$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/97285ACA5BB111EEB6671243C4F9AE02.roa File: 97285ACA5BB111EEB6671243C4F9AE02.roa (raw, json) Hash identifier: 22wy5pSbuCqrfFfcJ+ucm61bM30FP1MuRs3xwq1fts0= Subject key identifier: AB:4D:12:86:FA:1A:91:A8:6B:E5:DB:7A:AE:E2:56:BF:12:A9:C9:71 Certificate issuer: /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE Certificate serial: 0C42 Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/97285ACA5BB111EEB6671243C4F9AE02.roa Signing time: Tue 30 Jun 2026 19:23:14 +0000 ROA not before: Tue 30 Jun 2026 19:23:14 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 4787 IP address blocks: 123.253.128.0/24 maxlen: 24 123.253.129.0/24 maxlen: 24 123.253.130.0/24 maxlen: 24 123.253.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3138 (0xc42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913383A, serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE Validity Not Before: Jun 30 19:23:14 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4417a2-dc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:98:2f:dd:03:c5:bc:0b:90:e0:83:df:94: f0:fe:66:d2:b5:b4:88:56:2a:4c:4f:60:ad:49:45: 2e:10:12:72:8d:c5:67:eb:e1:c6:9b:18:1c:a2:95: 20:a3:5d:bc:06:a6:c6:cb:d5:b2:fb:48:e4:2b:0f: 89:99:e8:6a:2a:18:c4:df:1f:f9:a7:ce:f5:65:d1: 80:1b:3a:4c:24:ac:cd:d7:e5:f5:a9:4d:96:8e:f0: 0e:03:f1:03:7e:53:9d:fe:ee:8e:58:70:cb:d9:ab: 7b:6c:49:02:03:d7:7d:c7:73:31:85:6c:89:87:c5: d2:e6:75:27:48:16:eb:9c:f3:fe:0f:ae:1f:b6:15: 32:19:76:66:67:c6:ae:5e:05:96:2c:4d:1e:3f:c0: 9a:14:47:bb:dc:9d:0e:61:e2:84:eb:46:9d:08:93: 64:fb:d7:59:13:9f:2a:2d:6d:cb:b0:d9:6a:fb:88: 49:50:7c:12:ae:17:b9:4b:71:c2:ea:e8:19:50:59: ae:88:97:c0:32:74:6f:b4:24:11:b1:73:b9:f7:c2: eb:64:02:35:4b:a3:d1:de:a7:a9:2c:8a:2f:15:36: f7:47:fc:c0:68:85:a3:de:36:a9:4f:c6:74:41:a2: 11:c5:e5:e3:93:fb:fa:ed:cc:82:ed:94:20:e5:0a: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4D:12:86:FA:1A:91:A8:6B:E5:DB:7A:AE:E2:56:BF:12:A9:C9:71 X509v3 Authority Key Identifier: keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/97285ACA5BB111EEB6671243C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.253.128.0/22 Signature Algorithm: sha256WithRSAEncryption 42:d8:cf:0c:49:2c:4c:c1:d8:7c:e3:93:d4:8c:cf:a6:58:a1: 3e:cf:5f:57:4d:8b:52:5e:10:4e:5a:c4:2d:e5:03:87:4d:1d: e1:5f:75:fd:ed:90:75:88:46:7f:34:7b:3e:19:94:d5:f2:fa: 11:d2:f6:68:22:f4:d7:5f:de:d7:86:3e:14:78:ea:68:9d:48: 33:ce:02:f0:8d:d5:70:e7:57:38:69:5b:74:e0:82:0b:55:98: 49:a7:c8:df:02:c8:fc:8c:8a:7f:32:0d:c3:74:09:5a:e5:ed: 3e:ff:65:a8:e8:a1:4e:cf:89:70:1e:d2:29:e5:0d:92:df:cf: 99:b3:c0:b2:0d:87:43:73:99:0b:11:30:89:53:8a:24:62:24: 4c:70:1e:50:ca:35:44:5f:28:e9:a8:b7:00:05:35:ce:95:3f: ec:93:84:db:cc:31:2c:14:3d:8d:1d:76:1e:4c:93:d2:2f:71: 4e:8d:fa:a6:7d:34:19:b7:8a:cf:bf:dd:04:34:15:11:79:8a: ff:2b:83:43:ed:08:de:07:9d:ba:03:39:49:c1:64:6b:a5:59: ab:d7:9b:61:71:78:cf:af:f5:b1:1a:eb:3a:d0:00:5a:6c:c5: c5:39:af:a4:d7:6d:f9:1e:28:8f:94:5b:0f:4a:f8:0b:39:1a: 6d:74:97:a3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM4M0ExMTAvBgNVBAUTKDlFRDdCQUY2M0Y1NTRGMUZFQTU3MEUxOUJBRjY5RURF RDBEOUU0QkUwHhcNMjYwNjMwMTkyMzE0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0MTdhMi1kYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1eYL90DxbwLkOCD35Tw/mbStbSIVipMT2CtSUUuEBJyjcVn6+HGmxgcopUg o128BqbGy9Wy+0jkKw+JmehqKhjE3x/5p871ZdGAGzpMJKzN1+X1qU2WjvAOA/ED flOd/u6OWHDL2at7bEkCA9d9x3MxhWyJh8XS5nUnSBbrnPP+D64fthUyGXZmZ8au XgWWLE0eP8CaFEe73J0OYeKE60adCJNk+9dZE58qLW3LsNlq+4hJUHwSrhe5S3HC 6ugZUFmuiJfAMnRvtCQRsXO598LrZAI1S6PR3qepLIovFTb3R/zAaIWj3japT8Z0 QaIRxeXjk/v67cyC7ZQg5QorVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKtNEob6 GpGoa+Xbeq7iVr8SqclxMB8GA1UdIwQYMBaAFJ7XuvY/VU8f6lcOGbr2nt7Q2eS+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzgzQS8xRkZCN0Q4MDMw NkIxMUVBODQ4QkUwMzFDNEY5QUUwMi9udGU2OWo5VlR4X3FWdzRadXZhZTN0RFo1 TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250ZTY5ajlWVHhfcVZ3NFp1dmFlM3REWjVMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM4M0EvMUZGQjdEODAzMDZCMTFFQTg0OEJFMDMxQzRGOUFFMDIvOTcyODVBQ0E1 QkIxMTFFRUI2NjcxMjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCe/2AMA0GCSqGSIb3DQEBCwUAA4IBAQBC2M8MSSxMwdh845PUjM+m WKE+z19XTYtSXhBOWsQt5QOHTR3hX3X97ZB1iEZ/NHs+GZTV8voR0vZoIvTXX97X hj4UeOponUgzzgLwjdVw51c4aVt04IILVZhJp8jfAsj8jIp/Mg3DdAla5e0+/2Wo 6KFOz4lwHtIp5Q2S38+Zs8CyDYdDc5kLETCJU4okYiRMcB5QyjVEXyjpqLcABTXO lT/sk4TbzDEsFD2NHXYeTJPSL3FOjfqmfTQZt4rPv90ENBUReYr/K4ND7QjeB526 AzlJwWRrpVmr15thcXjPr/WxGus60ABabMXFOa+k1235HiiPlFsPSvgLORptdJej -----END CERTIFICATE-----Generated at Fri Jul 24 10:16:13 2026 by rpki-client