$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa File: 5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa (raw, json) Hash identifier: haDczAt/oRlo22edPz5C27xE4ffdwsxRT0uAhldT0vE= Subject key identifier: 98:A6:B1:EE:3F:DD:CB:F4:A7:6E:4C:13:E2:B6:40:3B:7B:A3:81:2C Certificate issuer: /CN=A9135B24/serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Certificate serial: 122F Authority key identifier: AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:46:29 +0000 ROA not before: Thu 18 Sep 2025 17:26:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24439 IP address blocks: 103.202.148.0/24 maxlen: 24 103.202.149.0/24 maxlen: 24 103.202.150.0/24 maxlen: 24 103.202.151.0/24 maxlen: 24 117.103.88.0/21 maxlen: 21 117.103.88.0/24 maxlen: 24 117.103.89.0/24 maxlen: 24 117.103.90.0/23 maxlen: 23 117.103.92.0/24 maxlen: 24 117.103.93.0/24 maxlen: 24 117.103.94.0/24 maxlen: 24 117.103.95.0/24 maxlen: 24 203.78.152.0/24 maxlen: 24 203.78.153.0/24 maxlen: 24 203.78.154.0/24 maxlen: 24 203.78.155.0/24 maxlen: 24 2405:400::/32 maxlen: 32 2405:400:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4655 (0x122f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B24, serialNumber=AAB2D20911E67E2C3A35C701C8765A685B500EC7 Validity Not Before: Sep 18 17:26:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44335-33f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:f6:c3:af:5d:c5:53:8b:0f:ae:18:b4:7c: 13:a0:7a:af:d7:df:ff:6e:18:45:09:c4:f7:13:ba: 34:01:fe:8e:b2:51:bf:72:cb:e3:bd:ee:5f:3b:fd: b4:2d:f3:8d:28:8f:d9:1e:c3:f4:a4:b1:86:a2:61: f8:28:39:d2:ee:89:3c:91:b5:6f:a6:33:61:e0:4c: 7f:15:87:5d:81:d0:d1:d2:35:35:94:99:89:2e:02: bd:75:35:56:eb:40:0f:71:53:c2:e9:c6:4a:39:b7: 34:d7:8f:12:88:8d:44:48:f0:9f:64:4b:10:50:36: 0e:0b:14:b0:9d:1c:7c:0c:da:83:ed:ac:a1:29:00: b8:42:a2:40:20:f8:29:16:6d:00:c1:e1:08:56:78: 88:9a:2f:42:57:67:37:d6:57:91:f9:72:f5:57:0b: 0c:5e:64:bc:2d:7d:d3:75:6c:77:a5:77:e7:0f:7f: 6f:7f:e7:a5:5c:b4:9a:58:2d:69:32:b7:ef:33:30: 0b:cc:91:a6:da:3a:c1:83:02:99:a0:ca:ec:e2:0b: b0:bf:f8:d1:e9:d9:df:4a:17:5f:ee:05:57:93:41: 0c:f8:c7:6b:20:76:eb:d5:d9:5e:44:be:3f:95:76: 57:67:ed:11:a6:d5:7b:be:34:69:db:8a:ad:df:dd: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A6:B1:EE:3F:DD:CB:F4:A7:6E:4C:13:E2:B6:40:3B:7B:A3:81:2C X509v3 Authority Key Identifier: keyid:AA:B2:D2:09:11:E6:7E:2C:3A:35:C7:01:C8:76:5A:68:5B:50:0E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/qrLSCRHmfiw6NccByHZaaFtQDsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrLSCRHmfiw6NccByHZaaFtQDsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B24/3BA691A8F83D11E8B0EC3448C4F9AE02/5AC7F986F83E11E8B1FA8F4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.202.148.0/22 117.103.88.0/21 203.78.152.0/22 IPv6: 2405:400::/32 Signature Algorithm: sha256WithRSAEncryption 3b:c9:0b:7d:74:9b:b0:db:6b:e6:8a:98:43:ca:89:cc:26:05: 5a:2f:bd:9f:ff:c3:ab:e9:5a:d7:ee:1e:fa:2d:df:44:fe:ed: 36:84:6e:2d:6f:99:fa:0c:f8:05:6b:d8:ed:cc:48:c5:c8:5c: fa:39:52:77:ee:17:7e:cd:ef:76:8a:80:d1:ca:30:e8:b9:60: 0e:16:c8:89:ab:b7:d4:c3:d6:cd:94:dd:a6:0b:db:20:17:90: af:41:36:33:1e:a2:d9:e3:37:49:9a:d7:aa:8b:53:19:8d:a4: 0f:fc:79:04:81:12:43:68:9e:7b:6f:41:f2:96:28:34:1a:68: 95:5d:9a:25:e7:0c:42:30:3e:7f:58:dd:9a:7a:dd:46:50:4c: 80:d8:87:0a:f8:02:ce:9d:04:ae:d0:95:4b:b3:52:39:06:3a: 1a:4f:2d:1d:a9:95:a5:55:5b:61:73:5e:b7:b7:38:f0:dc:08: da:75:29:e8:cf:a8:79:71:61:d4:ff:fb:a3:7e:73:30:c2:c0: 90:a8:bd:7a:b0:56:db:20:3f:ce:19:be:93:d1:39:7a:d2:6d: 16:fd:1e:80:cf:72:30:a1:1b:73:7a:91:53:aa:71:87:50:0a: 94:90:c2:d6:55:a0:e1:55:a7:d8:ca:ac:3d:4f:a2:90:97:03: 9f:b8:a2:1e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICEi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCMjQxMTAvBgNVBAUTKEFBQjJEMjA5MTFFNjdFMkMzQTM1QzcwMUM4NzY1QTY4 NUI1MDBFQzcwHhcNMjUwOTE4MTcyNjQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDMzNS0zM2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcn2w69dxVOLD64YtHwToHqv19//bhhFCcT3E7o0Af6OslG/csvjve5fO/20 LfONKI/ZHsP0pLGGomH4KDnS7ok8kbVvpjNh4Ex/FYddgdDR0jU1lJmJLgK9dTVW 60APcVPC6cZKObc0148SiI1ESPCfZEsQUDYOCxSwnRx8DNqD7ayhKQC4QqJAIPgp Fm0AweEIVniImi9CV2c31leR+XL1VwsMXmS8LX3TdWx3pXfnD39vf+elXLSaWC1p MrfvMzALzJGm2jrBgwKZoMrs4guwv/jR6dnfShdf7gVXk0EM+MdrIHbr1dleRL4/ lXZXZ+0RptV7vjRp24qt390zfQIDAQABo4ICezCCAncwHQYDVR0OBBYEFJimse4/ 3cv0p25ME+K2QDt7o4EsMB8GA1UdIwQYMBaAFKqy0gkR5n4sOjXHAch2WmhbUA7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUIyNC8zQkE2OTFBOEY4 M0QxMUU4QjBFQzM0NDhDNEY5QUUwMi9xckxTQ1JIbWZpdzZOY2NCeUhaYWFGdFFE c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyTFNDUkhtZml3Nk5jY0J5SFphYUZ0UURzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzVCMjQvM0JBNjkxQThGODNEMTFFOEIwRUMzNDQ4QzRGOUFFMDIvNUFDN0Y5ODZG ODNFMTFFOEIxRkE4RjRBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ8qUAwQDdWdYAwQCy06YMA0EAgACMAcDBQAkBQQAMA0GCSqGSIb3 DQEBCwUAA4IBAQA7yQt9dJuw22vmiphDyonMJgVaL72f/8Or6VrX7h76Ld9E/u02 hG4tb5n6DPgFa9jtzEjFyFz6OVJ37hd+ze92ioDRyjDouWAOFsiJq7fUw9bNlN2m C9sgF5CvQTYzHqLZ4zdJmteqi1MZjaQP/HkEgRJDaJ57b0Hylig0GmiVXZol5wxC MD5/WN2aet1GUEyA2IcK+ALOnQSu0JVLs1I5BjoaTy0dqZWlVVthc163tzjw3Aja dSnoz6h5cWHU//ujfnMwwsCQqL16sFbbID/OGb6T0Tl60m0W/R6Az3IwoRtzepFT qnGHUAqUkMLWVaDhVafYyqw9T6KQlwOfuKIe -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:32 2026 by rpki-client