$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/D23C5270E02111E9B4A3923FC4F9AE02.roa File: D23C5270E02111E9B4A3923FC4F9AE02.roa (raw, json) Hash identifier: AcA3ZpnBxGvswDC4UMsd8Zl4/kPYIdMl1MMMf/WTVg8= Subject key identifier: 59:CF:30:B7:AB:6F:79:1F:F4:D9:4D:EA:93:92:D6:35:2A:F9:D9:28 Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0D98 Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/D23C5270E02111E9B4A3923FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:22:09 +0000 ROA not before: Wed 26 Mar 2025 18:26:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136439 IP address blocks: 103.138.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3480 (0xd98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Mar 26 18:26:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40541-a7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:e9:6a:1b:2c:e7:ee:f4:b7:b9:15:d7:47: 19:c9:23:6b:45:06:7f:28:e4:8f:4f:a9:23:7d:3a: b4:1e:e8:97:e7:d9:c8:9a:18:4d:7e:c9:9f:b1:8d: 55:38:85:94:af:24:16:32:02:4e:16:49:52:a0:54: 1b:72:5b:36:6a:5e:06:cb:87:10:47:ee:b9:2c:bb: 0b:5f:d1:72:77:5e:be:62:2e:ba:8e:68:b4:96:0e: 1e:f7:2e:dd:cd:72:03:de:5b:43:49:de:2b:7c:ba: fb:e2:be:45:b8:2a:9e:ee:08:ec:c3:cc:47:39:80: e9:8a:00:5e:25:81:f9:86:70:34:10:13:ce:39:33: ba:1d:78:f5:5e:fb:43:ee:a0:67:da:aa:f6:8b:1f: 38:d2:11:91:fc:c4:fd:de:fd:3b:d8:5a:54:0d:02: 87:da:9b:bd:a7:a3:3a:dd:d6:17:a9:9a:12:1f:93: 6a:8b:dd:97:ee:bf:8c:de:87:09:f7:42:30:0a:9f: 88:77:a1:da:6a:4e:98:74:51:09:45:3a:0e:84:cc: f0:bb:12:66:d4:37:8e:18:0b:36:ab:1a:98:c4:6d: 18:13:53:b5:b5:03:f6:01:ec:42:67:69:9c:3e:dd: 1e:a8:2c:e1:cd:79:7f:86:a3:6c:50:ac:a4:e3:3a: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CF:30:B7:AB:6F:79:1F:F4:D9:4D:EA:93:92:D6:35:2A:F9:D9:28 X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/D23C5270E02111E9B4A3923FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.77.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c6:06:75:b1:dd:77:a9:a9:63:b0:a3:a5:4c:d9:9c:f6:ab: 33:89:eb:89:5a:fc:e3:1f:2f:3a:a2:eb:4b:2f:b1:82:9e:38: e0:ea:c2:7b:e0:96:9b:fd:1f:5e:3e:e7:7a:9e:f8:2b:d6:32: ea:1b:c6:23:f1:b2:51:23:41:25:0d:24:65:b6:66:df:2e:d3: ba:e5:f7:27:fa:d0:5e:db:99:3b:7d:34:9f:f8:dd:ae:11:07: 50:dd:1a:b4:82:61:9b:da:1b:76:ed:56:16:52:c5:c2:f0:9c: 82:6d:de:7c:a8:64:51:a5:57:aa:4c:e1:bd:7a:ce:f0:0e:e9: 43:20:5e:51:57:33:41:1c:f4:e7:a7:d1:ca:53:00:f2:15:4a: b9:e1:26:02:6a:4f:ad:cd:b4:d2:20:6e:f0:6d:2a:d8:a6:17: 6d:59:0b:fe:20:e6:8d:8f:b9:57:b7:69:a1:7b:14:2f:de:41: 1c:00:c4:64:bd:32:2f:02:f2:f6:4e:87:9c:db:84:f9:cc:61: af:5f:e7:21:b5:cf:07:42:5d:96:32:94:7f:5d:7e:24:bf:33: ee:15:d2:a3:45:22:9a:7c:47:c6:1a:83:22:16:7d:f8:7e:d1: 9a:60:7f:b6:32:f5:7b:28:21:7d:90:b3:5c:5d:bd:c2:24:dd: 60:ab:2c:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjUwMzI2MTgyNjIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDU0MS1hN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAre7pahss5+70t7kV10cZySNrRQZ/KOSPT6kjfTq0HuiX59nImhhNfsmfsY1V OIWUryQWMgJOFklSoFQbcls2al4Gy4cQR+65LLsLX9Fyd16+Yi66jmi0lg4e9y7d zXID3ltDSd4rfLr74r5FuCqe7gjsw8xHOYDpigBeJYH5hnA0EBPOOTO6HXj1XvtD 7qBn2qr2ix840hGR/MT93v072FpUDQKH2pu9p6M63dYXqZoSH5Nqi92X7r+M3ocJ 90IwCp+Id6Haak6YdFEJRToOhMzwuxJm1DeOGAs2qxqYxG0YE1O1tQP2AexCZ2mc Pt0eqCzhzXl/hqNsUKyk4zqzrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFnPMLer b3kf9NlN6pOS1jUq+dkoMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhFMDAvODk5MUVCOUVFMDIwMTFFOTgyQjM3QTNBQzRGOUFFMDIvRDIzQzUyNzBF MDIxMTFFOUI0QTM5MjNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4pNMA0GCSqGSIb3DQEBCwUAA4IBAQAExgZ1sd13qaljsKOlTNmc 9qszieuJWvzjHy86outLL7GCnjjg6sJ74Jab/R9ePud6nvgr1jLqG8Yj8bJRI0El DSRltmbfLtO65fcn+tBe25k7fTSf+N2uEQdQ3Rq0gmGb2ht27VYWUsXC8JyCbd58 qGRRpVeqTOG9es7wDulDIF5RVzNBHPTnp9HKUwDyFUq54SYCak+tzbTSIG7wbSrY phdtWQv+IOaNj7lXt2mhexQv3kEcAMRkvTIvAvL2Toec24T5zGGvX+chtc8HQl2W MpR/XX4kvzPuFdKjRSKafEfGGoMiFn34ftGaYH+2MvV7KCF9kLNcXb3CJN1gqywe -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:38 2026 by rpki-client