$ rpki-client -vvf rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa File: 8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa (raw, json) Hash identifier: n9mHkt6czHPPUD5zY90UjJ7UAf6byhyKwZP1Ve452FA= Subject key identifier: 30:F7:3C:C1:B3:DB:9F:B8:76:A2:48:1D:F2:8C:16:BD:48:C1:FA:76 Certificate issuer: /CN=A91709BC/serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Certificate serial: 119C Authority key identifier: 36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:00:58 +0000 ROA not before: Sat 24 May 2025 17:49:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45622 IP address blocks: 121.97.54.0/24 maxlen: 24 121.97.55.0/24 maxlen: 24 121.97.56.0/24 maxlen: 24 121.97.59.0/24 maxlen: 24 125.212.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4508 (0x119c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709BC, serialNumber=36EE8A401305EB38E28D86A5DB7F7628AAB7E24F Validity Not Before: May 24 17:49:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a470ca-03da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:a1:da:4e:32:0d:0b:d2:50:a0:80:ae:4a: fb:d3:64:86:c2:94:70:9a:e4:50:da:c3:0a:0d:d6: d7:a7:b6:20:42:e2:5f:34:37:09:d5:9c:cd:ad:9c: 96:b8:ae:a4:02:b4:f3:2d:db:5d:c8:ed:b6:de:31: 66:ad:0b:65:a3:69:32:98:af:5f:a4:0d:77:84:08: 60:b0:38:7e:5c:a4:b7:f3:6c:ad:28:ae:a4:7b:5d: 48:6c:48:d0:85:90:1e:b6:27:dc:67:21:73:31:cd: 73:38:3f:0a:ca:62:ac:ba:08:86:76:25:9a:da:e1: 15:c9:17:65:6c:2d:ca:da:c5:57:7b:3c:14:6a:2a: 9d:df:59:f8:aa:f7:f1:16:72:64:88:a2:d6:19:9e: af:70:ac:7a:87:92:c8:d7:c2:0a:12:c3:bf:f9:2c: 0f:3d:22:3c:c5:09:40:de:ac:04:9f:2d:3e:f4:74: b1:76:32:1b:59:08:87:b8:5f:47:00:35:75:b9:8c: 70:14:2f:e0:7f:9f:7c:0c:59:e0:09:1b:ea:2f:0d: b5:08:16:af:4d:67:e2:88:c8:be:e5:9c:dc:c5:79: a8:82:ce:5c:b3:62:b6:01:fe:48:f9:13:95:59:ce: 9b:b3:fc:1f:07:0f:28:14:bc:e1:b9:8b:1f:a9:5d: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F7:3C:C1:B3:DB:9F:B8:76:A2:48:1D:F2:8C:16:BD:48:C1:FA:76 X509v3 Authority Key Identifier: keyid:36:EE:8A:40:13:05:EB:38:E2:8D:86:A5:DB:7F:76:28:AA:B7:E2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/Nu6KQBMF6zjijYal2392KKq34k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu6KQBMF6zjijYal2392KKq34k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709BC/892897302E9011E99177960FC4F9AE02/8DFDF8AE2E9511E9896EFA1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 121.97.54.0-121.97.56.255 121.97.59.0/24 125.212.56.0/24 Signature Algorithm: sha256WithRSAEncryption ad:2e:7f:3d:3b:cb:7a:3e:4c:4b:af:f9:b0:e1:e6:99:c8:c6: bb:d4:88:e5:0b:84:f1:27:df:39:55:be:e3:c6:a4:15:bb:cf: 34:3d:8c:f4:05:1f:d2:3d:f6:e8:0c:0a:ee:4c:cd:77:a6:a9: 16:2c:12:49:ae:d0:31:07:bb:60:07:13:2a:af:e2:11:e9:c7: 09:82:62:f8:82:df:9f:b1:1b:c8:c0:73:cc:95:9a:80:37:f9: 07:10:66:21:64:67:7e:fe:3a:de:86:f2:c9:28:4e:c0:58:0d: c8:3f:8c:67:da:a7:26:cc:e3:99:ab:ba:94:e2:da:e7:47:5f: 0e:ad:4d:6b:5c:4c:1b:d1:48:e6:51:bf:a7:06:ea:4a:c8:92: b4:43:4f:7e:f7:28:23:27:e7:d2:84:28:6e:33:87:f3:d8:1c: ba:de:ee:a0:f7:12:34:31:20:0d:e2:63:17:d7:3d:f2:cb:0a: f1:3c:d6:84:c1:a6:0e:15:2e:d3:df:d8:3e:0f:bc:ca:e0:db: f2:40:e7:41:fd:56:09:e6:d2:09:1d:f0:ca:2a:ef:48:85:7f: d4:38:27:c4:40:2c:e9:3a:04:57:92:02:89:d8:86:13:72:71: 23:e5:21:cc:24:78:07:7f:44:62:63:4d:be:e6:dd:ea:15:c3: 84:ea:18:cd -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICEZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5QkMxMTAvBgNVBAUTKDM2RUU4QTQwMTMwNUVCMzhFMjhEODZBNURCN0Y3NjI4 QUFCN0UyNEYwHhcNMjUwNTI0MTc0OTQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzBjYS0wM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvqh2k4yDQvSUKCArkr702SGwpRwmuRQ2sMKDdbXp7YgQuJfNDcJ1ZzNrZyW uK6kArTzLdtdyO223jFmrQtlo2kymK9fpA13hAhgsDh+XKS382ytKK6ke11IbEjQ hZAetifcZyFzMc1zOD8KymKsugiGdiWa2uEVyRdlbC3K2sVXezwUaiqd31n4qvfx FnJkiKLWGZ6vcKx6h5LI18IKEsO/+SwPPSI8xQlA3qwEny0+9HSxdjIbWQiHuF9H ADV1uYxwFC/gf598DFngCRvqLw21CBavTWfiiMi+5ZzcxXmogs5cs2K2Af5I+ROV Wc6bs/wfBw8oFLzhuYsfqV0mkQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFDD3PMGz 25+4dqJIHfKMFr1Iwfp2MB8GA1UdIwQYMBaAFDbuikATBes44o2Gpdt/diiqt+JP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlCQy84OTI4OTczMDJF OTAxMUU5OTE3Nzk2MEZDNEY5QUUwMi9OdTZLUUJNRjZ6amlqWWFsMjM5MktLcTM0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051NktRQk1GNnpqaWpZYWwyMzkyS0txMzRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA5QkMvODkyODk3MzAyRTkwMTFFOTkxNzc5NjBGQzRGOUFFMDIvOERGREY4QUUy RTk1MTFFOTg5NkVGQTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaMAwDBAF5YTYDBAB5YTgDBAB5YTsDBAB91DgwDQYJKoZIhvcNAQELBQAD ggEBAK0ufz07y3o+TEuv+bDh5pnIxrvUiOULhPEn3zlVvuPGpBW7zzQ9jPQFH9I9 9ugMCu5MzXemqRYsEkmu0DEHu2AHEyqv4hHpxwmCYviC35+xG8jAc8yVmoA3+QcQ ZiFkZ37+Ot6G8skoTsBYDcg/jGfapybM45mrupTi2udHXw6tTWtcTBvRSOZRv6cG 6krIkrRDT373KCMn59KEKG4zh/PYHLre7qD3EjQxIA3iYxfXPfLLCvE81oTBpg4V LtPf2D4PvMrg2/JA50H9Vgnm0gkd8Moq70iFf9Q4J8RALOk6BFeSAonYhhNycSPl IcwkeAd/RGJjTb7m3eoVw4TqGM0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:49 2026 by rpki-client