$ rpki-client -vvf rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa File: BF6469FCA41611F0A6E79C33C4F9AE02.roa (raw, json) Hash identifier: Iw9hs9kJZjRvU/kjqQsF9fh7P0eDr0FwCz9e/iK74jQ= Subject key identifier: B8:E3:B2:26:E3:9E:A6:5F:E7:42:BD:32:FE:A2:28:AE:98:97:25:00 Certificate issuer: /CN=A9136F4F/serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF Certificate serial: 02 Authority key identifier: BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa Signing time: Wed 08 Oct 2025 07:16:46 +0000 ROA not before: Wed 08 Oct 2025 07:16:45 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141387 IP address blocks: 123.253.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136F4F, serialNumber=BBCD9003234EB140ED0D89BB3B01FB6C463F5CAF Validity Not Before: Oct 8 07:16:45 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e60fdd-4b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:61:bd:23:55:22:b8:11:b0:36:59:fb:24: c8:62:5c:3b:02:a8:e8:2f:43:af:32:0c:7f:39:e4: 09:72:ce:4e:e3:a0:e3:ff:60:9c:f1:bf:a8:be:62: 38:fa:82:82:7b:b7:d6:df:12:4b:9b:e0:40:46:29: 8d:d4:10:55:f2:fd:98:f6:0f:af:8e:ba:0a:1a:14: a0:5a:c5:9a:05:6f:de:be:f4:6f:7f:d2:e6:3a:80: 3d:ef:2f:fe:3f:1f:8e:34:6c:a0:5f:a6:3e:3c:de: 9d:44:81:1f:12:9f:f9:b0:df:1a:38:26:00:10:4f: 95:16:b6:57:8b:dd:5e:3e:df:ca:d0:a8:46:8e:d1: bc:86:8a:ba:6b:f9:e2:a3:c9:2b:4f:2f:6b:43:34: 21:2f:08:e7:83:04:0d:d3:22:d5:9d:f2:6c:96:b3: f7:e9:b7:75:b8:84:72:db:8b:0a:4a:1c:f5:29:60: 39:fa:83:36:61:f5:61:c0:16:49:3a:2e:12:63:9f: 16:3d:cc:65:7a:74:d3:e9:5e:06:89:0a:13:6b:43: 11:d8:0c:0a:d4:09:7c:bc:77:95:cd:b7:0e:6d:98: 82:c4:42:d6:dd:e3:25:92:dc:22:59:96:4f:6f:ff: 8d:9c:ab:fe:67:a4:2c:3f:04:53:ba:53:08:c8:11: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:B2:26:E3:9E:A6:5F:E7:42:BD:32:FE:A2:28:AE:98:97:25:00 X509v3 Authority Key Identifier: keyid:BB:CD:90:03:23:4E:B1:40:ED:0D:89:BB:3B:01:FB:6C:46:3F:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/u82QAyNOsUDtDYm7OwH7bEY_XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u82QAyNOsUDtDYm7OwH7bEY_XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136F4F/107F0FF0A41611F09DE55732C4F9AE02/BF6469FCA41611F0A6E79C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.118.0/24 Signature Algorithm: sha256WithRSAEncryption 17:9e:d3:57:a8:88:e4:9a:9c:03:29:c3:29:0e:42:e3:27:fe: 47:4f:e7:32:a6:8e:13:60:b7:fc:52:fe:66:f1:d7:fe:b4:b9: 98:06:14:ce:17:68:f1:ce:8e:7c:68:fe:b0:d4:3c:ac:f2:8c: ef:47:ea:cb:03:4c:c2:6c:f6:5a:69:24:80:09:8f:3b:49:be: 87:21:d6:34:b8:d3:46:f2:f9:0e:12:bb:ae:dc:31:f9:5c:fe: 46:17:e8:58:45:f3:88:2e:e1:08:fc:73:80:71:ee:8b:10:42: aa:4b:99:e3:6a:9f:72:c5:d0:d9:ef:0c:13:ca:63:ff:5d:db: a9:45:bd:3b:d4:38:78:b2:eb:ae:1a:27:dd:f9:c7:f1:9c:cd: 76:4b:8f:d7:49:24:14:cf:32:7f:05:37:e0:d8:4e:d4:1e:4a: a8:c8:eb:13:5a:12:b9:6b:cb:0d:73:47:c0:e6:5b:a5:56:de: d4:3f:ae:8b:b4:17:90:8f:53:34:ab:32:e0:31:09:3e:8f:f6: 65:2f:8a:d1:16:84:59:ff:e3:30:e7:b6:b7:a9:5b:a8:72:c0: b0:c1:c7:11:64:5b:70:6f:8d:8d:0e:de:3a:37:40:59:7a:ae: b6:b9:c3:05:61:3d:22:08:87:9d:59:db:96:47:2b:92:fa:16: 5d:81:3a:83 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkY0RjExMC8GA1UEBRMoQkJDRDkwMDMyMzRFQjE0MEVEMEQ4OUJCM0IwMUZCNkM0 NjNGNUNBRjAeFw0yNTEwMDgwNzE2NDVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTYwZmRkLTRiNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvlmG9I1UiuBGwNln7JMhiXDsCqOgvQ68yDH855Alyzk7joOP/YJzxv6i+Yjj6 goJ7t9bfEkub4EBGKY3UEFXy/Zj2D6+OugoaFKBaxZoFb96+9G9/0uY6gD3vL/4/ H440bKBfpj483p1EgR8Sn/mw3xo4JgAQT5UWtleL3V4+38rQqEaO0byGirpr+eKj yStPL2tDNCEvCOeDBA3TItWd8myWs/fpt3W4hHLbiwpKHPUpYDn6gzZh9WHAFkk6 LhJjnxY9zGV6dNPpXgaJChNrQxHYDArUCXy8d5XNtw5tmILEQtbd4yWS3CJZlk9v /42cq/5npCw/BFO6UwjIEfIBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuOOyJuOe pl/nQr0y/qIorpiXJQAwHwYDVR0jBBgwFoAUu82QAyNOsUDtDYm7OwH7bEY/XK8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2RjRGLzEwN0YwRkYwQTQx NjExRjA5REU1NTczMkM0RjlBRTAyL3U4MlFBeU5Pc1VEdERZbTdPd0g3YkVZX1hL OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdTgyUUF5Tk9zVUR0RFltN093SDdiRVlfWEs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkY0Ri8xMDdGMEZGMEE0MTYxMUYwOURFNTU3MzJDNEY5QUUwMi9CRjY0NjlGQ0E0 MTYxMUYwQTZFNzlDMzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHv9djANBgkqhkiG9w0BAQsFAAOCAQEAF57TV6iI5JqcAynD KQ5C4yf+R0/nMqaOE2C3/FL+ZvHX/rS5mAYUzhdo8c6OfGj+sNQ8rPKM70fqywNM wmz2WmkkgAmPO0m+hyHWNLjTRvL5DhK7rtwx+Vz+RhfoWEXziC7hCPxzgHHuixBC qkuZ42qfcsXQ2e8ME8pj/13bqUW9O9Q4eLLrrhon3fnH8ZzNdkuP10kkFM8yfwU3 4NhO1B5KqMjrE1oSuWvLDXNHwOZbpVbe1D+ui7QXkI9TNKsy4DEJPo/2ZS+K0RaE Wf/jMOe2t6lbqHLAsMHHEWRbcG+NjQ7eOjdAWXqutrnDBWE9IgiHnVnblkcrkvoW XYE6gw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:39:05 2025 by rpki-client