$ rpki-client -vvf rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/FA77145A14EB11EBA13B881DC4F9AE02.roa File: FA77145A14EB11EBA13B881DC4F9AE02.roa (raw, json) Hash identifier: faeHoBuW5pyPrYn7uRKHeSH5vSG1vAWVu3ogrrqxmpg= Subject key identifier: CD:AD:1D:6B:E4:FA:73:E0:5A:E7:25:EC:E9:02:59:A4:B3:41:47:D5 Certificate issuer: /CN=A9122CB9/serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Certificate serial: 080B Authority key identifier: 6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/FA77145A14EB11EBA13B881DC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:39:24 +0000 ROA not before: Wed 06 Aug 2025 22:02:01 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131455 IP address blocks: 103.4.132.0/24 maxlen: 24 103.4.133.0/24 maxlen: 24 103.49.106.0/24 maxlen: 24 103.49.107.0/24 maxlen: 24 203.96.234.0/24 maxlen: 24 203.96.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122CB9, serialNumber=6A4BA799DAB0F226FA6366C6F1C78E22AC0C073D Validity Not Before: Aug 6 22:02:01 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4094c-e5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:b5:f8:43:34:9a:46:65:50:81:6e:2d:ca: 68:2d:ae:43:e9:69:69:65:21:26:d8:37:7c:d2:db: 81:d3:43:aa:92:5a:29:86:13:7a:3b:7f:64:27:0d: 9c:42:e8:11:a8:b9:4e:ac:41:3d:16:e6:f2:20:d2: 52:dc:21:3e:74:c8:2b:c2:3d:ae:fd:e5:79:0f:6e: 66:67:06:1e:f1:37:19:ed:9a:95:78:e9:33:d6:bb: 7f:81:f3:8a:99:2b:51:df:b3:6f:0f:ef:58:9e:92: 44:75:92:79:77:e8:7a:8c:5b:18:8f:f2:59:e7:1d: 8a:dc:88:db:b8:df:e3:32:b8:c8:93:67:5f:e8:d8: e2:6a:2c:d6:fc:18:08:f5:2a:9d:0f:01:ab:df:6a: b3:0e:1c:84:c3:89:3b:f6:a3:f1:5e:be:5e:95:2f: 2b:c8:32:f0:48:2d:46:72:db:2b:63:fb:18:f7:c1: 96:0e:b7:5a:74:0b:a0:18:f8:66:25:4c:21:aa:71: 06:ec:e3:29:84:57:29:94:56:cb:26:5a:81:04:ab: df:9f:f3:53:44:ef:98:a9:16:d7:44:13:f4:c8:b4: 14:32:51:2c:9a:77:2e:07:8b:45:b7:28:c9:07:33: 3d:22:11:c6:f3:20:74:f7:31:6d:6e:8c:87:96:e3: 9a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AD:1D:6B:E4:FA:73:E0:5A:E7:25:EC:E9:02:59:A4:B3:41:47:D5 X509v3 Authority Key Identifier: keyid:6A:4B:A7:99:DA:B0:F2:26:FA:63:66:C6:F1:C7:8E:22:AC:0C:07:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/akunmdqw8ib6Y2bG8ceOIqwMBz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akunmdqw8ib6Y2bG8ceOIqwMBz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122CB9/56AA311414EA11EBBE37EB1AC4F9AE02/FA77145A14EB11EBA13B881DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.4.132.0/23 103.49.106.0/23 203.96.234.0/23 Signature Algorithm: sha256WithRSAEncryption 60:a6:b0:7c:95:1b:fe:e1:76:97:d3:f4:b8:bf:ef:7a:5d:32: 7c:f1:3a:f4:9b:be:cc:84:9d:80:f1:24:4c:9d:96:f5:f8:eb: 08:87:45:0a:9e:0b:9f:f1:e5:a7:cd:ca:75:5d:e7:c3:6c:ae: a2:94:49:9b:67:5b:a2:2d:10:66:9a:a3:79:27:12:fe:95:0b: 0e:ed:a7:0e:a9:b3:1b:57:cc:29:f1:82:a0:ad:73:29:ed:ff: db:df:05:f3:a8:02:66:72:24:92:78:ef:b0:99:26:ac:7d:71: 5b:45:38:36:8a:be:12:18:3f:3b:c1:ae:99:08:d8:69:a9:45: 37:b0:ca:e5:a3:07:66:da:bc:0f:41:1c:ed:9c:6c:bc:d2:92: 4b:0a:e7:e2:54:78:09:0a:1b:24:b8:f4:60:94:bc:ca:e1:59: bf:08:8d:36:52:6a:b8:d2:3c:16:4e:ed:6f:4e:30:8a:d8:3c: c1:dd:2c:af:dc:ec:35:bc:89:be:17:73:93:a0:fa:0c:d7:e8: 2e:87:ab:91:75:43:ea:ee:c6:d8:c6:e9:4a:18:49:0d:d7:17: 5f:cb:df:2d:68:c0:e4:a7:75:c1:76:83:3d:b4:d2:d0:ff:65: 54:dd:c8:5a:cc:7d:2f:53:2e:c8:8d:5a:b9:7c:96:b4:60:02: 04:9b:2e:8d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJDQjkxMTAvBgNVBAUTKDZBNEJBNzk5REFCMEYyMjZGQTYzNjZDNkYxQzc4RTIy QUMwQzA3M0QwHhcNMjUwODA2MjIwMjAxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDk0Yy1lNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdm1+EM0mkZlUIFuLcpoLa5D6WlpZSEm2Dd80tuB00OqklophhN6O39kJw2c QugRqLlOrEE9FubyINJS3CE+dMgrwj2u/eV5D25mZwYe8TcZ7ZqVeOkz1rt/gfOK mStR37NvD+9YnpJEdZJ5d+h6jFsYj/JZ5x2K3IjbuN/jMrjIk2df6NjiaizW/BgI 9SqdDwGr32qzDhyEw4k79qPxXr5elS8ryDLwSC1GctsrY/sY98GWDrdadAugGPhm JUwhqnEG7OMphFcplFbLJlqBBKvfn/NTRO+YqRbXRBP0yLQUMlEsmncuB4tFtyjJ BzM9IhHG8yB09zFtboyHluOa9wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFM2tHWvk +nPgWucl7OkCWaSzQUfVMB8GA1UdIwQYMBaAFGpLp5nasPIm+mNmxvHHjiKsDAc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkNCOS81NkFBMzExNDE0 RUExMUVCQkUzN0VCMUFDNEY5QUUwMi9ha3VubWRxdzhpYjZZMmJHOGNlT0lxd01C ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrdW5tZHF3OGliNlkyYkc4Y2VPSXF3TUJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJDQjkvNTZBQTMxMTQxNEVBMTFFQkJFMzdFQjFBQzRGOUFFMDIvRkE3NzE0NUEx NEVCMTFFQkExM0I4ODFEQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBZwSEAwQBZzFqAwQBy2DqMA0GCSqGSIb3DQEBCwUAA4IBAQBgprB8 lRv+4XaX0/S4v+96XTJ88Tr0m77MhJ2A8SRMnZb1+OsIh0UKnguf8eWnzcp1XefD bK6ilEmbZ1uiLRBmmqN5JxL+lQsO7acOqbMbV8wp8YKgrXMp7f/b3wXzqAJmciSS eO+wmSasfXFbRTg2ir4SGD87wa6ZCNhpqUU3sMrlowdm2rwPQRztnGy80pJLCufi VHgJChskuPRglLzK4Vm/CI02Umq40jwWTu1vTjCK2DzB3Syv3Ow1vIm+F3OToPoM 1+guh6uRdUPq7sbYxulKGEkN1xdfy98taMDkp3XBdoM9tNLQ/2VU3chazH0vUy7I jVq5fJa0YAIEmy6N -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:52 2026 by rpki-client