$ rpki-client -vvf rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/DB27568209DA11EEBA18A082C4F9AE02.roa File: DB27568209DA11EEBA18A082C4F9AE02.roa (raw, json) Hash identifier: bQjm4G+Xbuc3BrxcneYGH9ivdneUdSDZ8ioYNeVkHc0= Subject key identifier: 41:BB:75:91:C8:6C:AA:AB:96:37:3F:02:28:3C:DB:34:3B:91:DC:CA Certificate issuer: /CN=A912720E/serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Certificate serial: 0202 Authority key identifier: A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/DB27568209DA11EEBA18A082C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:14:58 +0000 ROA not before: Thu 27 Nov 2025 01:18:38 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150389 IP address blocks: 103.29.8.0/23 maxlen: 23 103.29.8.0/24 maxlen: 24 103.29.9.0/24 maxlen: 24 2001:df1:74c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912720E, serialNumber=A28DA0BE901D983A433D833589D167BF486F64FC Validity Not Before: Nov 27 01:18:38 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a411a2-7178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:61:d1:29:58:ef:91:72:83:75:8a:a7:a5: 6b:84:aa:5c:a6:c4:c2:06:70:1b:d1:f6:7b:ac:7c: 17:b5:78:68:f7:be:ae:a8:a4:62:ba:8a:a9:5d:10: 88:76:85:65:ee:2b:8d:36:dd:15:22:37:2a:fb:6f: cc:1f:db:d5:cb:7c:0d:3a:e6:99:05:87:25:c1:b6: 1c:35:3e:20:ae:42:e7:cd:f7:80:d6:31:04:b3:46: 6c:18:f4:6f:55:ab:17:fe:66:24:aa:29:2f:2a:41: 5f:3e:f3:bb:ec:5d:1d:a3:0c:92:d3:6d:63:db:ba: 5c:7b:cf:c6:57:15:1a:c8:91:c4:e7:fb:d9:c8:bf: ee:ea:e9:62:5f:21:fb:3f:9a:ea:e9:31:04:22:45: b8:4f:33:fd:e1:be:e9:e0:0a:1f:9c:40:81:8a:37: 9b:fd:c9:4b:42:12:cb:c0:5c:91:9d:3d:e5:a2:70: 0c:8e:00:53:2d:5a:ec:71:57:95:53:35:ea:33:88: 5a:87:eb:ae:70:67:28:bc:20:45:82:ef:4d:24:6c: 87:89:a0:4c:85:26:f2:e5:ea:ed:d6:fa:ed:d5:a7: d7:54:aa:a4:1e:05:ca:c7:a4:64:91:a5:b9:20:07: 32:a8:6c:6e:10:77:20:f9:b9:38:63:3a:c9:cc:3a: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:75:91:C8:6C:AA:AB:96:37:3F:02:28:3C:DB:34:3B:91:DC:CA X509v3 Authority Key Identifier: keyid:A2:8D:A0:BE:90:1D:98:3A:43:3D:83:35:89:D1:67:BF:48:6F:64:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/oo2gvpAdmDpDPYM1idFnv0hvZPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oo2gvpAdmDpDPYM1idFnv0hvZPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912720E/5E51D45C09D511EEA38A7480C4F9AE02/DB27568209DA11EEBA18A082C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.8.0/23 IPv6: 2001:df1:74c0::/48 Signature Algorithm: sha256WithRSAEncryption 56:2c:67:03:bd:9b:f0:fe:30:3c:1c:ee:f9:60:53:d3:48:ec: 68:16:50:04:65:09:88:a2:3c:7b:32:59:60:c0:d3:d0:fc:d6: 80:95:2d:6f:59:c3:fe:1d:22:b3:ef:ff:85:15:7e:91:c6:57: e5:b2:a9:ba:fb:55:8d:6e:60:4c:07:cb:a3:e8:60:5c:0f:ab: e3:b0:3b:27:92:1c:ea:e1:df:9c:96:65:75:1a:d1:7b:b4:f7: 8d:3d:cd:e5:c4:eb:a2:39:55:6a:61:cd:07:b2:28:c0:de:16: e2:7e:92:85:81:ef:0e:58:b3:ec:51:6d:4d:5a:ec:dc:24:fd: 81:ac:a7:a6:b9:4a:ed:a9:f1:6f:09:ab:fe:d3:57:11:e7:8a: 43:54:05:f8:f7:8d:8e:2e:fc:6f:9d:14:e3:a6:ae:f4:1e:2f: a5:09:0b:db:6a:6b:e7:32:1a:2b:12:5e:ea:f4:4d:dc:62:4a: f1:4a:50:70:89:87:e8:c8:7d:1d:5e:f3:ce:20:14:2f:88:33: da:78:08:86:73:68:7d:15:e1:f5:f0:55:87:55:66:29:c9:bc: a2:2a:d1:3b:15:d9:d3:07:56:07:d7:72:28:76:0b:d8:9b:99: 5e:52:4a:8d:62:50:fe:82:fe:ee:c5:ad:ea:5a:aa:13:d5:cd: 41:d0:fa:66 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyMEUxMTAvBgNVBAUTKEEyOERBMEJFOTAxRDk4M0E0MzNEODMzNTg5RDE2N0JG NDg2RjY0RkMwHhcNMjUxMTI3MDExODM4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTFhMi03MTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmA5h0SlY75Fyg3WKp6VrhKpcpsTCBnAb0fZ7rHwXtXho976uqKRiuoqpXRCI doVl7iuNNt0VIjcq+2/MH9vVy3wNOuaZBYclwbYcNT4grkLnzfeA1jEEs0ZsGPRv VasX/mYkqikvKkFfPvO77F0dowyS021j27pce8/GVxUayJHE5/vZyL/u6uliXyH7 P5rq6TEEIkW4TzP94b7p4AofnECBijeb/clLQhLLwFyRnT3lonAMjgBTLVrscVeV UzXqM4hah+uucGcovCBFgu9NJGyHiaBMhSby5ert1vrt1afXVKqkHgXKx6RkkaW5 IAcyqGxuEHcg+bk4YzrJzDqJ1wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEG7dZHI bKqrljc/Aig82zQ7kdzKMB8GA1UdIwQYMBaAFKKNoL6QHZg6Qz2DNYnRZ79Ib2T8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzIwRS81RTUxRDQ1QzA5 RDUxMUVFQTM4QTc0ODBDNEY5QUUwMi9vbzJndnBBZG1EcERQWU0xaWRGbnYwaHZa UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vMmd2cEFkbURwRFBZTTFpZEZudjBodlpQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyMEUvNUU1MUQ0NUMwOUQ1MTFFRUEzOEE3NDgwQzRGOUFFMDIvREIyNzU2ODIw OURBMTFFRUJBMThBMDgyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZx0IMA8EAgACMAkDBwAgAQ3xdMAwDQYJKoZIhvcNAQELBQADggEB AFYsZwO9m/D+MDwc7vlgU9NI7GgWUARlCYiiPHsyWWDA09D81oCVLW9Zw/4dIrPv /4UVfpHGV+Wyqbr7VY1uYEwHy6PoYFwPq+OwOyeSHOrh35yWZXUa0Xu09409zeXE 66I5VWphzQeyKMDeFuJ+koWB7w5Ys+xRbU1a7Nwk/YGsp6a5Su2p8W8Jq/7TVxHn ikNUBfj3jY4u/G+dFOOmrvQeL6UJC9tqa+cyGisSXur0TdxiSvFKUHCJh+jIfR1e 884gFC+IM9p4CIZzaH0V4fXwVYdVZinJvKIq0TsV2dMHVgfXcih2C9ibmV5SSo1i UP6C/u7FrepaqhPVzUHQ+mY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:37:28 2026 by rpki-client