$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa File: BF6469FCA41611F0A6E79C33C4F9AE02.roa (raw, json) Hash identifier: OQ1fYO/Vfq0H+gJMM7fdxIVe1LUqa54TGpDXZ1n8oiI= Subject key identifier: 62:02:B7:9F:99:16:63:1C:72:C5:C9:E8:7A:33:49:F2:B4:1C:84:5A Certificate issuer: /CN=A9136F4F/serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF Certificate serial: 4C Authority key identifier: BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:13:33 +0000 ROA not before: Wed 08 Oct 2025 07:16:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141387 IP address blocks: 123.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F4F, serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF Validity Not Before: Oct 8 07:16:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d90d-3855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:7a:1f:0f:75:70:a7:ad:a4:91:3a:36:08: 54:4f:c5:fe:8b:d7:c1:a3:dc:90:bf:7f:6b:af:f7: 4d:fa:6e:9e:08:2a:d4:30:0a:68:18:94:56:2a:ca: 72:08:a9:dc:d7:e3:28:43:7d:4d:ec:7c:1d:67:85: 88:85:54:96:7b:12:1a:9c:86:1e:69:00:f6:7e:31: 5c:bb:33:52:3b:6e:58:3c:7a:fd:92:47:5d:e1:61: 60:87:0a:3c:a8:1e:1a:a7:97:8a:4d:9b:b7:65:63: 0e:74:79:ea:ba:a7:70:90:89:cc:5a:6f:32:2d:78: 79:ec:9b:66:83:ac:89:ba:01:7b:1c:a3:bf:e9:d9: 63:8e:dd:3c:df:6a:d1:f4:64:1a:a0:69:69:34:d5: 76:9a:38:4e:09:00:18:52:6f:56:90:aa:57:42:de: a4:01:bc:0c:25:59:65:8b:53:92:9d:96:21:bd:e6: fc:19:3f:ab:d7:41:9c:98:1d:bb:3c:9e:c2:4e:94: d1:ff:5c:77:4f:53:af:f4:56:68:ed:4d:5f:f5:f0: 9d:6e:fb:2a:3c:53:b9:27:f0:a9:50:0f:21:a0:c8: f2:2c:74:c5:ed:de:88:e2:be:2d:8c:ac:bb:ee:9d: 55:14:7d:64:66:47:19:05:24:dc:2e:04:12:d0:96: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:B7:9F:99:16:63:1C:72:C5:C9:E8:7A:33:49:F2:B4:1C:84:5A X509v3 Authority Key Identifier: keyid:BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.253.118.0/24 Signature Algorithm: sha256WithRSAEncryption 40:f9:a0:00:4f:c9:09:a4:a1:b2:0b:0b:e9:77:17:b5:d3:e0: 33:69:30:b1:f6:3f:83:13:a6:17:76:61:e1:6a:02:dc:ca:a8: 9e:39:20:4b:b1:1c:45:78:80:67:38:b5:eb:6d:6c:bb:69:a3: a8:6d:6d:f9:d7:a1:d2:0b:9d:cd:bc:6b:1d:6f:cc:ab:72:94: fc:51:4d:92:58:76:d4:fb:d7:0a:1c:0d:90:7c:e7:0b:12:c8: a7:34:2a:4f:a5:a8:08:b2:43:07:04:9b:84:d7:c7:56:f8:ab: 7c:dc:0d:54:73:23:50:50:14:b1:59:e4:0d:53:e0:13:94:4e: 41:db:9a:9a:ff:30:37:fb:18:4c:a2:1f:78:65:71:b0:9f:d2: 55:89:71:20:72:cb:ed:b0:59:9d:4a:40:34:bc:88:53:d5:b8: 14:09:8c:6c:98:f6:10:53:21:47:21:b5:3c:6a:cc:be:47:9b: 73:b5:08:a0:48:1c:47:c1:a2:e2:32:78:1f:3b:46:1d:b6:8e: c2:6c:90:bf:44:0f:27:f7:11:9a:f1:1d:46:9b:5f:1c:a1:e8: ee:0a:fe:28:e0:e0:65:24:f5:90:f0:9d:73:51:27:48:0b:29: 3d:03:e2:2a:89:31:db:5d:b7:04:01:43:f7:b0:73:c0:94:61: 21:52:e9:67 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkY0RjExMC8GA1UEBRMoQkJDRDkwMDMyMzRFQjE0MEVEMEQ4OUJCM0IwMUZCNkM0 NjNGNUNBRjAeFw0yNTEwMDgwNzE2NDVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOTBkLTM4NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxkHofD3Vwp62kkTo2CFRPxf6L18Gj3JC/f2uv9036bp4IKtQwCmgYlFYqynII qdzX4yhDfU3sfB1nhYiFVJZ7Ehqchh5pAPZ+MVy7M1I7blg8ev2SR13hYWCHCjyo Hhqnl4pNm7dlYw50eeq6p3CQicxabzIteHnsm2aDrIm6AXsco7/p2WOO3TzfatH0 ZBqgaWk01XaaOE4JABhSb1aQqldC3qQBvAwlWWWLU5KdliG95vwZP6vXQZyYHbs8 nsJOlNH/XHdPU6/0VmjtTV/18J1u+yo8U7kn8KlQDyGgyPIsdMXt3ojivi2MrLvu nVUUfWRmRxkFJNwuBBLQliyTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUYgK3n5kW YxxyxcnoejNJ8rQchFowHwYDVR0jBBgwFoAUu82QAyNOsUDtDYm7OwH7bEY/XK8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2RjRGLzEwN0YwRkYwQTQx NjExRjA5REU1NTczMkM0RjlBRTAyL3U4MlFBeU5Pc1VEdERZbTdPd0g3YkVZX1hL OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTgyUUF5Tk9zVUR0RFltN093SDdiRVlfWEs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY0Ri8xMDdGMEZGMEE0MTYxMUYwOURFNTU3MzJDNEY5QUUwMi9CRjY0NjlGQ0E0 MTYxMUYwQTZFNzlDMzNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAB7/XYwDQYJKoZIhvcNAQELBQADggEBAED5oABPyQmkobILC+l3F7XT 4DNpMLH2P4MTphd2YeFqAtzKqJ45IEuxHEV4gGc4tettbLtpo6htbfnXodILnc28 ax1vzKtylPxRTZJYdtT71wocDZB85wsSyKc0Kk+lqAiyQwcEm4TXx1b4q3zcDVRz I1BQFLFZ5A1T4BOUTkHbmpr/MDf7GEyiH3hlcbCf0lWJcSByy+2wWZ1KQDS8iFPV uBQJjGyY9hBTIUchtTxqzL5Hm3O1CKBIHEfBouIyeB87Rh22jsJskL9EDyf3EZrx HUabXxyh6O4K/ijg4GUk9ZDwnXNRJ0gLKT0D4iqJMdtdtwQBQ/ewc8CUYSFS6Wc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:56:52 2026 by rpki-client