$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa File: 608C129E33E011ED979ED20EC4F9AE02.roa (raw, json) Hash identifier: rxf3DHMFewfYjEmU/j0BdMyIOehzcE11rbLSMoX1rKg= Subject key identifier: F6:AA:24:47:00:17:4C:D1:EA:5A:12:0A:18:FE:47:76:2E:4E:AD:B5 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 356C Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa Signing time: Mon 06 Jul 2026 02:25:47 +0000 ROA not before: Mon 06 Jul 2026 02:25:47 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9313 IP address blocks: 120.29.0.0/20 maxlen: 20 120.29.16.0/20 maxlen: 20 121.50.192.0/20 maxlen: 20 121.50.208.0/21 maxlen: 21 203.10.89.0/24 maxlen: 24 203.13.68.0/24 maxlen: 24 203.13.70.0/24 maxlen: 24 203.22.124.0/23 maxlen: 23 203.22.125.0/24 maxlen: 24 203.22.126.0/24 maxlen: 24 203.22.127.0/24 maxlen: 24 203.30.137.0/24 maxlen: 24 203.144.4.0/22 maxlen: 22 203.144.5.0/24 maxlen: 24 203.144.8.0/21 maxlen: 21 203.144.16.0/21 maxlen: 21 203.144.23.0/24 maxlen: 24 203.144.24.0/21 maxlen: 21 203.144.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13676 (0x356c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Jul 6 02:25:47 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a4b122b-53ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:83:08:59:3b:e2:38:1a:ff:68:95:02:5d: 7c:72:79:56:96:b2:29:4c:ed:ae:51:a7:ba:26:cd: ba:4d:46:6b:29:d7:b7:ec:41:51:24:87:1a:73:e4: 5d:5c:a0:6f:da:d8:5c:db:51:c3:9d:3c:73:47:07: 18:59:cd:4c:56:3b:46:a2:ed:3c:f1:34:56:7d:26: a0:09:d7:e4:d1:70:e0:c2:f7:b5:f6:8b:59:12:84: 0c:de:46:85:98:51:8b:42:6c:9e:25:19:13:e8:90: e7:da:99:02:29:57:61:c3:b7:7a:d4:35:82:69:9e: 14:5b:f0:d1:47:4b:2e:2c:5c:b5:86:e6:a9:44:95: cf:7a:28:5e:d9:e6:35:a8:ac:3d:1f:ec:18:33:e2: b4:35:fa:4e:c2:84:39:69:fa:29:f5:a4:9b:e3:e8: 8f:4b:fb:cd:7e:4a:27:a7:35:e6:de:aa:cc:da:ef: 6a:de:97:cb:bc:f9:13:81:43:76:ff:86:d4:63:01: 9a:bc:60:76:8e:eb:33:93:c6:5c:da:a2:dc:0f:24: aa:bc:6c:a3:d4:b5:f7:b9:ff:b2:39:c6:bc:ee:5b: 97:87:c6:90:f0:1e:f8:59:5d:ee:30:bd:91:fa:8f: a8:10:c6:49:0f:42:59:22:6e:e9:0e:5c:69:67:08: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AA:24:47:00:17:4C:D1:EA:5A:12:0A:18:FE:47:76:2E:4E:AD:B5 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/608C129E33E011ED979ED20EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 120.29.0.0/19 121.50.192.0-121.50.215.255 203.10.89.0/24 203.13.68.0/24 203.13.70.0/24 203.22.124.0/22 203.30.137.0/24 203.144.4.0-203.144.31.255 Signature Algorithm: sha256WithRSAEncryption 19:d8:a5:38:a1:54:05:f2:f1:ea:c2:16:08:82:fc:e7:4f:81: d5:4e:12:00:e3:fc:73:16:1c:83:ae:8e:5d:22:a4:d1:1b:15: 9f:16:80:85:33:77:f6:7d:61:cc:5c:b6:3e:9e:aa:69:17:5a: 2d:b5:68:80:0c:f4:ad:27:45:40:a6:4d:fc:96:5e:53:a7:58: 45:6d:6b:c9:0b:11:d1:a7:4b:31:cc:1d:c8:ea:ee:8a:cf:67: 77:87:48:1a:ca:9e:e0:fd:c5:db:69:ac:b2:69:a6:af:fd:8b: 87:53:bf:19:9a:13:87:00:7e:e0:ca:87:7f:1e:9c:40:85:e5: d1:de:30:58:17:ed:ba:ec:8b:d5:83:02:4f:27:51:06:91:5e: 16:74:d9:40:36:18:61:7e:f8:a4:4a:ac:cd:ca:f2:ab:b8:eb: a0:cf:5e:d2:e3:77:1e:6d:f2:a1:01:c6:9e:c9:2e:cc:8f:fd: 87:3d:76:c9:17:e9:13:ec:13:e5:cb:7d:eb:aa:a9:85:d1:b3: 33:b7:d1:aa:73:13:24:67:89:ba:81:d5:84:1a:3d:46:26:1b: ac:1f:11:61:b2:e9:4c:37:fb:54:b3:e1:9b:eb:22:59:f1:69: a7:99:25:73:40:d3:41:e5:d0:c8:78:47:e3:de:fe:54:08:81: 0c:09:f1:13 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjYwNzA2MDIyNTQ3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRiMTIyYi01M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX6DCFk74jga/2iVAl18cnlWlrIpTO2uUae6Js26TUZrKde37EFRJIcac+Rd XKBv2thc21HDnTxzRwcYWc1MVjtGou088TRWfSagCdfk0XDgwve19otZEoQM3kaF mFGLQmyeJRkT6JDn2pkCKVdhw7d61DWCaZ4UW/DRR0suLFy1huapRJXPeihe2eY1 qKw9H+wYM+K0NfpOwoQ5afop9aSb4+iPS/vNfkonpzXm3qrM2u9q3pfLvPkTgUN2 /4bUYwGavGB2juszk8Zc2qLcDySqvGyj1LX3uf+yOca87luXh8aQ8B74WV3uML2R +o+oEMZJD0JZIm7pDlxpZwimJQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFPaqJEcA F0zR6loSChj+R3YuTq21MB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JGNDcvMzcwQ0EyQzAxRDhBMTFFMkI3OUIxM0U0MDhCMDJDRDIvNjA4QzEyOUUz M0UwMTFFRDk3OUVEMjBFQzRGOUFFMDIucm9hMFkGCCsGAQUFBwEHAQH/BEowSDBG BAIAATBAAwQFeB0AMAwDBAZ5MsADBAN5MtADBADLClkDBADLDUQDBADLDUYDBALL FnwDBADLHokwDAMEAsuQBAMEBcuQADANBgkqhkiG9w0BAQsFAAOCAQEAGdilOKFU BfLx6sIWCIL850+B1U4SAOP8cxYcg66OXSKk0RsVnxaAhTN39n1hzFy2Pp6qaRda LbVogAz0rSdFQKZN/JZeU6dYRW1ryQsR0adLMcwdyOruis9nd4dIGsqe4P3F22ms smmmr/2Lh1O/GZoThwB+4MqHfx6cQIXl0d4wWBftuuyL1YMCTydRBpFeFnTZQDYY YX74pEqszcryq7jroM9e0uN3Hm3yoQHGnskuzI/9hz12yRfpE+wT5ct966qphdGz M7fRqnMTJGeJuoHVhBo9RiYbrB8RYbLpTDf7VLPhm+siWfFpp5klc0DTQeXQyHhH 497+VAiBDAnxEw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:17:21 2026 by rpki-client