$ rpki-client -vvf rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa File: 61A59876012A11EFB75C350FC4F9AE02.roa (raw, json) Hash identifier: WAA42IzaA5d5k/IY8QrF44XXEAbChLYtWjBVuWwrVBk= Subject key identifier: CE:B6:AD:E2:5C:85:BE:BD:4F:B6:41:A9:D3:C8:53:DF:18:63:09:AF Certificate issuer: /CN=A91D894F/serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Certificate serial: 010F Authority key identifier: 85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa Signing time: Fri 05 Sep 2025 05:41:41 +0000 ROA not before: Fri 05 Sep 2025 05:41:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 16509 IP address blocks: 117.74.104.0/24 maxlen: 24 117.74.105.0/24 maxlen: 24 117.74.106.0/24 maxlen: 24 117.74.107.0/24 maxlen: 24 117.74.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D894F, serialNumber=85B14A890B9BD4980D97E41BB391FCC9850FCB78 Validity Not Before: Sep 5 05:41:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ba7815-ddfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:a7:ba:36:42:c0:da:2f:b2:c3:3b:0b:c9: 2a:e8:de:5d:49:5e:c3:2e:3c:9a:52:6c:6f:1c:ed: 67:f1:51:c6:ee:38:6e:e1:98:36:d3:15:9b:65:28: 9f:b1:a6:ca:6e:b9:77:00:5d:c4:a8:95:ad:fd:88: 7b:4e:64:41:ac:bc:94:a2:d1:5f:1d:36:d8:6d:d6: b3:8b:33:69:8b:77:60:39:72:bc:b9:c4:fa:40:ac: db:89:da:49:47:f6:bd:8a:c1:d3:5b:9c:50:0e:3e: f0:4c:cb:fa:74:c3:ad:61:64:cb:2b:3a:16:1b:5a: 25:ce:1e:47:f4:98:d2:03:f5:3b:58:23:50:f7:f5: 30:f3:74:5c:80:a7:7c:6f:b1:7f:2d:28:ac:c4:04: f6:9a:82:06:83:f8:e6:4d:54:87:84:0e:89:5d:81: 24:c8:14:b6:13:fb:a5:a8:c0:f8:7f:b5:8d:a0:7f: b0:e7:3a:0b:de:63:05:27:19:cf:b8:dc:b3:0a:d1: 2d:b9:87:0c:d8:20:ad:da:13:54:4e:f5:a8:91:b3: ba:d6:e3:29:a2:f6:05:7d:6a:7e:74:15:21:2d:c8: 90:3e:14:64:d6:55:60:e4:a3:58:02:cc:cf:57:e5: cc:31:55:21:58:e8:fa:4e:72:6d:2e:96:8c:2f:6c: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:AD:E2:5C:85:BE:BD:4F:B6:41:A9:D3:C8:53:DF:18:63:09:AF X509v3 Authority Key Identifier: keyid:85:B1:4A:89:0B:9B:D4:98:0D:97:E4:1B:B3:91:FC:C9:85:0F:CB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/hbFKiQub1JgNl-Qbs5H8yYUPy3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hbFKiQub1JgNl-Qbs5H8yYUPy3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D894F/0AF45E36012A11EFA5FD916FC4F9AE02/61A59876012A11EFB75C350FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.74.104.0-117.74.108.255 Signature Algorithm: sha256WithRSAEncryption 66:71:64:ab:cc:d2:06:53:22:0e:a9:96:e5:7f:19:cf:5d:91: 48:0f:00:da:ee:e0:00:43:12:80:cb:4d:0b:24:a1:5c:9b:aa: 57:fd:a9:94:2d:93:0f:85:5e:07:6a:bb:53:94:8d:47:52:07: c8:d5:fa:39:41:8a:cf:16:61:bb:91:e0:42:96:76:b1:19:9a: 20:be:51:ed:b7:22:02:ac:02:8e:89:56:e5:ad:cd:66:e8:2d: f4:de:7c:4e:b6:0d:9f:d4:b5:9b:34:00:45:4d:67:8f:a6:e9: b3:c4:cd:76:de:53:22:5e:4f:15:33:f9:86:b9:b5:c4:a2:65: ab:d6:d5:fb:0d:5b:be:af:c4:c3:b6:df:d3:a0:12:99:9c:b3: ab:2c:97:48:2c:7e:81:2c:b7:c7:cf:52:ea:8c:6e:c5:b2:b8: 0c:96:d8:d9:02:96:b5:e9:ea:a2:4d:9b:38:8f:2c:c9:2b:b6: 15:4a:f2:8f:44:1f:5e:b1:3b:57:c0:a9:32:b2:e5:64:ae:f7: 04:ae:81:2a:d3:bf:59:f5:f2:24:ee:e3:a3:c8:60:33:1a:b5: 71:b9:58:50:66:fe:52:f0:3d:b8:81:2b:67:fb:61:8c:88:af: 9b:1c:62:0c:82:d7:aa:16:48:7c:5b:71:74:45:d6:e3:bc:b2: 79:46:5b:b9 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5NEYxMTAvBgNVBAUTKDg1QjE0QTg5MEI5QkQ0OTgwRDk3RTQxQkIzOTFGQ0M5 ODUwRkNCNzgwHhcNMjUwOTA1MDU0MTQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhNzgxNS1kZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpynujZCwNovssM7C8kq6N5dSV7DLjyaUmxvHO1n8VHG7jhu4Zg20xWbZSif sabKbrl3AF3EqJWt/Yh7TmRBrLyUotFfHTbYbdazizNpi3dgOXK8ucT6QKzbidpJ R/a9isHTW5xQDj7wTMv6dMOtYWTLKzoWG1olzh5H9JjSA/U7WCNQ9/Uw83RcgKd8 b7F/LSisxAT2moIGg/jmTVSHhA6JXYEkyBS2E/ulqMD4f7WNoH+w5zoL3mMFJxnP uNyzCtEtuYcM2CCt2hNUTvWokbO61uMpovYFfWp+dBUhLciQPhRk1lVg5KNYAszP V+XMMVUhWOj6TnJtLpaML2xntQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFM62reJc hb69T7ZBqdPIU98YYwmvMB8GA1UdIwQYMBaAFIWxSokLm9SYDZfkG7OR/MmFD8t4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODk0Ri8wQUY0NUUzNjAx MkExMUVGQTVGRDkxNkZDNEY5QUUwMi9oYkZLaVF1YjFKZ05sLVFiczVIOHlZVVB5 M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hiRktpUXViMUpnTmwtUWJzNUg4eVlVUHkzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg5NEYvMEFGNDVFMzYwMTJBMTFFRkE1RkQ5MTZGQzRGOUFFMDIvNjFBNTk4NzYw MTJBMTFFRkI3NUMzNTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA3VKaAMEAHVKbDANBgkqhkiG9w0BAQsFAAOCAQEAZnFk q8zSBlMiDqmW5X8Zz12RSA8A2u7gAEMSgMtNCyShXJuqV/2plC2TD4VeB2q7U5SN R1IHyNX6OUGKzxZhu5HgQpZ2sRmaIL5R7bciAqwCjolW5a3NZugt9N58TrYNn9S1 mzQARU1nj6bps8TNdt5TIl5PFTP5hrm1xKJlq9bV+w1bvq/Ew7bf06ASmZyzqyyX SCx+gSy3x89S6oxuxbK4DJbY2QKWtenqok2bOI8sySu2FUryj0QfXrE7V8CpMrLl ZK73BK6BKtO/WfXyJO7jo8hgMxq1cblYUGb+UvA9uIErZ/thjIivmxxiDILXqhZI fFtxdEXW47yyeUZbuQ== -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:55 2025 by rpki-client