$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/309260868C7311F0A82E0E57C4F9AE02.roa File: 309260868C7311F0A82E0E57C4F9AE02.roa (raw, json) Hash identifier: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY= Subject key identifier: 0B:B1:CE:6C:22:01:41:91:6F:3A:6D:74:88:31:2C:7C:80:52:F6:1C Certificate issuer: /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Certificate serial: 61 Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/309260868C7311F0A82E0E57C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:29:49 +0000 ROA not before: Mon 01 Dec 2025 06:04:33 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134967 IP address blocks: 103.22.244.0/22 maxlen: 22 103.22.244.0/24 maxlen: 24 103.22.245.0/24 maxlen: 24 103.22.246.0/24 maxlen: 24 103.22.247.0/24 maxlen: 24 2404:3980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9 Validity Not Before: Dec 1 06:04:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3f8fd-1bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:5c:26:bc:25:ff:d3:41:fb:5e:fe:05:1d: 28:89:94:27:41:ee:10:d6:5d:24:6f:14:a4:c3:9f: 9d:01:7d:7c:16:fc:5a:4f:6f:68:b5:2c:52:c8:07: ac:e4:55:56:1a:6b:51:3c:27:95:2c:61:8f:75:08: f7:15:9a:d6:c2:ae:4d:66:c7:d5:bc:ab:db:bc:cd: c7:b2:3e:23:7c:41:bb:05:50:a8:33:35:56:f6:21: c3:e2:b5:85:87:ba:1c:19:1a:66:94:3a:91:94:20: 3c:cd:d7:d3:7e:18:98:3d:91:0f:b3:56:96:b1:10: 15:dd:c3:bf:e4:44:fb:79:27:48:d2:13:e2:2c:38: bb:2e:70:76:40:ad:f0:bb:c1:1a:93:5b:af:f2:4b: 1b:fd:d0:f9:63:e9:4f:26:b0:c4:8c:8f:b8:67:48: 8d:4a:b4:1e:04:49:ab:c1:c9:12:1f:f9:e6:7b:fc: 37:68:ec:e4:48:70:a3:ce:90:74:14:b4:80:b7:d6: 8f:af:3e:27:ff:0b:9c:41:dc:ce:f4:ca:11:a0:e7: 17:90:b2:73:21:47:d9:b1:dd:c3:92:b9:54:a0:c2: f0:85:30:01:34:7c:40:eb:2f:ff:f7:a3:d1:bf:4b: d2:e2:ad:b9:62:68:29:c5:ce:5f:78:44:9c:bd:30: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B1:CE:6C:22:01:41:91:6F:3A:6D:74:88:31:2C:7C:80:52:F6:1C X509v3 Authority Key Identifier: keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/309260868C7311F0A82E0E57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.22.244.0/22 IPv6: 2404:3980::/32 Signature Algorithm: sha256WithRSAEncryption 2f:6c:e4:23:80:8a:93:76:69:49:ed:06:0e:55:dc:91:e2:7e: e0:e9:54:a1:3f:32:3f:d7:db:3a:dd:7e:0b:c4:47:69:c3:7c: 62:3b:bb:63:eb:86:32:4c:96:16:4b:d6:57:42:a2:96:f5:34: ba:39:9b:a0:26:83:24:40:8f:24:02:54:a5:8e:78:f4:57:dc: 88:b6:89:90:76:a0:ed:c1:aa:42:1d:b7:af:63:c8:63:37:5f: f5:6b:1d:b8:e6:40:16:15:29:70:b1:b2:86:cf:66:a0:41:da: 4b:b3:58:e1:dc:95:0b:d8:1d:de:df:5b:52:99:5c:22:76:f1: 22:80:b4:c4:1e:ab:17:5d:ee:b4:e7:76:3c:8a:56:33:af:89: 05:8a:9b:13:93:43:94:6e:87:d5:e8:e3:f4:06:ee:e2:4a:9e: 3b:74:2f:d4:00:7c:5c:4e:a6:27:d3:90:23:73:27:1d:69:d1: 4f:7f:ba:b0:19:56:d2:7a:18:ee:94:6c:2d:64:3f:66:5f:fc: fb:f2:78:5d:58:72:7a:a2:67:c9:4f:9f:96:e0:f0:20:c3:18: 2c:bb:7d:2d:4f:0b:76:48:2e:3c:27:5e:47:37:47:1e:4b:ac: 5d:14:c0:89:85:67:bb:b6:b9:a6:8c:78:a0:ab:b6:ec:a1:e4: d8:c2:1d:18 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB OUM0MTdCOTAeFw0yNTEyMDEwNjA0MzNaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNmOGZkLTFiYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ4FwmvCX/00H7Xv4FHSiJlCdB7hDWXSRvFKTDn50BfXwW/FpPb2i1LFLIB6zk VVYaa1E8J5UsYY91CPcVmtbCrk1mx9W8q9u8zceyPiN8QbsFUKgzNVb2IcPitYWH uhwZGmaUOpGUIDzN19N+GJg9kQ+zVpaxEBXdw7/kRPt5J0jSE+IsOLsucHZArfC7 wRqTW6/ySxv90Plj6U8msMSMj7hnSI1KtB4ESavByRIf+eZ7/Ddo7ORIcKPOkHQU tIC31o+vPif/C5xB3M70yhGg5xeQsnMhR9mx3cOSuVSgwvCFMAE0fEDrL//3o9G/ S9LirbliaCnFzl94RJy9MGbLAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUC7HObCIB QZFvOm10iDEsfIBS9hwwHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3 MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEJDMS9EQUM2MDM4ODhDNzIxMUYwQTJCMEFFNTZDNEY5QUUwMi8zMDkyNjA4NjhD NzMxMUYwQTgyRTBFNTdDNEY5QUUwMi5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAJnFvQwDQQCAAIwBwMFACQEOYAwDQYJKoZIhvcNAQELBQADggEBAC9s 5COAipN2aUntBg5V3JHifuDpVKE/Mj/X2zrdfgvER2nDfGI7u2PrhjJMlhZL1ldC opb1NLo5m6AmgyRAjyQCVKWOePRX3Ii2iZB2oO3BqkIdt69jyGM3X/VrHbjmQBYV KXCxsobPZqBB2kuzWOHclQvYHd7fW1KZXCJ28SKAtMQeqxdd7rTndjyKVjOviQWK mxOTQ5Ruh9Xo4/QG7uJKnjt0L9QAfFxOpifTkCNzJx1p0U9/urAZVtJ6GO6UbC1k P2Zf/PvyeF1YcnqiZ8lPn5bg8CDDGCy7fS1PC3ZILjwnXkc3Rx5LrF0UwImFZ7u2 uaaMeKCrtuyh5NjCHRg= -----END CERTIFICATE-----Generated at Mon Mar 2 06:38:02 2026 by rpki-client