$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa File: EF706AC45C7311EF9CC47281C4F9AE02.roa (raw, json) Hash identifier: KFqiJvZSOQ4AGYSeiVNs4qK0DY9PSIDgrHR+mxW9KOs= Subject key identifier: B2:B8:3A:64:CE:B3:C2:80:4D:C5:B8:B9:F7:F9:2F:47:A4:93:28:A9 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 3626 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa Signing time: Tue 02 Sep 2025 15:01:20 +0000 ROA not before: Tue 02 Sep 2025 15:01:20 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141158 IP address blocks: 117.121.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13862 (0x3626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:20 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b706c0-b7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:f8:aa:5e:b1:aa:65:0c:b3:76:cb:ae:7f: cd:23:65:5b:26:14:c4:a9:09:f2:00:13:c0:f4:55: e6:ad:36:b3:b9:42:a7:89:dd:58:b9:b6:36:7e:5c: e2:10:30:63:6c:8f:56:42:95:f6:96:64:ed:e1:c7: 3d:bc:01:b9:c5:3d:67:49:5c:1f:c0:eb:34:96:f0: 85:1f:30:da:a7:75:c4:55:03:5b:41:08:08:54:99: 89:de:19:de:16:94:11:df:4a:5f:cc:d4:d5:d6:91: d3:3a:61:d9:aa:5a:25:7f:b3:cd:c7:45:c9:3e:db: 9b:8e:82:4d:78:b9:84:71:a0:a6:cc:e3:27:48:80: 43:3f:6e:95:7a:9b:96:9b:aa:9f:e8:0f:a6:30:75: 58:76:22:23:a1:84:4a:7d:08:41:5c:a2:b8:b0:50: 7c:e2:ee:79:fa:bd:b0:4c:7e:38:1a:0c:d6:15:4b: 89:76:0d:4f:6f:4b:fd:2a:08:90:85:05:ac:ac:ea: ef:62:04:f9:20:81:00:b9:4d:be:dc:72:ea:6e:ce: 1f:bf:eb:9f:46:b3:b5:32:64:4e:29:d7:61:3b:cb: 9d:06:d0:da:43:ec:18:c6:dd:fc:b4:5a:8b:f4:22: 34:dd:31:f3:9c:b1:c4:5e:dd:87:b0:03:1e:db:ae: 70:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B8:3A:64:CE:B3:C2:80:4D:C5:B8:B9:F7:F9:2F:47:A4:93:28:A9 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/EF706AC45C7311EF9CC47281C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.121.247.0/24 Signature Algorithm: sha256WithRSAEncryption 32:54:ff:3a:fc:b4:33:7b:97:e8:9a:58:86:b3:53:d4:d1:a9: 82:dd:8e:31:d0:63:d3:be:d5:69:74:c8:23:4d:4d:63:87:ee: 67:55:9e:ad:c5:64:19:ee:5f:ed:21:d6:9d:84:a5:7a:33:8d: c3:9d:33:c8:8a:5b:3c:9e:57:01:36:d6:e2:03:e2:49:fb:fa: a8:60:dd:95:38:44:7e:8d:a4:2c:2b:82:4a:22:e1:e6:0d:a5: 37:83:9f:15:01:09:e5:09:cb:00:1e:b8:ea:3b:57:17:d1:00: fe:da:c7:9b:ef:74:b2:6b:00:41:91:1f:89:d7:a1:09:a4:8a: 55:66:1e:89:31:1e:3f:72:2e:6e:8b:6c:0c:f9:0b:47:bb:61: 5f:40:f1:78:48:f8:b5:1d:0f:fb:8c:eb:8d:aa:03:c7:04:12: 1c:b4:5c:fa:aa:02:08:d1:b3:fc:64:a6:c5:b7:e2:f2:b2:ec: 93:26:9a:ae:17:8e:9f:4d:8c:ba:df:38:ed:9a:7b:ea:be:99: ef:41:e9:30:8f:76:9d:df:7c:a6:ad:7e:c0:e7:f4:0d:b1:5b: c8:d9:51:32:4e:b8:ed:24:9b:3f:99:9b:2b:31:5c:94:5f:bd: 4d:e8:65:c1:96:d8:9c:90:29:0f:bd:ef:20:c8:2e:89:25:8e: 7d:e7:a9:95 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTIwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MDZjMC1iN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+L4ql6xqmUMs3bLrn/NI2VbJhTEqQnyABPA9FXmrTazuUKnid1YubY2flzi EDBjbI9WQpX2lmTt4cc9vAG5xT1nSVwfwOs0lvCFHzDap3XEVQNbQQgIVJmJ3hne FpQR30pfzNTV1pHTOmHZqlolf7PNx0XJPtubjoJNeLmEcaCmzOMnSIBDP26VepuW m6qf6A+mMHVYdiIjoYRKfQhBXKK4sFB84u55+r2wTH44GgzWFUuJdg1Pb0v9KgiQ hQWsrOrvYgT5IIEAuU2+3HLqbs4fv+ufRrO1MmROKddhO8udBtDaQ+wYxt38tFqL 9CI03THznLHEXt2HsAMe265wKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLK4OmTO s8KATcW4uff5L0ekkyipMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvRUY3MDZBQzQ1 QzczMTFFRjlDQzQ3MjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB1efcwDQYJKoZIhvcNAQELBQADggEBADJU/zr8tDN7l+ia WIazU9TRqYLdjjHQY9O+1Wl0yCNNTWOH7mdVnq3FZBnuX+0h1p2EpXozjcOdM8iK WzyeVwE21uID4kn7+qhg3ZU4RH6NpCwrgkoi4eYNpTeDnxUBCeUJywAeuOo7VxfR AP7ax5vvdLJrAEGRH4nXoQmkilVmHokxHj9yLm6LbAz5C0e7YV9A8XhI+LUdD/uM 642qA8cEEhy0XPqqAgjRs/xkpsW34vKy7JMmmq4Xjp9NjLrfOO2ae+q+me9B6TCP dp3ffKatfsDn9A2xW8jZUTJOuO0kmz+ZmysxXJRfvU3oZcGW2JyQKQ+97yDILokl jn3nqZU= -----END CERTIFICATE-----Generated at Sun Sep 7 16:21:33 2025 by rpki-client