$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa File: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (raw, json) Hash identifier: Ah769txZ1i8LI8a9aR/4aMRU/GBmcnuWkAw7rNhxenA= Subject key identifier: B3:BE:09:AE:3E:9D:A9:97:EC:CB:E2:C3:D0:40:88:CF:61:94:34:08 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: B9 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:01:13 +0000 ROA not before: Tue 29 Apr 2025 08:13:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38494 IP address blocks: 123.176.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Apr 29 08:13:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e439-c7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:d8:f2:10:a0:2b:6f:68:a1:8f:9e:89:47: 5f:c2:09:20:bf:cc:aa:73:7c:ee:f6:d7:a0:41:0f: 9f:5c:2c:bd:9d:10:81:27:ff:8a:8f:8d:3e:52:3c: 40:c2:63:01:86:ec:8c:55:6c:81:77:8a:7a:21:42: c7:77:4f:e7:3f:b0:86:68:4d:d8:0a:bd:70:63:04: 46:f6:79:92:15:ec:b9:c5:57:c1:17:cf:9d:2d:dd: ce:6b:ce:38:ca:ce:53:92:16:39:af:d6:02:31:65: 7e:fc:eb:af:ef:db:ec:16:03:0c:01:e9:22:81:a4: 28:1e:d0:c5:8f:ea:f9:29:c2:e5:84:e4:52:56:5b: cd:5e:94:c4:90:ac:17:44:1e:03:4b:1a:e3:9a:28: 3d:4b:9b:16:55:6f:38:29:e6:78:4c:f9:0f:63:f5: 3b:f1:42:1c:94:d6:59:16:be:34:10:4e:07:58:00: ac:f9:f5:d8:80:4e:18:2c:90:47:0b:e6:71:3a:73: a2:49:dd:68:47:a4:cf:31:03:39:59:d3:1b:36:36: d9:88:cf:9a:89:f7:0f:7b:14:e8:b2:ba:95:db:29: cf:72:23:c8:58:83:fe:37:be:2a:50:83:fa:45:02: cd:ed:53:2f:ea:da:bf:b5:1d:ca:71:92:66:ac:86: 81:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BE:09:AE:3E:9D:A9:97:EC:CB:E2:C3:D0:40:88:CF:61:94:34:08 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.176.120.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1b:86:ec:12:db:75:83:f7:d1:3b:68:47:f6:7c:5d:0d:af: 34:02:fc:1e:9f:4b:cc:db:aa:33:fc:b2:5f:e2:49:c3:a3:db: d3:4f:e0:d2:fb:c5:36:4c:65:78:92:5e:23:7b:8b:68:b1:f3: 98:29:d7:df:39:29:05:2c:e0:9e:1a:34:fb:71:e0:fe:f8:d0: c9:8a:7c:9a:ff:07:f6:86:f0:86:bf:bd:2a:a7:42:95:46:cd: 16:9d:0d:17:d5:a3:af:87:91:c7:77:36:8c:d3:69:19:a0:f1: f3:09:fd:d4:32:69:c3:7e:0a:34:89:5c:c3:ca:27:a4:8e:f7: f7:29:01:d9:e3:b3:39:b8:45:ce:bb:08:a1:ca:2b:d6:40:d5: 61:fb:59:b3:e1:ec:98:f4:26:e3:9e:31:f6:ea:09:79:0d:8c: fb:38:81:2d:53:98:69:68:97:1f:c9:53:32:23:3a:85:1e:0b: 5b:22:f5:0e:d3:c3:76:20:86:d8:c7:a0:7f:1b:e5:22:fe:f7: ed:91:cd:1b:b5:c4:bb:85:14:3d:3b:20:d3:30:7f:e7:c2:7a: 7d:f9:1f:13:36:ea:fa:93:c4:ad:a7:ae:3c:27:5d:ae:56:63: 9a:66:93:24:cf:7f:92:42:bb:74:aa:3b:08:17:39:40:d7:bf: b6:09:23:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBREUxMTAvBgNVBAUTKEQ5MzIwQkZEQUMwQzkwQjM0MjhBNDRGQzdEQ0EwRTJG NzkwOTc3NDEwHhcNMjUwNDI5MDgxMzQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTQzOS1jN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkU7Y8hCgK29ooY+eiUdfwgkgv8yqc3zu9tegQQ+fXCy9nRCBJ/+Kj40+UjxA wmMBhuyMVWyBd4p6IULHd0/nP7CGaE3YCr1wYwRG9nmSFey5xVfBF8+dLd3Oa844 ys5TkhY5r9YCMWV+/Ouv79vsFgMMAekigaQoHtDFj+r5KcLlhORSVlvNXpTEkKwX RB4DSxrjmig9S5sWVW84KeZ4TPkPY/U78UIclNZZFr40EE4HWACs+fXYgE4YLJBH C+ZxOnOiSd1oR6TPMQM5WdMbNjbZiM+aifcPexTosrqV2ynPciPIWIP+N74qUIP6 RQLN7VMv6tq/tR3KcZJmrIaBhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLO+Ca4+ namX7Mviw9BAiM9hlDQIMB8GA1UdIwQYMBaAFNkyC/2sDJCzQopE/H3KDi95CXdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0FERS84OUE0OTNFMkZF NEQxMUVGQTFBRkZDMUFDNEY5QUUwMi8yVElMX2F3TWtMTkNpa1Q4ZmNvT0wza0pk MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTdBREUvODlBNDkzRTJGRTREMTFFRkExQUZGQzFBQzRGOUFFMDIvRTBDRkE1NEVG RTREMTFFRjgyNzQ5NzFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAe7B4MA0GCSqGSIb3DQEBCwUAA4IBAQB9G4bsEtt1g/fRO2hH9nxd Da80Avwen0vM26oz/LJf4knDo9vTT+DS+8U2TGV4kl4je4tosfOYKdffOSkFLOCe GjT7ceD++NDJinya/wf2hvCGv70qp0KVRs0WnQ0X1aOvh5HHdzaM02kZoPHzCf3U MmnDfgo0iVzDyiekjvf3KQHZ47M5uEXOuwihyivWQNVh+1mz4eyY9CbjnjH26gl5 DYz7OIEtU5hpaJcfyVMyIzqFHgtbIvUO08N2IIbYx6B/G+Ui/vftkc0btcS7hRQ9 OyDTMH/nwnp9+R8TNur6k8Stp648J12uVmOaZpMkz3+SQrt0qjsIFzlA17+2CSNv -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:57 2026 by rpki-client