$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/EAAC1A669E5C11F0B2B86856C4F9AE02.roa File: EAAC1A669E5C11F0B2B86856C4F9AE02.roa (raw, json) Hash identifier: 3ivuXSavI1grPWsZeIczoxpu8ztBxvr+RSbjIfz05CY= Subject key identifier: C3:3F:38:D2:6E:F5:08:87:96:61:70:6A:EE:67:FF:17:9B:2E:3D:0D Certificate issuer: /CN=A915FE9F/serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Certificate serial: 39 Authority key identifier: 28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/EAAC1A669E5C11F0B2B86856C4F9AE02.roa Signing time: Wed 01 Oct 2025 00:23:56 +0000 ROA not before: Wed 01 Oct 2025 00:23:56 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135027 IP address blocks: 123.100.128.0/21 maxlen: 24 123.100.142.0/24 maxlen: 24 123.100.153.0/24 maxlen: 24 123.100.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE9F, serialNumber=28DAD8D4CC6F740FA000D436869AE0F176EAE933 Validity Not Before: Oct 1 00:23:56 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68dc749c-368b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:44:b9:2c:cc:03:f3:a0:06:a2:15:be:45: ea:a2:31:e9:85:5c:8f:0b:52:49:38:d5:f8:25:18: 6d:2c:ef:d9:27:98:14:20:d1:63:75:ba:f7:7a:c6: e2:ca:c1:4b:1b:45:b5:30:19:d5:f3:8f:b4:6a:f5: ef:93:6a:d8:4a:0c:21:b6:bb:54:d6:5b:04:92:17: 02:13:2a:0e:b0:42:ca:59:a3:57:fa:0a:d7:fc:be: 21:41:31:31:2e:d3:f4:7b:f0:a6:6e:6e:e7:f7:11: 17:bb:d9:54:dd:17:1b:dd:95:1a:0d:49:4d:54:dd: 60:64:8b:20:ad:de:57:31:10:9e:5a:ff:e9:e8:26: 27:c8:1c:49:ec:59:4e:7b:b8:cd:96:59:19:91:e7: c7:c5:09:9a:26:51:44:c8:a3:a3:b3:35:33:46:5a: a7:7e:44:ec:62:19:9e:61:b5:aa:f1:31:08:39:b4: 8b:48:bf:88:54:57:a1:a6:9d:da:ae:e0:6d:27:f3: 49:c8:b1:7d:37:14:70:79:01:57:d3:34:da:d6:e2: 0f:45:8e:51:b1:fa:b0:0a:89:3e:cc:08:de:64:1e: fc:5a:d3:b9:9e:ca:af:64:3c:2e:af:ac:86:5e:03: a3:88:41:d9:4f:b5:b8:00:8c:0e:b7:c2:23:25:f3: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3F:38:D2:6E:F5:08:87:96:61:70:6A:EE:67:FF:17:9B:2E:3D:0D X509v3 Authority Key Identifier: keyid:28:DA:D8:D4:CC:6F:74:0F:A0:00:D4:36:86:9A:E0:F1:76:EA:E9:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/KNrY1MxvdA-gANQ2hprg8Xbq6TM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KNrY1MxvdA-gANQ2hprg8Xbq6TM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE9F/23027124517011F0B9DBCB87C4F9AE02/EAAC1A669E5C11F0B2B86856C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.100.128.0/21 123.100.142.0/24 123.100.153.0-123.100.155.255 Signature Algorithm: sha256WithRSAEncryption 55:ba:ec:03:1f:4e:6b:a8:fb:dd:c9:71:dc:d9:94:b1:c9:95: 31:73:3c:b3:ef:2a:18:6f:e2:7b:c9:2c:ff:18:73:9c:88:7d: f2:61:9c:95:23:18:a0:ec:6c:fd:f1:04:52:38:db:47:56:a2: 96:d0:61:a4:fa:84:75:ac:b8:92:9e:d3:47:9c:76:6a:7e:f5: 5e:b7:78:3d:c6:3f:a9:bf:b0:cd:32:54:58:c6:b4:1e:a4:4f: 15:9e:5e:d1:7a:e7:dd:63:6a:7f:67:48:ca:de:fa:7e:a1:6c: 02:5f:12:06:f6:9c:45:e7:4e:15:54:d1:76:cb:b1:4b:b8:91: 79:7c:aa:3b:92:8d:b9:96:ea:88:7a:29:12:a2:43:ac:2f:6c: 90:8f:61:1b:ea:0e:be:6f:08:9a:c9:5b:c6:a4:67:61:7e:31: 1d:81:bb:eb:2b:4a:3b:20:34:68:5b:64:a0:47:c8:c6:46:3c: d5:56:18:8c:ec:5c:fa:8f:5e:29:01:ab:21:b2:28:9b:b5:8c: da:74:dd:7f:f3:dc:5c:0b:f1:a2:73:14:67:89:c8:43:06:d9: 21:44:7d:7c:9d:5e:60:16:95:67:6b:4f:55:90:03:82:cc:03: 72:17:3d:42:54:29:f1:4a:bb:35:ca:c2:80:52:c5:58:6e:90: ce:c8:8d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkU5RjExMC8GA1UEBRMoMjhEQUQ4RDRDQzZGNzQwRkEwMDBENDM2ODY5QUUwRjE3 NkVBRTkzMzAeFw0yNTEwMDEwMDIzNTZaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZGM3NDljLTM2OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHIUS5LMwD86AGohW+ReqiMemFXI8LUkk41fglGG0s79knmBQg0WN1uvd6xuLK wUsbRbUwGdXzj7Rq9e+TathKDCG2u1TWWwSSFwITKg6wQspZo1f6Ctf8viFBMTEu 0/R78KZubuf3ERe72VTdFxvdlRoNSU1U3WBkiyCt3lcxEJ5a/+noJifIHEnsWU57 uM2WWRmR58fFCZomUUTIo6OzNTNGWqd+ROxiGZ5htarxMQg5tItIv4hUV6Gmndqu 4G0n80nIsX03FHB5AVfTNNrW4g9FjlGx+rAKiT7MCN5kHvxa07meyq9kPC6vrIZe A6OIQdlPtbgAjA63wiMl8+3LAgMBAAGjggKpMIICpTAdBgNVHQ4EFgQUwz840m71 CIeWYXBq7mf/F5suPQ0wHwYDVR0jBBgwFoAUKNrY1MxvdA+gANQ2hprg8Xbq6TMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGRTlGLzIzMDI3MTI0NTE3 MDExRjBCOURCQ0I4N0M0RjlBRTAyL0tOclkxTXh2ZEEtZ0FOUTJocHJnOFhicTZU TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS05yWTFNeHZkQS1nQU5RMmhwcmc4WGJxNlRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU5Ri8yMzAyNzEyNDUxNzAxMUYwQjlEQkNCODdDNEY5QUUwMi9FQUFDMUE2NjlF NUMxMUYwQjJCODY4NTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQk MCIwIAQCAAEwGgMEA3tkgAMEAHtkjjAMAwQAe2SZAwQCe2SYMA0GCSqGSIb3DQEB CwUAA4IBAQBVuuwDH05rqPvdyXHc2ZSxyZUxczyz7yoYb+J7ySz/GHOciH3yYZyV Ixig7Gz98QRSONtHVqKW0GGk+oR1rLiSntNHnHZqfvVet3g9xj+pv7DNMlRYxrQe pE8Vnl7ReufdY2p/Z0jK3vp+oWwCXxIG9pxF504VVNF2y7FLuJF5fKo7ko25luqI eikSokOsL2yQj2Eb6g6+bwiayVvGpGdhfjEdgbvrK0o7IDRoW2SgR8jGRjzVVhiM 7Fz6j14pAashsiibtYzadN1/89xcC/GicxRnichDBtkhRH18nV5gFpVna09VkAOC zANyFz1CVCnxSrs1ysKAUsVYbpDOyI1S -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:58 2025 by rpki-client