$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/04C5DE76FF2711EAB7D5F235C4F9AE02.roa File: 04C5DE76FF2711EAB7D5F235C4F9AE02.roa (raw, json) Hash identifier: eb3+tHV1wRLLEmC3kj0RQw3MnpJ2PGa07z+N4EUcBA8= Subject key identifier: 77:F3:36:59:38:19:BF:76:6E:F2:63:43:A3:1D:8D:37:DB:58:6C:B9 Certificate issuer: /CN=A9123D9C/serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Certificate serial: 1112 Authority key identifier: 5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/04C5DE76FF2711EAB7D5F235C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:12:45 +0000 ROA not before: Fri 06 Feb 2026 17:15:02 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 41378 IP address blocks: 103.136.184.0/24 maxlen: 24 103.136.185.0/24 maxlen: 24 103.136.186.0/24 maxlen: 24 103.136.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4370 (0x1112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D9C, serialNumber=5B2CF0FB62F160F1838AEE3E6CDE07544DFF8BFF Validity Not Before: Feb 6 17:15:02 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a4819d-ed07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:b6:48:08:aa:f9:34:b3:ac:92:ae:eb:33: ea:62:8f:e9:51:74:dd:8f:06:3c:a7:4c:9a:81:77: 75:9c:0e:49:b1:22:ab:f1:7e:05:e1:7b:2e:a2:66: 51:9d:21:57:f0:ef:50:79:2f:db:15:83:4a:43:10: bf:95:61:42:85:14:8f:89:fc:ce:2e:aa:30:05:05: 19:db:5c:6d:3d:f2:a0:1f:d0:e1:5c:52:b2:d8:02: c3:de:a1:80:5b:0e:db:9c:b9:07:53:b6:54:17:83: 41:d6:cc:c7:1b:0e:92:48:51:47:f2:0d:4e:b7:b3: f7:98:3b:78:04:d1:3d:91:50:79:1e:3e:15:21:6a: 8b:f0:98:af:bf:78:bf:0c:1a:7e:d3:c7:bf:e8:b7: 3b:8d:0e:6e:95:ef:3f:d0:b5:87:c8:5d:41:59:95: fe:bb:a3:68:8e:9b:ab:89:16:28:65:fa:e4:af:2e: cb:41:3d:e3:97:29:54:73:95:5b:58:92:ea:09:65: 65:4f:94:49:d4:4f:83:fa:40:41:ab:72:5f:19:e0: 0f:33:d0:91:ed:e5:0b:3a:d0:f9:a6:cc:67:88:23: 5f:6a:0d:94:70:48:09:e9:8b:40:bc:b8:19:20:18: 34:82:fa:bf:18:00:37:72:df:92:35:08:a5:e2:4e: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:36:59:38:19:BF:76:6E:F2:63:43:A3:1D:8D:37:DB:58:6C:B9 X509v3 Authority Key Identifier: keyid:5B:2C:F0:FB:62:F1:60:F1:83:8A:EE:3E:6C:DE:07:54:4D:FF:8B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wyzw-2LxYPGDiu4-bN4HVE3_i_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D9C/455942D650B211E9B5DB6A6BC4F9AE02/04C5DE76FF2711EAB7D5F235C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.184.0/22 Signature Algorithm: sha256WithRSAEncryption 14:c6:ca:22:10:a4:6b:1f:f3:cc:5f:b7:ce:e5:4d:f3:51:c3: 4f:d8:84:45:51:e5:19:70:13:04:d5:db:44:59:85:fd:b4:e9: 91:f5:94:9c:d8:44:1b:fa:73:58:2a:74:28:87:1b:c6:61:8b: 84:71:11:c2:33:de:22:96:ac:28:50:be:5e:0d:60:d7:01:66: 18:6d:0f:67:51:c3:33:71:de:9f:22:ec:9a:73:79:2d:6d:a1: e7:33:e5:42:e0:c4:f4:79:bf:23:95:aa:4b:0c:a2:00:38:1d: c0:ed:78:b7:33:7a:12:8e:74:77:2a:8e:f7:30:be:94:00:68: ff:23:11:f3:0c:88:04:bd:e8:83:0b:0b:4c:90:55:29:9b:b7: 1f:4a:55:3a:4b:92:2f:98:04:9c:bf:a9:69:8c:b1:78:53:69: c0:80:f1:59:57:e3:66:11:2d:9f:a7:67:89:28:55:9e:7c:f0: 72:34:4c:4d:4a:44:bf:e3:75:c8:5e:eb:2c:83:32:4a:81:4b: 0f:93:a5:e9:44:01:26:eb:be:76:d5:3f:ad:f3:e0:7a:6c:eb: 69:d7:2a:7d:60:b4:be:1e:8a:0d:12:15:f5:01:7e:c9:ef:10: a0:66:e4:71:d6:d1:0f:c5:87:e8:8f:f8:1c:5c:68:0d:79:bb: 8a:63:a4:19 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICERIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEOUMxMTAvBgNVBAUTKDVCMkNGMEZCNjJGMTYwRjE4MzhBRUUzRTZDREUwNzU0 NERGRjhCRkYwHhcNMjYwMjA2MTcxNTAyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODE5ZC1lZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5S2SAiq+TSzrJKu6zPqYo/pUXTdjwY8p0yagXd1nA5JsSKr8X4F4XsuomZR nSFX8O9QeS/bFYNKQxC/lWFChRSPifzOLqowBQUZ21xtPfKgH9DhXFKy2ALD3qGA Ww7bnLkHU7ZUF4NB1szHGw6SSFFH8g1Ot7P3mDt4BNE9kVB5Hj4VIWqL8Jivv3i/ DBp+08e/6Lc7jQ5ule8/0LWHyF1BWZX+u6NojpuriRYoZfrkry7LQT3jlylUc5Vb WJLqCWVlT5RJ1E+D+kBBq3JfGeAPM9CR7eULOtD5psxniCNfag2UcEgJ6YtAvLgZ IBg0gvq/GAA3ct+SNQil4k5EUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHfzNlk4 Gb92bvJjQ6MdjTfbWGy5MB8GA1UdIwQYMBaAFFss8Pti8WDxg4ruPmzeB1RN/4v/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Q5Qy80NTU5NDJENjUw QjIxMUU5QjVEQjZBNkJDNEY5QUUwMi9XeXp3LTJMeFlQR0RpdTQtYk40SFZFM19p XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d5enctMkx4WVBHRGl1NC1iTjRIVkUzX2lfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNEOUMvNDU1OTQyRDY1MEIyMTFFOUI1REI2QTZCQzRGOUFFMDIvMDRDNURFNzZG RjI3MTFFQUI3RDVGMjM1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4i4MA0GCSqGSIb3DQEBCwUAA4IBAQAUxsoiEKRrH/PMX7fO5U3z UcNP2IRFUeUZcBME1dtEWYX9tOmR9ZSc2EQb+nNYKnQohxvGYYuEcRHCM94ilqwo UL5eDWDXAWYYbQ9nUcMzcd6fIuyac3ktbaHnM+VC4MT0eb8jlapLDKIAOB3A7Xi3 M3oSjnR3Ko73ML6UAGj/IxHzDIgEveiDCwtMkFUpm7cfSlU6S5IvmAScv6lpjLF4 U2nAgPFZV+NmES2fp2eJKFWefPByNExNSkS/43XIXussgzJKgUsPk6XpRAEm6752 1T+t8+B6bOtp1yp9YLS+HooNEhX1AX7J7xCgZuRx1tEPxYfoj/gcXGgNebuKY6QZ -----END CERTIFICATE-----Generated at Mon Mar 2 11:57:54 2026 by rpki-client