$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/BEB7C0D0BB1C11F181CCCE6E6711F970.roa File: BEB7C0D0BB1C11F181CCCE6E6711F970.roa (raw, json) Hash identifier: 0urKms0wScUkjrUtJaQtzJZoMAc1TfYCz7DrN/a8kv8= Subject key identifier: 60:B7:E6:5C:21:E5:A3:F5:87:EE:57:DC:D8:07:DE:DC:8C:33:27:58 Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0CAA Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/BEB7C0D0BB1C11F181CCCE6E6711F970.roa Signing time: Wed 30 Sep 2026 19:36:06 +0000 ROA not before: Wed 30 Sep 2026 19:36:06 +0000 ROA not after: Sat 30 Jan 2027 00:00:00 +0000 asID: 150297 IP address blocks: 123.253.20.0/22 maxlen: 22 123.253.20.0/24 maxlen: 24 123.253.21.0/24 maxlen: 24 123.253.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 18:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Sep 30 19:36:06 2026 GMT Not After : Jan 30 00:00:00 2027 GMT Subject: CN=6abd64a6-b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:a8:ea:c6:81:c2:76:14:ce:9c:1f:34:28: 1d:4a:f8:0d:c9:c7:32:c6:4e:19:a7:ab:73:2e:a7: 25:f9:72:5d:7b:09:d9:be:c6:87:2f:25:ad:af:5c: d6:ec:a4:fa:72:d2:0f:0d:8d:9d:c4:61:d6:ac:e3: 96:c3:01:cd:9a:a3:e7:99:a7:e9:6d:14:ba:c0:c4: 7e:c3:73:48:8f:8e:c3:ac:9c:d3:0d:f1:c8:1f:ef: 92:83:b4:80:85:14:bb:de:dc:88:ab:88:4b:69:c1: 87:76:b3:40:f8:60:74:4f:c1:f8:aa:64:1a:66:f3: 3b:a5:47:4c:da:d2:69:69:e0:53:51:ac:af:8b:8e: fb:bf:00:aa:88:be:6c:3a:62:a0:3c:9c:e2:d2:df: 18:d2:c8:9c:fd:ba:87:ae:df:42:da:66:df:8e:8f: 69:1b:5d:9c:3f:3c:a4:58:0d:02:f0:a7:97:8f:54: 98:ad:48:ab:e9:2f:79:d3:5f:05:72:9e:47:29:ba: 46:76:15:b2:ac:3c:1a:cd:48:4c:c9:cf:af:65:22: 32:76:58:94:3a:98:d3:47:9b:7e:ef:bf:34:e6:65: 0d:63:61:89:b1:d8:06:3c:92:1d:70:ad:a3:64:5d: 40:1d:14:1e:81:a4:10:44:9f:33:f9:d0:9e:5a:32: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B7:E6:5C:21:E5:A3:F5:87:EE:57:DC:D8:07:DE:DC:8C:33:27:58 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/BEB7C0D0BB1C11F181CCCE6E6711F970.roa sbgp-ipAddrBlock: critical IPv4: 123.253.20.0/22 Signature Algorithm: sha256WithRSAEncryption ac:c5:80:d0:b2:62:f7:19:a1:19:55:ea:5c:0c:2d:00:b5:ee: e1:6c:00:25:2f:1b:eb:be:f5:e5:ba:67:e1:67:d7:be:96:a3: 3f:65:92:8d:7f:35:73:59:e8:5b:92:51:78:f7:d2:1a:77:87: 18:c1:6d:de:04:94:ea:bf:5e:76:22:99:60:e7:1a:a6:6c:51: 07:34:92:47:35:e3:1a:33:de:f9:b0:11:d9:8f:dd:89:29:a5: e2:11:b8:04:f4:1f:92:de:b1:e5:8c:a0:91:b3:17:8b:e9:b8: a9:16:bc:70:64:39:72:b9:19:88:95:0f:23:c5:ea:0a:c9:49: ed:82:f3:4f:0e:9e:19:6c:e0:c6:a4:e4:a7:74:8f:c9:d9:ae: f6:48:a2:f7:f7:78:f7:d2:1a:31:aa:fa:1f:ed:bb:8a:08:ae: 89:f9:52:6d:e2:e0:76:5c:0e:b5:7e:86:1e:4d:f0:a7:0b:9a: 28:90:2b:4f:89:63:63:1a:dc:d3:4e:1f:55:5b:16:b6:73:e6: ea:2b:36:f4:78:1f:35:4b:f0:19:9b:aa:9a:2a:2e:1a:90:60: e9:de:fd:9a:14:50:5b:bc:e2:13:09:ee:5d:ea:58:ac:31:db: e1:3c:01:10:38:da:dc:cb:89:4d:f4:9f:ca:cf:61:48:77:fe: 3a:87:f0:c9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjYwOTMwMTkzNjA2WhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkNjRhNi1iNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreOo6saBwnYUzpwfNCgdSvgNyccyxk4Zp6tzLqcl+XJdewnZvsaHLyWtr1zW 7KT6ctIPDY2dxGHWrOOWwwHNmqPnmafpbRS6wMR+w3NIj47DrJzTDfHIH++Sg7SA hRS73tyIq4hLacGHdrNA+GB0T8H4qmQaZvM7pUdM2tJpaeBTUayvi477vwCqiL5s OmKgPJzi0t8Y0sic/bqHrt9C2mbfjo9pG12cPzykWA0C8KeXj1SYrUir6S95018F cp5HKbpGdhWyrDwazUhMyc+vZSIydliUOpjTR5t+77805mUNY2GJsdgGPJIdcK2j ZF1AHRQegaQQRJ8z+dCeWjIcEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGC35lwh 5aP1h+5X3NgH3tyMMydYMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEEzNUMvNTJGQzZCOTgyNjE4MTFFQUJGRURFMTEzQzRGOUFFMDIvQkVCN0MwRDBC QjFDMTFGMTgxQ0NDRTZFNjcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCe/0UMA0GCSqGSIb3DQEBCwUAA4IBAQCsxYDQsmL3GaEZVepcDC0A te7hbAAlLxvrvvXlumfhZ9e+lqM/ZZKNfzVzWehbklF499Iad4cYwW3eBJTqv152 Iplg5xqmbFEHNJJHNeMaM975sBHZj92JKaXiEbgE9B+S3rHljKCRsxeL6bipFrxw ZDlyuRmIlQ8jxeoKyUntgvNPDp4ZbODGpOSndI/J2a72SKL393j30hoxqvof7buK CK6J+VJt4uB2XA61foYeTfCnC5ookCtPiWNjGtzTTh9VWxa2c+bqKzb0eB81S/AZ m6qaKi4akGDp3v2aFFBbvOITCe5d6lisMdvhPAEQONrcy4lN9J/Kz2FId/46h/DJ -----END CERTIFICATE-----Generated at Sat Oct 3 15:44:24 2026 by rpki-client