$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5B9B8A1213F311EBA7343351C4F9AE02.roa File: 5B9B8A1213F311EBA7343351C4F9AE02.roa (raw, json) Hash identifier: XjgKRLBaZq02D/Cp43Aj+NT1Qh0TEvZMzuVtJSm3G00= Subject key identifier: 06:BD:F6:C3:4B:02:D9:6D:ED:16:DC:CC:B4:F6:F8:9F:9E:BC:AB:FE Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Certificate serial: 0812 Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5B9B8A1213F311EBA7343351C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:08:30 +0000 ROA not before: Wed 14 Jan 2026 21:17:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132825 IP address blocks: 103.125.84.0/24 maxlen: 24 103.125.85.0/24 maxlen: 24 103.125.86.0/24 maxlen: 24 103.125.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2066 (0x812) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575 Validity Not Before: Jan 14 21:17:26 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4485e-7195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:6c:72:76:6f:56:7b:e6:25:4a:25:0c:c7: 1f:ac:ff:59:ae:b1:d4:5d:45:00:8d:c0:9c:91:58: 2f:fd:73:f3:e4:af:14:65:0d:aa:f8:3b:a4:22:b3: 4d:84:dd:f2:14:f7:87:3c:61:cf:b4:47:7d:cb:c0: 5f:5d:11:67:67:13:e3:08:67:a6:4e:7c:8e:44:f9: 22:2d:c4:17:da:fa:60:65:b2:0b:08:39:5a:99:e7: d6:5d:fa:e8:0d:0b:5c:75:ba:e4:58:f3:be:3b:81: b6:4e:01:1c:e7:42:7f:03:82:16:e5:04:87:95:05: 3d:12:c5:bb:82:26:12:72:9e:b0:d9:c4:fc:ed:89: 40:4f:9c:20:48:cd:2d:be:40:f5:92:62:69:c5:15: 06:41:ff:a3:e1:03:35:83:b7:ed:01:df:f6:3e:0b: 7f:66:ed:6a:fe:3f:5d:ae:72:01:28:59:55:ee:9c: 46:cf:34:21:3e:3c:b0:5b:30:a0:c2:da:0d:a8:ab: b5:20:b2:1f:44:e6:62:52:63:f4:5d:39:d6:4e:0f: d3:99:8c:4e:ac:d6:09:8e:d2:6e:51:c6:6f:4d:a5: 3f:f2:bc:99:1a:45:a7:43:09:8a:3d:d6:4a:ae:90: c3:42:72:70:06:a8:18:c8:ab:40:7a:a0:3e:50:f8: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BD:F6:C3:4B:02:D9:6D:ED:16:DC:CC:B4:F6:F8:9F:9E:BC:AB:FE X509v3 Authority Key Identifier: keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5B9B8A1213F311EBA7343351C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.125.84.0/22 Signature Algorithm: sha256WithRSAEncryption 71:b7:60:25:c0:75:68:60:51:57:94:92:0e:36:1a:bf:d1:cc: 44:44:05:28:6f:0a:27:0c:d4:3d:60:50:c4:6b:3f:f8:ca:fe: 09:d9:e4:31:f1:02:8d:91:f1:ac:ec:1c:00:f9:96:e6:45:d3: 12:c3:03:c3:f9:b6:29:97:a8:e2:e4:16:ec:56:48:8e:e2:b2: 6a:c8:f3:d5:6e:39:3b:0f:9f:27:d7:b4:77:76:e6:56:21:21: 30:31:4f:c9:1b:0f:52:01:c3:76:c5:a8:7d:3e:e8:f2:da:04: d4:6e:c5:ba:65:1b:af:e6:25:8e:cb:ab:71:f6:02:94:56:72: 5b:1f:42:56:e2:78:80:5b:72:a9:11:1e:ad:50:eb:8b:33:ac: bb:7d:27:4f:ef:1f:dc:4e:28:94:1f:f2:31:1a:31:fb:52:ca: 7a:2e:16:de:48:17:8b:41:66:49:81:34:d0:fa:c0:43:8f:dd: 74:22:c3:64:2a:be:73:f6:e2:be:4f:71:63:a0:44:ea:78:4f: 50:9e:2b:76:ad:da:44:c1:b5:d3:1f:59:6a:d2:08:85:b0:2d: 67:84:85:89:76:cd:93:08:1c:e4:2b:c7:07:d7:b0:f5:56:bf: e1:54:92:24:ea:e5:99:96:17:47:f3:de:75:8f:de:82:0b:f3: b3:3d:6a:c4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1MEIxMTAvBgNVBAUTKEU0QjMyQ0YyQTYxMUY3MDJERkQwOTEzRTNFQTUwQjRG RDYxRUM1NzUwHhcNMjYwMTE0MjExNzI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDg1ZS03MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx5scnZvVnvmJUolDMcfrP9ZrrHUXUUAjcCckVgv/XPz5K8UZQ2q+DukIrNN hN3yFPeHPGHPtEd9y8BfXRFnZxPjCGemTnyORPkiLcQX2vpgZbILCDlamefWXfro DQtcdbrkWPO+O4G2TgEc50J/A4IW5QSHlQU9EsW7giYScp6w2cT87YlAT5wgSM0t vkD1kmJpxRUGQf+j4QM1g7ftAd/2Pgt/Zu1q/j9drnIBKFlV7pxGzzQhPjywWzCg wtoNqKu1ILIfROZiUmP0XTnWTg/TmYxOrNYJjtJuUcZvTaU/8ryZGkWnQwmKPdZK rpDDQnJwBqgYyKtAeqA+UPi3lQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAa99sNL Atlt7RbczLT2+J+evKv+MB8GA1UdIwQYMBaAFOSzLPKmEfcC39CRPj6lC0/WHsV1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDUwQi9GN0I5RTMwQTEz RjExMUVCQjgxMjM5NTBDNEY5QUUwMi81TE1zOHFZUjl3TGYwSkUtUHFVTFQ5WWV4 WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMTXM4cVlSOXdMZjBKRS1QcVVMVDlZZXhYVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQ1MEIvRjdCOUUzMEExM0YxMTFFQkI4MTIzOTUwQzRGOUFFMDIvNUI5QjhBMTIx M0YzMTFFQkE3MzQzMzUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ31UMA0GCSqGSIb3DQEBCwUAA4IBAQBxt2AlwHVoYFFXlJIONhq/ 0cxERAUobwonDNQ9YFDEaz/4yv4J2eQx8QKNkfGs7BwA+ZbmRdMSwwPD+bYpl6ji 5BbsVkiO4rJqyPPVbjk7D58n17R3duZWISEwMU/JGw9SAcN2xah9Pujy2gTUbsW6 ZRuv5iWOy6tx9gKUVnJbH0JW4niAW3KpER6tUOuLM6y7fSdP7x/cTiiUH/IxGjH7 Usp6LhbeSBeLQWZJgTTQ+sBDj910IsNkKr5z9uK+T3FjoETqeE9Qnit2rdpEwbXT H1lq0giFsC1nhIWJds2TCBzkK8cH17D1Vr/hVJIk6uWZlhdH8951j96CC/OzPWrE -----END CERTIFICATE-----Generated at Mon Mar 2 15:00:43 2026 by rpki-client