$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa File: E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa (raw, json) Hash identifier: 9HHR5FNxgt2P/Pdw8ubx9aLKafeL5xLqLydwvJefiRE= Subject key identifier: 99:C0:11:EE:54:E0:2A:D3:2B:FF:A8:06:FB:56:68:B8:C7:BF:9E:77 Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 38 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa Signing time: Wed 01 Oct 2025 00:23:55 +0000 ROA not before: Wed 01 Oct 2025 00:23:55 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38289 IP address blocks: 123.100.128.0/21 maxlen: 21 123.100.128.0/24 maxlen: 24 123.100.132.0/24 maxlen: 24 123.100.133.0/24 maxlen: 24 123.100.142.0/24 maxlen: 24 123.100.153.0/24 maxlen: 24 123.100.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Oct 1 00:23:55 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68dc749a-c437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:12:d6:60:76:62:ef:d1:cf:19:bb:96:a4: d9:51:d9:99:a2:45:15:6c:cb:79:b7:53:e3:75:c5: f3:21:35:c7:a4:d3:21:10:e2:8d:53:3e:7f:63:b4: ed:5f:d9:a7:f5:6d:35:05:d9:9e:d2:2d:b6:bb:0c: 65:24:b8:f5:47:c5:9b:55:51:5b:c8:7b:90:9f:f3: e0:78:e7:37:da:84:cc:d1:1f:3c:71:3d:b1:5f:38: 12:1e:72:47:67:1d:12:11:bd:b1:2c:9c:4d:d6:59: 8e:d9:20:87:04:7b:36:c1:50:78:1f:5d:bc:08:61: ff:b8:4f:a8:65:d1:ec:15:1e:ac:37:41:70:c0:df: d8:68:72:f2:d9:32:8d:46:42:f8:ed:68:f0:6e:21: fe:72:64:39:68:19:6a:0b:ec:4b:a6:fd:34:8a:5a: 26:2b:8a:f2:78:0a:87:60:d9:7b:23:fe:cf:91:40: 00:48:15:26:26:c4:a1:ba:b5:f4:f9:1a:9f:31:9c: e7:97:e4:95:da:a7:da:c0:a8:68:3a:55:55:d8:fb: 34:14:7e:c6:84:bf:bb:07:a8:16:2f:35:5f:58:12: 06:e2:c8:ae:08:23:06:35:48:3a:b4:c4:ef:27:0b: d6:21:0f:02:7b:ba:f6:2b:a3:e8:f8:bd:2a:a9:b2: 90:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C0:11:EE:54:E0:2A:D3:2B:FF:A8:06:FB:56:68:B8:C7:BF:9E:77 X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/E9ACBC4C9E5C11F0B2B86856C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.100.128.0/21 123.100.142.0/24 123.100.153.0-123.100.155.255 Signature Algorithm: sha256WithRSAEncryption b4:48:e4:55:27:df:a5:11:02:df:9a:34:51:e5:22:49:99:0c: a7:d0:1d:ca:ce:bd:62:99:46:3d:62:88:7d:e7:c8:b7:05:60: f1:33:94:dd:62:88:d9:58:92:70:ae:e8:6a:48:bd:20:2d:c6: 2e:2a:2c:e6:5b:b5:a2:39:42:c2:9c:c3:66:14:4d:90:3d:2d: 0e:c7:10:dd:bf:17:a2:44:9c:15:89:70:0e:18:3c:a2:29:84: af:4b:88:18:21:50:97:00:7f:05:62:a6:d4:85:02:62:2c:d5: b9:e8:b2:d3:c2:9f:d0:82:27:8f:54:03:15:d8:2d:3d:61:68: 0b:c3:7c:e4:85:a7:83:c7:6e:70:6a:58:d4:ba:20:3d:97:a4: 74:e0:55:e8:51:45:40:1b:51:a5:98:c5:53:16:a0:a2:b3:55: a6:26:7a:ac:09:93:fd:2b:06:9e:6f:b2:80:a4:a9:81:67:32: e3:f0:ff:60:3b:30:29:65:a6:ad:fc:41:1d:6f:ec:e4:2e:7d: c4:7f:f2:dd:db:73:bc:43:38:c4:13:92:2c:28:1f:0f:d6:41: 7a:96:c8:7b:6d:98:92:18:b1:0f:5a:47:31:62:5c:a0:8b:2c: 58:6e:94:4e:4b:f5:a3:63:31:a5:3f:61:0f:d3:30:5c:c0:e8: bc:f9:23:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTEwMDEwMDIzNTVaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZGM3NDlhLWM0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzehLWYHZi79HPGbuWpNlR2ZmiRRVsy3m3U+N1xfMhNcek0yEQ4o1TPn9jtO1f 2af1bTUF2Z7SLba7DGUkuPVHxZtVUVvIe5Cf8+B45zfahMzRHzxxPbFfOBIeckdn HRIRvbEsnE3WWY7ZIIcEezbBUHgfXbwIYf+4T6hl0ewVHqw3QXDA39hocvLZMo1G QvjtaPBuIf5yZDloGWoL7Eum/TSKWiYrivJ4Codg2Xsj/s+RQABIFSYmxKG6tfT5 Gp8xnOeX5JXap9rAqGg6VVXY+zQUfsaEv7sHqBYvNV9YEgbiyK4IIwY1SDq0xO8n C9YhDwJ7uvYro+j4vSqpspAXAgMBAAGjggKpMIICpTAdBgNVHQ4EFgQUmcAR7lTg KtMr/6gG+1ZouMe/nncwHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9FOUFDQkM0QzlF NUMxMUYwQjJCODY4NTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQk MCIwIAQCAAEwGgMEA3tkgAMEAHtkjjAMAwQAe2SZAwQCe2SYMA0GCSqGSIb3DQEB CwUAA4IBAQC0SORVJ9+lEQLfmjRR5SJJmQyn0B3Kzr1imUY9Yoh958i3BWDxM5Td YojZWJJwruhqSL0gLcYuKizmW7WiOULCnMNmFE2QPS0OxxDdvxeiRJwViXAOGDyi KYSvS4gYIVCXAH8FYqbUhQJiLNW56LLTwp/QgiePVAMV2C09YWgLw3zkhaeDx25w aljUuiA9l6R04FXoUUVAG1GlmMVTFqCis1WmJnqsCZP9Kwaeb7KApKmBZzLj8P9g OzApZaat/EEdb+zkLn3Ef/Ld23O8QzjEE5IsKB8P1kF6lsh7bZiSGLEPWkcxYlyg iyxYbpROS/WjYzGlP2EP0zBcwOi8+SPv -----END CERTIFICATE-----Generated at Mon Oct 20 08:43:02 2025 by rpki-client