$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/99CFA3844DF511ED91A8AB4BC4F9AE02.roa File: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (raw, json) Hash identifier: JbKFPnuRth/AddBiK55OMld90fiS3Vh4UaoSsZlNznM= Subject key identifier: C5:09:B4:1C:48:F6:AD:BE:B8:05:C4:83:AA:D4:40:68:11:A8:1F:F0 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0B66 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/99CFA3844DF511ED91A8AB4BC4F9AE02.roa Signing time: Thu 30 Jul 2026 19:38:42 +0000 ROA not before: Thu 30 Jul 2026 19:38:42 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 141731 IP address blocks: 123.253.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Jul 30 19:38:42 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6ba842-a6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:ab:ea:fc:96:43:be:79:06:b4:c5:9e:5e: 4c:25:f3:10:10:3f:0c:14:94:20:49:82:bf:6a:f7: 40:87:16:6e:7f:73:9f:f9:2d:e0:84:0b:bf:4c:06: 14:cd:57:bc:1a:a9:af:10:2b:94:a7:08:84:ef:d3: 8d:bd:11:9e:72:92:ea:2f:ac:6c:d7:20:3e:1f:00: 0e:59:d8:f6:f9:d6:7d:1e:ff:6a:ef:f9:f1:17:29: 6f:1e:03:15:57:b1:b9:88:a7:ae:e6:f8:e7:c2:be: 1f:3b:c4:bf:4c:45:eb:18:68:b0:cd:c3:fc:a8:ed: f5:e8:99:f1:23:fd:0b:85:42:f9:7b:c4:99:b0:a1: 02:aa:79:05:69:f7:a9:55:4f:b9:2f:d3:e6:f8:7a: 1a:71:54:c0:cd:3b:b6:47:47:45:8b:b0:e8:c8:8e: b4:5d:85:dd:67:5a:92:02:51:5d:ae:1e:65:b1:d5: a5:f6:7e:fb:17:5d:0b:ae:a0:20:03:86:73:20:44: 9e:0a:3a:87:cd:db:db:80:c5:e2:26:d6:55:a4:59: 26:16:69:31:f6:de:56:12:f3:f8:a4:c4:e8:7b:2a: a1:79:9e:e2:94:32:30:5e:91:5a:88:61:01:aa:d1: 4e:6a:45:ec:b3:da:df:96:0c:23:1b:c9:2b:87:11: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:B4:1C:48:F6:AD:BE:B8:05:C4:83:AA:D4:40:68:11:A8:1F:F0 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/99CFA3844DF511ED91A8AB4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.253.96.0/24 Signature Algorithm: sha256WithRSAEncryption 45:34:f1:95:01:f1:3e:9d:10:93:a4:22:57:0a:b9:9f:f0:e8: 4d:35:96:c7:ec:e7:9c:08:71:83:c8:ae:e5:e8:03:6f:f3:cf: 3b:7c:7a:d9:30:2e:2a:b0:99:fe:ab:fe:33:f8:79:69:8d:bd: 3f:96:dd:c1:61:2d:6a:f1:8c:64:17:66:c1:9c:d4:f9:52:be: 34:d6:2d:0a:1f:d6:8f:94:33:d2:00:50:ac:72:af:f4:4a:e7: 7a:c0:59:c6:1b:82:bc:44:e0:41:6a:9e:cd:5f:67:4f:55:7f: 60:86:5a:7e:49:dd:d1:ae:ff:2f:3b:4e:41:da:29:b7:a1:14: 91:9e:6f:dc:50:d9:be:47:a0:a5:94:19:d2:9a:32:57:af:ca: 4a:9c:27:8d:3a:df:5a:fa:30:a3:ef:8e:3d:cf:c0:69:58:4b: e1:0e:2d:87:7f:f2:e5:22:2c:52:15:64:d7:7b:9e:fc:ff:88: 5b:96:8f:92:eb:1a:10:42:f8:e9:ed:fa:f5:4d:51:fe:3f:21: 63:ff:22:90:81:b6:18:c1:96:73:e3:2f:0f:47:9d:3e:53:5e: d5:cb:79:ce:cf:c3:e2:1c:8c:5c:ed:4f:48:7e:c1:69:bc:e1: 3c:4a:00:f2:c2:a3:09:39:16:e8:02:51:5c:8f:aa:fb:34:c1: 76:85:95:04 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjYwNzMwMTkzODQyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTZiYTg0Mi1hNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiB+r6vyWQ755BrTFnl5MJfMQED8MFJQgSYK/avdAhxZuf3Of+S3ghAu/TAYU zVe8GqmvECuUpwiE79ONvRGecpLqL6xs1yA+HwAOWdj2+dZ9Hv9q7/nxFylvHgMV V7G5iKeu5vjnwr4fO8S/TEXrGGiwzcP8qO316JnxI/0LhUL5e8SZsKECqnkFafep VU+5L9Pm+HoacVTAzTu2R0dFi7DoyI60XYXdZ1qSAlFdrh5lsdWl9n77F10LrqAg A4ZzIESeCjqHzdvbgMXiJtZVpFkmFmkx9t5WEvP4pMToeyqheZ7ilDIwXpFaiGEB qtFOakXss9rflgwjG8krhxG20wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMUJtBxI 9q2+uAXEg6rUQGgRqB/wMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNGNUQvNzVGODc1RjI2NjkwMTFFQTk2ODNGQjJGQzRGOUFFMDIvOTlDRkEzODQ0 REY1MTFFRDkxQThBQjRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAe/1gMA0GCSqGSIb3DQEBCwUAA4IBAQBFNPGVAfE+nRCTpCJXCrmf 8OhNNZbH7OecCHGDyK7l6ANv8887fHrZMC4qsJn+q/4z+Hlpjb0/lt3BYS1q8Yxk F2bBnNT5Ur401i0KH9aPlDPSAFCscq/0Sud6wFnGG4K8ROBBap7NX2dPVX9ghlp+ Sd3Rrv8vO05B2im3oRSRnm/cUNm+R6CllBnSmjJXr8pKnCeNOt9a+jCj7449z8Bp WEvhDi2Hf/LlIixSFWTXe578/4hblo+S6xoQQvjp7fr1TVH+PyFj/yKQgbYYwZZz 4y8PR50+U17Vy3nOz8PiHIxc7U9IfsFpvOE8SgDywqMJORboAlFcj6r7NMF2hZUE -----END CERTIFICATE-----Generated at Fri Sep 11 07:06:37 2026 by rpki-client