$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/2191F8C8161E11F1ABA6B0B1313D8C67.roa File: 2191F8C8161E11F1ABA6B0B1313D8C67.roa (raw, json) Hash identifier: 4BqdekGP6TOJvlcxDVIKX748VvIpKr54ejupCldnA4M= Subject key identifier: 4C:C7:F7:3A:2D:C2:DF:FF:66:4F:1B:FB:59:C6:36:84:95:B0:7C:13 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 144D Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/2191F8C8161E11F1ABA6B0B1313D8C67.roa Signing time: Mon 02 Mar 2026 09:56:49 +0000 ROA not before: Mon 02 Mar 2026 09:56:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135542 IP address blocks: 103.116.44.0/24 maxlen: 24 103.129.199.0/24 maxlen: 24 2402:f5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5197 (0x144d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Mar 2 09:56:49 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a55ee1-4460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:22:09:31:42:f2:70:69:6c:b5:e2:a0:c8:0c: ab:3b:c8:f4:da:c6:af:3d:55:b6:f5:38:75:f4:d7: 8b:83:99:f4:f4:5d:fd:c9:9f:fb:7a:80:1f:c8:af: b6:06:b7:11:e2:6e:9b:b1:fd:bd:7f:ee:6e:6f:b8: c3:19:38:d1:fc:4c:46:a2:27:1c:0b:86:d6:de:25: b6:be:82:d2:d6:2f:08:11:a9:ab:c5:9b:79:39:21: 79:45:d3:c1:be:e9:c1:10:81:37:ff:39:44:4e:34: 94:40:b5:f0:bb:8d:e4:86:1a:63:46:22:84:53:3e: e8:57:a8:3c:de:bb:7c:47:fe:69:0e:02:ee:4c:27: 16:67:2c:68:b1:48:9f:bf:d8:8a:70:7b:99:18:38: 8a:e6:af:e3:06:d1:14:84:42:20:bf:fc:d0:2a:bf: 08:b9:7b:42:2c:18:a5:c4:84:f6:27:3c:84:20:11: b2:2f:ab:51:57:48:2f:53:3a:99:44:19:07:5a:71: fc:70:c3:5d:53:1c:89:0b:49:e8:cf:1c:66:26:b6: 82:12:fe:ca:a9:bb:78:c9:8f:bd:30:d7:49:83:1e: 77:99:1e:19:75:38:fc:0b:fa:82:48:48:2d:3e:ed: 6b:c5:9b:9a:27:e8:12:60:50:b4:34:47:ad:e8:f2: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C7:F7:3A:2D:C2:DF:FF:66:4F:1B:FB:59:C6:36:84:95:B0:7C:13 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/2191F8C8161E11F1ABA6B0B1313D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.116.44.0/24 103.129.199.0/24 IPv6: 2402:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:59:06:6f:23:b6:f9:c8:9e:69:fe:ad:b7:a8:49:d8:0a:7f: 53:67:31:ea:c8:6e:f7:29:83:b0:93:16:0f:9d:ef:2d:3c:1e: 8c:e2:a4:a8:8c:3b:bf:3a:14:fa:cf:51:05:1e:ea:35:74:6a: 4f:b2:78:98:55:3d:63:0c:83:25:d1:52:cc:8f:df:bf:98:16: 4e:56:97:63:cb:f9:a2:85:c9:e1:f0:d5:e3:91:65:1a:61:6d: ca:df:61:08:10:17:1a:28:fc:02:c5:46:10:c3:ed:3c:e5:ea: d6:28:ba:b9:99:c5:8e:0e:92:63:55:ed:ac:08:f8:fe:d8:a3: 9d:96:69:00:07:da:78:c7:60:ea:60:c2:2f:b0:80:e8:3f:39: ef:b4:4c:b4:2b:02:9a:2c:6b:90:14:a1:a9:90:4d:45:f3:15: 1e:df:58:e9:96:96:4a:db:b6:08:09:b1:84:c3:49:1a:45:ac: 52:0f:b1:22:b1:a6:a6:82:18:5c:bf:ae:2c:79:1f:c9:74:6e: e6:25:d5:dd:bc:ac:31:da:2e:f0:01:0a:f9:85:9d:39:d1:63: 8d:a7:14:d1:2f:11:89:eb:0d:e5:ee:eb:4b:d8:78:c1:36:30: 09:67:5c:92:72:e2:f3:1b:9e:af:a8:d8:13:0d:89:c5:aa:89: 5a:9c:12:d7 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICFE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjYwMzAyMDk1NjQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NWVlMS00NDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiIJMULycGlsteKgyAyrO8j02savPVW29Th19NeLg5n09F39yZ/7eoAfyK+2 BrcR4m6bsf29f+5ub7jDGTjR/ExGoiccC4bW3iW2voLS1i8IEamrxZt5OSF5RdPB vunBEIE3/zlETjSUQLXwu43khhpjRiKEUz7oV6g83rt8R/5pDgLuTCcWZyxosUif v9iKcHuZGDiK5q/jBtEUhEIgv/zQKr8IuXtCLBilxIT2JzyEIBGyL6tRV0gvUzqZ RBkHWnH8cMNdUxyJC0nozxxmJraCEv7Kqbt4yY+9MNdJgx53mR4ZdTj8C/qCSEgt Pu1rxZuaJ+gSYFC0NEet6PKPqwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEzH9zot wt//Zk8b+1nGNoSVsHwTMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvMjE5MUY4Qzgx NjFFMTFGMUFCQTZCMEIxMzEzRDhDNjcucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ3QsAwQAZ4HHMA0EAgACMAcDBQAkAvXAMA0GCSqGSIb3DQEBCwUA A4IBAQBOWQZvI7b5yJ5p/q23qEnYCn9TZzHqyG73KYOwkxYPne8tPB6M4qSojDu/ OhT6z1EFHuo1dGpPsniYVT1jDIMl0VLMj9+/mBZOVpdjy/mihcnh8NXjkWUaYW3K 32EIEBcaKPwCxUYQw+085erWKLq5mcWODpJjVe2sCPj+2KOdlmkAB9p4x2DqYMIv sIDoPznvtEy0KwKaLGuQFKGpkE1F8xUe31jplpZK27YICbGEw0kaRaxSD7Eisaam ghhcv64seR/JdG7mJdXdvKwx2i7wAQr5hZ050WONpxTRLxGJ6w3l7utL2HjBNjAJ Z1yScuLzG56vqNgTDYnFqolanBLX -----END CERTIFICATE-----Generated at Mon Mar 2 22:31:53 2026 by rpki-client