$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa File: 2F38972E672B11EEBA84E00CC4F9AE02.roa (raw, json) Hash identifier: Qu2Z6Dmd9/Rzo8XDYKdFCYmaMNlzbJyV+6G2m4jbJmo= Subject key identifier: 81:CE:B8:C6:44:AD:3E:69:54:1F:34:15:2B:A4:47:09:6D:E3:E3:99 Certificate issuer: /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Certificate serial: 026F Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:05:50 +0000 ROA not before: Thu 29 Jan 2026 01:22:02 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 141395 IP address blocks: 103.121.24.0/24 maxlen: 24 103.121.25.0/24 maxlen: 24 2001:df1:b640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E Validity Not Before: Jan 29 01:22:02 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a40f7e-fef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:f1:00:6c:50:92:30:da:51:78:65:cf:f9: 5f:c7:ef:e9:f2:44:02:6b:2f:ea:cf:45:d5:76:36: 7d:d3:3c:79:fe:ee:e6:8d:40:ff:b9:d5:8a:9b:1f: c3:d6:70:7a:3f:7d:20:80:42:4d:bc:bc:00:06:3c: 4b:4e:ab:6e:be:3f:fc:07:3f:28:61:a6:f0:af:77: eb:b7:7c:21:d3:a9:69:a2:e9:3e:41:ee:6f:57:3c: 96:54:cb:4c:55:8a:91:2e:d5:29:52:cb:8f:16:c6: 9f:38:a2:ee:83:ee:0f:aa:0c:62:c9:22:90:c5:56: cc:33:f3:99:d9:45:19:f2:3f:9d:ed:d9:f1:00:2b: 66:fa:8c:ee:57:ee:0a:10:80:58:0c:aa:26:8a:9b: 51:da:4d:c2:36:40:09:bd:48:4a:a5:ee:d3:26:a7: 70:f2:00:65:4f:78:6b:cc:83:cc:f8:96:85:19:de: 10:ef:6b:f5:1d:6c:94:71:59:85:c5:c1:43:d3:5c: 3b:8d:07:60:67:91:61:d5:2c:49:fb:7c:24:fc:78: 35:fd:22:dc:96:c4:e8:cf:56:1c:63:f6:81:db:08: 9b:55:90:02:16:be:83:08:ff:7d:db:72:68:7b:1c: 54:1f:20:82:e1:38:eb:12:4c:15:af:bc:13:53:e3: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CE:B8:C6:44:AD:3E:69:54:1F:34:15:2B:A4:47:09:6D:E3:E3:99 X509v3 Authority Key Identifier: keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/2F38972E672B11EEBA84E00CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.24.0/23 IPv6: 2001:df1:b640::/48 Signature Algorithm: sha256WithRSAEncryption 56:ee:7b:3d:42:67:b7:40:56:44:36:1b:8b:c1:c5:75:ba:29: e3:86:bd:79:e3:5e:cb:76:c4:8b:2a:4e:b8:47:7e:0a:e9:96: 83:5c:ba:44:e4:ba:35:a1:30:e2:57:27:cc:1a:c3:fd:2a:19: 31:93:d8:05:9f:1c:c7:76:de:5c:e8:38:95:79:b9:b1:90:31: b2:2c:78:4d:d0:17:b8:e7:62:1a:9e:6d:5b:6a:72:13:4a:55: 3d:e5:ba:36:fc:57:16:ec:cb:24:8c:29:47:18:21:e1:cf:47: 08:08:6f:1a:e4:62:2e:cb:f9:2d:8e:bb:aa:61:63:99:66:15: ec:a3:3e:9b:c4:63:ce:1d:f5:c3:51:72:84:07:fb:3c:0f:51: f1:93:1d:10:84:7b:4e:ff:63:1d:15:60:44:ca:5f:bd:cb:cd: 06:ca:1c:0b:b6:2d:13:23:04:89:ea:50:84:04:eb:a1:d4:cc: 5e:76:93:9e:83:75:b3:e0:0a:69:28:3c:31:49:61:49:f0:fe: 61:64:00:c2:7d:19:df:8e:57:2c:f3:ef:07:12:14:26:c1:68: 96:42:b2:4b:e5:48:8d:24:b2:f3:68:61:1d:e8:fc:32:18:a0: 9e:de:30:2b:96:fa:5d:9c:33:c7:88:b1:de:6a:5c:7f:03:61: fa:c6:82:cd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NEQzQxMTAvBgNVBAUTKDUyOEY2RUNFMDgyQkVCM0REMEE2NkQ5MTQ3M0ZDQzY1 NjlDRDVGNEUwHhcNMjYwMTI5MDEyMjAyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGY3ZS1mZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUTxAGxQkjDaUXhlz/lfx+/p8kQCay/qz0XVdjZ90zx5/u7mjUD/udWKmx/D 1nB6P30ggEJNvLwABjxLTqtuvj/8Bz8oYabwr3frt3wh06lpouk+Qe5vVzyWVMtM VYqRLtUpUsuPFsafOKLug+4PqgxiySKQxVbMM/OZ2UUZ8j+d7dnxACtm+ozuV+4K EIBYDKomiptR2k3CNkAJvUhKpe7TJqdw8gBlT3hrzIPM+JaFGd4Q72v1HWyUcVmF xcFD01w7jQdgZ5Fh1SxJ+3wk/Hg1/SLclsToz1YcY/aB2wibVZACFr6DCP9923Jo exxUHyCC4TjrEkwVr7wTU+OlzQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIHOuMZE rT5pVB80FSukRwlt4+OZMB8GA1UdIwQYMBaAFFKPbs4IK+s90KZtkUc/zGVpzV9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RDNC9GODQ4NUY2Njgw Q0ExMUVEODVEQTkxM0RDNEY5QUUwMi9Vbzl1emdncjZ6M1FwbTJSUnpfTVpXbk5Y MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvOXV6Z2dyNnozUXBtMlJSel9NWlduTlgwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NEQzQvRjg0ODVGNjY4MENBMTFFRDg1REE5MTNEQzRGOUFFMDIvMkYzODk3MkU2 NzJCMTFFRUJBODRFMDBDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ3kYMA8EAgACMAkDBwAgAQ3xtkAwDQYJKoZIhvcNAQELBQADggEB AFbuez1CZ7dAVkQ2G4vBxXW6KeOGvXnjXst2xIsqTrhHfgrploNcukTkujWhMOJX J8waw/0qGTGT2AWfHMd23lzoOJV5ubGQMbIseE3QF7jnYhqebVtqchNKVT3lujb8 VxbsyySMKUcYIeHPRwgIbxrkYi7L+S2Ou6phY5lmFeyjPpvEY84d9cNRcoQH+zwP UfGTHRCEe07/Yx0VYETKX73LzQbKHAu2LRMjBInqUIQE66HUzF52k56DdbPgCmko PDFJYUnw/mFkAMJ9Gd+OVyzz7wcSFCbBaJZCskvlSI0ksvNoYR3o/DIYoJ7eMCuW +l2cM8eIsd5qXH8DYfrGgs0= -----END CERTIFICATE-----Generated at Mon Mar 2 23:54:45 2026 by rpki-client