$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa File: A1D479B878D411EAA8C57711C4F9AE02.roa (raw, json) Hash identifier: 1lwTh5JleRVdiZwvZwqwyHd2kVrjaN4gfoawU5rIpUg= Subject key identifier: 52:7E:04:29:AB:75:E9:74:20:AC:33:F3:78:92:CF:C2:F0:14:3C:74 Certificate issuer: /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Certificate serial: 0AE5 Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:47:22 +0000 ROA not before: Fri 14 Feb 2025 21:09:36 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135026 IP address blocks: 14.192.8.0/24 maxlen: 24 14.192.9.0/24 maxlen: 24 14.192.10.0/24 maxlen: 24 14.192.11.0/24 maxlen: 24 103.17.93.0/24 maxlen: 24 103.17.94.0/24 maxlen: 24 103.17.95.0/24 maxlen: 24 103.206.120.0/24 maxlen: 24 103.206.121.0/24 maxlen: 24 103.206.122.0/24 maxlen: 24 103.206.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2789 (0xae5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B Validity Not Before: Feb 14 21:09:36 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4274a-6e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:1f:c2:33:aa:e2:7c:fd:d2:07:65:e0:24: 6c:fb:2c:57:6c:d6:ac:07:88:97:4a:a6:29:4e:65: c3:ad:7c:d8:a4:04:2d:33:ca:8d:e7:b4:ae:4e:fd: ed:e5:d4:a3:58:22:a1:24:a5:67:37:b7:9c:ae:2c: 06:f0:08:5d:c4:61:88:83:bf:96:0d:ec:00:5d:51: 9d:b8:b2:55:b6:e1:26:9b:53:54:21:f9:e3:79:b6: c3:dd:41:1c:52:1f:db:cc:84:ff:84:44:01:41:0c: bc:92:f5:25:64:b3:2e:a7:e1:2f:df:9e:9e:4e:25: e7:ac:91:40:44:f5:6d:c4:98:40:b5:96:b0:8e:fe: 34:88:95:5b:ef:07:13:7c:f8:58:3c:2e:8f:0d:6b: 37:0d:99:d6:0c:30:c3:42:a2:7b:f8:f8:2c:47:0e: d4:aa:7c:42:06:61:6c:b8:cd:61:f7:e3:b1:37:ca: d7:cf:c6:b0:ba:47:be:97:08:1b:b1:a1:91:c4:ed: 98:a4:aa:62:1b:f3:38:80:08:f0:3f:9e:09:2a:68: 5d:fa:03:e6:bb:82:92:f7:60:80:67:65:09:c4:0c: 99:56:ef:44:ea:74:7a:28:95:d4:f2:9b:8c:95:9c: 14:99:0e:6e:58:4b:a5:cf:0a:30:25:fd:5e:f5:72: 06:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7E:04:29:AB:75:E9:74:20:AC:33:F3:78:92:CF:C2:F0:14:3C:74 X509v3 Authority Key Identifier: keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/A1D479B878D411EAA8C57711C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.192.8.0/22 103.17.93.0-103.17.95.255 103.206.120.0/22 Signature Algorithm: sha256WithRSAEncryption a8:75:90:fa:b4:bc:ea:d9:ad:c2:18:3b:38:3c:7d:4e:88:89: d1:8c:07:36:07:19:ee:42:02:4d:eb:6f:67:97:28:4a:fb:aa: 57:23:18:59:cf:5c:bf:9c:68:c1:fd:65:96:57:6d:3d:c7:36: 85:aa:24:6b:e0:0b:cb:e7:b5:fa:91:77:18:3e:b5:5a:5c:b3: dc:4b:ea:41:3c:1f:ec:17:bd:75:75:08:cc:44:1e:92:3b:a0: 92:71:4f:10:97:85:f3:d3:39:f7:30:ba:23:eb:74:7f:04:19: e8:bc:32:b6:cd:00:dc:bb:5f:bc:12:19:30:ae:a8:7f:65:35: 27:36:53:20:db:51:d0:a9:1f:a6:c6:b2:5c:3b:83:df:3d:93: bd:bb:e5:90:32:2f:80:51:a7:eb:8e:e8:d2:2d:94:7a:59:b5: f1:3b:b7:5f:ab:99:be:db:f1:b2:a0:8e:d2:f5:f9:94:5d:0e: b0:84:fc:75:56:a9:df:07:47:98:68:39:20:aa:b8:0e:3b:5f: 1b:86:d6:61:0e:a3:1b:45:bb:c1:67:47:31:27:bb:33:c5:b2: 78:f4:b2:67:7c:ea:fc:ed:28:8f:1e:b5:26:94:91:fc:9a:8b: 1e:34:c0:84:50:22:04:c3:c1:a0:1f:0f:59:ad:8a:59:19:80: c4:a2:4e:61 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICCuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMzRDQxMTAvBgNVBAUTKDJBOTNFMTQ1OTc2NjUwNjE5NURGRkM5OUI1MjMzNjJC RTVBQzBENkIwHhcNMjUwMjE0MjEwOTM2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjc0YS02ZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ8fwjOq4nz90gdl4CRs+yxXbNasB4iXSqYpTmXDrXzYpAQtM8qN57SuTv3t 5dSjWCKhJKVnN7ecriwG8AhdxGGIg7+WDewAXVGduLJVtuEmm1NUIfnjebbD3UEc Uh/bzIT/hEQBQQy8kvUlZLMup+Ev356eTiXnrJFARPVtxJhAtZawjv40iJVb7wcT fPhYPC6PDWs3DZnWDDDDQqJ7+PgsRw7UqnxCBmFsuM1h9+OxN8rXz8awuke+lwgb saGRxO2YpKpiG/M4gAjwP54JKmhd+gPmu4KS92CAZ2UJxAyZVu9E6nR6KJXU8puM lZwUmQ5uWEulzwowJf1e9XIG9wIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFFJ+BCmr del0IKwz83iSz8LwFDx0MB8GA1UdIwQYMBaAFCqT4UWXZlBhld/8mbUjNivlrA1r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzNENC8yNUEwNjE4MDZC MUYxMUVBODEzMEE2NUZDNEY5QUUwMi9LcFBoUlpkbVVHR1YzX3ladFNNMkstV3NE V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0twUGhSWmRtVUdHVjNfeVp0U00ySy1Xc0RXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMzRDQvMjVBMDYxODA2QjFGMTFFQTgxMzBBNjVGQzRGOUFFMDIvQTFENDc5Qjg3 OEQ0MTFFQUE4QzU3NzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQCDsAIMAwDBABnEV0DBAVnEUADBAJnzngwDQYJKoZIhvcNAQELBQAD ggEBAKh1kPq0vOrZrcIYOzg8fU6IidGMBzYHGe5CAk3rb2eXKEr7qlcjGFnPXL+c aMH9ZZZXbT3HNoWqJGvgC8vntfqRdxg+tVpcs9xL6kE8H+wXvXV1CMxEHpI7oJJx TxCXhfPTOfcwuiPrdH8EGei8MrbNANy7X7wSGTCuqH9lNSc2UyDbUdCpH6bGslw7 g989k7275ZAyL4BRp+uO6NItlHpZtfE7t1+rmb7b8bKgjtL1+ZRdDrCE/HVWqd8H R5hoOSCquA47XxuG1mEOoxtFu8FnRzEnuzPFsnj0smd86vztKI8etSaUkfyaix40 wIRQIgTDwaAfD1mtilkZgMSiTmE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:59 2026 by rpki-client