$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D8D63660B9A811ECB7EE5A71C4F9AE02.roa File: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (raw, json) Hash identifier: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04= Subject key identifier: A1:25:E8:12:2A:16:2D:9A:20:86:88:E1:F3:82:82:B4:AC:FB:A5:E6 Certificate issuer: /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Certificate serial: 1229 Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D8D63660B9A811ECB7EE5A71C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:46:34 +0000 ROA not before: Thu 20 Nov 2025 17:06:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 4837 IP address blocks: 103.123.4.0/23 maxlen: 23 103.123.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4649 (0x1229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A Validity Not Before: Nov 20 17:06:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4433a-06c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:c8:b7:64:df:28:d9:c5:5b:f6:2a:a1:11: 6f:6b:73:14:b6:52:34:84:8e:01:e4:9d:6c:7a:bf: 17:d5:27:90:60:6e:4a:c4:a4:e0:4e:a8:54:09:3f: 55:05:06:78:87:4c:de:1b:9b:ea:45:56:9f:59:e5: b9:c1:5a:30:e4:d2:d1:69:98:dc:10:34:0c:20:5e: d3:f0:1f:ba:bb:17:ee:07:4c:5e:18:b4:b6:34:a4: 29:14:1e:f8:c1:f5:75:d3:38:27:b5:80:90:d7:90: f2:28:33:49:ad:1e:77:21:2e:53:97:e3:04:c9:32: d6:25:cc:3c:8b:55:7d:70:e9:e7:84:36:81:a8:69: fe:7c:46:d1:5e:ea:e1:9a:e9:22:c2:e0:5f:4f:06: 5c:1e:57:ec:73:be:01:1b:f6:c2:ef:4b:5f:26:99: 37:4c:61:41:96:9e:b0:ae:3d:ac:3b:d1:07:21:ee: 20:27:72:f8:59:0a:04:78:b3:ec:39:61:0c:63:ea: fc:59:33:8c:1f:2d:ee:9a:25:ad:8c:95:c9:8e:36: b9:68:96:82:87:1f:82:49:c2:99:d0:56:ce:9f:dd: ff:f4:ee:64:1b:ea:a2:a3:56:c4:df:fe:21:4b:6f: ee:0b:e3:72:12:a2:b6:2a:21:37:25:4d:f7:ae:8d: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:E8:12:2A:16:2D:9A:20:86:88:E1:F3:82:82:B4:AC:FB:A5:E6 X509v3 Authority Key Identifier: keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/D8D63660B9A811ECB7EE5A71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.4.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c9:4d:b8:6e:0a:88:46:b0:d6:a0:85:6b:2f:81:c4:c2:4c: 75:4c:92:13:56:0d:00:33:6d:67:b4:b3:ec:07:bb:a5:51:54: 1a:87:10:1e:84:75:90:bd:bb:76:8d:57:44:c9:9a:a1:a4:6a: 2f:6a:4e:0e:98:eb:7b:19:1e:39:4e:2e:bf:26:99:31:ef:13: dd:b2:c8:65:11:b4:e3:29:f1:cd:9c:ea:f2:6f:b1:5d:00:dc: a5:62:8d:26:8f:39:7a:5c:69:dd:db:77:32:f7:9a:a0:52:91: 5b:4d:8a:d7:10:0c:ed:77:66:77:36:f9:6a:a9:2c:96:20:0e: 12:2c:83:74:94:64:76:3e:3c:f3:1a:e7:1d:e3:cc:cd:51:9c: fa:9b:3f:ac:aa:ba:23:e0:73:fe:ae:00:c5:67:47:5e:1e:17: 17:95:db:a5:67:83:da:b0:9a:ae:bd:4e:89:b2:b3:35:ab:d0: fc:8d:db:be:7e:b8:64:5d:9b:8e:18:0d:bd:11:21:37:28:a9: 28:17:85:d3:fe:be:5d:0a:0c:2a:ad:87:42:43:ae:95:87:d1: 51:33:42:b5:bc:41:99:92:62:5a:cd:26:dc:de:fc:8a:53:be: 0f:a4:b6:27:ab:d8:2e:b9:dc:d6:15:fb:4c:1e:31:2a:ff:a7: 2d:09:c3:28 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBDREUxMTAvBgNVBAUTKDExNkY5MjBGODczMDY2NzQ3QThDRUREQUZGRTg0QkNG QkRCMDM1MUEwHhcNMjUxMTIwMTcwNjE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDMzYS0wNmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eDIt2TfKNnFW/YqoRFva3MUtlI0hI4B5J1ser8X1SeQYG5KxKTgTqhUCT9V BQZ4h0zeG5vqRVafWeW5wVow5NLRaZjcEDQMIF7T8B+6uxfuB0xeGLS2NKQpFB74 wfV10zgntYCQ15DyKDNJrR53IS5Tl+MEyTLWJcw8i1V9cOnnhDaBqGn+fEbRXurh mukiwuBfTwZcHlfsc74BG/bC70tfJpk3TGFBlp6wrj2sO9EHIe4gJ3L4WQoEeLPs OWEMY+r8WTOMHy3umiWtjJXJjja5aJaChx+CScKZ0FbOn93/9O5kG+qio1bE3/4h S2/uC+NyEqK2KiE3JU33ro1rDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKEl6BIq Fi2aIIaI4fOCgrSs+6XmMB8GA1UdIwQYMBaAFBFvkg+HMGZ0eozt2v/oS8+9sDUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMENERS8yM0Q4NTY2RUZC REIxMUU4OTIwQ0IwNDRDNEY5QUUwMi9FVy1TRDRjd1puUjZqTzNhXy1oTHo3MndO Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXLVNENGN3Wm5SNmpPM2FfLWhMejcyd05Sby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBDREUvMjNEODU2NkVGQkRCMTFFODkyMENCMDQ0QzRGOUFFMDIvRDhENjM2NjBC OUE4MTFFQ0I3RUU1QTcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3sEMA0GCSqGSIb3DQEBCwUAA4IBAQACyU24bgqIRrDWoIVrL4HE wkx1TJITVg0AM21ntLPsB7ulUVQahxAehHWQvbt2jVdEyZqhpGovak4OmOt7GR45 Ti6/Jpkx7xPdsshlEbTjKfHNnOryb7FdANylYo0mjzl6XGnd23cy95qgUpFbTYrX EAztd2Z3NvlqqSyWIA4SLIN0lGR2PjzzGucd48zNUZz6mz+sqroj4HP+rgDFZ0de HhcXldulZ4PasJquvU6JsrM1q9D8jdu+frhkXZuOGA29ESE3KKkoF4XT/r5dCgwq rYdCQ66Vh9FRM0K1vEGZkmJazSbc3vyKU74PpLYnq9guudzWFftMHjEq/6ctCcMo -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:52 2026 by rpki-client