$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/B9AB0CB475DE11E8B55A1C47C4F9AE02.roa File: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (raw, json) Hash identifier: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo= Subject key identifier: 60:A7:3A:39:88:BE:90:FB:6B:C7:A0:21:44:C7:9D:CF:58:48:06:B7 Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 35B8 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/B9AB0CB475DE11E8B55A1C47C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:28:28 +0000 ROA not before: Wed 28 Jan 2026 15:10:33 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 38851 IP address blocks: 103.3.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13752 (0x35b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jan 28 15:10:33 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4854c-b0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e8:c1:c2:c6:ea:e8:fd:11:24:d6:6b:b7:a0: fd:d3:01:46:99:b7:85:8d:71:98:19:4f:c5:91:1e: d4:95:18:39:97:78:b8:7d:ed:b1:81:aa:9e:cf:9f: 5b:74:69:3c:6b:2e:15:e7:d6:8f:69:98:d1:71:cc: cf:e0:dc:f9:f0:c0:04:47:e3:25:79:28:82:5f:94: 53:14:06:f9:b4:92:04:c0:39:d2:3e:8b:f7:de:9f: a2:05:d2:18:79:15:05:cc:fd:a3:db:f9:e0:e5:8f: 7b:e7:91:ce:9d:04:08:7c:e5:9d:c1:91:03:c6:bb: 78:e3:9e:eb:ed:89:2a:6e:81:84:a1:44:a9:e4:99: c1:8f:6d:bf:08:f2:2c:0a:03:85:34:a4:08:19:05: 99:dc:9b:52:c2:0c:ad:3c:f8:d8:32:0b:41:12:92: 42:4d:ef:36:b6:02:42:72:d9:d6:f8:66:c6:95:a1: 49:e7:72:fc:f1:a3:b5:14:4e:43:c8:91:f7:7d:87: 68:3d:39:00:af:27:f2:21:eb:eb:ee:c9:4c:42:72: d6:34:11:f9:b1:ca:4f:50:e7:ee:93:f9:e0:d7:83: b8:c7:01:ba:c9:be:65:c4:c5:71:ab:60:f0:41:a2: 19:54:b7:f6:57:f6:3c:62:a3:8a:1f:21:37:44:af: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:3A:39:88:BE:90:FB:6B:C7:A0:21:44:C7:9D:CF:58:48:06:B7 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/B9AB0CB475DE11E8B55A1C47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.3.192.0/22 Signature Algorithm: sha256WithRSAEncryption 66:b0:b5:bc:57:a1:33:4d:66:e2:62:09:ac:fd:36:48:c3:24: f5:e1:bd:0f:1a:34:5d:b4:cd:da:a1:56:53:ba:0b:7d:85:02: 4d:93:c1:47:18:a1:14:dd:31:e6:38:8b:91:d5:3e:b7:66:48: 4e:a4:d1:4d:97:17:06:7f:6e:80:c6:6a:b1:40:a7:4a:98:ab: d5:92:07:42:69:78:36:27:2f:60:ea:12:85:21:a7:eb:1f:15: 40:f7:9e:3a:bd:17:ca:ce:8f:17:d3:7e:27:5c:d6:4c:c4:96: c5:3c:2d:d1:2f:67:1a:07:05:03:5a:3c:64:81:2b:c6:20:08: d4:13:ec:96:1c:16:33:96:a5:25:ec:99:39:b2:31:09:9a:4f: 59:fb:25:a8:8a:41:a2:46:71:e2:7d:a0:56:c0:4f:6e:6e:9b: 32:a7:19:69:5e:3a:c0:16:5a:ee:12:90:d6:30:9f:10:02:42: 47:12:39:4a:23:db:0b:39:6b:55:ad:5f:47:e6:53:76:1f:40: 3f:83:65:fe:4b:7d:d8:bc:22:98:41:5d:26:3d:52:23:19:08: c7:de:c1:f4:62:57:6f:29:ec:9b:92:f7:28:e2:6d:85:1a:49: 40:26:70:aa:32:47:38:b8:d1:d2:9c:7e:23:6e:1b:91:bc:38: b9:aa:ad:36 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjYwMTI4MTUxMDMzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU0Yy1iMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+jBwsbq6P0RJNZrt6D90wFGmbeFjXGYGU/FkR7UlRg5l3i4fe2xgaqez59b dGk8ay4V59aPaZjRcczP4Nz58MAER+MleSiCX5RTFAb5tJIEwDnSPov33p+iBdIY eRUFzP2j2/ng5Y9755HOnQQIfOWdwZEDxrt4457r7YkqboGEoUSp5JnBj22/CPIs CgOFNKQIGQWZ3JtSwgytPPjYMgtBEpJCTe82tgJCctnW+GbGlaFJ53L88aO1FE5D yJH3fYdoPTkAryfyIevr7slMQnLWNBH5scpPUOfuk/ng14O4xwG6yb5lxMVxq2Dw QaIZVLf2V/Y8YqOKHyE3RK8nowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGCnOjmI vpD7a8egIUTHnc9YSAa3MB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlFM0EvMTk3RUMwQjYxRDg2MTFFMkFCRUYyMkREMDhCMDJDRDIvQjlBQjBDQjQ3 NURFMTFFOEI1NUExQzQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwPAMA0GCSqGSIb3DQEBCwUAA4IBAQBmsLW8V6EzTWbiYgms/TZI wyT14b0PGjRdtM3aoVZTugt9hQJNk8FHGKEU3THmOIuR1T63ZkhOpNFNlxcGf26A xmqxQKdKmKvVkgdCaXg2Jy9g6hKFIafrHxVA9546vRfKzo8X034nXNZMxJbFPC3R L2caBwUDWjxkgSvGIAjUE+yWHBYzlqUl7Jk5sjEJmk9Z+yWoikGiRnHifaBWwE9u bpsypxlpXjrAFlruEpDWMJ8QAkJHEjlKI9sLOWtVrV9H5lN2H0A/g2X+S33YvCKY QV0mPVIjGQjH3sH0YldvKeybkvco4m2FGklAJnCqMkc4uNHSnH4jbhuRvDi5qq02 -----END CERTIFICATE-----Generated at Mon Mar 2 18:08:33 2026 by rpki-client