$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/D5DBA6BC63ED11ED851C647DC4F9AE02.roa File: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (raw, json) Hash identifier: +a9x011lIrelYT5vohtPE5YuGG+ywFHENvyw6lCFvco= Subject key identifier: 62:72:0C:B4:D7:45:45:C5:FD:8D:7C:6A:66:3E:77:5A:2B:47:50:C9 Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Certificate serial: 046A Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/D5DBA6BC63ED11ED851C647DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:04:17 +0000 ROA not before: Thu 18 Sep 2025 18:28:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138205 IP address blocks: 103.129.236.0/24 maxlen: 24 103.129.237.0/24 maxlen: 24 2403:8b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4 Validity Not Before: Sep 18 18:28:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48db1-e860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:82:f9:35:bc:12:e1:ad:a4:30:be:46:8f: 4d:de:e3:f6:a7:bd:0c:86:ef:dd:d9:71:de:df:aa: 9b:e8:55:c6:ad:8f:62:80:6d:15:7b:6b:d4:00:95: 21:90:a2:f0:26:f0:f1:be:6a:bb:d8:a5:14:7c:11: 72:ea:1d:e0:74:b8:da:60:ca:e4:ca:88:38:c2:23: ce:c3:13:ed:ea:49:92:7b:f0:11:0a:97:0a:9f:c5: eb:05:79:15:c2:ef:bd:86:21:80:85:ce:37:c3:9a: 3f:fd:4f:38:9d:f9:dc:e5:95:97:d0:f8:71:63:92: 5b:96:31:37:4a:bb:a3:a2:8a:4e:5e:20:22:cf:bf: 7d:b8:00:ff:f0:4a:8d:58:41:a9:91:8c:1c:db:eb: 04:61:85:dc:ae:94:01:87:47:35:55:9e:2f:57:ae: 40:43:ad:39:ed:86:67:2b:d6:ec:63:34:0a:ef:e5: 6e:28:72:2d:23:3e:db:22:17:9b:8c:8f:dc:60:32: 2b:6c:73:e2:3e:45:29:f6:ca:75:4b:a3:14:f3:cf: 0e:31:57:0b:c9:df:fa:51:1c:4e:f2:4d:a0:31:3b: af:69:47:ca:34:37:dd:57:05:d4:d8:75:14:6d:9a: 34:66:99:75:d3:24:d2:af:67:7b:87:ff:f5:90:ae: 3e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:72:0C:B4:D7:45:45:C5:FD:8D:7C:6A:66:3E:77:5A:2B:47:50:C9 X509v3 Authority Key Identifier: keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/D5DBA6BC63ED11ED851C647DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.236.0/23 IPv6: 2403:8b40::/32 Signature Algorithm: sha256WithRSAEncryption 31:34:e7:f9:8c:c9:32:0a:13:a8:33:fc:0b:df:d8:95:97:59: c0:ef:64:91:f6:83:a5:96:46:ce:4b:c2:b5:60:40:86:cc:e4: 6a:b8:d6:65:08:c8:c8:67:e6:05:f8:5a:fd:5f:2c:4b:88:2f: 6f:0b:cf:7f:1e:9e:d0:58:fb:bc:17:71:b8:af:e9:f5:01:97: 71:e7:cd:6a:d1:a9:87:ce:64:fd:13:03:6b:f9:61:7f:c8:ed: 5d:f4:98:5c:c1:47:e0:23:6e:92:14:66:05:9f:66:cd:be:0e: 87:1b:99:d8:a6:a9:bc:66:7d:75:2c:98:01:46:17:6e:80:85: e7:ed:22:56:d4:13:70:07:cb:23:21:1d:5b:b4:0f:de:eb:3e: 8b:3d:18:0d:66:39:d0:50:10:b0:d8:c0:b8:dd:63:48:c8:a4: e1:a1:e2:18:9d:2d:e4:5b:db:cf:24:2a:63:cf:92:e1:d2:c4: 9f:f2:2d:a7:0a:c5:e1:6d:bc:50:63:8e:47:53:1c:52:29:8f: 61:d6:6f:44:2f:fb:02:7d:a6:c9:d2:04:c5:61:12:33:99:b7: ff:f4:f2:d4:c3:51:b9:e4:8f:ee:d7:ed:95:9a:19:b9:2c:fc: 77:fd:b5:47:ef:7e:b3:93:e6:5d:af:03:94:bb:e7:5c:6d:2e: 52:67:df:37 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlBNDAxMTAvBgNVBAUTKEJEMTRDRjFBOUYwOEY2ODEzN0ZFODExNkNENzc2QURC REIyRkVGQjQwHhcNMjUwOTE4MTgyODI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGRiMS1lODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/OC+TW8EuGtpDC+Ro9N3uP2p70Mhu/d2XHe36qb6FXGrY9igG0Ve2vUAJUh kKLwJvDxvmq72KUUfBFy6h3gdLjaYMrkyog4wiPOwxPt6kmSe/ARCpcKn8XrBXkV wu+9hiGAhc43w5o//U84nfnc5ZWX0PhxY5JbljE3SrujoopOXiAiz799uAD/8EqN WEGpkYwc2+sEYYXcrpQBh0c1VZ4vV65AQ6057YZnK9bsYzQK7+VuKHItIz7bIheb jI/cYDIrbHPiPkUp9sp1S6MU888OMVcLyd/6URxO8k2gMTuvaUfKNDfdVwXU2HUU bZo0Zpl10yTSr2d7h//1kK4+xQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGJyDLTX RUXF/Y18amY+d1orR1DJMB8GA1UdIwQYMBaAFL0UzxqfCPaBN/6BFs13atvbL++0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUE0MC8wQkQ0NTYyMjAw N0ExMUVBQjhCMzFCMTBDNEY5QUUwMi92UlRQR3A4STlvRTNfb0VXelhkcTI5c3Y3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSVFBHcDhJOW9FM19vRVd6WGRxMjlzdjc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlBNDAvMEJENDU2MjIwMDdBMTFFQUI4QjMxQjEwQzRGOUFFMDIvRDVEQkE2QkM2 M0VEMTFFRDg1MUM2NDdEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4HsMA0EAgACMAcDBQAkA4tAMA0GCSqGSIb3DQEBCwUAA4IBAQAx NOf5jMkyChOoM/wL39iVl1nA72SR9oOllkbOS8K1YECGzORquNZlCMjIZ+YF+Fr9 XyxLiC9vC89/Hp7QWPu8F3G4r+n1AZdx581q0amHzmT9EwNr+WF/yO1d9JhcwUfg I26SFGYFn2bNvg6HG5nYpqm8Zn11LJgBRhdugIXn7SJW1BNwB8sjIR1btA/e6z6L PRgNZjnQUBCw2MC43WNIyKThoeIYnS3kW9vPJCpjz5Lh0sSf8i2nCsXhbbxQY45H UxxSKY9h1m9EL/sCfabJ0gTFYRIzmbf/9PLUw1G55I/u1+2Vmhm5LPx3/bVH736z k+ZdrwOUu+dcbS5SZ983 -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:20 2026 by rpki-client