$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/DFE29CB669E511EE92E9E35AC4F9AE02.roa File: DFE29CB669E511EE92E9E35AC4F9AE02.roa (raw, json) Hash identifier: Dw9bjrXD09PLaGgOnouY4vwEn7ci+sbFDgoI/hc8reE= Subject key identifier: 22:A1:A7:CB:06:1F:2C:C1:A7:E8:5F:C0:47:4F:1D:0B:1A:71:A9:6F Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 01D4 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/DFE29CB669E511EE92E9E35AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:22:28 +0000 ROA not before: Wed 09 Apr 2025 04:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55933 IP address blocks: 103.149.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Apr 9 04:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a43d94-4f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:ae:9d:5f:4c:bc:71:81:60:f3:4c:ef:cd: 92:bb:ff:e0:08:1b:25:32:ca:fc:b8:47:fe:b2:38: 6c:4f:5d:8f:9e:0e:25:73:15:a9:ea:0d:ed:4d:5c: 64:a1:b0:d7:d9:9d:bc:d7:97:75:22:43:2b:69:4c: 10:90:c3:9d:d6:5e:c2:22:58:5f:a2:e9:39:fa:42: cd:85:0f:d8:04:89:df:7a:0b:fe:59:6a:41:24:68: 83:69:c2:9a:06:c2:58:06:6a:db:df:60:4e:13:e5: 3f:10:94:02:76:94:95:31:94:2c:c6:1d:5e:1f:00: 04:b9:ec:b3:8c:71:c3:59:fc:de:b7:be:68:18:7a: ee:7d:25:4f:a5:26:b8:1f:21:71:a7:c7:de:f0:ca: 01:48:55:da:2f:58:f0:f2:8f:66:f8:0a:5e:20:5d: cb:ff:69:60:ea:46:ad:98:22:6b:b0:7a:44:2c:b5: a5:ca:7c:08:f2:35:04:9f:94:7b:a5:6f:f0:54:b2: 77:52:27:94:e2:cc:c4:59:c8:c9:6d:3e:f6:fa:87: 4b:87:23:a5:db:f9:2f:59:de:14:3e:6a:52:57:e4: 48:b6:12:ee:fb:2d:0d:ef:5d:50:26:b3:df:e6:62: 65:7a:c7:ed:05:b0:bd:56:ed:ce:5e:e5:b4:73:5a: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A1:A7:CB:06:1F:2C:C1:A7:E8:5F:C0:47:4F:1D:0B:1A:71:A9:6F X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/DFE29CB669E511EE92E9E35AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.200.0/23 Signature Algorithm: sha256WithRSAEncryption a2:d2:cd:5b:78:3f:e9:52:43:89:6a:2c:09:1d:79:ac:e3:21: 4f:15:e2:b6:31:5c:75:b6:bc:81:a7:4c:09:81:7d:83:0e:a0: 62:c0:03:c2:25:47:91:66:c0:6d:3d:7f:8c:1e:eb:ab:ea:e6: 3a:b3:be:d5:d2:37:bf:07:8b:df:5b:9b:fe:04:a1:d6:2e:08: 82:d7:0a:a0:47:de:63:d1:e5:98:d5:dd:dc:4d:d7:88:c9:5a: 97:0c:de:73:66:10:86:c0:89:cf:71:d7:46:d4:8a:77:2a:0e: cc:15:53:dc:a3:00:14:86:c4:2a:2a:a0:1f:cf:aa:a9:9f:f6: 6d:8e:51:69:88:33:22:cd:6d:30:fd:51:b7:76:23:d0:ce:9e: f3:4f:7a:f5:83:1d:05:e6:5d:71:41:0d:9e:70:5b:5f:ce:43: 2d:a9:6b:46:b3:73:c4:d5:30:e5:a4:ec:2f:5d:c0:5a:f3:ac: 2f:f3:5c:22:02:fc:c6:a2:eb:70:e0:32:82:a1:88:b7:56:b3: 4a:ae:fb:11:65:5c:e0:f1:cc:0a:e4:3c:33:3f:80:a4:be:6b: 42:34:d0:2c:f8:a8:d7:e9:5d:f8:6f:df:4c:20:35:69:32:94: d3:0c:7e:2d:ab:45:e1:8d:3e:0b:31:1f:a3:a3:3f:3d:4f:ae: 05:0d:11:1c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNDA5MDQwOTQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2Q5NC00ZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtG6unV9MvHGBYPNM782Su//gCBslMsr8uEf+sjhsT12Png4lcxWp6g3tTVxk obDX2Z2815d1IkMraUwQkMOd1l7CIlhfouk5+kLNhQ/YBInfegv+WWpBJGiDacKa BsJYBmrb32BOE+U/EJQCdpSVMZQsxh1eHwAEueyzjHHDWfzet75oGHrufSVPpSa4 HyFxp8fe8MoBSFXaL1jw8o9m+ApeIF3L/2lg6katmCJrsHpELLWlynwI8jUEn5R7 pW/wVLJ3UieU4szEWcjJbT72+odLhyOl2/kvWd4UPmpSV+RIthLu+y0N711QJrPf 5mJlesftBbC9Vu3OXuW0c1pF6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCKhp8sG HyzBp+hfwEdPHQsacalvMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZDN0MvMkI1Q0FBRTg2OUU1MTFFRUJCNjY4MjQ2QzRGOUFFMDIvREZFMjlDQjY2 OUU1MTFFRTkyRTlFMzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5XIMA0GCSqGSIb3DQEBCwUAA4IBAQCi0s1beD/pUkOJaiwJHXms 4yFPFeK2MVx1tryBp0wJgX2DDqBiwAPCJUeRZsBtPX+MHuur6uY6s77V0je/B4vf W5v+BKHWLgiC1wqgR95j0eWY1d3cTdeIyVqXDN5zZhCGwInPcddG1Ip3Kg7MFVPc owAUhsQqKqAfz6qpn/ZtjlFpiDMizW0w/VG3diPQzp7zT3r1gx0F5l1xQQ2ecFtf zkMtqWtGs3PE1TDlpOwvXcBa86wv81wiAvzGoutw4DKCoYi3VrNKrvsRZVzg8cwK 5DwzP4CkvmtCNNAs+KjX6V34b99MIDVpMpTTDH4tq0XhjT4LMR+joz89T64FDREc -----END CERTIFICATE-----Generated at Mon Mar 2 03:55:39 2026 by rpki-client