$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa File: 2395AD02E44911EFB4261C43C4F9AE02.roa (raw, json) Hash identifier: 2Co79ynBgBkfRYtcjArTdkt2fZojdezftQg41GUn3f0= Subject key identifier: BA:B2:B9:AC:19:53:A0:30:17:6C:1D:F3:21:5F:EF:F9:C2:5E:3A:C0 Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 0424 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa Signing time: Thu 11 Jun 2026 03:31:05 +0000 ROA not before: Thu 11 Jun 2026 03:31:05 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 13335 IP address blocks: 123.108.74.0/24 maxlen: 24 123.108.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jun 11 03:31:05 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a2a2bf9-5b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:f2:90:cd:ee:d4:45:9f:3b:57:66:7e:98: 36:b3:35:40:48:20:8a:2c:69:f1:93:d3:ca:e1:18: 65:de:09:4c:d0:6b:20:08:dc:56:6c:9b:62:b9:6b: 98:24:a6:79:fe:8c:23:a8:32:b7:a6:be:9b:10:9f: dd:4d:77:44:b3:8a:c4:51:70:79:26:f7:ee:9c:01: 45:32:da:bc:a7:3c:0c:9b:8a:9a:65:52:3b:ed:52: 3c:8e:be:79:7d:9c:3c:7b:49:8c:df:4f:c7:bc:fb: fa:55:1b:0a:90:b8:7f:e7:66:11:a9:cc:e8:e1:b2: 93:ea:c4:8d:7b:36:6d:ce:95:88:13:eb:bf:3b:24: 17:00:76:34:b4:14:25:bc:9d:f3:9b:8b:81:e6:57: 17:1c:a9:74:d4:db:70:27:0c:b0:83:96:6e:8b:32: d3:24:04:80:32:16:11:26:ef:06:6d:ae:42:8a:d2: 0d:f5:5c:40:e8:22:a4:09:62:8b:90:01:64:22:1b: 30:52:30:79:19:0f:27:f0:93:a9:ba:ef:de:78:66: 2f:45:3e:22:60:72:75:4b:27:60:14:76:47:79:9c: f6:14:13:9b:7c:a3:1a:f8:29:d0:65:b3:f8:e4:a7: cd:d2:92:81:7e:c2:68:9c:e3:c2:88:b9:55:41:76: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B2:B9:AC:19:53:A0:30:17:6C:1D:F3:21:5F:EF:F9:C2:5E:3A:C0 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/2395AD02E44911EFB4261C43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.108.74.0/23 Signature Algorithm: sha256WithRSAEncryption 03:a6:f4:df:ee:6f:18:f8:c9:00:e1:f1:dc:87:07:dc:8c:36: fb:e0:d3:47:7e:66:2f:2a:37:f8:a1:85:10:df:67:5e:ed:f7: 3a:2c:e5:b8:83:5b:9c:c5:17:7f:8e:a2:40:17:c6:42:65:b7: 5e:1c:88:68:77:bb:97:3e:cb:b7:93:c3:94:84:97:05:2b:05: e9:5b:c7:ea:f1:91:2c:72:a3:9b:1b:5c:9d:5f:8f:94:24:6b: 13:30:9d:79:e9:60:68:2c:41:b2:aa:c0:8d:f9:95:76:1c:2b: 92:eb:0e:46:13:84:0d:60:1f:d6:58:27:d2:43:a7:a6:74:b2: 59:34:9d:44:e1:86:7d:bd:10:16:0c:79:ea:f2:52:e5:50:87: 1d:fa:b9:28:8a:28:ba:cf:1e:cb:40:44:96:47:8c:44:2b:8e: 8c:98:bc:69:cc:d9:40:81:c1:bc:13:84:91:39:0d:b5:a9:f4: 92:69:bd:58:5f:09:a9:8c:23:07:f2:35:5f:56:9d:14:58:88: 59:f4:46:ae:84:78:7f:ec:10:3f:8b:cc:72:23:d6:6c:dd:26: 56:ba:d9:f0:16:2d:0a:c0:38:f3:64:12:d3:89:0d:8e:68:e6: 48:b6:80:49:84:b1:a1:7d:1e:9f:f6:2d:d8:7d:36:f9:08:ea: 8c:51:d8:1c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjYwNjExMDMzMTA1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTJhMmJmOS01YjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySzykM3u1EWfO1dmfpg2szVASCCKLGnxk9PK4Rhl3glM0GsgCNxWbJtiuWuY JKZ5/owjqDK3pr6bEJ/dTXdEs4rEUXB5JvfunAFFMtq8pzwMm4qaZVI77VI8jr55 fZw8e0mM30/HvPv6VRsKkLh/52YRqczo4bKT6sSNezZtzpWIE+u/OyQXAHY0tBQl vJ3zm4uB5lcXHKl01NtwJwywg5ZuizLTJASAMhYRJu8Gba5CitIN9VxA6CKkCWKL kAFkIhswUjB5GQ8n8JOpuu/eeGYvRT4iYHJ1SydgFHZHeZz2FBObfKMa+CnQZbP4 5KfN0pKBfsJonOPCiLlVQXau0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLqyuawZ U6AwF2wd8yFf7/nCXjrAMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjM5NUFEMDJF NDQ5MTFFRkI0MjYxQzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBe2xKMA0GCSqGSIb3DQEBCwUAA4IBAQADpvTf7m8Y+MkA4fHchwfc jDb74NNHfmYvKjf4oYUQ32de7fc6LOW4g1ucxRd/jqJAF8ZCZbdeHIhod7uXPsu3 k8OUhJcFKwXpW8fq8ZEscqObG1ydX4+UJGsTMJ156WBoLEGyqsCN+ZV2HCuS6w5G E4QNYB/WWCfSQ6emdLJZNJ1E4YZ9vRAWDHnq8lLlUIcd+rkoiii6zx7LQESWR4xE K46MmLxpzNlAgcG8E4SROQ21qfSSab1YXwmpjCMH8jVfVp0UWIhZ9EauhHh/7BA/ i8xyI9Zs3SZWutnwFi0KwDjzZBLTiQ2OaOZItoBJhLGhfR6f9i3YfTb5COqMUdgc -----END CERTIFICATE-----Generated at Fri Jun 12 15:05:58 2026 by rpki-client