$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/BB593434FF3611F08F27381B8BEE528E.roa File: BB593434FF3611F08F27381B8BEE528E.roa (raw, json) Hash identifier: Qapce3etNilI3Pu8k6Dr7+sFyVw5LEh0sJqZNNrb7as= Subject key identifier: 0A:0C:D9:E8:74:69:4C:82:17:86:4A:22:C6:43:7D:6A:F2:F1:A8:02 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: A3 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/BB593434FF3611F08F27381B8BEE528E.roa Signing time: Mon 02 Mar 2026 13:36:58 +0000 ROA not before: Wed 11 Feb 2026 06:29:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38289 IP address blocks: 123.100.128.0/21 maxlen: 21 123.100.128.0/24 maxlen: 24 123.100.132.0/24 maxlen: 24 123.100.133.0/24 maxlen: 24 123.100.142.0/24 maxlen: 24 123.100.153.0/24 maxlen: 24 123.100.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Feb 11 06:29:22 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5927a-55ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:59:e3:1f:aa:ed:ca:a9:5b:e5:e0:11:f1: ac:25:59:28:85:df:f5:aa:8c:17:12:b4:52:5c:e4: a6:db:5d:05:28:99:c7:c5:69:c2:29:13:3a:a5:ae: 04:a9:d8:19:1e:22:c4:d8:da:e6:d1:46:ee:41:60: 26:ec:df:b5:b3:34:cf:77:72:c5:f8:ae:f5:4f:33: 4e:85:2f:36:48:4e:7e:28:ea:ed:fa:a3:55:31:13: 75:d0:96:db:9f:6c:9d:dd:19:40:cc:71:0a:1a:0f: 1b:f9:69:ab:a8:68:cb:80:68:54:b9:86:f9:b4:59: d0:2d:be:ca:92:e6:06:d7:5c:43:f0:91:ca:2c:f5: d6:b7:57:d6:06:88:ed:00:a4:f0:ce:03:6a:86:27: d2:1b:bb:df:63:57:98:4d:16:8c:b5:9b:93:f9:b0: b5:5e:b4:31:03:62:da:3a:7a:34:55:e5:02:9b:a5: c3:16:e4:ac:f7:7e:ef:54:75:af:07:d6:55:10:80: 0f:fc:dd:85:01:30:c0:89:d7:df:c7:1c:1e:54:b8: 02:35:b8:01:4f:5a:38:f2:71:a5:f6:a5:ac:23:05: 40:60:a6:a9:2d:0d:b9:ee:b1:f9:02:22:20:28:6d: 3d:ee:f5:98:a0:be:51:8b:63:d1:19:4a:33:8b:ac: 59:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:D9:E8:74:69:4C:82:17:86:4A:22:C6:43:7D:6A:F2:F1:A8:02 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/BB593434FF3611F08F27381B8BEE528E.roa sbgp-ipAddrBlock: critical IPv4: 123.100.128.0/21 123.100.142.0/24 123.100.153.0-123.100.155.255 Signature Algorithm: sha256WithRSAEncryption 0d:24:05:e4:4a:66:cb:f9:ea:45:7d:a7:25:1a:3f:ab:71:ed: fd:e8:b7:f3:29:fd:41:09:1c:c2:ba:7e:4a:1e:3c:29:4c:80: 58:69:a9:43:8e:be:54:d3:51:0b:fa:13:ee:14:c8:8c:ba:e2: 53:78:f1:a4:fc:9b:b9:86:f9:20:b2:77:b1:71:9f:96:99:35: b6:9e:8e:2f:17:30:2b:74:49:58:fe:36:34:97:39:cc:1b:23: f6:2c:66:02:6e:28:29:4e:e3:e2:d7:d1:3d:6e:4f:10:a7:cd: 51:dc:4f:cc:34:cd:f3:5e:e9:8a:be:b7:79:6b:8b:0a:36:9a: 45:b3:3e:00:94:9e:26:e0:0e:45:35:dc:13:64:39:06:42:ee: ba:b3:23:6a:dd:57:ca:e4:2e:28:fe:11:a4:c5:b2:c5:d8:af: 4e:ed:bc:fa:8e:37:ce:36:58:4b:04:59:b7:84:ba:18:a5:51: e7:be:d8:06:17:d4:4e:66:38:2b:c4:c1:52:d0:cf:d7:c7:54: 2e:31:6d:76:15:f3:0f:c7:4e:03:2c:ef:da:25:09:82:8e:80: ee:7d:7b:b3:80:90:0c:b7:2d:40:48:68:96:21:bf:ec:60:f5: 9f:1d:19:c6:2f:49:40:a3:37:b2:48:b4:3b:5e:34:ee:3d:27: 92:3e:87:9d -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFOUYxMTAvBgNVBAUTKDI4REFEOEQ0Q0M2Rjc0MEZBMDAwRDQzNjg2OUFFMEYx NzZFQUU5MzMwHhcNMjYwMjExMDYyOTIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTI3YS01NWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwopZ4x+q7cqpW+XgEfGsJVkohd/1qowXErRSXOSm210FKJnHxWnCKRM6pa4E qdgZHiLE2Nrm0UbuQWAm7N+1szTPd3LF+K71TzNOhS82SE5+KOrt+qNVMRN10Jbb n2yd3RlAzHEKGg8b+WmrqGjLgGhUuYb5tFnQLb7KkuYG11xD8JHKLPXWt1fWBojt AKTwzgNqhifSG7vfY1eYTRaMtZuT+bC1XrQxA2LaOno0VeUCm6XDFuSs937vVHWv B9ZVEIAP/N2FATDAidffxxweVLgCNbgBT1o48nGl9qWsIwVAYKapLQ257rH5AiIg KG097vWYoL5Ri2PRGUozi6xZ/QIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFAoM2eh0 aUyCF4ZKIsZDfWry8agCMB8GA1UdIwQYMBaAFCja2NTMb3QPoADUNoaa4PF26ukz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU5Ri8yMzAyNzEyNDUx NzAxMUYwQjlEQkNCODdDNEY5QUUwMi9LTnJZMU14dmRBLWdBTlEyaHByZzhYYnE2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUZFOUYvMjMwMjcxMjQ1MTcwMTFGMEI5REJDQjg3QzRGOUFFMDIvQkI1OTM0MzRG RjM2MTFGMDhGMjczODFCOEJFRTUyOEUucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQDe2SAAwQAe2SOMAwDBAB7ZJkDBAJ7ZJgwDQYJKoZIhvcNAQELBQAD ggEBAA0kBeRKZsv56kV9pyUaP6tx7f3ot/Mp/UEJHMK6fkoePClMgFhpqUOOvlTT UQv6E+4UyIy64lN48aT8m7mG+SCyd7Fxn5aZNbaeji8XMCt0SVj+NjSXOcwbI/Ys ZgJuKClO4+LX0T1uTxCnzVHcT8w0zfNe6Yq+t3lriwo2mkWzPgCUnibgDkU13BNk OQZC7rqzI2rdV8rkLij+EaTFssXYr07tvPqON842WEsEWbeEuhilUee+2AYX1E5m OCvEwVLQz9fHVC4xbXYV8w/HTgMs79olCYKOgO59e7OAkAy3LUBIaJYhv+xg9Z8d GcYvSUCjN7JItDteNO49J5I+h50= -----END CERTIFICATE-----Generated at Thu Mar 26 02:23:13 2026 by rpki-client