$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa File: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (raw, json) Hash identifier: s7T3fDzFUmaFMuceB1FEdhH7hiWK+2N1YXF00t2ZV8c= Subject key identifier: 39:A5:6C:82:10:C7:8F:19:E6:0E:86:D6:89:27:73:55:6D:0E:2E:D0 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0259 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:26:33 +0000 ROA not before: Sat 10 May 2025 01:58:20 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150728 IP address blocks: 103.72.199.0/24 maxlen: 24 2001:df3:c740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 10 01:58:20 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3ea29-f330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:c0:78:d3:b2:21:92:f4:24:ac:10:72:30: b1:24:c5:ad:8a:37:3a:ab:57:48:6a:49:f3:08:da: 74:44:72:5e:bd:d1:38:b4:fe:5c:0b:7c:2e:bf:97: d6:65:d5:d2:fd:90:bd:ce:3a:cf:dc:53:fb:d4:28: f6:46:7b:5a:3a:16:2e:d0:39:cc:d0:1a:42:2e:d0: ed:aa:36:c9:1c:ac:89:36:1a:9c:61:2a:f8:89:44: 3a:0e:26:f7:28:1a:87:64:6c:f0:b3:e8:2b:9a:52: 1f:22:10:b9:0d:42:a1:2a:86:8a:9e:44:4e:de:d9: a9:9b:22:d3:8a:13:87:99:eb:61:14:e0:df:44:0c: be:da:4d:d3:e7:f7:61:29:a9:20:d0:03:8f:8f:92: 68:b9:3e:a5:7e:6c:be:54:42:6a:4e:29:16:61:ff: ba:ec:e8:ad:59:30:08:4d:ff:22:79:9e:bf:cd:8e: 43:ef:f0:6f:5e:b3:26:b7:c9:86:06:cb:d7:1d:48: 9e:d3:71:7f:8c:0a:b4:86:44:ef:50:0f:e5:08:49: be:da:8f:8c:78:02:56:d4:ec:c1:63:1a:5a:5f:93: ed:34:d4:dd:88:69:29:66:2e:4a:ba:71:8b:31:f4: c4:3d:1d:e4:cf:53:81:7c:e3:20:95:49:13:77:5c: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A5:6C:82:10:C7:8F:19:E6:0E:86:D6:89:27:73:55:6D:0E:2E:D0 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.199.0/24 IPv6: 2001:df3:c740::/48 Signature Algorithm: sha256WithRSAEncryption 8a:29:41:e9:db:6e:98:64:f3:be:59:fd:20:bd:27:83:89:5a: fe:fb:a8:84:94:9b:4d:a7:19:1a:4b:00:e1:06:fb:42:1d:26: 82:3b:88:4f:45:2e:20:4d:fd:db:b9:3c:b5:20:fc:ad:64:27: 17:b4:59:e3:8b:90:c5:a0:71:f3:cf:cf:ad:d8:b2:50:88:b2: 71:38:ce:b3:c2:90:ab:ff:73:5a:c4:be:e6:fd:5b:ff:72:60: a0:5b:81:29:b4:4e:d2:cd:ce:16:49:8d:e0:2d:50:ae:09:1c: c1:b6:7f:6f:fb:85:c0:d3:cf:23:8e:9c:5b:d5:7d:5d:60:0c: 2b:5b:f5:10:bc:9d:74:92:86:85:3b:d8:29:c9:c4:02:65:ff: 6f:02:4c:9c:6b:e8:19:42:69:87:64:5c:78:9a:9b:b7:68:81: 2f:4f:36:c6:db:98:3e:e5:4d:d8:02:2c:85:e3:c0:e7:e6:c7: 71:ee:a5:25:08:71:69:28:e9:08:f3:42:a6:63:94:3f:3e:b8: 93:98:2b:8f:01:23:25:19:b8:7e:cc:d6:e6:97:59:a2:b9:51: d3:50:0c:67:b4:d8:1c:a8:e6:31:4c:70:b7:b8:31:c4:cf:53: d8:b0:0c:02:e4:b0:ab:2c:00:12:a3:16:49:98:56:43:c1:85: 87:e3:50:47 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNTEwMDE1ODIwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWEyOS1mMzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5zAeNOyIZL0JKwQcjCxJMWtijc6q1dIaknzCNp0RHJevdE4tP5cC3wuv5fW ZdXS/ZC9zjrP3FP71Cj2RntaOhYu0DnM0BpCLtDtqjbJHKyJNhqcYSr4iUQ6Dib3 KBqHZGzws+grmlIfIhC5DUKhKoaKnkRO3tmpmyLTihOHmethFODfRAy+2k3T5/dh Kakg0AOPj5JouT6lfmy+VEJqTikWYf+67OitWTAITf8ieZ6/zY5D7/BvXrMmt8mG BsvXHUie03F/jAq0hkTvUA/lCEm+2o+MeAJW1OzBYxpaX5PtNNTdiGkpZi5KunGL MfTEPR3kz1OBfOMglUkTd1wOBwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDmlbIIQ x48Z5g6G1oknc1VtDi7QMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU1OTcvRTk3MDdEMUU5QTNBMTFFRDgxQjEyNzFEQzRGOUFFMDIvM0Y2RUU4RTQy RDQyMTFGMDlFMEM0MjJBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ0jHMA8EAgACMAkDBwAgAQ3zx0AwDQYJKoZIhvcNAQELBQADggEB AIopQenbbphk875Z/SC9J4OJWv77qISUm02nGRpLAOEG+0IdJoI7iE9FLiBN/du5 PLUg/K1kJxe0WeOLkMWgcfPPz63YslCIsnE4zrPCkKv/c1rEvub9W/9yYKBbgSm0 TtLNzhZJjeAtUK4JHMG2f2/7hcDTzyOOnFvVfV1gDCtb9RC8nXSShoU72CnJxAJl /28CTJxr6BlCaYdkXHiam7dogS9PNsbbmD7lTdgCLIXjwOfmx3HupSUIcWko6Qjz QqZjlD8+uJOYK48BIyUZuH7M1uaXWaK5UdNQDGe02Byo5jFMcLe4McTPU9iwDALk sKssABKjFkmYVkPBhYfjUEc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:20 2026 by rpki-client