$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa File: AA5A77C88DB811EBA0613421C4F9AE02.roa (raw, json) Hash identifier: Y5k6Nh1K8NNS0hPh5WTEjL7DqnEuLThuhCaWRqICeaE= Subject key identifier: A5:9E:AF:81:6A:D7:EE:4F:71:CD:F6:B8:45:43:6D:85:ED:1F:9F:2E Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 135B Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:31:38 +0000 ROA not before: Fri 12 Sep 2025 17:26:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 33353 IP address blocks: 103.123.138.0/24 maxlen: 24 2403:7940::/33 maxlen: 33 2403:7940:fcc0::/48 maxlen: 48 2403:7940:fcd0::/48 maxlen: 48 2403:7940:fcd1::/48 maxlen: 48 2403:7940:fcd2::/48 maxlen: 48 2403:7940:fcd3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4955 (0x135b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9, serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Sep 12 17:26:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45bda-3a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:62:b5:18:ac:52:49:aa:d5:d9:7b:33:17: 88:47:d8:52:ae:3a:62:8f:c5:ba:97:e1:aa:17:e5: 7a:a1:2b:3f:c1:61:fe:81:93:ed:d7:2f:b8:0f:2f: 34:6c:d3:c8:12:93:2f:fd:f4:5f:9f:f1:ca:57:e9: 5b:82:ac:18:a3:06:49:78:4c:a6:d4:43:59:8c:fa: 1f:13:28:b7:bd:50:14:17:71:b7:aa:4e:d9:02:a4: e7:7a:35:bf:81:45:05:0f:71:e0:60:1b:70:19:81: 26:bd:ca:12:61:75:5d:6f:64:b3:27:c6:f1:a3:2f: 7b:c1:a4:be:89:9b:9d:c6:31:f6:d4:8f:44:4d:b5: 6b:bb:4b:c2:82:84:ee:78:8e:73:db:4c:94:88:67: e3:4c:e2:35:7f:88:ef:f0:40:7e:b8:1d:93:20:b6: ce:34:ff:69:37:c1:d7:73:b9:bc:32:e3:29:8a:0a: f5:49:56:45:bd:57:38:1c:d0:09:e0:79:cf:4b:f2: d2:b2:f2:9a:0e:6e:00:ea:fe:87:48:bb:53:10:4b: 21:15:4a:63:44:b8:15:f3:19:6c:27:ad:e3:cd:8c: 4b:63:4d:1d:92:5a:87:32:66:87:4d:61:c7:b3:36: 34:65:4a:51:3a:38:9b:6b:ef:3e:69:cb:04:b0:17: ea:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9E:AF:81:6A:D7:EE:4F:71:CD:F6:B8:45:43:6D:85:ED:1F:9F:2E X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.138.0/24 IPv6: 2403:7940::/33 2403:7940:fcc0::/48 2403:7940:fcd0::/46 Signature Algorithm: sha256WithRSAEncryption 2f:07:0d:02:15:dd:9f:ff:93:fa:c5:06:32:df:d6:66:1f:b1: cd:17:78:02:12:e8:91:0a:f4:da:a3:50:2f:3f:99:3b:99:39: 2d:26:48:17:fa:c8:2f:7a:35:31:ae:eb:78:1a:ba:b4:85:4e: df:33:9f:2c:6f:66:1f:2e:07:41:0b:bf:4b:3b:62:1d:2f:bc: 6b:96:eb:42:60:a4:06:ad:5f:a0:02:3d:64:27:10:c8:e8:91: be:88:4c:bc:19:ce:ec:2e:2f:98:cc:4e:0c:47:a2:f2:38:f5: de:e3:90:e1:67:a9:6b:1a:4a:2d:1c:4a:3c:94:87:52:e3:f9: b1:af:02:df:41:86:89:29:0c:e1:d3:59:a0:95:93:75:65:27: f8:da:0f:72:1b:f0:80:f6:d1:21:e6:88:cb:e4:ce:8d:d7:31: 18:b0:58:64:a1:ef:63:2f:92:93:23:19:f7:62:b9:9b:65:ca: b7:8c:ae:99:23:19:cd:d0:22:e5:26:2d:4f:ed:33:7f:46:d9: 13:be:87:cf:3a:87:89:37:00:40:ad:98:84:ce:ad:7a:c1:8f: 44:fd:ed:7a:82:86:05:94:4c:b0:59:fa:e7:3f:6e:5e:6f:8a: 71:c9:fb:f0:f1:22:c5:8c:e6:24:cb:d3:40:16:d5:d1:bb:08: a0:7f:92:4c -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICE1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjUwOTEyMTcyNjE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWJkYS0zYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OJitRisUkmq1dl7MxeIR9hSrjpij8W6l+GqF+V6oSs/wWH+gZPt1y+4Dy80 bNPIEpMv/fRfn/HKV+lbgqwYowZJeEym1ENZjPofEyi3vVAUF3G3qk7ZAqTnejW/ gUUFD3HgYBtwGYEmvcoSYXVdb2SzJ8bxoy97waS+iZudxjH21I9ETbVru0vCgoTu eI5z20yUiGfjTOI1f4jv8EB+uB2TILbONP9pN8HXc7m8MuMpigr1SVZFvVc4HNAJ 4HnPS/LSsvKaDm4A6v6HSLtTEEshFUpjRLgV8xlsJ63jzYxLY00dklqHMmaHTWHH szY0ZUpROjiba+8+acsEsBfqzQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFKWer4Fq 1+5Pcc32uEVDbYXtH58uMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQUE1QTc3Qzg4 REI4MTFFQkEwNjEzNDIxQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAM BAIAATAGAwQAZ3uKMCAEAgACMBoDBgckA3lAAAMHACQDeUD8wAMHAiQDeUD80DAN BgkqhkiG9w0BAQsFAAOCAQEALwcNAhXdn/+T+sUGMt/WZh+xzRd4AhLokQr02qNQ Lz+ZO5k5LSZIF/rIL3o1Ma7reBq6tIVO3zOfLG9mHy4HQQu/SztiHS+8a5brQmCk Bq1foAI9ZCcQyOiRvohMvBnO7C4vmMxODEei8jj13uOQ4WepaxpKLRxKPJSHUuP5 sa8C30GGiSkM4dNZoJWTdWUn+NoPchvwgPbRIeaIy+TOjdcxGLBYZKHvYy+SkyMZ 92K5m2XKt4yumSMZzdAi5SYtT+0zf0bZE76HzzqHiTcAQK2YhM6tesGPRP3teoKG BZRMsFn65z9uXm+Kccn78PEixYzmJMvTQBbV0bsIoH+STA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:03:32 2026 by rpki-client