e:3f:ca:bd:78: e9:ce:3a:e9:ea:d5:bc:a4:9c:e5:fc:9f:24:b9:80: 15:09:f5:d1:a1:a6:f7:0e:ce:2b:52:26:44:55:e2: 3d:ec:fc:6e:22:d6:32:47:b0:1e:b2:94:01:7a:67: 49:56:35:18:64:9d:d1:14:71:86:ce:c3:3b:86:75: c2:40:59:ac:ad:17:c3:a6:36:6f:41:2f:4c:6a:01: e8:c6:10:64:a8:31:68:3e:c3:be:6c:f9:66:d6:cb: 9e:a7:df:52:84:cf:7f:e3:7f:80:87:1f:29:c6:66: 7b:99:1e:ab:a4:8e:85:68:79:63:2c:57:a1:91:e4: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2E:98:78:DB:16:5D:52:F2:1F:F5:22:D2:90:B4:CD:AB:23:9E:59 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/81ACB3888C9611EE88DE0726C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.121.243.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ce:11:dd:3d:d3:ce:4f:d6:27:22:fa:31:2e:8d:46:28:1f: ad:31:d5:58:98:fd:4c:d0:4c:57:e0:b0:82:30:41:a4:74:a5: 49:db:f1:f5:79:f0:d2:3e:18:38:f7:2d:0b:9d:15:30:1a:ee: b8:48:71:20:6f:d0:8b:9a:07:05:e4:d6:95:36:57:3e:e0:26: e3:28:a8:87:e1:e6:1c:9c:4b:82:26:4c:3b:5c:30:56:86:d8: 35:94:33:0c:04:03:93:1c:5e:0c:75:cf:9d:13:f2:95:46:ad: fa:1b:6b:da:c6:af:29:62:c5:8c:ef:3a:77:f8:0b:43:93:e1: 55:79:3e:d3:ed:af:32:fb:e4:6e:fa:29:ee:bb:6b:cb:e6:aa: c9:2d:e5:c7:78:c6:1d:24:d8:6c:f9:bc:8e:de:b9:f7:83:49: 5b:5d:6f:d8:77:3a:44:b1:93:e5:78:63:bf:9c:b5:ab:17:2e: cc:4f:a3:93:4c:2f:98:14:4c:b6:f0:29:51:07:e0:fb:e0:76: 99:74:42:71:e0:61:79:aa:69:e1:7d:4f:d1:31:21:9f:0e:a6: 34:e5:3c:82:a4:9a:f2:df:54:7a:53:52:eb:f8:07:68:12:e8: d5:10:2e:56:fe:a9:81:72:bf:87:99:d7:26:5e:54:15:fb:3c: 0b:15:75:68 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MDZiZC03MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1dLYOzZGyYzRJ530KRi5xAI0hJNWx6iq+s/Tk0IBU2Np6ZIvD1hD0vDarEH HIMeTFX+DMovdZNjirSdQv7gXC3OYgmgkSfPbAQrk5IZG7oHgaDeIFIh0Qq4+/dg nXmsDgNLdyjhJhfU1SFMdhYEemdNDa8D+u9z7RpMsa3iTyddDj/KvXjpzjrp6tW8 pJzl/J8kuYAVCfXRoab3Ds4rUiZEVeI97PxuItYyR7AespQBemdJVjUYZJ3RFHGG zsM7hnXCQFmsrRfDpjZvQS9MagHoxhBkqDFoPsO+bPlm1suep99ShM9/43+Ahx8p xmZ7mR6rpI6FaHljLFehkeSRpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL4umHjb Fl1S8h/1ItKQtM2rI55ZMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvODFBQ0IzODg4 Qzk2MTFFRTg4REUwNzI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB1efMwDQYJKoZIhvcNAQELBQADggEBAHTOEd09085P1ici +jEujUYoH60x1ViY/UzQTFfgsIIwQaR0pUnb8fV58NI+GDj3LQudFTAa7rhIcSBv 0IuaBwXk1pU2Vz7gJuMoqIfh5hycS4ImTDtcMFaG2DWUMwwEA5McXgx1z50T8pVG rfoba9rGrylixYzvOnf4C0OT4VV5PtPtrzL75G76Ke67a8vmqskt5cd4xh0k2Gz5 vI7eufeDSVtdb9h3OkSxk+V4Y7+ctasXLsxPo5NML5gUTLbwKVEH4Pvgdpl0QnHg YXmqaeF9T9ExIZ8OpjTlPIKkmvLfVHpTUuv4B2gS6NUQLlb+qYFyv4eZ1yZeVBX7 PAsVdWg= -----END CERTIFICATE-----Generated at Fri Oct 24 05:55:35 2025 by rpki-client