$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/F4639D76356211F09A66C487C4F9AE02.roa File: F4639D76356211F09A66C487C4F9AE02.roa (raw, json) Hash identifier: PHU5aUvAOrBIKy7huYHffiKA6xh2xWAfjAUu0W1+Jtw= Subject key identifier: 77:AD:CE:7D:50:6C:5A:3A:7B:E8:CF:5A:87:39:67:39:43:DC:BE:C9 Certificate issuer: /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Certificate serial: 0407 Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/F4639D76356211F09A66C487C4F9AE02.roa Signing time: Fri 19 Sep 2025 01:07:27 +0000 ROA not before: Fri 19 Sep 2025 01:07:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 38313 IP address blocks: 202.126.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9 Validity Not Before: Sep 19 01:07:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ccacce-40ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:75:7a:af:9d:ab:d7:e8:a1:58:bf:a2:7a:9b: b0:29:54:21:94:6c:3e:dd:30:16:d4:b6:b3:50:83: 28:78:20:c7:3c:f6:b5:59:16:e5:0c:79:54:b4:32: 8b:bf:67:17:16:e0:69:43:f7:96:d1:9b:86:89:bc: d8:25:97:c8:24:30:25:d7:1e:ef:f0:dc:d3:fe:e2: 35:b3:e8:6e:1f:ac:98:f6:96:b4:aa:c3:be:27:20: 62:3d:9e:c8:ce:20:f8:c2:84:84:18:ac:89:79:3f: 1c:5f:fd:1d:b9:2d:20:34:41:b8:7c:31:69:13:15: 37:bf:24:60:6d:9b:51:f3:29:d3:d1:d3:d4:61:c7: 1a:f5:93:16:0c:d2:0a:e1:63:b0:79:8c:ff:19:eb: b7:77:29:45:db:4c:ee:84:f2:90:06:25:b6:b1:6b: cb:c3:99:c5:95:81:50:b4:5c:4b:7a:41:d5:ed:ca: c5:16:5e:ef:a9:85:39:24:c6:cb:f4:ed:ff:58:7a: 9e:73:4c:91:22:8b:58:63:1c:90:8b:2e:29:09:72: 6a:de:43:18:a8:a1:e2:a0:83:0e:2e:28:29:bb:2f: cd:75:b0:6e:14:aa:71:0b:5c:80:63:c7:37:66:3f: 5d:8c:1b:4c:22:ec:f7:c5:ad:8b:78:06:b7:03:df: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:CE:7D:50:6C:5A:3A:7B:E8:CF:5A:87:39:67:39:43:DC:BE:C9 X509v3 Authority Key Identifier: keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/F4639D76356211F09A66C487C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.126.120.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:d9:74:dd:46:53:1b:7f:a4:34:23:78:c8:13:7a:f6:43:b4: 6f:3d:c7:26:02:01:73:44:8e:08:68:60:13:fb:4b:52:e3:cf: 96:24:93:17:64:39:ee:59:61:2c:12:9f:86:c8:93:68:85:29: b5:08:2a:4a:ac:2f:e2:23:44:19:3f:be:e2:d0:08:74:d9:a8: c8:22:d5:d0:31:7e:83:bd:0b:19:9a:a0:a0:6c:73:2d:a2:3e: 1d:52:7a:ad:41:cc:d1:ce:0a:af:36:29:4d:64:e2:dc:76:4a: 78:2d:a7:99:7d:dd:cf:d6:8a:33:1c:bf:35:91:d4:f6:4d:ce: 25:1f:25:fd:51:51:9e:68:ba:fb:be:be:50:e5:5a:4f:c5:e3: 38:9c:02:e9:6d:2e:1c:1a:f4:8d:ba:69:35:aa:1c:c6:53:55: 4a:70:52:22:7f:71:1a:40:15:1d:67:bc:26:ce:f5:d2:ff:fd: ac:b9:e2:d0:88:7e:17:dd:db:bc:c1:e6:ad:f8:dd:ba:7e:d3: e6:a4:2d:ca:d9:a2:e0:51:fa:f6:e8:83:71:14:59:17:c5:50: 34:ef:55:da:e0:05:f8:d8:7e:8e:6a:17:8c:d1:3b:71:ed:d8: 1c:36:b0:02:b6:f7:0b:06:68:42:09:1b:5d:01:93:7e:51:be: 0e:64:58:57 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2NDUxMTAvBgNVBAUTKDFENDAzRTMyMzAxRTU4NzgwQTA3MDU3Q0IzMkI3MkVD QUY0NkQ3RDkwHhcNMjUwOTE5MDEwNzI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjYWNjZS00MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63V6r52r1+ihWL+iepuwKVQhlGw+3TAW1LazUIMoeCDHPPa1WRblDHlUtDKL v2cXFuBpQ/eW0ZuGibzYJZfIJDAl1x7v8NzT/uI1s+huH6yY9pa0qsO+JyBiPZ7I ziD4woSEGKyJeT8cX/0duS0gNEG4fDFpExU3vyRgbZtR8ynT0dPUYcca9ZMWDNIK 4WOweYz/Geu3dylF20zuhPKQBiW2sWvLw5nFlYFQtFxLekHV7crFFl7vqYU5JMbL 9O3/WHqec0yRIotYYxyQiy4pCXJq3kMYqKHioIMOLigpuy/NdbBuFKpxC1yAY8c3 Zj9djBtMIuz3xa2LeAa3A99wnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHetzn1Q bFo6e+jPWoc5ZzlD3L7JMB8GA1UdIwQYMBaAFB1APjIwHlh4CgcFfLMrcuyvRtfZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY0NS9FMEQ5RjM2NDhD OTUxMUVDQUU0RjFEMjNDNEY5QUUwMi9IVUEtTWpBZVdIZ0tCd1Y4c3l0eTdLOUcx OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hVQS1NakFlV0hnS0J3VjhzeXR5N0s5RzE5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2NDUvRTBEOUYzNjQ4Qzk1MTFFQ0FFNEYxRDIzQzRGOUFFMDIvRjQ2MzlENzYz NTYyMTFGMDlBNjZDNDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAPKfngwDQYJKoZIhvcNAQELBQADggEBAJ/ZdN1GUxt/pDQj eMgTevZDtG89xyYCAXNEjghoYBP7S1Ljz5YkkxdkOe5ZYSwSn4bIk2iFKbUIKkqs L+IjRBk/vuLQCHTZqMgi1dAxfoO9CxmaoKBscy2iPh1Seq1BzNHOCq82KU1k4tx2 Sngtp5l93c/WijMcvzWR1PZNziUfJf1RUZ5ouvu+vlDlWk/F4zicAultLhwa9I26 aTWqHMZTVUpwUiJ/cRpAFR1nvCbO9dL//ay54tCIfhfd27zB5q343bp+0+akLcrZ ouBR+vbog3EUWRfFUDTvVdrgBfjYfo5qF4zRO3Ht2Bw2sAK29wsGaEIJG10Bk35R vg5kWFc= -----END CERTIFICATE-----Generated at Fri Sep 19 15:11:42 2025 by rpki-client