$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/1ABD64C4FC4B11EC9E374483C4F9AE02.roa File: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (raw, json) Hash identifier: UcvM8IWUVo62fNbVlItsUgMGb0u4yppk8S9qIfLe7pI= Subject key identifier: AF:63:D0:4D:DC:31:D2:BF:CE:1E:98:30:C6:D8:CD:B3:D3:C1:DD:0D Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0442 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/1ABD64C4FC4B11EC9E374483C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:10:29 +0000 ROA not before: Wed 07 May 2025 01:07:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 976 IP address blocks: 103.91.219.0/24 maxlen: 24 103.95.207.0/24 maxlen: 24 103.101.153.0/24 maxlen: 24 103.107.8.0/24 maxlen: 24 2001:df0:a540::/48 maxlen: 48 2401:1740::/32 maxlen: 32 2401:1740:a::/48 maxlen: 48 2401:1740:1000::/48 maxlen: 48 2401:1740:2000::/48 maxlen: 48 2401:1740:3000::/48 maxlen: 48 2401:1740:6000::/48 maxlen: 48 2401:1740:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1090 (0x442) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: May 7 01:07:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a464f5-cc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:80:65:89:14:db:d7:bd:ff:b3:a1:66:5e: bf:bb:87:1e:55:a4:d8:ed:3c:2c:83:38:d4:42:61: f1:50:8d:d0:a4:ae:da:76:4e:ce:85:fa:db:6b:0b: e7:8b:04:13:79:3d:59:0a:82:6c:a2:f5:4f:d8:15: a2:c2:73:58:fa:1e:80:9e:d8:9d:de:39:29:7e:2a: a0:60:be:a6:30:fb:64:82:23:f1:12:bd:1d:ef:a5: f6:68:3f:db:31:95:7f:db:28:35:c9:5c:98:95:ca: ef:99:2e:1c:0a:a5:5d:d8:02:b0:ad:7d:6d:41:1f: 79:9c:65:6c:f3:55:e5:42:f3:26:b6:21:c9:39:1c: a4:59:3d:ff:5e:2d:e8:dd:58:64:13:d0:31:b4:69: 76:b0:f8:49:82:99:63:b2:a1:cb:9e:0c:c0:bb:26: 97:74:48:09:a0:6b:6a:0e:b2:7e:83:3e:08:94:fa: 89:3a:cc:e2:f5:18:ec:df:88:71:68:b8:a1:25:6a: 70:4e:25:d2:6c:a1:4a:c2:b0:39:4f:aa:4c:f3:81: d4:23:5c:e9:0f:5c:0f:9b:96:48:56:ac:5a:02:7e: 43:ac:43:b1:b4:78:72:c1:21:88:72:84:8a:1b:24: 5a:c8:f4:56:5f:8e:db:43:42:4b:bf:82:f7:0f:6d: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:63:D0:4D:DC:31:D2:BF:CE:1E:98:30:C6:D8:CD:B3:D3:C1:DD:0D X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/1ABD64C4FC4B11EC9E374483C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.219.0/24 103.95.207.0/24 103.101.153.0/24 103.107.8.0/24 IPv6: 2001:df0:a540::/48 2401:1740::/32 Signature Algorithm: sha256WithRSAEncryption 49:b0:d1:41:73:65:10:e8:62:2a:40:b0:ef:51:8e:af:cd:2f: 39:db:be:33:6a:ce:be:f0:56:a3:51:21:f1:4d:f2:e5:c1:4e: 4f:7e:a7:10:5e:b0:09:fa:57:3a:1c:f2:47:b5:96:51:5d:e8: 94:5c:d0:8e:96:f6:06:40:7c:7e:03:4c:30:95:81:3b:2d:0a: 9f:29:e4:47:7e:69:56:dc:3d:b3:82:37:e9:6f:e0:57:21:6e: ff:b8:c5:7a:bd:de:28:96:14:87:d1:66:d4:68:94:41:7e:ba: 5f:47:30:36:8c:ef:47:5c:d2:f4:98:fc:1c:3b:7d:81:1c:fc: 64:63:55:cf:ef:52:2e:97:ed:79:02:32:d7:7f:cd:73:30:80: fc:86:b8:43:82:fa:2b:4b:05:ff:4c:46:a1:c6:8c:c8:65:61: f6:0c:72:42:e7:7a:38:d2:b6:5d:bf:66:13:b2:6f:02:a7:2f: 0b:ff:40:51:5b:9c:46:3f:a7:27:e3:53:aa:67:26:de:03:68: 27:fe:be:14:e1:7d:f0:0e:4e:4b:74:e0:bd:db:3b:18:02:d3: 51:f1:45:18:f4:c3:78:7f:c6:d1:60:f5:01:0c:c6:72:76:0e: 78:a9:23:68:99:23:3e:b6:4c:5f:2d:31:08:10:a0:0c:f9:a7: c5:45:e4:19 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICBEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNTA3MDEwNzMzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjRmNS1jYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNaAZYkU29e9/7OhZl6/u4ceVaTY7TwsgzjUQmHxUI3QpK7adk7Ohfrbawvn iwQTeT1ZCoJsovVP2BWiwnNY+h6Antid3jkpfiqgYL6mMPtkgiPxEr0d76X2aD/b MZV/2yg1yVyYlcrvmS4cCqVd2AKwrX1tQR95nGVs81XlQvMmtiHJORykWT3/Xi3o 3VhkE9AxtGl2sPhJgpljsqHLngzAuyaXdEgJoGtqDrJ+gz4IlPqJOszi9Rjs34hx aLihJWpwTiXSbKFKwrA5T6pM84HUI1zpD1wPm5ZIVqxaAn5DrEOxtHhywSGIcoSK GyRayPRWX47bQ0JLv4L3D22MRQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFK9j0E3c MdK/zh6YMMbYzbPTwd0NMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdGQzIvNUUzMEJGNzBCQkE2MTFFQ0JBRjQzMTU2QzRGOUFFMDIvMUFCRDY0QzRG QzRCMTFFQzlFMzc0NDgzQzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODAe BAIAATAYAwQAZ1vbAwQAZ1/PAwQAZ2WZAwQAZ2sIMBYEAgACMBADBwAgAQ3wpUAD BQAkARdAMA0GCSqGSIb3DQEBCwUAA4IBAQBJsNFBc2UQ6GIqQLDvUY6vzS85274z as6+8FajUSHxTfLlwU5PfqcQXrAJ+lc6HPJHtZZRXeiUXNCOlvYGQHx+A0wwlYE7 LQqfKeRHfmlW3D2zgjfpb+BXIW7/uMV6vd4olhSH0WbUaJRBfrpfRzA2jO9HXNL0 mPwcO32BHPxkY1XP71Iul+15AjLXf81zMID8hrhDgvorSwX/TEahxozIZWH2DHJC 53o40rZdv2YTsm8Cpy8L/0BRW5xGP6cn41OqZybeA2gn/r4U4X3wDk5LdOC92zsY AtNR8UUY9MN4f8bRYPUBDMZydg54qSNomSM+tkxfLTEIEKAM+afFReQZ -----END CERTIFICATE-----Generated at Mon Mar 2 04:55:58 2026 by rpki-client