$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F04860C28C5611E792848B4AC4F9AE02.roa File: F04860C28C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: OWjLebxJynytHvjgIP0SVIn8ZOFvLbt6j473I2eFdGg= Subject key identifier: F1:12:FE:8D:D6:A2:7C:1D:8F:E4:FF:FF:2E:9D:13:5D:8B:97:58:6E Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2781 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F04860C28C5611E792848B4AC4F9AE02.roa Signing time: Tue 08 Apr 2025 15:53:28 +0000 ROA not before: Tue 08 Apr 2025 15:53:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132853 IP address blocks: 122.53.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10113 (0x2781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f54678-6cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:ae:62:cb:a9:42:9d:b3:17:2d:2f:d3:30: 27:8c:e5:c1:b7:ba:23:12:88:44:5f:fb:56:30:70: c7:0c:15:2f:a9:0d:c9:eb:24:61:51:8d:66:68:e1: f6:06:47:07:ae:d5:09:36:13:34:67:09:f6:ca:cf: c4:ee:9e:d5:b4:31:12:a8:50:db:2f:34:56:e2:9c: 78:d3:ac:00:a5:77:b5:1b:e9:b7:3e:dd:72:62:0c: a5:e7:15:5c:ae:4c:f7:fb:74:58:07:2c:8f:3e:87: bc:2b:c7:97:09:31:54:a6:5a:c7:48:d8:b3:93:77: df:ed:f8:36:9e:e3:9b:41:49:dc:1b:db:ee:96:e8: 6e:18:79:11:5c:fe:e3:e5:28:87:5f:de:bc:89:ff: b8:af:bf:75:80:81:8f:a5:20:90:f5:5f:56:d3:b5: 54:92:38:16:c5:f9:33:d5:94:f0:b2:7c:8c:43:ab: 6a:52:e3:63:13:1e:3e:fe:fd:b4:bd:60:98:68:56: 5a:37:11:96:f6:86:95:d2:79:18:4c:59:8a:1b:bf: ac:c6:5a:49:35:98:91:18:69:19:92:ce:af:d7:79: de:85:8c:a9:66:30:37:90:5d:d5:df:93:55:ad:21: a8:04:29:fa:c4:d5:85:69:c2:87:97:d1:44:ff:52: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:12:FE:8D:D6:A2:7C:1D:8F:E4:FF:FF:2E:9D:13:5D:8B:97:58:6E X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F04860C28C5611E792848B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.53.123.0/24 Signature Algorithm: sha256WithRSAEncryption c2:2c:26:e1:86:81:ac:88:28:76:82:52:00:00:79:60:e4:16: 5a:f1:c5:02:6d:6e:5f:d4:6f:7b:71:ed:d5:5a:91:e6:5f:32: 0c:59:ba:3a:60:97:31:ea:48:f9:4c:1f:67:e3:66:e3:0c:7c: 8d:e1:8c:a2:5b:eb:e2:60:2e:9d:00:b0:3d:64:c9:8c:ca:76: 3f:f5:a2:54:d0:1a:65:34:33:f0:4d:e6:8b:95:91:f9:95:93: 50:f2:fa:b0:f4:bf:ff:31:2f:59:f1:f2:51:26:4a:91:a5:44: c7:52:41:6b:22:71:e2:5d:23:a0:b9:30:39:65:ad:f0:d9:b8: 9d:ae:70:02:41:25:de:3c:9f:e1:c1:6b:93:e7:6b:c2:96:2b: 34:78:c6:53:d1:10:20:7d:c0:10:a9:83:67:96:b0:61:94:5c: f0:6b:b0:a0:a6:a7:9a:8c:94:e2:0c:43:9c:42:81:09:cb:80: f0:ba:32:9e:43:f8:fd:d7:13:dd:f0:69:8f:74:6d:3e:ff:74: f3:0d:cc:b9:63:82:7b:be:51:76:8c:30:ce:53:b3:30:b0:87: 37:50:c2:4f:11:7e:1d:70:5f:fa:2f:c4:02:64:58:dc:1d:9f: 0d:15:5b:49:a0:69:da:a0:5b:91:d9:6e:77:a6:a5:bf:79:e9: 4c:6e:f5:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1NDY3OC02Y2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1muYsupQp2zFy0v0zAnjOXBt7ojEohEX/tWMHDHDBUvqQ3J6yRhUY1maOH2 BkcHrtUJNhM0Zwn2ys/E7p7VtDESqFDbLzRW4px406wApXe1G+m3Pt1yYgyl5xVc rkz3+3RYByyPPoe8K8eXCTFUplrHSNizk3ff7fg2nuObQUncG9vuluhuGHkRXP7j 5SiHX968if+4r791gIGPpSCQ9V9W07VUkjgWxfkz1ZTwsnyMQ6tqUuNjEx4+/v20 vWCYaFZaNxGW9oaV0nkYTFmKG7+sxlpJNZiRGGkZks6v13nehYypZjA3kF3V35NV rSGoBCn6xNWFacKHl9FE/1JSuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPES/o3W onwdj+T//y6dE12Ll1huMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjA0ODYwQzI4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6NXswDQYJKoZIhvcNAQELBQADggEBAMIsJuGGgayIKHaC UgAAeWDkFlrxxQJtbl/Ub3tx7dVakeZfMgxZujpglzHqSPlMH2fjZuMMfI3hjKJb 6+JgLp0AsD1kyYzKdj/1olTQGmU0M/BN5ouVkfmVk1Dy+rD0v/8xL1nx8lEmSpGl RMdSQWsiceJdI6C5MDllrfDZuJ2ucAJBJd48n+HBa5Pna8KWKzR4xlPRECB9wBCp g2eWsGGUXPBrsKCmp5qMlOIMQ5xCgQnLgPC6Mp5D+P3XE93waY90bT7/dPMNzLlj gnu+UXaMMM5TszCwhzdQwk8Rfh1wX/ovxAJkWNwdnw0VW0mgadqgW5HZbnempb95 6Uxu9aQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:16 2025 by rpki-client