$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/AF4E5B08483911EEB846EA36C4F9AE02.roa File: AF4E5B08483911EEB846EA36C4F9AE02.roa (raw, json) Hash identifier: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw= Subject key identifier: 72:E1:95:80:C1:DD:2B:6D:A1:EE:E9:A0:5A:21:8A:19:88:BD:D9:FA Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0AA7 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/AF4E5B08483911EEB846EA36C4F9AE02.roa Signing time: Thu 14 Aug 2025 19:59:56 +0000 ROA not before: Thu 14 Aug 2025 19:59:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 150744 IP address blocks: 123.253.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2727 (0xaa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Aug 14 19:59:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=689e403b-59bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:74:b8:57:63:14:12:1c:e4:ac:77:42:b2: 96:9d:5b:0e:72:c8:86:4b:2f:8d:02:78:46:81:14: da:27:2d:a9:61:47:1f:56:0b:f1:ab:4c:1f:da:a3: 1b:61:bc:83:05:90:97:57:d2:df:dd:6e:e1:88:53: e6:18:74:60:ef:96:47:ed:96:59:39:4b:68:73:d9: e4:28:18:09:0b:0d:43:d2:ac:4c:e3:11:df:a5:1b: 3c:3a:d8:e2:a1:c9:08:c3:da:4b:70:8b:36:56:c3: 42:d0:f2:0e:2d:56:39:7e:68:84:cb:be:94:8f:6c: 28:47:40:d2:78:b6:9f:29:f3:0a:32:b7:ec:ee:e4: 12:49:33:ca:2c:d9:20:c9:88:0d:1f:7e:76:5c:02: ed:57:0b:e3:49:ca:d0:52:2d:13:5b:6f:4e:c2:0e: e4:21:09:bb:6c:fc:4c:25:48:e8:01:dc:4e:18:64: ae:31:3b:c1:a1:e2:bc:d2:ee:2a:d7:d4:1e:b6:16: 4c:fc:de:d6:c5:3e:c4:0a:42:7d:38:b2:99:48:0f: 7b:89:8d:ac:4c:0d:b6:19:b9:aa:31:32:ae:8f:a3: 9f:12:39:fb:33:1b:94:5c:b2:26:07:67:cf:a1:4d: c0:e4:12:d8:2d:2b:84:21:2c:a1:98:cf:65:0e:1a: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E1:95:80:C1:DD:2B:6D:A1:EE:E9:A0:5A:21:8A:19:88:BD:D9:FA X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/AF4E5B08483911EEB846EA36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.96.0/24 Signature Algorithm: sha256WithRSAEncryption 26:f5:51:df:56:2c:e4:11:fe:a0:69:59:54:4a:a9:c6:10:be: 68:d1:24:bd:dc:e6:64:2d:7a:1c:5e:a5:54:a6:d7:ae:58:12: 5e:50:9d:7f:b8:22:74:d3:e8:d8:7a:35:bf:ab:bc:28:d5:aa: 72:57:68:31:7a:2c:e0:02:fd:4f:5c:ab:c2:91:5c:25:e3:08: de:e5:63:b9:b0:c8:19:8f:55:da:10:45:09:24:5c:c0:15:4a: 92:66:d5:2a:ba:40:98:cb:fa:ea:6a:af:06:11:45:4b:a4:f3: 9e:11:26:c5:5d:a1:c0:c1:b7:07:44:d0:9d:ad:62:6d:ce:73: e7:e3:d8:a3:e6:89:cd:8b:5c:33:30:ed:7e:38:b3:6e:c3:7e: 82:df:5e:76:ae:f3:70:09:95:9b:85:72:86:fb:20:39:44:62: 31:f9:66:8a:cb:7a:24:61:9b:0a:6e:28:4b:80:c6:e5:30:3b: e3:e3:d6:3c:a0:34:04:95:0c:aa:ac:d5:f7:d3:8e:9c:2a:da: 22:24:0d:7e:9c:4a:89:2e:cd:fd:ee:84:bf:b4:56:0e:ee:41: a1:98:50:32:0e:f9:90:80:b6:f8:7d:05:a1:fa:87:56:51:62: 00:ad:61:6a:0e:30:1e:63:0d:17:52:6e:31:c6:66:51:45:0d: 71:04:e0:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjUwODE0MTk1OTU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllNDAzYi01OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyVB0uFdjFBIc5Kx3QrKWnVsOcsiGSy+NAnhGgRTaJy2pYUcfVgvxq0wf2qMb YbyDBZCXV9Lf3W7hiFPmGHRg75ZH7ZZZOUtoc9nkKBgJCw1D0qxM4xHfpRs8Otji ockIw9pLcIs2VsNC0PIOLVY5fmiEy76Uj2woR0DSeLafKfMKMrfs7uQSSTPKLNkg yYgNH352XALtVwvjScrQUi0TW29Owg7kIQm7bPxMJUjoAdxOGGSuMTvBoeK80u4q 19QethZM/N7WxT7ECkJ9OLKZSA97iY2sTA22GbmqMTKuj6OfEjn7MxuUXLImB2fP oU3A5BLYLSuEISyhmM9lDhrEvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHLhlYDB 3Sttoe7poFohihmIvdn6MB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNGNUQvNzVGODc1RjI2NjkwMTFFQTk2ODNGQjJGQzRGOUFFMDIvQUY0RTVCMDg0 ODM5MTFFRUI4NDZFQTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7/WAwDQYJKoZIhvcNAQELBQADggEBACb1Ud9WLOQR/qBp WVRKqcYQvmjRJL3c5mQtehxepVSm165YEl5QnX+4InTT6Nh6Nb+rvCjVqnJXaDF6 LOAC/U9cq8KRXCXjCN7lY7mwyBmPVdoQRQkkXMAVSpJm1Sq6QJjL+upqrwYRRUuk 854RJsVdocDBtwdE0J2tYm3Oc+fj2KPmic2LXDMw7X44s27DfoLfXnau83AJlZuF cob7IDlEYjH5ZorLeiRhmwpuKEuAxuUwO+Pj1jygNASVDKqs1ffTjpwq2iIkDX6c Sokuzf3uhL+0Vg7uQaGYUDIO+ZCAtvh9BaH6h1ZRYgCtYWoOMB5jDRdSbjHGZlFF DXEE4MA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:48 2025 by rpki-client