$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/009FA5F0397C11EF9EC42850C4F9AE02.roa File: 009FA5F0397C11EF9EC42850C4F9AE02.roa (raw, json) Hash identifier: E4kJ9iOaWgd6kt6tetVvQMWfFOobpWfFfGNUTYY1QpA= Subject key identifier: 5D:D0:42:C4:23:6C:AD:79:52:3E:E2:38:5C:47:99:80:B8:D3:A4:61 Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 07B4 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/009FA5F0397C11EF9EC42850C4F9AE02.roa Signing time: Tue 22 Jul 2025 22:03:21 +0000 ROA not before: Tue 22 Jul 2025 22:03:21 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 2914 IP address blocks: 117.120.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Jul 22 22:03:21 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68800aa9-dacb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:21:7b:c0:52:71:e3:e9:f8:45:c3:a6:06: 89:88:c8:3d:ac:ee:45:26:33:2d:1d:6e:37:dc:d6: 29:b7:a1:d1:bc:92:89:57:3c:4d:72:38:5a:d1:14: b5:e1:75:91:f8:11:c7:e6:6a:fa:e4:73:5f:57:eb: cb:bd:9e:82:d7:4a:a9:e2:12:47:ac:fd:57:04:8e: 70:39:94:05:c2:0c:6e:ac:fc:4f:8b:a5:ba:82:13: c1:12:9d:e8:10:43:75:7a:14:e8:1d:40:6e:d1:aa: d9:6c:71:5f:89:6e:6f:26:bc:1a:46:c0:31:0d:a1: 75:9b:d1:01:46:ab:9f:89:11:7e:7f:87:20:3d:10: 73:3d:e3:db:98:f5:ec:77:e4:17:fc:cb:80:51:11: 99:20:48:ca:4e:28:6a:19:cd:7f:67:e8:db:9d:f2: c3:b4:79:76:ea:a2:6c:fa:15:90:80:72:7f:de:5a: 2d:d7:cc:e0:fb:e2:f1:63:f8:93:0b:6f:c3:32:c0: b8:07:5f:72:f3:a9:1d:b3:8f:53:f5:69:71:69:bd: 25:3b:29:5e:33:52:dd:f0:8f:6a:e4:61:d2:d8:6b: bf:e2:83:2d:7a:73:ee:98:5e:1d:e3:45:f3:c5:5a: 79:3f:a8:28:3f:0d:d9:df:62:e8:33:a7:47:19:3f: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D0:42:C4:23:6C:AD:79:52:3E:E2:38:5C:47:99:80:B8:D3:A4:61 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/009FA5F0397C11EF9EC42850C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.120.0.0/24 Signature Algorithm: sha256WithRSAEncryption 45:3d:d3:7b:a5:9e:2a:3d:44:3f:e0:64:6b:da:60:8b:3a:92: cd:80:7f:fc:e8:eb:ef:ff:45:ac:36:6c:01:41:7f:bc:21:14: e6:8e:2d:bd:d6:a8:4e:df:89:a6:e6:ac:c0:ca:a1:a8:e3:57: 76:fa:bb:44:3d:d1:3c:ae:e9:1d:99:ef:80:8f:3e:e2:0e:62: 19:cc:18:18:69:fd:79:1b:36:7e:70:6c:9e:96:f9:20:59:84: 7c:78:24:ed:45:83:5f:06:30:e4:2d:83:be:42:1d:45:e2:5a: b3:bf:fa:a0:00:0a:8a:38:19:39:fc:07:f3:a8:3c:f5:a8:6a: 33:e1:3f:11:1d:25:5e:f3:03:6f:4e:a5:ff:7b:3b:af:f9:c2: 5c:1b:fe:b0:00:4e:6e:d2:4d:bc:f2:05:6b:77:9b:a0:52:ed: 9d:b6:63:bb:0a:fc:0b:9c:6a:86:f6:a8:88:3c:ff:a6:a2:2a: b0:74:c5:45:4e:ee:78:fc:ec:42:86:d5:81:55:e2:4e:40:73: ef:59:66:c1:7c:e5:ec:7a:9c:2b:49:6b:8a:e2:3c:c7:5a:02: ce:b1:88:db:7b:4d:37:4d:1d:c5:2f:90:10:89:da:97:99:5e: 64:f5:c9:8e:cc:50:14:7f:b4:db:70:e6:ed:d9:35:e1:fa:6a: a7:78:16:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjUwNzIyMjIwMzIxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwMGFhOS1kYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMMhe8BScePp+EXDpgaJiMg9rO5FJjMtHW433NYpt6HRvJKJVzxNcjha0RS1 4XWR+BHH5mr65HNfV+vLvZ6C10qp4hJHrP1XBI5wOZQFwgxurPxPi6W6ghPBEp3o EEN1ehToHUBu0arZbHFfiW5vJrwaRsAxDaF1m9EBRqufiRF+f4cgPRBzPePbmPXs d+QX/MuAURGZIEjKTihqGc1/Z+jbnfLDtHl26qJs+hWQgHJ/3lot18zg++LxY/iT C2/DMsC4B19y86kds49T9Wlxab0lOyleM1Ld8I9q5GHS2Gu/4oMtenPumF4d40Xz xVp5P6goPw3Z32LoM6dHGT9SVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF3QQsQj bK15Uj7iOFxHmYC406RhMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlGQ0MvMjJDRDc5REUwRENDMTFFQkI4MUJBNDMxQzRGOUFFMDIvMDA5RkE1RjAz OTdDMTFFRjlFQzQyODUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB1eAAwDQYJKoZIhvcNAQELBQADggEBAEU903ulnio9RD/g ZGvaYIs6ks2Af/zo6+//Raw2bAFBf7whFOaOLb3WqE7fiabmrMDKoajjV3b6u0Q9 0Tyu6R2Z74CPPuIOYhnMGBhp/XkbNn5wbJ6W+SBZhHx4JO1Fg18GMOQtg75CHUXi WrO/+qAACoo4GTn8B/OoPPWoajPhPxEdJV7zA29Opf97O6/5wlwb/rAATm7STbzy BWt3m6BS7Z22Y7sK/Aucaob2qIg8/6aiKrB0xUVO7nj87EKG1YFV4k5Ac+9ZZsF8 5ex6nCtJa4riPMdaAs6xiNt7TTdNHcUvkBCJ2peZXmT1yY7MUBR/tNtw5u3ZNeH6 aqd4FnA= -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:41 2025 by rpki-client