$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/221A3064480411F0A14D5A83C4F9AE02.roa File: 221A3064480411F0A14D5A83C4F9AE02.roa (raw, json) Hash identifier: j+rKZJevpIGC1sf1OUnZrF6Qqhjbev7FmmF2TRVvEEw= Subject key identifier: 59:BE:93:29:0A:D4:F1:32:D8:06:B5:4B:E8:48:E0:BC:F3:B7:96:3B Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Certificate serial: 0232 Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/221A3064480411F0A14D5A83C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:15:16 +0000 ROA not before: Fri 29 Aug 2025 03:52:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152700 IP address blocks: 103.120.12.0/24 maxlen: 24 103.120.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8 Validity Not Before: Aug 29 03:52:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47423-e3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:d4:67:32:c9:b0:6e:91:46:96:24:d5:67: 6e:73:34:69:99:65:98:c5:40:03:66:a4:04:3c:71: 0b:94:d6:72:f3:b4:a3:a9:85:f3:27:0a:2b:d4:bd: cd:3a:0b:c8:50:ff:95:c5:80:2e:c0:f2:c1:dd:75: d9:f9:93:4b:46:4a:ff:74:8c:e5:e9:7f:37:45:06: c3:b4:32:5f:7c:39:6e:82:8a:e9:99:d5:ae:bb:12: 67:a8:22:4a:07:09:db:19:8c:b5:6f:80:b6:f3:00: 3a:de:b1:74:9f:47:25:78:7f:06:e6:cc:27:05:61: fe:40:3d:c0:4f:0a:0d:c1:01:bd:22:89:24:a4:e1: f8:0e:cf:e2:58:58:3d:05:a5:28:f2:23:7c:ea:0b: 8c:31:82:cc:ff:d8:71:86:10:93:87:e1:38:70:ec: 71:c0:4f:b9:8c:f3:dc:04:23:39:6f:41:b1:dd:3f: cd:d4:d0:b5:97:0c:ee:d0:e4:61:bb:70:aa:c3:4f: 4d:48:c9:3c:55:a5:f4:b0:91:f7:97:9b:bd:91:a7: 0c:e0:cc:1d:31:ac:f3:b3:9b:43:e5:d0:0d:23:64: e1:06:22:e6:5d:9d:07:55:68:c0:d4:5b:f1:d0:03: 71:9e:0f:d0:08:3c:d4:d3:85:29:39:ee:d8:31:0f: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:93:29:0A:D4:F1:32:D8:06:B5:4B:E8:48:E0:BC:F3:B7:96:3B X509v3 Authority Key Identifier: keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/221A3064480411F0A14D5A83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.12.0/24 103.120.15.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6b:25:4c:5f:2d:a8:be:a1:88:7d:1e:fe:8b:f0:d4:55:d6: 9d:da:40:29:25:b7:8c:56:5f:e6:9a:99:84:97:e4:16:09:42: 3f:d4:6b:58:fc:a7:c5:3a:79:e3:a6:c1:11:58:aa:74:7d:4a: aa:5c:ab:b8:2d:0d:2f:43:59:32:fb:d7:78:8e:f3:90:6d:f6: d0:d9:bb:2b:8c:2d:ff:95:24:6a:a8:a4:e7:95:8c:b7:73:15: 8b:53:fe:15:dc:ae:cb:f3:86:ee:02:af:c9:04:f2:bf:91:2a: 09:97:a5:5c:1c:3a:6f:a3:a9:92:ad:70:8d:06:96:19:63:08: d6:23:f9:f6:8f:9f:b7:45:13:c4:7a:bd:a4:fe:c4:e2:5c:38: dd:ec:9e:ee:cc:bf:b9:91:00:8a:d8:25:ff:05:af:de:f1:61: 56:21:a1:e7:74:22:dc:82:14:6e:2f:02:f5:17:7f:23:4c:98: e2:b5:2c:70:db:fd:d3:b5:63:4e:03:c5:ec:77:62:f7:c6:a8: 2a:b7:98:aa:f4:70:f5:11:a6:6d:d6:10:3a:92:da:09:9a:51: 5a:1b:6a:0f:01:d0:8d:ec:65:a2:4f:38:41:ab:4c:ab:ff:7c: 47:47:7e:72:b7:27:33:a8:1e:2a:03:f6:30:4b:ce:e6:a3:a1: 7e:8f:97:77 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5 NTY1Qzk0RDgwHhcNMjUwODI5MDM1MjI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzQyMy1lM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2jUZzLJsG6RRpYk1WduczRpmWWYxUADZqQEPHELlNZy87SjqYXzJwor1L3N OgvIUP+VxYAuwPLB3XXZ+ZNLRkr/dIzl6X83RQbDtDJffDlugorpmdWuuxJnqCJK BwnbGYy1b4C28wA63rF0n0cleH8G5swnBWH+QD3ATwoNwQG9IokkpOH4Ds/iWFg9 BaUo8iN86guMMYLM/9hxhhCTh+E4cOxxwE+5jPPcBCM5b0Gx3T/N1NC1lwzu0ORh u3Cqw09NSMk8VaX0sJH3l5u9kacM4MwdMazzs5tD5dANI2ThBiLmXZ0HVWjA1Fvx 0ANxng/QCDzU04UpOe7YMQ/H4wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFm+kykK 1PEy2Aa1S+hI4Lzzt5Y7MB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFNEQvNTdDMzdFMzgwQTU3MTFFRThDNjM1QTQ2QzRGOUFFMDIvMjIxQTMwNjQ0 ODA0MTFGMEExNEQ1QTgzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3gMAwQAZ3gPMA0GCSqGSIb3DQEBCwUAA4IBAQA2ayVMXy2ovqGI fR7+i/DUVdad2kApJbeMVl/mmpmEl+QWCUI/1GtY/KfFOnnjpsERWKp0fUqqXKu4 LQ0vQ1ky+9d4jvOQbfbQ2bsrjC3/lSRqqKTnlYy3cxWLU/4V3K7L84buAq/JBPK/ kSoJl6VcHDpvo6mSrXCNBpYZYwjWI/n2j5+3RRPEer2k/sTiXDjd7J7uzL+5kQCK 2CX/Ba/e8WFWIaHndCLcghRuLwL1F38jTJjitSxw2/3TtWNOA8Xsd2L3xqgqt5iq 9HD1EaZt1hA6ktoJmlFaG2oPAdCN7GWiTzhBq0yr/3xHR35ytyczqB4qA/YwS87m o6F+j5d3 -----END CERTIFICATE-----Generated at Mon Mar 2 23:10:38 2026 by rpki-client