$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa File: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: Td1yZRJHEJdrXdDkVXf585lTVDZ/gAEOrflJZU/zpIE= Subject key identifier: 9B:F2:CD:EB:9E:C5:70:DE:D7:96:72:83:D5:98:77:43:01:A0:A2:18 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 35C5 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa Signing time: Thu 24 Jul 2025 14:50:19 +0000 ROA not before: Thu 24 Jul 2025 14:50:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133376 IP address blocks: 203.209.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13765 (0x35c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jul 24 14:50:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6882482b-d486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:81:e3:a7:38:0c:05:00:bf:ba:82:a0:57: 10:3a:09:b6:ac:8c:79:ab:f7:19:6e:b5:89:e3:3d: c7:36:65:c7:43:df:76:a2:19:b0:44:34:3a:9c:ce: 91:fa:92:62:3a:b7:1a:06:51:23:53:6c:2a:9e:f1: 67:5f:fe:34:83:39:36:f9:e1:2e:01:b0:1f:b0:1e: fe:32:ac:76:ef:7e:21:b0:70:9d:c5:65:1a:5d:61: 8d:83:b5:98:fb:69:ea:6a:ce:80:2e:a5:ee:65:ea: 67:d2:3a:40:ca:6b:58:62:69:ae:fb:46:8d:66:32: 68:47:30:18:10:8a:bd:7e:e1:e8:d6:63:32:4c:dd: cc:56:8c:32:e6:3d:24:6d:b6:da:27:0f:85:87:bc: 68:7c:ff:ef:29:4c:b0:5a:b6:d4:cc:8e:e5:5e:09: 73:c2:e0:76:ae:d9:31:c5:fa:3e:56:be:77:e0:d1: b7:51:c7:87:8a:c2:bb:6c:40:39:eb:6d:89:ec:06: 0c:f6:e2:ab:9c:bf:cf:0b:b0:3b:90:4b:56:fd:02: 80:1f:92:89:bf:12:4c:4b:f2:b0:ed:7d:af:99:8b: c8:3f:be:88:64:aa:8e:d7:62:24:d4:4a:73:4d:7e: 3a:29:d2:85:b0:a2:ac:ac:21:11:ee:c8:34:15:61: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F2:CD:EB:9E:C5:70:DE:D7:96:72:83:D5:98:77:43:01:A0:A2:18 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/3ED710C68DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.209.121.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:2c:48:18:fd:ff:ed:3e:85:fc:91:18:b1:13:85:1c:6d:b0: 1d:ec:89:40:f1:59:97:c8:73:53:d7:bb:9f:03:11:3f:a9:2c: 87:c8:b5:36:36:9c:29:2e:48:75:d7:0c:cd:1e:88:e1:2f:72: 01:24:5b:20:a5:b5:96:35:0d:88:6f:d5:99:83:ef:c7:0f:a3: f4:3f:a1:08:ff:2a:c4:d5:66:17:a1:31:d0:b0:2a:e0:a9:08: 4d:78:f3:9a:fa:d5:91:e6:fd:3f:3a:85:1a:7b:00:22:63:42: f5:a1:d7:67:6b:67:2e:6c:61:97:c0:77:8f:01:42:c5:ad:c6: 18:d9:4b:2e:f4:90:67:11:2f:a9:58:92:72:f5:aa:1a:4e:64: 2f:a1:ad:60:27:ce:fa:59:3d:31:ae:18:7e:1c:53:85:a9:df: 85:0e:77:f9:e6:2e:d6:5f:24:eb:55:21:ca:78:97:f5:b5:81: 7a:fa:95:ef:6f:85:d3:32:63:11:d2:2d:f0:65:ec:35:8f:e4: 11:e3:03:9b:00:b0:61:bc:ce:55:de:73:bc:01:df:08:a6:9f: c9:08:7a:03:51:25:d0:a6:89:9d:83:67:c8:0c:a4:a9:c4:d0: e2:cc:5c:20:f7:71:5a:d3:b3:48:b4:c2:8e:b5:b8:f9:92:7e: 0f:c5:32:b3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjUwNzI0MTQ1MDE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNDgyYi1kNDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgyB46c4DAUAv7qCoFcQOgm2rIx5q/cZbrWJ4z3HNmXHQ992ohmwRDQ6nM6R +pJiOrcaBlEjU2wqnvFnX/40gzk2+eEuAbAfsB7+Mqx2734hsHCdxWUaXWGNg7WY +2nqas6ALqXuZepn0jpAymtYYmmu+0aNZjJoRzAYEIq9fuHo1mMyTN3MVowy5j0k bbbaJw+Fh7xofP/vKUywWrbUzI7lXglzwuB2rtkxxfo+Vr534NG3UceHisK7bEA5 622J7AYM9uKrnL/PC7A7kEtW/QKAH5KJvxJMS/Kw7X2vmYvIP76IZKqO12Ik1Epz TX46KdKFsKKsrCER7sg0FWEE/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJvyzeue xXDe15Zyg9WYd0MBoKIYMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvM0VENzEwQzY4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL0XkwDQYJKoZIhvcNAQELBQADggEBAGwsSBj9/+0+hfyR GLEThRxtsB3siUDxWZfIc1PXu58DET+pLIfItTY2nCkuSHXXDM0eiOEvcgEkWyCl tZY1DYhv1ZmD78cPo/Q/oQj/KsTVZhehMdCwKuCpCE1485r61ZHm/T86hRp7ACJj QvWh12drZy5sYZfAd48BQsWtxhjZSy70kGcRL6lYknL1qhpOZC+hrWAnzvpZPTGu GH4cU4Wp34UOd/nmLtZfJOtVIcp4l/W1gXr6le9vhdMyYxHSLfBl7DWP5BHjA5sA sGG8zlXec7wB3wimn8kIegNRJdCmiZ2DZ8gMpKnE0OLMXCD3cVrTs0i0wo61uPmS fg/FMrM= -----END CERTIFICATE-----Generated at Sat Aug 9 22:48:35 2025 by rpki-client