$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa File: B301869A276011EC9237AB73C4F9AE02.roa (raw, json) Hash identifier: qcdujlq1NGB4edxTni4lJHKbBJ3ZGbyP99FRGV9hMQ0= Subject key identifier: 2D:3E:65:14:FB:50:99:FC:D2:69:B6:65:32:25:7F:A0:BC:DD:28:8C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B21B Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa Signing time: Thu 08 May 2025 15:59:50 +0000 ROA not before: Thu 08 May 2025 15:59:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133977 IP address blocks: 123.253.12.0/24 maxlen: 24 123.253.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45595 (0xb21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 15:59:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cd4f6-7558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:6b:5a:5e:1c:09:58:66:fe:d9:0f:71:2b: 12:2f:e7:06:ea:75:2a:2f:0b:48:a1:91:46:03:72: ea:92:29:be:97:b3:bf:7d:71:0e:47:fe:df:a8:6e: 94:5e:ad:c9:01:e6:73:ba:b9:71:29:3f:05:f1:62: 13:27:21:ff:73:72:01:f8:25:0c:44:e9:f7:05:a9: ac:09:a9:8e:86:b4:6c:38:cf:33:91:50:a4:02:3a: ab:6f:08:aa:7f:01:8e:7e:c0:47:86:05:34:a8:de: c4:16:3c:e7:8d:00:c4:69:10:97:98:58:a8:1b:07: 37:e4:10:cd:20:31:69:91:9a:e3:3c:7d:00:4d:62: b6:d7:4c:d1:75:8a:9f:d4:86:ac:b1:eb:af:11:3a: ee:39:d8:96:f1:6e:26:43:bd:57:d4:7f:8c:ad:35: 20:a1:9a:28:58:3b:54:ad:20:58:1e:58:f2:75:da: 44:b8:7d:10:5c:dc:e9:9b:e9:c7:e0:db:d0:a9:21: dc:17:c0:e8:3f:30:ff:b1:dc:42:5e:57:11:7c:8f: 6b:8b:2b:23:8b:b1:05:9c:6f:10:3f:c0:3e:83:dc: 5a:15:c8:81:d9:7b:ab:cb:1b:03:6f:39:39:a9:0b: a0:36:eb:9c:73:66:d6:78:de:8f:c2:bb:51:10:6b: b8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3E:65:14:FB:50:99:FC:D2:69:B6:65:32:25:7F:A0:BC:DD:28:8C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.12.0/24 123.253.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:d6:c6:61:c2:99:af:cb:29:7f:14:28:44:a1:3a:2c:0f:60: 58:04:8c:f0:1b:a3:56:f7:fc:0a:4c:43:12:16:bc:7b:09:bf: 36:27:64:9f:57:1c:2a:c8:7a:68:bd:ce:f2:e9:81:b3:c9:29: bd:63:c4:58:fa:37:8c:20:eb:71:ca:61:68:2f:75:a4:ee:ab: 9a:c1:db:66:29:d9:50:ac:7a:bc:92:e5:7c:01:5b:9f:38:11: 90:74:3e:14:65:ae:0c:df:01:33:c3:2c:f3:9a:bf:79:98:df: c7:41:76:5a:63:f5:13:d1:ed:34:1a:dc:2c:dd:73:73:94:a8: 56:60:49:30:cc:76:74:7d:3e:67:f9:01:27:2e:86:c2:f1:9a: 0d:78:33:c4:06:13:fd:b6:25:75:b9:39:ae:c5:4d:0f:8d:71: d0:c3:25:d8:54:64:fd:81:89:b3:b6:66:bc:d2:40:8d:92:30: 2a:4b:6c:ce:a4:f4:1e:6b:91:42:0e:01:17:45:f2:46:ad:ba: 17:d3:73:51:75:d3:39:6f:29:2b:4f:4d:1c:7e:fc:25:fa:ac: 9e:dc:9b:c6:28:7d:71:48:48:0c:c9:e0:df:d8:3f:f9:59:4c: c3:84:fa:c6:3c:99:f7:80:96:34:68:68:a9:89:80:eb:33:2c: 13:d2:6b:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDALIbMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE1NTk1MFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2Q0ZjYtNzU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRCa1peHAlYZv7ZD3ErEi/nBup1Ki8LSKGRRgNy6pIpvpezv31xDkf+36hu lF6tyQHmc7q5cSk/BfFiEych/3NyAfglDETp9wWprAmpjoa0bDjPM5FQpAI6q28I qn8Bjn7AR4YFNKjexBY8540AxGkQl5hYqBsHN+QQzSAxaZGa4zx9AE1ittdM0XWK n9SGrLHrrxE67jnYlvFuJkO9V9R/jK01IKGaKFg7VK0gWB5Y8nXaRLh9EFzc6Zvp x+Db0Kkh3BfA6D8w/7HcQl5XEXyPa4srI4uxBZxvED/APoPcWhXIgdl7q8sbA285 OakLoDbrnHNm1njej8K7URBruJsCAwEAAaOCApswggKXMB0GA1UdDgQWBBQtPmUU +1CZ/NJptmUyJX+gvN0ojDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0IzMDE4NjlB Mjc2MDExRUM5MjM3QUI3M0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCUGCCsGAQUFBwEHAQH/ BBYwFDASBAIAATAMAwQAe/0MAwQAe/0PMA0GCSqGSIb3DQEBCwUAA4IBAQAs1sZh wpmvyyl/FChEoTosD2BYBIzwG6NW9/wKTEMSFrx7Cb82J2SfVxwqyHpovc7y6YGz ySm9Y8RY+jeMIOtxymFoL3Wk7quawdtmKdlQrHq8kuV8AVufOBGQdD4UZa4M3wEz wyzzmr95mN/HQXZaY/UT0e00Gtws3XNzlKhWYEkwzHZ0fT5n+QEnLobC8ZoNeDPE BhP9tiV1uTmuxU0PjXHQwyXYVGT9gYmztma80kCNkjAqS2zOpPQea5FCDgEXRfJG rboX03NRddM5bykrT00cfvwl+qye3JvGKH1xSEgMyeDf2D/5WUzDhPrGPJn3gJY0 aGipiYDrMywT0mue -----END CERTIFICATE-----Generated at Wed Nov 5 16:26:54 2025 by rpki-client