$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa File: 53409F861D9C11EAA3FD402FC4F9AE02.roa (raw, json) Hash identifier: +93w0+gECKsPxfT8GgCs4EFDA/kceHJr+UZbAJ/I5oE= Subject key identifier: C4:AE:6F:F4:1E:4A:DB:4B:14:D1:17:6C:8C:F8:44:E9:06:A7:42:2A Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0C62 Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:42:45 +0000 ROA not before: Tue 08 Jul 2025 19:28:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139237 IP address blocks: 103.29.114.0/24 maxlen: 24 103.140.53.0/24 maxlen: 24 2001:df0:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Jul 8 19:28:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a42634-ed4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:ec:b8:68:09:cf:d6:0d:2a:6f:11:f9:11: 78:9a:28:76:82:65:72:41:91:ca:1f:27:97:39:67: ea:8e:9e:89:5e:8e:41:9f:64:d4:6b:47:70:ce:03: 9c:63:e0:41:27:41:3a:ce:9b:5c:60:a1:fa:11:d2: 75:97:9b:84:4f:25:47:a0:bd:0c:9b:20:27:7f:07: 54:96:ed:5b:28:fe:bd:72:e4:38:ed:16:45:d7:e3: bc:20:14:4c:8e:ed:29:31:e0:68:8b:83:87:d3:5c: d2:b9:a3:7b:00:20:90:02:f1:35:45:a7:f2:c3:bb: e3:29:83:fe:00:24:38:bf:fb:71:de:7a:9f:73:62: 4a:5e:e0:81:7d:eb:79:42:3a:83:0e:82:c6:1a:bb: 98:c9:f5:ce:a7:b3:e7:7c:ee:98:28:84:44:1a:a3: 81:1e:70:fe:cd:0c:5f:a9:dd:16:45:25:87:83:89: 0c:98:8e:4e:32:f9:4e:62:f0:23:45:18:53:5f:4a: cd:91:46:ce:96:4e:d8:55:6f:a5:b3:0d:00:48:56: 54:d3:6b:5e:8e:fa:a6:ed:a6:bb:d7:71:c0:34:98: a6:f2:fb:e2:bd:9c:77:65:b0:49:fe:a0:b4:2d:74: 86:83:7e:39:cb:1b:12:5a:70:6b:6e:c3:66:83:e3: 76:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AE:6F:F4:1E:4A:DB:4B:14:D1:17:6C:8C:F8:44:E9:06:A7:42:2A X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/53409F861D9C11EAA3FD402FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.114.0/24 103.140.53.0/24 IPv6: 2001:df0:ac80::/48 Signature Algorithm: sha256WithRSAEncryption 4c:9a:32:7c:fd:95:a5:dd:cb:a2:34:b6:f2:2a:31:3d:5b:9a: ea:99:cf:ca:50:79:f7:c6:d4:48:b2:87:b5:bd:5e:0b:21:90: 7e:c6:67:91:84:04:c1:be:e7:5d:90:36:89:bc:27:e5:07:c7: 0e:20:f7:05:22:d2:2b:6d:e3:a6:4b:50:82:45:14:53:c7:06: 1e:2a:26:a7:89:42:54:fd:bd:23:46:09:76:ee:67:a7:1d:28: 3f:c3:b7:9a:c6:3a:63:9d:cb:64:df:09:b5:e6:ca:a7:52:b7: 99:85:21:7e:71:48:2c:5e:a4:c0:c7:42:18:85:2b:f1:df:1d: 62:5a:70:af:11:1c:c5:97:f2:3c:de:78:61:57:a9:f2:c0:31: 37:ff:46:5d:7b:27:c3:28:47:6b:11:22:97:64:e8:7d:45:6f: e8:67:a2:20:7a:e8:70:5d:71:3c:27:ab:fe:f9:5d:fd:ab:d7: d6:1d:e3:51:55:81:89:c4:ad:3a:0e:7f:1f:40:a5:2c:b3:24: a1:d7:85:4f:de:45:3a:d4:4f:95:2f:a8:ee:b1:78:4a:2b:e1: 60:67:7c:0d:f0:c4:35:0d:77:f6:2b:88:32:08:1f:95:3c:44: ab:22:f1:8c:61:8c:fe:8a:d1:62:25:b1:89:42:5e:cf:89:8b: 85:61:57:83 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjUwNzA4MTkyODU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjYzNC1lZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvObsuGgJz9YNKm8R+RF4mih2gmVyQZHKHyeXOWfqjp6JXo5Bn2TUa0dwzgOc Y+BBJ0E6zptcYKH6EdJ1l5uETyVHoL0MmyAnfwdUlu1bKP69cuQ47RZF1+O8IBRM ju0pMeBoi4OH01zSuaN7ACCQAvE1Rafyw7vjKYP+ACQ4v/tx3nqfc2JKXuCBfet5 QjqDDoLGGruYyfXOp7PnfO6YKIREGqOBHnD+zQxfqd0WRSWHg4kMmI5OMvlOYvAj RRhTX0rNkUbOlk7YVW+lsw0ASFZU02tejvqm7aa713HANJim8vvivZx3ZbBJ/qC0 LXSGg345yxsSWnBrbsNmg+N2mwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMSub/Qe SttLFNEXbIz4ROkGp0IqMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdGQTMvNTkzMDczMzYxRDlCMTFFQTg2MEVDQjJEQzRGOUFFMDIvNTM0MDlGODYx RDlDMTFFQUEzRkQ0MDJGQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZx1yAwQAZ4w1MA8EAgACMAkDBwAgAQ3wrIAwDQYJKoZIhvcNAQEL BQADggEBAEyaMnz9laXdy6I0tvIqMT1bmuqZz8pQeffG1Eiyh7W9XgshkH7GZ5GE BMG+512QNom8J+UHxw4g9wUi0itt46ZLUIJFFFPHBh4qJqeJQlT9vSNGCXbuZ6cd KD/Dt5rGOmOdy2TfCbXmyqdSt5mFIX5xSCxepMDHQhiFK/HfHWJacK8RHMWX8jze eGFXqfLAMTf/Rl17J8MoR2sRIpdk6H1Fb+hnoiB66HBdcTwnq/75Xf2r19Yd41FV gYnErToOfx9ApSyzJKHXhU/eRTrUT5UvqO6xeEor4WBnfA3wxDUNd/YriDIIH5U8 RKsi8YxhjP6K0WIlsYlCXs+Ji4VhV4M= -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:37 2026 by rpki-client