$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5F190C6871911F0A128620DC4F9AE02.roa File: B5F190C6871911F0A128620DC4F9AE02.roa (raw, json) Hash identifier: Ra7KjleTeYycPIpazuHNto2NUGUy1jHIhv5fvppozWk= Subject key identifier: 4F:04:22:CC:D6:A9:BB:D7:DB:92:46:46:AD:F1:5F:C3:AD:2D:91:3C Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: C3C2 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5F190C6871911F0A128620DC4F9AE02.roa Signing time: Mon 01 Sep 2025 09:54:55 +0000 ROA not before: Mon 01 Sep 2025 09:54:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138024 IP address blocks: 122.102.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50114 (0xc3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Sep 1 09:54:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68b56d6e-f51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:47:d4:04:4f:1e:d8:e0:68:b7:5c:4e:1f: 52:ae:b4:59:60:c9:07:de:41:ee:7a:de:8a:2d:5d: d8:de:ae:9a:d8:6d:6d:ec:6b:e1:d4:45:7f:6e:6f: b1:84:b0:b1:9e:dc:79:70:9d:21:c6:2f:1f:a5:fe: 61:53:b7:40:05:4f:c7:3c:86:d9:cd:65:66:89:b2: be:b5:c4:23:18:bc:00:67:90:f3:00:ae:59:12:ad: 9e:ad:fc:d9:dd:de:5f:cd:8a:fa:da:a0:fe:cd:87: 88:24:4a:af:70:56:6b:1f:a6:67:b5:71:f0:f9:e2: 41:a4:40:3e:fa:d0:0f:6d:2b:23:8b:2a:35:51:7f: 9e:e3:ec:64:35:15:e7:9f:8c:73:20:1c:fa:23:fd: 3a:90:7b:11:b8:0d:c9:90:e0:bb:62:35:00:3e:05: 96:b6:17:c8:e1:6e:c0:29:2f:66:1a:fa:39:7f:f3: 62:ed:8d:a7:2e:18:02:82:9f:d0:31:35:a5:86:f6: 7b:88:d6:a5:12:c2:19:05:32:b5:8b:c5:25:71:82: 00:4f:85:87:f0:70:19:4d:f8:83:bf:bc:f3:38:21: 70:de:e5:2a:6d:5a:a5:e5:0b:a9:bb:c5:87:02:c4: 5e:e0:27:d6:ad:67:96:cc:49:80:6d:25:25:69:ab: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:04:22:CC:D6:A9:BB:D7:DB:92:46:46:AD:F1:5F:C3:AD:2D:91:3C X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B5F190C6871911F0A128620DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.102.124.0/23 Signature Algorithm: sha256WithRSAEncryption 27:c5:9f:17:e0:9b:4e:79:01:dc:ca:b1:1d:0d:a0:cc:1d:7c: 67:cf:36:3a:9d:05:d6:1f:57:b9:2c:69:71:97:03:44:43:cb: a2:37:16:d9:9b:46:26:61:00:90:e7:ab:71:e4:d9:22:53:3f: e0:b4:9e:83:f8:48:30:9b:8e:99:a9:63:fa:5f:b6:7a:92:77: 01:42:ae:f9:0b:73:da:80:21:c4:1d:66:a9:e7:56:9b:c8:b8: d8:37:1d:4c:34:74:9b:4c:d6:45:fd:1c:c6:ef:c9:57:a2:a1: 1a:47:d7:31:5b:d2:74:22:01:d0:85:77:91:73:4f:b4:fc:67: 88:6b:40:73:c5:e2:8c:21:59:9c:91:22:f9:c1:64:19:ac:da: 41:0c:22:16:10:3b:69:00:32:49:ba:e0:59:0b:eb:d5:40:30: b3:e4:ca:ea:3b:4c:ad:a3:bb:22:69:f3:82:35:4b:21:c9:d7: 39:b2:0d:b3:df:17:63:cc:fe:6d:49:5f:d4:5c:97:2a:d2:3d: 72:d0:16:b7:c5:e6:02:6b:b9:2f:5c:fe:4f:1a:70:1b:09:af: c1:40:3d:00:c3:0b:cc:6e:82:1e:8c:1c:d8:0b:e6:e6:1f:33: 5e:1d:d1:74:bc:dd:cb:c9:c2:ce:1d:df:28:05:09:c4:46:ba: 3a:5c:85:fa -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAMPCMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDkwMTA5NTQ1NVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjhiNTZkNmUtZjUxYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFzR9QETx7Y4Gi3XE4fUq60WWDJB95B7nreii1d2N6umthtbexr4dRFf25v sYSwsZ7ceXCdIcYvH6X+YVO3QAVPxzyG2c1lZomyvrXEIxi8AGeQ8wCuWRKtnq38 2d3eX82K+tqg/s2HiCRKr3BWax+mZ7Vx8PniQaRAPvrQD20rI4sqNVF/nuPsZDUV 55+McyAc+iP9OpB7EbgNyZDgu2I1AD4FlrYXyOFuwCkvZhr6OX/zYu2Npy4YAoKf 0DE1pYb2e4jWpRLCGQUytYvFJXGCAE+Fh/BwGU34g7+88zghcN7lKm1apeULqbvF hwLEXuAn1q1nlsxJgG0lJWmrn3UCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRPBCLM 1qm719uSRkat8V/DrS2RPDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0I1RjE5MEM2 ODcxOTExRjBBMTI4NjIwREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBemZ8MA0GCSqGSIb3DQEBCwUAA4IBAQAnxZ8X4JtOeQHc yrEdDaDMHXxnzzY6nQXWH1e5LGlxlwNEQ8uiNxbZm0YmYQCQ56tx5NkiUz/gtJ6D +Egwm46ZqWP6X7Z6kncBQq75C3PagCHEHWap51abyLjYNx1MNHSbTNZF/RzG78lX oqEaR9cxW9J0IgHQhXeRc0+0/GeIa0BzxeKMIVmckSL5wWQZrNpBDCIWEDtpADJJ uuBZC+vVQDCz5MrqO0yto7siafOCNUshydc5sg2z3xdjzP5tSV/UXJcq0j1y0Ba3 xeYCa7kvXP5PGnAbCa/BQD0AwwvMboIejBzYC+bmHzNeHdF0vN3LycLOHd8oBQnE Rro6XIX6 -----END CERTIFICATE-----Generated at Sun Sep 7 16:30:17 2025 by rpki-client