$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/AA99F49CFC3711EFA9688687C4F9AE02.roa File: AA99F49CFC3711EFA9688687C4F9AE02.roa (raw, json) Hash identifier: 0agSO2czYb8v+KJlTio7mlvfIAuNEExcwdGTY8BGEg4= Subject key identifier: 82:CE:B6:BA:AD:C5:AA:25:4A:9B:25:1B:A8:32:A3:DF:18:9A:4F:64 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: BB Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/AA99F49CFC3711EFA9688687C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:05:46 +0000 ROA not before: Tue 15 Jul 2025 08:14:27 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135027 IP address blocks: 103.219.62.0/23 maxlen: 24 103.251.134.0/24 maxlen: 24 103.251.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Jul 15 08:14:27 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3f35a-1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:96:bd:1b:1a:0f:42:55:ce:cf:a8:00:df: 0d:ed:d1:a5:2f:00:a2:6c:b3:c7:a0:05:d7:c5:0a: 9c:41:b1:72:b8:84:52:c5:0b:ff:ae:c0:03:30:7f: e5:10:ec:97:64:54:52:6a:25:1a:c2:62:c4:57:dc: 12:1e:9f:50:25:ef:e3:d2:dc:d9:66:7d:45:68:90: 51:b5:ee:71:81:5a:af:6c:1c:70:d7:f6:e0:14:ce: 0a:f6:16:7f:10:9c:67:a9:6f:71:d4:5a:2f:bd:8f: 41:92:92:de:2d:f7:b7:66:e0:b5:2c:07:cf:5b:b3: 53:8c:f8:f9:b6:2b:9e:8b:94:44:93:8b:94:a3:b8: 55:ef:03:17:fd:bd:85:69:1c:6e:c5:9f:2d:6e:5f: ba:cd:0a:3e:63:53:d8:89:82:67:68:f0:82:3f:74: 11:73:62:d5:12:06:7e:77:58:f1:2c:07:01:ef:37: ab:0d:6a:91:b0:d2:60:a7:2c:f5:fb:b7:3f:6c:57: 71:df:8b:dd:58:d2:50:bb:ac:02:17:75:c4:b4:17: 66:71:f0:df:44:89:f4:48:88:e4:c1:29:e1:e2:8d: 2d:63:0d:80:fb:c8:a0:12:5b:c8:21:1f:87:0c:2d: 40:4b:bf:4c:9b:db:35:97:ee:05:97:c8:ad:24:63: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:B6:BA:AD:C5:AA:25:4A:9B:25:1B:A8:32:A3:DF:18:9A:4F:64 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/AA99F49CFC3711EFA9688687C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.219.62.0/23 103.251.134.0/23 Signature Algorithm: sha256WithRSAEncryption 62:06:c7:25:19:db:d8:8b:3f:d1:e6:0e:d7:2d:cb:88:73:78: 33:6c:18:6d:ef:60:fe:fc:f0:4a:ce:e8:be:38:70:5f:81:28: 26:ae:02:e7:34:3f:dc:96:4d:a0:25:0c:7f:13:c0:70:95:67: 7f:43:71:0d:56:d4:2f:15:0c:26:69:eb:e3:23:b9:49:f3:c5: d7:53:c2:83:40:90:fc:02:84:23:7e:65:b5:ea:2e:81:9f:5c: 67:03:50:8d:9e:1e:b2:0a:1a:c7:b6:69:33:75:a0:b4:ad:8c: b9:69:fd:19:a3:59:49:66:9e:d9:4f:c9:5d:a6:41:d0:34:f6: d4:50:c0:5e:9c:fc:8d:91:7b:ee:31:f9:97:25:e6:52:9b:79: 27:2f:9f:85:bb:29:f5:16:6e:8b:87:3f:05:65:76:1c:b7:ea: 3f:74:99:47:71:85:64:bf:0a:df:63:b1:ce:36:c4:6d:2e:ba: af:97:22:d9:bd:2f:86:d1:b1:c3:0c:fa:db:d5:b8:ac:8d:57: 20:cc:b1:b6:57:52:cc:55:5b:67:23:3b:a1:00:f7:18:a3:ad: 0d:f6:e0:22:2c:db:0c:88:14:5a:a8:60:40:65:7b:a2:5d:f0: 6f:6b:50:e8:e2:a0:4a:43:66:25:76:6d:50:88:ea:38:2b:d2: 4e:d5:32:a4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdERTMxMTAvBgNVBAUTKEQ3OUZFMEIwOUNBNDRBODQ2NjkyODM4RkM0MkJDRjQz RDJBMzJBRDIwHhcNMjUwNzE1MDgxNDI3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjM1YS0xYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaqWvRsaD0JVzs+oAN8N7dGlLwCibLPHoAXXxQqcQbFyuIRSxQv/rsADMH/l EOyXZFRSaiUawmLEV9wSHp9QJe/j0tzZZn1FaJBRte5xgVqvbBxw1/bgFM4K9hZ/ EJxnqW9x1FovvY9BkpLeLfe3ZuC1LAfPW7NTjPj5tiuei5REk4uUo7hV7wMX/b2F aRxuxZ8tbl+6zQo+Y1PYiYJnaPCCP3QRc2LVEgZ+d1jxLAcB7zerDWqRsNJgpyz1 +7c/bFdx34vdWNJQu6wCF3XEtBdmcfDfRIn0SIjkwSnh4o0tYw2A+8igElvIIR+H DC1AS79Mm9s1l+4Fl8itJGNykQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFILOtrqt xaolSpslG6gyo98Ymk9kMB8GA1UdIwQYMBaAFNef4LCcpEqEZpKDj8Qrz0PSoyrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0RFMy80RTFFRUFCQUZD MzcxMUVGQjFDMDcyODZDNEY5QUUwMi8xNV9nc0p5a1NvUm1rb09QeEN2UFE5S2pL dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdERTMvNEUxRUVBQkFGQzM3MTFFRkIxQzA3Mjg2QzRGOUFFMDIvQUE5OUY0OUNG QzM3MTFFRkE5Njg4Njg3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ9s+AwQBZ/uGMA0GCSqGSIb3DQEBCwUAA4IBAQBiBsclGdvYiz/R 5g7XLcuIc3gzbBht72D+/PBKzui+OHBfgSgmrgLnND/clk2gJQx/E8BwlWd/Q3EN VtQvFQwmaevjI7lJ88XXU8KDQJD8AoQjfmW16i6Bn1xnA1CNnh6yChrHtmkzdaC0 rYy5af0Zo1lJZp7ZT8ldpkHQNPbUUMBenPyNkXvuMfmXJeZSm3knL5+Fuyn1Fm6L hz8FZXYct+o/dJlHcYVkvwrfY7HONsRtLrqvlyLZvS+G0bHDDPrb1bisjVcgzLG2 V1LMVVtnIzuhAPcYo60N9uAiLNsMiBRaqGBAZXuiXfBva1Do4qBKQ2Yldm1QiOo4 K9JO1TKk -----END CERTIFICATE-----Generated at Mon Mar 2 04:21:23 2026 by rpki-client