$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa File: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (raw, json) Hash identifier: Nvtm5zPUTLfKMfwQNw1RkItbZZ/wblgNOEK3hvT7oKg= Subject key identifier: 13:DD:75:55:F2:12:A2:B0:F4:3B:5E:82:85:4D:AB:06:7C:9D:3B:FF Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Certificate serial: 10DC Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:50:18 +0000 ROA not before: Tue 25 Nov 2025 01:23:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 24511 IP address blocks: 103.138.131.0/24 maxlen: 24 2001:df6:5c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4316 (0x10dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Validity Not Before: Nov 25 01:23:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a47c5a-75a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:be:0f:4e:db:9b:9f:8d:9a:12:2c:32:ae: 41:0b:b1:6b:8d:a8:dc:46:64:d8:b5:99:fe:d7:e1: 52:a9:63:fa:aa:5e:c1:d8:f9:55:55:bf:bf:7d:bc: 64:b1:c2:38:ee:80:4e:f4:aa:4f:d0:89:d0:35:c4: b6:86:8f:40:a9:a5:41:51:a2:c1:df:d5:c3:90:97: 69:7e:bf:a6:d2:b0:4c:e9:b3:02:d8:e1:61:8b:4e: 41:e3:cb:5c:f5:9a:16:98:f8:de:dd:24:54:ef:e3: ae:74:1e:aa:b4:15:fc:34:47:ff:23:f6:f2:0e:82: ec:54:10:fb:df:a4:9c:ad:6b:a1:3b:f3:e8:c0:4b: fc:09:87:19:89:c7:eb:44:13:39:c0:d7:92:ad:68: 37:a9:87:67:7a:d7:af:f4:8c:bf:0b:40:1a:a2:17: d6:f8:4d:17:d1:51:1e:a3:20:35:6f:eb:14:2c:57: 49:2d:a5:e9:b7:33:d9:94:39:aa:d9:77:a8:9e:7f: 8b:e5:f4:0f:59:37:5d:14:91:6f:99:28:4b:a7:a3: 3d:13:67:98:43:85:3b:93:20:fd:5e:f8:59:c9:ff: 2f:06:2d:02:6b:b6:3d:3f:66:84:eb:0c:7d:46:05: 6a:d5:1f:ab:df:6a:78:3f:a7:aa:e0:ac:ff:65:49: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:75:55:F2:12:A2:B0:F4:3B:5E:82:85:4D:AB:06:7C:9D:3B:FF X509v3 Authority Key Identifier: keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/2E680D2AC99911F0BDA2F55CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.131.0/24 IPv6: 2001:df6:5c40::/48 Signature Algorithm: sha256WithRSAEncryption 0c:69:8a:23:33:8c:cd:d9:75:67:f2:7a:36:ac:51:95:63:65: c9:e5:ce:51:0b:76:5d:36:7e:f2:19:c2:af:df:7f:af:04:57: ab:df:f7:68:ec:3d:41:dc:fc:b3:12:af:f3:30:96:d5:d3:45: 0a:c9:86:82:f9:70:93:e5:eb:af:08:2a:ea:8c:f1:77:b9:2a: 5e:ba:51:0b:b5:48:6c:bb:a0:85:5c:ba:06:8e:c8:80:12:09: c5:5b:dd:e0:c6:a3:bc:60:78:7e:e7:25:b5:1b:04:72:f9:fb: 57:eb:72:5d:ac:f9:1e:ef:9c:0f:04:98:d7:f1:ac:38:f2:fa: 07:f7:f7:99:d3:49:bb:1a:f4:00:68:c7:f6:fe:aa:f2:88:c5: 14:d1:a9:2f:c2:0f:84:4c:a4:bd:0c:2c:46:77:66:1d:ef:0e: 6b:bd:d3:65:d6:4e:f6:2e:00:d5:35:aa:54:fa:8c:b1:7d:fb: b2:d3:0e:1e:4f:25:dd:4f:80:30:0b:33:b4:11:fd:3c:de:18: e7:07:0a:31:b0:a6:79:09:d8:b5:80:1b:b7:1d:45:dd:e1:2d: 8d:db:e2:f0:6c:01:6a:9b:e3:32:2c:e8:62:c4:75:9d:82:36: a9:32:ce:51:ba:92:d7:7b:b3:02:e4:29:e8:b1:6d:4f:9c:27: 31:09:ae:6c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICENwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy MzNGQzVCNTAwHhcNMjUxMTI1MDEyMzI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2M1YS03NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjo++D07bm5+NmhIsMq5BC7FrjajcRmTYtZn+1+FSqWP6ql7B2PlVVb+/fbxk scI47oBO9KpP0InQNcS2ho9AqaVBUaLB39XDkJdpfr+m0rBM6bMC2OFhi05B48tc 9ZoWmPje3SRU7+OudB6qtBX8NEf/I/byDoLsVBD736ScrWuhO/PowEv8CYcZicfr RBM5wNeSrWg3qYdnetev9Iy/C0AaohfW+E0X0VEeoyA1b+sULFdJLaXptzPZlDmq 2Xeonn+L5fQPWTddFJFvmShLp6M9E2eYQ4U7kyD9XvhZyf8vBi0Ca7Y9P2aE6wx9 RgVq1R+r32p4P6eq4Kz/ZUl8XQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBPddVXy EqKw9DtegoVNqwZ8nTv/MB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0 RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBGNEIvNTc3MkFBMzA1NEU0MTFFOTg1MzZGNjU5QzRGOUFFMDIvMkU2ODBEMkFD OTk5MTFGMEJEQTJGNTVDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4qDMA8EAgACMAkDBwAgAQ32XEAwDQYJKoZIhvcNAQELBQADggEB AAxpiiMzjM3ZdWfyejasUZVjZcnlzlELdl02fvIZwq/ff68EV6vf92jsPUHc/LMS r/MwltXTRQrJhoL5cJPl668IKuqM8Xe5Kl66UQu1SGy7oIVcugaOyIASCcVb3eDG o7xgeH7nJbUbBHL5+1frcl2s+R7vnA8EmNfxrDjy+gf395nTSbsa9ABox/b+qvKI xRTRqS/CD4RMpL0MLEZ3Zh3vDmu902XWTvYuANU1qlT6jLF9+7LTDh5PJd1PgDAL M7QR/TzeGOcHCjGwpnkJ2LWAG7cdRd3hLY3b4vBsAWqb4zIs6GLEdZ2CNqkyzlG6 ktd7swLkKeixbU+cJzEJrmw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:50:02 2026 by rpki-client