$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/A5393FF2E70911E8B4D19B84C4F9AE02.roa File: A5393FF2E70911E8B4D19B84C4F9AE02.roa (raw, json) Hash identifier: k+p0xtu7l+Ym0EwSnutl9VlQ16P8ym/648o14VPC7t8= Subject key identifier: 30:88:C9:16:EA:C0:AA:7B:BD:1D:C9:68:B8:6B:33:99:08:01:7B:27 Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 135C Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/A5393FF2E70911E8B4D19B84C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:31:39 +0000 ROA not before: Fri 12 Sep 2025 17:26:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 55901 IP address blocks: 103.123.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4956 (0x135c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 12 17:26:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45bdb-6ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:14:bc:0b:91:7c:d4:c8:2c:b2:1b:16:3a: b8:dd:c9:2f:e3:20:5d:f7:3c:5b:d2:1a:8e:3c:41: 22:14:3f:11:0b:f1:48:cc:11:00:a0:65:e6:70:9b: 3a:80:7b:10:e4:6a:c7:83:1a:52:2f:23:84:90:21: 27:84:5d:1a:e8:de:09:4d:68:4b:a9:d3:f6:f4:a5: 27:15:4b:6b:74:d4:92:ba:cb:40:d0:95:43:9b:06: bf:7f:06:99:6a:b4:d1:31:3d:18:b6:3f:1c:0f:61: 80:4c:52:66:57:a4:65:6a:44:a9:4d:aa:0a:a7:57: d2:46:c0:cf:11:ea:a9:62:56:f3:9b:84:29:32:00: 0a:33:9d:1b:a8:53:22:7c:ca:0b:8b:e3:e5:99:83: 26:ea:23:20:da:8a:bb:9d:a8:4d:33:4e:d0:78:8f: bc:b3:79:73:49:20:c2:76:b5:57:f7:47:57:23:55: ef:a9:04:1d:e8:ea:aa:4d:0c:02:22:6a:4a:36:3a: 34:e7:b8:3c:96:3d:fd:03:9e:5a:db:6f:82:a5:66: 98:37:88:38:cb:61:f2:fe:7c:9d:3a:b7:62:91:a4: 07:3e:d0:08:ce:3a:ef:eb:03:6a:01:5d:2f:cc:54: 3e:fe:77:7c:15:a0:15:af:47:6f:64:e8:7d:b0:26: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:88:C9:16:EA:C0:AA:7B:BD:1D:C9:68:B8:6B:33:99:08:01:7B:27 X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/A5393FF2E70911E8B4D19B84C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.136.0/22 Signature Algorithm: sha256WithRSAEncryption 72:2e:8c:a1:70:6e:2e:2e:d7:69:a5:a1:a7:b8:fe:69:b3:a6: 71:e7:e2:53:e1:b5:41:77:85:9d:39:29:32:2f:ae:50:a5:e7: 07:ef:13:05:ad:a3:53:f9:50:33:7a:e7:f1:c3:ec:0e:64:88: 6b:45:41:45:fc:5f:8f:de:bd:ff:9a:86:87:e6:ac:04:92:3c: a5:2c:94:cb:d0:71:16:f8:4c:98:18:e1:81:e4:12:46:0a:bf: 06:cd:3d:18:aa:6a:da:d4:99:9e:38:d2:48:d3:58:93:fa:a3: 24:56:b7:c1:3e:b5:0f:04:a0:bf:b5:1d:d7:60:55:90:b9:21: 64:dc:8b:e1:04:9a:7d:d1:c5:28:47:22:e8:a2:e7:99:30:65: 8e:07:e9:13:ca:c7:f1:8a:6d:5f:69:96:5e:33:5f:b5:97:98: be:dd:b3:2a:fe:a5:d3:5b:8a:db:65:b8:69:ae:8a:fb:d2:7d: 40:b1:82:f3:03:fc:29:91:a8:af:7f:9a:e9:7a:5b:78:48:65: b1:af:98:cc:f9:b9:bc:ba:77:8c:74:8f:fb:f5:af:de:79:ce: 93:eb:03:e9:b8:82:f7:32:47:ba:d5:e3:53:26:5b:63:a8:0e: af:53:50:a3:09:7d:e6:31:84:b2:f6:b5:3a:25:cb:fc:93:32: 00:00:8a:42 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjUwOTEyMTcyNjE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWJkYi02ZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FcUvAuRfNTILLIbFjq43ckv4yBd9zxb0hqOPEEiFD8RC/FIzBEAoGXmcJs6 gHsQ5GrHgxpSLyOEkCEnhF0a6N4JTWhLqdP29KUnFUtrdNSSustA0JVDmwa/fwaZ arTRMT0Ytj8cD2GATFJmV6RlakSpTaoKp1fSRsDPEeqpYlbzm4QpMgAKM50bqFMi fMoLi+PlmYMm6iMg2oq7nahNM07QeI+8s3lzSSDCdrVX90dXI1XvqQQd6OqqTQwC ImpKNjo057g8lj39A55a22+CpWaYN4g4y2Hy/nydOrdikaQHPtAIzjrv6wNqAV0v zFQ+/nd8FaAVr0dvZOh9sCZkMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDCIyRbq wKp7vR3JaLhrM5kIAXsnMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQTUzOTNGRjJF NzA5MTFFOEI0RDE5Qjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3uIMA0GCSqGSIb3DQEBCwUAA4IBAQByLoyhcG4uLtdppaGnuP5p s6Zx5+JT4bVBd4WdOSkyL65QpecH7xMFraNT+VAzeufxw+wOZIhrRUFF/F+P3r3/ moaH5qwEkjylLJTL0HEW+EyYGOGB5BJGCr8GzT0Yqmra1JmeONJI01iT+qMkVrfB PrUPBKC/tR3XYFWQuSFk3IvhBJp90cUoRyLooueZMGWOB+kTysfxim1faZZeM1+1 l5i+3bMq/qXTW4rbZbhpror70n1AsYLzA/wpkaivf5rpelt4SGWxr5jM+bm8uneM dI/79a/eec6T6wPpuIL3Mke61eNTJltjqA6vU1CjCX3mMYSy9rU6Jcv8kzIAAIpC -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:16 2026 by rpki-client