$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa File: 2395AD02E44911EFB4261C43C4F9AE02.roa (raw, json) Hash identifier: e4Erd0QpTluZL5gDeylvUwSF4VgMS2i129w6Q1KcFvI= Subject key identifier: A8:9A:7B:D4:4C:F4:89:61:DE:77:11:B5:DC:AA:96:0D:E3:B3:E1:C8 Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 03BD Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:55:49 +0000 ROA not before: Wed 11 Jun 2025 02:18:36 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 13335 IP address blocks: 123.108.74.0/24 maxlen: 24 123.108.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 00:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jun 11 02:18:36 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a588d5-1a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:5c:33:12:90:b3:53:09:53:d5:db:e7:fd: 67:ef:ff:24:1a:e9:fc:cd:03:83:5c:8a:0e:06:2d: 40:90:67:8c:54:e7:b7:6d:82:b5:61:5d:ef:fb:43: 41:18:09:e2:f0:cf:fb:60:0f:69:e5:56:77:48:37: a8:3d:02:fd:73:f9:10:01:5f:13:ce:e0:08:5f:c4: 79:c9:64:07:4f:fa:f9:5c:f9:5c:7e:6b:3c:67:fd: 83:87:4b:63:5e:ba:2f:64:84:16:d3:00:fd:79:23: 06:b1:f5:e9:6f:a5:28:e1:58:87:d5:a7:a5:0c:e3: 00:60:e9:6b:70:4a:fd:c4:a2:5c:cd:b2:62:4b:ff: 8e:1c:47:5b:a7:1a:fb:39:ed:86:55:de:76:ff:0b: e3:5a:d5:5b:9a:06:aa:35:61:49:c9:e7:f7:b7:9a: 0d:a3:02:98:50:5e:75:1a:c4:0e:c2:b8:c6:49:ee: eb:ce:9d:94:1e:3d:80:57:37:f2:ad:ac:89:d6:49: 20:f0:1d:12:5c:54:aa:53:5b:4e:c7:9a:ae:50:b6: a3:d6:81:0c:de:50:26:5c:e7:36:90:93:c0:f5:6f: ef:7d:f6:54:bb:b4:07:4d:ca:12:e9:9c:f3:76:5d: 21:f8:33:22:48:33:ec:3a:4a:11:4d:f8:63:8e:dc: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9A:7B:D4:4C:F4:89:61:DE:77:11:B5:DC:AA:96:0D:E3:B3:E1:C8 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.108.74.0/23 Signature Algorithm: sha256WithRSAEncryption 15:f8:ba:72:78:ea:5c:89:5a:bc:21:e6:42:e8:ce:b5:10:4b: be:87:0e:99:ca:24:d6:76:e1:b5:66:9f:78:31:90:12:3a:8f: b5:d6:62:3e:33:59:b8:2f:15:12:a4:1e:5c:fd:4a:5e:f6:29: b0:b2:58:ae:68:ce:51:ab:ed:35:36:e5:9a:7e:28:c9:5e:41: c5:ca:10:7a:e1:dc:27:75:b0:3c:9c:0b:9c:b4:87:c2:37:c7: 06:b3:cf:46:20:a3:31:58:57:1a:b7:32:94:ec:c0:bf:c0:c7: 63:44:4a:21:12:fb:16:37:f3:f8:42:8b:e3:ed:1f:e3:53:16: 37:21:29:ba:a3:52:2c:ca:9e:bb:1e:01:bb:d6:eb:ed:a4:a7: e2:c4:43:ab:42:e3:9f:48:6b:1d:a0:d9:5a:54:8b:d8:7b:7b: fe:e2:6b:48:b5:cf:35:fa:d1:a5:47:9e:66:7b:7d:75:10:bf: 83:4b:f7:76:86:df:a8:36:8f:a3:df:c9:02:26:1f:bf:89:ad: f3:cc:6f:08:19:b3:94:17:89:51:0c:35:38:89:26:aa:fd:82: 21:74:b9:aa:92:6e:e4:e5:a2:54:4f:ca:c6:13:03:ba:c7:de: 94:ba:e3:8b:6d:ee:e2:07:1e:56:b5:38:ab:42:40:b4:64:35: c4:63:1e:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNjExMDIxODM2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODhkNS0xYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf5cMxKQs1MJU9Xb5/1n7/8kGun8zQODXIoOBi1AkGeMVOe3bYK1YV3v+0NB GAni8M/7YA9p5VZ3SDeoPQL9c/kQAV8TzuAIX8R5yWQHT/r5XPlcfms8Z/2Dh0tj XrovZIQW0wD9eSMGsfXpb6Uo4ViH1aelDOMAYOlrcEr9xKJczbJiS/+OHEdbpxr7 Oe2GVd52/wvjWtVbmgaqNWFJyef3t5oNowKYUF51GsQOwrjGSe7rzp2UHj2AVzfy rayJ1kkg8B0SXFSqU1tOx5quULaj1oEM3lAmXOc2kJPA9W/vffZUu7QHTcoS6Zzz dl0h+DMiSDPsOkoRTfhjjtz4EQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKiae9RM 9Ilh3ncRtdyqlg3js+HIMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjM5NUFEMDJF NDQ5MTFFRkI0MjYxQzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBe2xKMA0GCSqGSIb3DQEBCwUAA4IBAQAV+LpyeOpciVq8IeZC6M61 EEu+hw6ZyiTWduG1Zp94MZASOo+11mI+M1m4LxUSpB5c/Upe9imwsliuaM5Rq+01 NuWafijJXkHFyhB64dwndbA8nAuctIfCN8cGs89GIKMxWFcatzKU7MC/wMdjREoh EvsWN/P4Qovj7R/jUxY3ISm6o1Isyp67HgG71uvtpKfixEOrQuOfSGsdoNlaVIvY e3v+4mtItc81+tGlR55me311EL+DS/d2ht+oNo+j38kCJh+/ia3zzG8IGbOUF4lR DDU4iSaq/YIhdLmqkm7k5aJUT8rGEwO6x96UuuOLbe7iBx5WtTirQkC0ZDXEYx7L -----END CERTIFICATE-----Generated at Fri Mar 13 11:17:49 2026 by rpki-client