$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa File: 2DED29046A8E11EF948C2811C4F9AE02.roa (raw, json) Hash identifier: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY= Subject key identifier: E9:F0:C1:50:B4:18:40:E1:6E:AF:C6:14:1B:4A:42:D9:27:11:2B:A8 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 34FC Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa Signing time: Wed 02 Jul 2025 14:50:35 +0000 ROA not before: Wed 02 Jul 2025 14:50:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 10139 IP address blocks: 121.1.0.0/20 maxlen: 24 121.1.16.0/20 maxlen: 24 121.1.32.0/19 maxlen: 24 121.54.0.0/17 maxlen: 24 125.60.128.0/17 maxlen: 24 175.158.192.0/18 maxlen: 24 175.176.0.0/17 maxlen: 24 203.84.160.0/19 maxlen: 24 203.87.128.0/17 maxlen: 24 203.111.224.0/20 maxlen: 24 203.201.180.0/24 maxlen: 24 2407:9800:2000::/36 maxlen: 36 2407:9800:5000::/36 maxlen: 36 2407:9800:6000::/36 maxlen: 36 2407:9800:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Jul 2 14:50:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6865473b-7db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:98:81:89:de:e5:32:f7:55:d6:68:48:0f: 3d:81:f9:3b:ca:2b:b4:a0:c1:19:d0:2f:3a:bc:5f: 18:a5:19:43:6e:7f:d3:e9:b8:3f:27:30:60:f5:7f: 20:06:9e:64:09:16:cf:f2:24:c7:72:4a:96:26:02: e3:9e:fc:2a:4f:17:db:7f:ce:af:2f:e5:aa:a7:3b: b5:0b:96:1e:59:2e:76:97:16:bd:bc:75:96:9d:73: 3e:f3:6c:54:bf:25:63:e0:3a:b4:15:da:c4:ee:0c: d6:d3:33:f9:81:ed:74:89:6f:c2:6c:83:38:e3:a3: 42:4d:83:bf:62:13:7d:26:52:c1:c6:50:42:8f:87: a5:a1:02:10:5d:81:de:13:29:4c:07:b1:a9:73:75: b7:86:08:8a:d9:2e:e7:5d:f1:a0:66:dc:2b:f8:56: 60:58:80:15:fe:ab:7e:2f:52:f6:cc:ef:26:b1:cd: 95:2d:aa:fc:31:a2:05:c3:45:8d:82:61:b9:30:cb: df:8d:6c:6d:6d:a4:2e:97:70:43:dc:32:0f:5c:f6: d8:20:30:7e:58:28:7e:99:62:17:58:eb:f3:6c:85: ca:19:be:da:63:7f:fa:0c:a6:d7:5c:82:99:6a:78: e5:56:37:7e:5f:d5:b3:79:45:9e:e7:7b:5c:bb:10: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F0:C1:50:B4:18:40:E1:6E:AF:C6:14:1B:4A:42:D9:27:11:2B:A8 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/2DED29046A8E11EF948C2811C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.1.0.0/18 121.54.0.0/17 125.60.128.0/17 175.158.192.0/18 175.176.0.0/17 203.84.160.0/19 203.87.128.0/17 203.111.224.0/20 203.201.180.0/24 IPv6: 2407:9800:2000::/36 2407:9800:5000::-2407:9800:6fff:ffff:ffff:ffff:ffff:ffff 2407:9800:9000::/36 Signature Algorithm: sha256WithRSAEncryption 6e:97:6a:39:6e:3f:6c:3a:69:16:61:7a:21:f1:97:8b:cb:19: 85:9b:35:fd:5b:f9:f2:01:0d:eb:47:09:d0:09:58:65:0c:f0: c0:a8:ac:11:99:0b:67:ca:60:f9:2b:d4:cc:cc:bd:06:d1:c3: d3:24:46:46:a6:03:df:53:aa:6e:8e:e5:2e:73:79:32:a2:96: 40:21:81:c2:21:68:ba:7b:eb:8d:99:8a:67:e3:f5:26:71:e7: 8d:69:f0:f5:99:26:a3:2c:3f:15:ef:89:1c:c9:40:78:03:f4: 2d:89:73:2d:ea:1e:c1:16:8b:d7:f3:e1:58:e5:64:48:52:28: a8:cb:26:87:71:12:7b:0c:e2:10:a4:5f:da:a7:98:45:31:68: 68:b9:f5:8a:26:42:78:7f:b5:3c:3a:8b:a6:1a:0e:4d:fe:63: 7c:33:e9:ae:d7:f2:62:15:a8:99:03:23:81:a1:ad:9c:22:ff: 83:c8:2e:d5:a7:b1:ae:48:37:46:0b:e4:32:7d:10:b6:32:e5: b4:d5:3f:49:fd:98:c4:37:1e:ba:f6:7e:9e:8c:93:9f:95:4e: 15:62:7f:fd:75:da:54:29:06:81:f1:f1:82:22:14:2c:c6:4a: 20:51:ea:53:dd:89:b2:92:e9:ff:1e:d2:21:ca:01:64:cc:36: eb:20:9e:d1 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUwNzAyMTQ1MDM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NDczYi03ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp36YgYne5TL3VdZoSA89gfk7yiu0oMEZ0C86vF8YpRlDbn/T6bg/JzBg9X8g Bp5kCRbP8iTHckqWJgLjnvwqTxfbf86vL+Wqpzu1C5YeWS52lxa9vHWWnXM+82xU vyVj4Dq0FdrE7gzW0zP5ge10iW/CbIM446NCTYO/YhN9JlLBxlBCj4eloQIQXYHe EylMB7Gpc3W3hgiK2S7nXfGgZtwr+FZgWIAV/qt+L1L2zO8msc2VLar8MaIFw0WN gmG5MMvfjWxtbaQul3BD3DIPXPbYIDB+WCh+mWIXWOvzbIXKGb7aY3/6DKbXXIKZ anjlVjd+X9WzeUWe53tcuxCFTwIDAQABo4IC7zCCAuswHQYDVR0OBBYEFOnwwVC0 GEDhbq/GFBtKQtknESuoMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZERDgvRjA0ODUyNDIxRDg2MTFFMjg2MTE4Q0RFMDhCMDJDRDIvMkRFRDI5MDQ2 QThFMTFFRjk0OEMyODExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweQYIKwYBBQUHAQcBAf8E ajBoMDwEAgABMDYDBAZ5AQADBAd5NgADBAd9PIADBAavnsADBAevsAADBAXLVKAD BAfLV4ADBATLb+ADBADLybQwKAQCAAIwIgMGBCQHmAAgMBADBgQkB5gAUAMGBCQH mABgAwYEJAeYAJAwDQYJKoZIhvcNAQELBQADggEBAG6XajluP2w6aRZheiHxl4vL GYWbNf1b+fIBDetHCdAJWGUM8MCorBGZC2fKYPkr1MzMvQbRw9MkRkamA99Tqm6O 5S5zeTKilkAhgcIhaLp7642Zimfj9SZx541p8PWZJqMsPxXviRzJQHgD9C2Jcy3q HsEWi9fz4VjlZEhSKKjLJodxEnsM4hCkX9qnmEUxaGi59YomQnh/tTw6i6YaDk3+ Y3wz6a7X8mIVqJkDI4GhrZwi/4PILtWnsa5IN0YL5DJ9ELYy5bTVP0n9mMQ3Hrr2 fp6Mk5+VThVif/112lQpBoHx8YIiFCzGSiBR6lPdibKS6f8e0iHKAWTMNusgntE= -----END CERTIFICATE-----Generated at Wed Jul 2 23:29:38 2025 by rpki-client