$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa File: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (raw, json) Hash identifier: obljP3RXfrVGEpE3yYP91fJo6xaTDVgNzc+FKAwytnw= Subject key identifier: 83:27:8B:9F:A3:01:12:10:08:4C:DB:1B:C6:20:88:D3:BA:C6:A3:69 Certificate issuer: /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Certificate serial: 06D4 Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa Signing time: Fri 08 Aug 2025 15:07:43 +0000 ROA not before: Fri 08 Aug 2025 15:07:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 21859 IP address blocks: 122.10.140.0/22 maxlen: 24 122.10.196.0/23 maxlen: 24 122.10.221.0/24 maxlen: 24 122.10.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924 Validity Not Before: Aug 8 15:07:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=689612bf-75c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3f:b2:6e:f8:34:3e:88:e6:82:02:e1:39:50: d8:2a:ac:c7:c9:a7:ca:67:c1:29:8f:57:ce:95:bf: 3c:b3:cd:40:b6:b8:d5:c8:22:be:dd:35:1b:94:cd: ca:c0:d3:57:51:81:d5:70:8d:e9:a1:bc:a3:aa:f1: be:da:d4:c1:bf:76:9a:2f:24:c3:9f:b7:73:6a:62: ad:c0:23:93:c0:64:e9:d7:a7:52:fb:c1:a7:15:0d: 67:26:c8:0c:02:80:74:d0:bc:4a:fb:d0:c1:26:54: 27:4c:59:41:11:5a:b7:d1:1f:42:72:c6:02:06:ae: 6e:1f:da:6b:18:15:82:bd:a2:d8:de:27:b0:b2:a4: cb:ab:53:d1:58:61:31:b0:94:ee:82:83:1d:8c:b6: e2:73:55:68:39:a7:90:e6:66:08:38:d0:87:a2:4a: d7:98:66:5d:e5:4f:00:6e:d6:c3:49:15:7d:a5:80: 91:2b:07:62:f3:9a:e4:42:4c:9f:3b:49:86:b4:9a: e6:56:e3:be:d2:bb:22:8e:88:a8:e6:e2:ec:14:fd: 42:28:59:c9:10:83:83:fb:48:b1:71:81:67:f7:19: 4e:5a:1d:0f:4b:7b:24:bf:99:06:68:12:84:cf:3e: b2:ec:6a:ca:4a:e0:18:10:86:60:b5:36:84:d6:cf: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:8B:9F:A3:01:12:10:08:4C:DB:1B:C6:20:88:D3:BA:C6:A3:69 X509v3 Authority Key Identifier: keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/6EC9CC12746911F0B5BCC83EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.10.140.0/22 122.10.196.0/23 122.10.221.0/24 122.10.223.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d5:dd:1f:95:9d:a4:2d:64:45:a0:d8:eb:73:f1:4e:47:6e: ea:8a:5a:f9:a3:a9:07:27:35:9c:b0:51:a6:7b:da:c1:ca:bd: 9d:e0:38:a1:9c:d9:ef:bf:8b:d0:fc:ef:a3:18:5b:fe:37:a5: 29:13:0c:f8:26:00:f9:5e:7e:4a:e9:df:f6:87:bb:be:71:fb: 5a:17:1f:0c:51:16:a1:ca:4a:a0:f0:6f:51:89:ba:d0:40:dc: 9f:0e:f9:d6:d6:35:5b:d7:f9:ca:6f:55:c7:23:59:68:66:2b: b1:2d:96:b1:11:5f:fe:ed:8e:64:05:ac:85:57:01:d4:63:3c: cb:53:bc:3a:0f:6d:cf:b5:65:47:d9:e3:2c:fd:83:32:71:20: 45:48:98:7d:7f:d1:13:97:35:ae:ec:7a:3e:64:a3:69:55:75: f1:47:8b:ff:e5:1f:9d:0d:ad:ed:d1:09:a2:b9:32:95:ec:46: 93:e8:d1:e8:c0:28:cf:2a:70:ae:22:42:23:49:cf:fa:b7:12: 25:99:ce:fe:3f:3f:e1:6d:41:85:7e:66:2c:6f:21:da:41:ff: e2:a1:ff:e7:4c:17:f3:65:75:14:a0:da:f7:53:83:56:4e:e9: 9f:f1:1c:4e:0c:f3:cc:f9:4c:50:2f:be:b6:73:31:d9:12:e7: a0:25:e0:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD RjY4RDY5MjQwHhcNMjUwODA4MTUwNzQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODk2MTJiZi03NWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5z+ybvg0PojmggLhOVDYKqzHyafKZ8Epj1fOlb88s81AtrjVyCK+3TUblM3K wNNXUYHVcI3pobyjqvG+2tTBv3aaLyTDn7dzamKtwCOTwGTp16dS+8GnFQ1nJsgM AoB00LxK+9DBJlQnTFlBEVq30R9CcsYCBq5uH9prGBWCvaLY3iewsqTLq1PRWGEx sJTugoMdjLbic1VoOaeQ5mYIONCHokrXmGZd5U8AbtbDSRV9pYCRKwdi85rkQkyf O0mGtJrmVuO+0rsijoio5uLsFP1CKFnJEIOD+0ixcYFn9xlOWh0PS3skv5kGaBKE zz6y7GrKSuAYEIZgtTaE1s8pZwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFIMni5+j ARIQCEzbG8YgiNO6xqNpMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNTc2NDczN0E3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNkVDOUNDMTI3 NDY5MTFGMEI1QkNDODNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJ6CowDBAF6CsQDBAB6Ct0DBAB6Ct8wDQYJKoZIhvcNAQEL BQADggEBAHjV3R+VnaQtZEWg2Otz8U5HbuqKWvmjqQcnNZywUaZ72sHKvZ3gOKGc 2e+/i9D876MYW/43pSkTDPgmAPlefkrp3/aHu75x+1oXHwxRFqHKSqDwb1GJutBA 3J8O+dbWNVvX+cpvVccjWWhmK7EtlrERX/7tjmQFrIVXAdRjPMtTvDoPbc+1ZUfZ 4yz9gzJxIEVImH1/0ROXNa7sej5ko2lVdfFHi//lH50Nre3RCaK5MpXsRpPo0ejA KM8qcK4iQiNJz/q3EiWZzv4/P+FtQYV+ZixvIdpB/+Kh/+dMF/NldRSg2vdTg1ZO 6Z/xHE4M88z5TFAvvrZzMdkS56Al4Os= -----END CERTIFICATE-----Generated at Mon Nov 3 09:32:50 2025 by rpki-client