$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa File: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (raw, json) Hash identifier: rA7V1naVvYRqsHEWb7MBLZbTli7oyFi0ZmHVez4sKpg= Subject key identifier: E9:6C:E9:13:F4:54:00:56:65:CB:7F:1A:DC:59:2F:13:20:A0:3E:25 Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Certificate serial: 0155 Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:25:48 +0000 ROA not before: Wed 05 Nov 2025 05:20:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138194 IP address blocks: 103.122.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76 Validity Not Before: Nov 5 05:20:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a58fdc-35f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:18:ce:9b:39:d4:b1:71:c8:e9:38:e5:5d: 6d:88:4d:4e:08:e0:99:a6:63:a9:67:3f:74:42:97: 07:bc:dd:43:16:f3:0e:ed:c8:0d:8b:7e:0f:4b:6e: a2:dc:ad:d2:6d:c7:98:cc:cd:3a:15:ac:50:e3:f9: 85:81:52:70:20:33:2b:0c:fd:54:3e:6c:b9:4d:62: e8:98:da:f8:8f:a6:8f:db:a1:7d:37:fb:e9:ac:74: 32:04:d0:d2:34:06:ce:4a:c5:1f:12:49:83:70:8b: dd:9a:f8:40:ce:df:53:c7:95:12:da:84:d5:c1:fb: 4e:5a:af:ab:2a:58:b9:6c:a6:66:c6:aa:b4:47:08: c6:bd:c5:38:94:f5:e1:93:f5:3b:70:5f:48:ec:2b: 32:b1:30:ae:14:fc:50:2a:51:9c:37:a4:8b:17:dd: 6e:ce:00:de:21:02:99:d6:68:20:fd:f9:f8:cc:03: db:7b:14:b6:80:d0:43:c1:0a:94:ff:c7:b6:25:b0: 9d:27:85:a4:49:83:5c:fb:93:3c:38:f1:9b:26:42: 1f:9c:15:d3:f6:32:b7:af:df:60:7c:f4:a2:e2:2f: f5:1a:d5:11:74:83:17:e2:64:bb:db:41:2f:76:03: 0d:60:cc:69:07:8c:b0:c5:8c:31:26:f1:9d:5e:21: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6C:E9:13:F4:54:00:56:65:CB:7F:1A:DC:59:2F:13:20:A0:3E:25 X509v3 Authority Key Identifier: keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/2C6BA5E82EB511EFBCC65925C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.4.0/24 Signature Algorithm: sha256WithRSAEncryption 66:52:28:df:b8:98:2b:e7:d0:da:01:96:1c:2c:5f:d0:5b:ee: 2c:f5:3e:1c:97:0a:b0:eb:e4:2a:89:69:42:c1:aa:40:ef:86: c8:97:c9:a0:3a:ee:ac:d0:3b:88:8e:71:f3:29:bc:15:8d:cd: 7a:51:74:cb:eb:43:53:34:a2:ab:92:54:dd:72:fd:85:60:3d: c2:82:02:ff:40:92:24:66:5b:44:3d:c2:a5:8e:4a:77:51:26: 42:bf:0b:f2:3e:1b:94:c6:0c:c3:cc:23:5b:5b:12:1f:0d:63: 59:c3:19:65:49:e5:3f:bc:2e:01:1f:07:ad:29:28:64:56:5d: ac:0c:53:4c:07:b5:6e:b2:e1:31:e5:10:a0:8e:94:90:86:16: 95:8b:65:fa:7d:7d:83:c1:8c:40:8f:bc:35:87:c9:47:23:63: 67:58:ed:af:6d:d9:79:9a:71:3f:ad:6b:6d:5f:5f:b1:65:0b: 5f:50:e5:c3:8c:d2:2a:a2:f1:9e:0e:2f:23:9a:b6:62:6d:81: 93:8c:b9:a1:9d:63:b8:b7:d7:e0:a2:a9:fb:35:ad:32:fe:ac: 43:75:3c:64:06:be:47:3e:3c:48:ae:23:33:ca:00:81:3d:2e: 21:66:ec:c4:7f:e4:25:22:5d:e6:80:ee:a8:67:24:69:cd:50: fa:ef:7b:84 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThGRkExMTAvBgNVBAUTKDlGRTg4MUQ4QkQzMkFEMTVBQjdCRTdCNEVDNEY3NTIy MTI1NDZDNzYwHhcNMjUxMTA1MDUyMDEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGZkYy0zNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jcYzps51LFxyOk45V1tiE1OCOCZpmOpZz90QpcHvN1DFvMO7cgNi34PS26i 3K3SbceYzM06FaxQ4/mFgVJwIDMrDP1UPmy5TWLomNr4j6aP26F9N/vprHQyBNDS NAbOSsUfEkmDcIvdmvhAzt9Tx5US2oTVwftOWq+rKli5bKZmxqq0RwjGvcU4lPXh k/U7cF9I7CsysTCuFPxQKlGcN6SLF91uzgDeIQKZ1mgg/fn4zAPbexS2gNBDwQqU /8e2JbCdJ4WkSYNc+5M8OPGbJkIfnBXT9jK3r99gfPSi4i/1GtURdIMX4mS720Ev dgMNYMxpB4ywxYwxJvGdXiE2gwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOls6RP0 VABWZct/GtxZLxMgoD4lMB8GA1UdIwQYMBaAFJ/ogdi9Mq0Vq3vntOxPdSISVGx2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEZGQS8wNTg2MDY4QTJC N0MxMUVGODlFODQxNDRDNEY5QUUwMi9uLWlCMkwweXJSV3JlLWUwN0U5MUloSlVi SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24taUIyTDB5clJXcmUtZTA3RTkxSWhKVWJIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MThGRkEvMDU4NjA2OEEyQjdDMTFFRjg5RTg0MTQ0QzRGOUFFMDIvMkM2QkE1RTgy RUI1MTFFRkJDQzY1OTI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ3oEMA0GCSqGSIb3DQEBCwUAA4IBAQBmUijfuJgr59DaAZYcLF/Q W+4s9T4clwqw6+QqiWlCwapA74bIl8mgOu6s0DuIjnHzKbwVjc16UXTL60NTNKKr klTdcv2FYD3CggL/QJIkZltEPcKljkp3USZCvwvyPhuUxgzDzCNbWxIfDWNZwxll SeU/vC4BHwetKShkVl2sDFNMB7VusuEx5RCgjpSQhhaVi2X6fX2DwYxAj7w1h8lH I2NnWO2vbdl5mnE/rWttX1+xZQtfUOXDjNIqovGeDi8jmrZibYGTjLmhnWO4t9fg oqn7Na0y/qxDdTxkBr5HPjxIriMzygCBPS4hZuzEf+QlIl3mgO6oZyRpzVD673uE -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:47 2026 by rpki-client