$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa File: AF6A12881EBB11EDB35A2561C4F9AE02.roa (raw, json) Hash identifier: qw6l6GQ3Jb5y+PgwmNQxOzEOs2JapGnYVrKwPtWi45E= Subject key identifier: 52:FD:D8:D9:15:2A:1C:FB:15:71:82:DF:46:81:94:52:96:2F:77:4D Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 02DC Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:23:49 +0000 ROA not before: Wed 05 Mar 2025 03:47:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133947 IP address blocks: 103.49.148.0/24 maxlen: 24 103.49.149.0/24 maxlen: 24 103.78.102.0/24 maxlen: 24 103.78.103.0/24 maxlen: 24 2001:df2:5c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Mar 5 03:47:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3e985-4c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e1:e9:b0:76:f4:69:9c:88:a6:35:89:ed:59: 0f:b4:bf:ea:a6:a2:4b:87:9a:db:3e:67:d8:cc:71: ed:80:79:e8:d9:3c:d5:2e:50:73:60:83:da:4b:ea: 3f:81:4e:a1:db:aa:9e:d7:70:96:e6:cf:d5:74:80: 46:c5:d9:40:0e:82:61:60:79:39:98:0f:a6:f6:f3: c4:2b:40:84:fb:c7:42:4d:13:29:35:54:90:94:80: b2:69:ef:27:c6:15:79:36:25:d5:dd:26:1e:a5:c9: 06:9d:c2:3d:46:4f:bf:29:63:22:56:31:e3:da:59: 38:ef:0d:65:2b:9d:ff:f7:a0:35:4a:96:be:80:7f: 8f:e6:0f:96:61:46:62:d8:1f:97:1a:9d:02:84:dc: 87:4d:c0:fc:2a:53:13:66:b8:3a:58:ed:b0:a2:f1: 1d:fa:80:c3:8a:09:0d:f1:7e:d6:dc:b5:65:03:43: 34:46:c8:fc:44:b7:75:dc:a1:4c:a9:51:cc:df:f8: 8c:41:85:7d:fa:4a:06:0b:d4:0d:ee:35:02:e9:70: be:51:a0:26:7a:12:23:18:fe:1e:5b:95:8a:ae:21: 0b:4d:2f:b7:93:1f:35:21:94:6c:e4:e8:65:66:b3: b8:45:4a:47:a5:66:2b:5f:74:33:02:07:ae:50:93: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FD:D8:D9:15:2A:1C:FB:15:71:82:DF:46:81:94:52:96:2F:77:4D X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.49.148.0/23 103.78.102.0/23 IPv6: 2001:df2:5c00::/48 Signature Algorithm: sha256WithRSAEncryption af:87:9e:14:a5:fd:9e:79:a9:5c:1c:c8:c2:db:bc:c4:f5:9f: 9e:e1:cd:2b:3b:a4:17:22:5a:8a:b4:be:ce:c6:dc:a7:71:16: e1:77:32:74:14:4d:4f:18:70:cb:fd:c2:bc:ca:7e:00:bc:10: 9f:e2:df:cd:78:94:ad:7b:99:4b:7b:d4:15:d1:dd:6b:0c:26: 2e:84:c8:65:aa:9f:a1:4c:a0:93:28:d9:52:ed:75:cb:17:2e: 8d:30:0b:fe:49:bc:a8:0b:31:15:8f:9e:1a:0a:3f:5c:31:29: 96:d3:7c:ec:be:79:57:6f:71:2b:e8:33:89:20:9a:5f:7a:f8: 00:1b:49:c2:05:94:22:5a:8e:5b:d7:c5:a6:d0:f5:7d:86:0b: 00:e8:4f:bc:dd:a1:8a:d1:15:43:2b:80:e2:3f:66:50:bc:8d: 8d:4a:6a:b8:02:f6:ba:4b:5d:45:88:f2:e5:5a:d3:74:1c:9f: 5c:1b:93:79:b5:b6:c6:33:bd:4f:bc:4d:22:6f:b3:fd:82:78: 3e:e4:92:31:f8:70:27:b7:54:f0:6c:70:2f:ab:40:0c:46:49: 4d:8f:2b:cb:b0:12:b0:48:24:6d:bf:5a:09:b5:cc:f7:85:bc: 2f:35:7b:38:47:e2:c1:df:16:58:62:f0:f9:8f:49:78:95:a0: 23:94:d8:35 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjUwMzA1MDM0NzQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTk4NS00YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkOHpsHb0aZyIpjWJ7VkPtL/qpqJLh5rbPmfYzHHtgHno2TzVLlBzYIPaS+o/ gU6h26qe13CW5s/VdIBGxdlADoJhYHk5mA+m9vPEK0CE+8dCTRMpNVSQlICyae8n xhV5NiXV3SYepckGncI9Rk+/KWMiVjHj2lk47w1lK53/96A1Spa+gH+P5g+WYUZi 2B+XGp0ChNyHTcD8KlMTZrg6WO2wovEd+oDDigkN8X7W3LVlA0M0Rsj8RLd13KFM qVHM3/iMQYV9+koGC9QN7jUC6XC+UaAmehIjGP4eW5WKriELTS+3kx81IZRs5Ohl ZrO4RUpHpWYrX3QzAgeuUJM69QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFFL92NkV Khz7FXGC30aBlFKWL3dNMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTBGMUYvNkMwRkVGNUExRUI5MTFFRDlGQzY4NzYwQzRGOUFFMDIvQUY2QTEyODgx RUJCMTFFREIzNUEyNTYxQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZzGUAwQBZ05mMA8EAgACMAkDBwAgAQ3yXAAwDQYJKoZIhvcNAQEL BQADggEBAK+HnhSl/Z55qVwcyMLbvMT1n57hzSs7pBciWoq0vs7G3KdxFuF3MnQU TU8YcMv9wrzKfgC8EJ/i3814lK17mUt71BXR3WsMJi6EyGWqn6FMoJMo2VLtdcsX Lo0wC/5JvKgLMRWPnhoKP1wxKZbTfOy+eVdvcSvoM4kgml96+AAbScIFlCJajlvX xabQ9X2GCwDoT7zdoYrRFUMrgOI/ZlC8jY1KargC9rpLXUWI8uVa03Qcn1wbk3m1 tsYzvU+8TSJvs/2CeD7kkjH4cCe3VPBscC+rQAxGSU2PK8uwErBIJG2/Wgm1zPeF vC81ezhH4sHfFlhi8PmPSXiVoCOU2DU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:11 2026 by rpki-client