$ rpki-client -vvf rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/A42489D8799211EAA230E17FC4F9AE02.roa File: A42489D8799211EAA230E17FC4F9AE02.roa (raw, json) Hash identifier: ISmZrMAJhwcmsro9bEaqHnNsjBknpoO3JY21muedtdI= Subject key identifier: 07:2F:B3:36:D5:BB:9E:B8:CE:02:70:DE:0D:87:75:53:B4:9E:81:41 Certificate issuer: /CN=A912FE31/serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Certificate serial: 0A8E Authority key identifier: 0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/A42489D8799211EAA230E17FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:01:07 +0000 ROA not before: Tue 30 Sep 2025 20:21:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 131275 IP address blocks: 103.121.120.0/24 maxlen: 24 103.121.121.0/24 maxlen: 24 2400:9c60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2702 (0xa8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FE31, serialNumber=0E6A43019568F977114E6D465B0A6F5569F5383E Validity Not Before: Sep 30 20:21:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a446a3-68a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:11:d9:af:41:17:8e:c1:99:74:3b:48:af: 5c:1b:79:8e:fd:39:c0:b9:e9:c0:64:b8:5c:ef:5c: 74:e4:ca:97:e4:0a:ea:a6:f7:f5:77:2e:08:4a:68: f8:5c:06:ed:98:f5:89:ca:73:08:1c:e9:d8:56:18: 77:e1:ea:b5:a1:f8:44:be:c1:2f:d6:27:59:3a:33: 5e:e7:65:4d:e6:87:f5:05:f3:82:bd:50:70:cd:c9: 53:d7:f1:9b:f9:ed:7d:67:83:7d:ab:23:f9:b9:ce: 4c:b6:c7:9c:88:1a:b2:1c:5d:16:a2:a0:4e:1e:05: 91:81:fb:d7:50:51:86:fa:a1:76:76:b5:4b:3a:e6: 08:07:3a:5f:a5:a1:d1:c5:79:37:70:6d:3b:30:5d: 9a:60:d6:fe:3d:44:d0:e1:4e:e8:a5:b5:4a:4c:b7: 4f:e6:1a:ff:da:d6:0c:00:92:68:b8:a4:95:75:23: 36:5c:62:61:8d:7b:2b:3d:93:b6:0b:fb:a2:e9:d4: e1:5d:03:81:0f:47:5b:10:82:82:54:5d:71:93:b3: af:7d:20:af:5b:59:46:ab:f3:6a:70:46:0a:fd:3c: b0:c4:40:91:03:59:74:4e:57:1c:23:65:cb:19:93: 5f:84:b4:9b:80:25:8c:03:74:64:cd:1a:09:ad:54: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2F:B3:36:D5:BB:9E:B8:CE:02:70:DE:0D:87:75:53:B4:9E:81:41 X509v3 Authority Key Identifier: keyid:0E:6A:43:01:95:68:F9:77:11:4E:6D:46:5B:0A:6F:55:69:F5:38:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/DmpDAZVo-XcRTm1GWwpvVWn1OD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmpDAZVo-XcRTm1GWwpvVWn1OD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FE31/AB7956D4793611EA9208C558C4F9AE02/A42489D8799211EAA230E17FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.120.0/23 IPv6: 2400:9c60::/32 Signature Algorithm: sha256WithRSAEncryption 70:33:c2:b9:2f:12:29:83:43:fc:a7:a4:b9:c5:c5:51:ac:a6: ca:03:64:1c:25:10:68:c9:52:7e:82:2a:f1:eb:c2:8f:8b:1c: 0f:bb:08:aa:b9:87:bc:03:57:62:05:67:c7:3f:a9:25:15:a8: cd:65:56:3b:dc:c1:06:4a:7f:3b:d4:7e:1f:33:16:83:71:1e: 32:cb:03:ee:1a:33:97:5d:50:a8:c8:f4:9a:14:41:17:c1:b9: df:49:da:4c:5f:10:a2:ff:c4:32:b5:20:e4:1f:8a:80:9e:91: 59:32:b4:1e:e6:54:a6:e1:5e:a7:63:a8:82:88:4d:4e:5f:f3: d7:cd:9b:69:f2:60:bf:83:53:e2:71:53:56:5d:c6:6b:3c:50: 76:62:5a:6e:c4:37:2b:85:98:9b:62:af:6f:f8:bc:03:d4:81: 77:6b:67:78:be:6d:3b:96:17:de:14:f3:31:4c:48:87:0e:0a: ce:33:3d:71:a8:2f:b3:b8:4f:21:8f:e4:35:79:9c:d5:9d:2e: 7d:bc:33:9c:09:81:eb:a2:2d:64:76:42:9f:55:82:61:8b:47: a0:d9:08:1a:d5:0d:34:c5:57:2a:d2:1e:72:73:17:bc:f9:ab: 93:75:63:90:e0:41:e5:62:45:94:be:48:cc:14:9d:59:a3:65: 25:65:2b:2e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFMzExMTAvBgNVBAUTKDBFNkE0MzAxOTU2OEY5NzcxMTRFNkQ0NjVCMEE2RjU1 NjlGNTM4M0UwHhcNMjUwOTMwMjAyMTM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDZhMy02OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseUR2a9BF47BmXQ7SK9cG3mO/TnAuenAZLhc71x05MqX5Arqpvf1dy4ISmj4 XAbtmPWJynMIHOnYVhh34eq1ofhEvsEv1idZOjNe52VN5of1BfOCvVBwzclT1/Gb +e19Z4N9qyP5uc5MtseciBqyHF0WoqBOHgWRgfvXUFGG+qF2drVLOuYIBzpfpaHR xXk3cG07MF2aYNb+PUTQ4U7opbVKTLdP5hr/2tYMAJJouKSVdSM2XGJhjXsrPZO2 C/ui6dThXQOBD0dbEIKCVF1xk7OvfSCvW1lGq/NqcEYK/TywxECRA1l0TlccI2XL GZNfhLSbgCWMA3RkzRoJrVRqhwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAcvszbV u564zgJw3g2HdVO0noFBMB8GA1UdIwQYMBaAFA5qQwGVaPl3EU5tRlsKb1Vp9Tg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkUzMS9BQjc5NTZENDc5 MzYxMUVBOTIwOEM1NThDNEY5QUUwMi9EbXBEQVpWby1YY1JUbTFHV3dwdlZXbjFP RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtcERBWlZvLVhjUlRtMUdXd3B2VlduMU9ENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZFMzEvQUI3OTU2RDQ3OTM2MTFFQTkyMDhDNTU4QzRGOUFFMDIvQTQyNDg5RDg3 OTkyMTFFQUEyMzBFMTdGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ3l4MA0EAgACMAcDBQAkAJxgMA0GCSqGSIb3DQEBCwUAA4IBAQBw M8K5LxIpg0P8p6S5xcVRrKbKA2QcJRBoyVJ+girx68KPixwPuwiquYe8A1diBWfH P6klFajNZVY73MEGSn871H4fMxaDcR4yywPuGjOXXVCoyPSaFEEXwbnfSdpMXxCi /8QytSDkH4qAnpFZMrQe5lSm4V6nY6iCiE1OX/PXzZtp8mC/g1PicVNWXcZrPFB2 YlpuxDcrhZibYq9v+LwD1IF3a2d4vm07lhfeFPMxTEiHDgrOMz1xqC+zuE8hj+Q1 eZzVnS59vDOcCYHroi1kdkKfVYJhi0eg2Qga1Q00xVcq0h5ycxe8+auTdWOQ4EHl YkWUvkjMFJ1Zo2UlZSsu -----END CERTIFICATE-----Generated at Mon Mar 2 14:02:55 2026 by rpki-client