$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa File: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (raw, json) Hash identifier: H0aUNR061KcXE440A4+pRmyWn8a0yHjH8V/usvq+Pj0= Subject key identifier: FA:2A:CD:F1:41:37:9E:5F:CB:DF:71:68:73:B6:2B:96:87:F8:B6:90 Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0590 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:00:36 +0000 ROA not before: Thu 02 Oct 2025 23:55:02 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136258 IP address blocks: 103.75.116.0/24 maxlen: 24 103.75.118.0/24 maxlen: 24 103.75.119.0/24 maxlen: 24 103.97.203.0/24 maxlen: 24 103.106.228.0/24 maxlen: 24 103.106.229.0/24 maxlen: 24 103.106.230.0/24 maxlen: 24 103.106.231.0/24 maxlen: 24 223.165.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Oct 2 23:55:02 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45494-8850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:d6:5f:2c:e5:97:8b:30:3f:e2:53:c7:0f: 29:18:fc:e8:10:a1:76:74:53:17:9c:11:91:9d:a7: 65:f3:63:94:28:aa:f1:81:f9:94:9b:38:57:7b:63: f3:2b:1b:0c:dc:4d:36:64:16:5b:57:01:e5:26:1c: 35:d0:8b:05:4c:cc:48:f6:15:51:5b:11:a1:d0:dc: 24:3d:25:2b:7c:59:cd:c4:1b:32:15:81:ca:ee:31: 5c:43:00:76:6e:e8:5d:d8:83:56:92:16:a0:86:4d: 83:c6:4e:59:33:52:97:f0:39:1a:da:7a:97:e1:c4: 67:16:a4:c4:31:5d:f7:f1:46:37:2b:41:bb:81:2f: da:b9:09:95:de:2b:c9:fd:2c:69:a4:b6:a3:e0:4f: 70:04:6e:fe:47:fd:53:5c:54:79:fe:a2:a6:1a:96: a2:03:22:0c:27:f4:e8:c2:a1:66:b0:5e:47:bc:0a: c0:72:c1:83:13:c9:d4:ec:78:7a:76:4d:da:5b:14: 03:9f:bd:e8:6a:fe:3a:5f:8b:a9:b3:1e:95:5e:30: 82:30:08:ad:67:f0:e2:86:c2:b5:5d:19:fb:1b:92: 65:8f:a0:b4:45:90:9a:fe:93:41:06:b3:00:d9:8e: 41:e0:92:98:be:4e:c6:67:6c:2a:99:0f:d0:a4:0b: 9f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2A:CD:F1:41:37:9E:5F:CB:DF:71:68:73:B6:2B:96:87:F8:B6:90 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.75.116.0/24 103.75.118.0/23 103.97.203.0/24 103.106.228.0/22 223.165.5.0/24 Signature Algorithm: sha256WithRSAEncryption 22:67:e2:2f:ca:38:86:cf:bb:9c:9c:40:c7:a8:fd:f4:bf:31: 2c:d0:87:45:6a:b5:2e:94:61:0a:1a:b8:02:4f:a0:e1:03:85: 3f:65:6e:ae:4f:70:a4:35:b4:c9:9e:ea:07:de:f6:49:d2:37: 21:02:72:66:b1:b6:02:6b:c0:66:9b:fe:38:53:e1:a7:c7:98: 85:5e:5a:d1:57:47:ee:a2:c5:71:a0:95:06:20:f3:de:ff:63: a6:5d:eb:14:26:f1:88:ba:6f:01:60:19:67:b3:83:e9:a8:ca: ba:3f:0f:84:8e:9d:81:55:a6:fc:63:9b:86:c6:38:1e:52:78: bb:60:dd:09:ba:ae:3c:29:96:b7:16:ae:71:9b:6a:47:e8:be: bd:d2:83:6e:91:99:91:14:f7:64:3a:a9:d8:97:d4:1a:87:60: 59:cc:6e:6e:5e:85:80:c8:85:f9:3c:57:15:53:54:b6:ad:18: a6:84:82:01:75:24:91:06:98:2f:15:76:45:45:3f:01:7f:67: 56:d5:23:fc:e9:18:87:9c:f8:96:32:8a:ec:1a:a1:56:59:21: 9d:5c:c3:85:4d:3f:e4:fd:91:81:ee:60:e4:21:a5:4f:b7:35: 6f:cc:06:0c:b1:71:2d:f5:6e:7c:aa:99:4c:27:97:2a:aa:ec: b9:4a:6b:42 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUxMDAyMjM1NTAyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTQ5NC04ODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkXWXyzll4swP+JTxw8pGPzoEKF2dFMXnBGRnadl82OUKKrxgfmUmzhXe2Pz KxsM3E02ZBZbVwHlJhw10IsFTMxI9hVRWxGh0NwkPSUrfFnNxBsyFYHK7jFcQwB2 buhd2INWkhaghk2Dxk5ZM1KX8Dka2nqX4cRnFqTEMV338UY3K0G7gS/auQmV3ivJ /SxppLaj4E9wBG7+R/1TXFR5/qKmGpaiAyIMJ/TowqFmsF5HvArAcsGDE8nU7Hh6 dk3aWxQDn73oav46X4upsx6VXjCCMAitZ/DihsK1XRn7G5Jlj6C0RZCa/pNBBrMA 2Y5B4JKYvk7GZ2wqmQ/QpAufBwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFPoqzfFB N55fy99xaHO2K5aH+LaQMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJFNzAvQkVDNUNBNzIyMTFCMTFFQ0I0NUZENDJGQzRGOUFFMDIvNUJDOUEwQjBD OTEyMTFFRDkxQzlBMzI1QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZ0t0AwQBZ0t2AwQAZ2HLAwQCZ2rkAwQA36UFMA0GCSqGSIb3DQEB CwUAA4IBAQAiZ+IvyjiGz7ucnEDHqP30vzEs0IdFarUulGEKGrgCT6DhA4U/ZW6u T3CkNbTJnuoH3vZJ0jchAnJmsbYCa8Bmm/44U+Gnx5iFXlrRV0fuosVxoJUGIPPe /2OmXesUJvGIum8BYBlns4PpqMq6Pw+Ejp2BVab8Y5uGxjgeUni7YN0Juq48KZa3 Fq5xm2pH6L690oNukZmRFPdkOqnYl9Qah2BZzG5uXoWAyIX5PFcVU1S2rRimhIIB dSSRBpgvFXZFRT8Bf2dW1SP86RiHnPiWMorsGqFWWSGdXMOFTT/k/ZGB7mDkIaVP tzVvzAYMsXEt9W58qplMJ5cqquy5SmtC -----END CERTIFICATE-----Generated at Mon Mar 2 11:16:47 2026 by rpki-client