$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/DBE709060AA511EA86C8E31DC4F9AE02.roa File: DBE709060AA511EA86C8E31DC4F9AE02.roa (raw, json) Hash identifier: ERD67QeGmQZiOg0TlmUaJdO/AB21trRncbEux/X///0= Subject key identifier: 12:43:7F:45:20:3C:90:67:24:00:0B:87:1F:4F:9A:4B:15:1D:41:10 Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE Certificate serial: 0CCC Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/DBE709060AA511EA86C8E31DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:53:55 +0000 ROA not before: Sun 22 Feb 2026 18:28:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137541 IP address blocks: 103.112.148.0/22 maxlen: 22 103.112.148.0/23 maxlen: 23 103.112.148.0/24 maxlen: 24 103.112.149.0/24 maxlen: 24 103.112.150.0/23 maxlen: 23 103.112.150.0/24 maxlen: 24 103.112.151.0/24 maxlen: 24 2402:ab40::/32 maxlen: 32 2402:ab40::/40 maxlen: 40 2402:ab40::/48 maxlen: 48 2402:ab40:100::/40 maxlen: 40 2402:ab40:f00::/40 maxlen: 40 2402:ab40:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE Validity Not Before: Feb 22 18:28:35 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a444f3-3089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:9a:65:f9:14:0b:f8:86:b9:c6:be:ee:d6: 77:af:58:f9:e0:72:14:b9:1e:82:66:88:e0:11:78: 2d:22:ca:74:e3:aa:fd:53:0a:24:05:dc:ea:48:2f: dc:e0:f4:dc:25:d6:84:ed:01:fe:3e:35:68:2e:9e: 78:34:9e:37:fc:eb:34:33:6b:5e:5c:b8:86:b3:1d: 74:52:0c:1c:82:02:f4:43:ab:21:34:a7:28:c9:d2: cf:ab:81:c0:f3:7f:76:8f:7b:76:59:2c:d9:1c:f4: ed:94:bb:fb:45:aa:a5:78:64:e4:7c:41:7c:eb:ba: 51:48:18:26:62:b0:98:d5:f6:d1:d9:73:2d:6c:ad: f8:f0:12:bd:a2:ec:95:96:18:9b:00:6e:85:93:d2: 21:55:0b:9f:b2:ee:19:90:a9:62:7b:0d:2d:54:89: b0:37:72:e1:64:64:4f:d2:b2:60:a9:ba:29:f9:a8: 82:4a:7c:9d:30:3a:23:f2:35:6a:c6:10:6f:ed:97: 8f:9c:c0:92:36:58:5c:99:55:cd:d3:13:4c:4b:f4: f1:4c:0f:2f:82:7a:09:cc:42:d2:db:21:cf:72:18: 7a:06:3a:ae:5d:1b:30:d4:ad:d9:61:f9:ab:e1:05: bb:a9:b8:de:86:9d:d8:5f:13:38:e6:4a:55:a1:e2: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:43:7F:45:20:3C:90:67:24:00:0B:87:1F:4F:9A:4B:15:1D:41:10 X509v3 Authority Key Identifier: keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/DBE709060AA511EA86C8E31DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.148.0/22 IPv6: 2402:ab40::/32 Signature Algorithm: sha256WithRSAEncryption 45:d6:45:77:44:57:02:7d:b8:56:80:9d:e5:94:c6:0b:c4:44: 7d:1c:d1:97:62:43:25:2b:c2:08:43:45:da:4c:e4:37:ba:59: 67:12:21:4d:a2:ef:35:4d:c8:66:4f:9b:6c:a4:ba:07:89:c1: 82:7f:66:ab:a3:01:da:93:e0:31:ed:ef:c1:4f:15:2e:13:32: fa:7a:8b:7a:5b:b2:ab:f1:3e:a3:47:bd:8c:45:fc:44:f6:33: 13:96:43:f4:cf:df:10:1d:d8:12:67:a0:8e:4f:83:c5:1a:11: ac:f4:80:6e:8d:49:85:2d:d6:90:c9:d6:23:0f:33:cc:b1:0f: e2:3a:f5:9c:cf:4a:c6:6c:5d:3a:3c:1d:3c:ce:76:50:3c:d4: 9d:54:d2:d4:c8:93:0d:17:53:20:3d:83:bb:0f:a2:9e:e4:47: e6:6e:e0:05:30:48:5c:27:03:29:41:8d:42:77:9f:7a:47:63: 2c:f5:fd:5d:06:02:61:85:5f:3a:e2:9a:cb:ec:50:26:3d:f5: a6:22:27:d1:8d:a1:38:d6:b9:80:18:fc:ec:86:c9:f8:b9:80: cd:ae:6b:84:e1:f2:8a:06:d4:0c:44:31:9a:98:ba:78:1e:9b: 84:32:cb:be:61:7d:7a:8b:81:1b:67:e4:ee:b5:a3:32:3a:c8: 02:42:67:35 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3 RjhGMjQ4QUUwHhcNMjYwMjIyMTgyODM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDRmMy0zMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhtyaZfkUC/iGuca+7tZ3r1j54HIUuR6CZojgEXgtIsp046r9UwokBdzqSC/c 4PTcJdaE7QH+PjVoLp54NJ43/Os0M2teXLiGsx10UgwcggL0Q6shNKcoydLPq4HA 8392j3t2WSzZHPTtlLv7RaqleGTkfEF867pRSBgmYrCY1fbR2XMtbK348BK9ouyV lhibAG6Fk9IhVQufsu4ZkKliew0tVImwN3LhZGRP0rJgqbop+aiCSnydMDoj8jVq xhBv7ZePnMCSNlhcmVXN0xNMS/TxTA8vgnoJzELS2yHPchh6BjquXRsw1K3ZYfmr 4QW7qbjehp3YXxM45kpVoeLTnwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBJDf0Ug PJBnJAALhx9PmksVHUEQMB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJEQkMvNjlGQTI1NjgwQUE0MTFFQThDNUE4MzFCQzRGOUFFMDIvREJFNzA5MDYw QUE1MTFFQTg2QzhFMzFEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3CUMA0EAgACMAcDBQAkAqtAMA0GCSqGSIb3DQEBCwUAA4IBAQBF 1kV3RFcCfbhWgJ3llMYLxER9HNGXYkMlK8IIQ0XaTOQ3ullnEiFNou81TchmT5ts pLoHicGCf2arowHak+Ax7e/BTxUuEzL6eot6W7Kr8T6jR72MRfxE9jMTlkP0z98Q HdgSZ6COT4PFGhGs9IBujUmFLdaQydYjDzPMsQ/iOvWcz0rGbF06PB08znZQPNSd VNLUyJMNF1MgPYO7D6Ke5EfmbuAFMEhcJwMpQY1Cd596R2Ms9f1dBgJhhV864prL 7FAmPfWmIifRjaE41rmAGPzshsn4uYDNrmuE4fKKBtQMRDGamLp4HpuEMsu+YX16 i4EbZ+TutaMyOsgCQmc1 -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:11 2026 by rpki-client