$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa File: 29BE072046FF11EF9A76C461C4F9AE02.roa (raw, json) Hash identifier: m59icjETbPEsJARtE8RwhDRHt46zarweYBmDC8Z0f0c= Subject key identifier: 9B:78:3E:D2:12:58:13:DE:A7:07:34:F9:89:79:98:31:D6:B0:E5:B7 Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Certificate serial: 0989 Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:07:30 +0000 ROA not before: Fri 19 Dec 2025 00:24:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139468 IP address blocks: 45.116.134.0/23 maxlen: 23 45.116.134.0/24 maxlen: 24 103.9.94.0/23 maxlen: 23 103.28.28.0/22 maxlen: 22 103.37.132.0/22 maxlen: 22 103.37.134.0/23 maxlen: 23 103.40.216.0/22 maxlen: 22 103.240.12.0/22 maxlen: 22 103.240.13.0/24 maxlen: 24 103.245.4.0/22 maxlen: 22 103.245.4.0/23 maxlen: 23 103.245.7.0/24 maxlen: 24 2405:9e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2441 (0x989) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517 Validity Not Before: Dec 19 00:24:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48061-eb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e7:4b:ac:08:b1:0e:c1:dc:ff:5e:87:e2:80: 50:4a:05:e6:74:99:ef:62:e2:c3:86:96:58:f2:b5: d7:45:af:c9:85:d2:7d:e5:b9:74:c4:ac:89:fd:b6: c3:b1:af:90:94:74:4d:30:37:db:8e:40:a1:90:a0: 56:5b:0c:e1:99:9c:95:19:5c:c6:fa:df:f2:f3:64: be:64:a7:1e:c7:2a:90:5d:ba:b3:f5:a8:71:8a:54: ad:f8:69:0a:e5:c4:7f:e6:8c:c0:cd:c3:62:55:83: e5:61:9c:78:fd:4d:1b:ba:6f:aa:09:a7:72:42:82: b2:bc:d9:b2:41:37:19:f6:74:c0:bd:03:0d:e4:ab: d8:13:9d:18:8f:83:c5:26:24:31:3e:d0:db:79:5a: b9:ac:62:db:ab:52:dd:f9:f3:01:4a:a3:3a:e3:e3: 68:7a:c0:4b:9d:31:fc:62:7d:f7:b7:42:68:52:de: 46:93:0f:c3:b8:09:7e:71:c3:8f:c4:6e:df:9a:ab: 61:50:97:ec:94:c0:f5:a6:ad:0d:60:06:40:e3:19: aa:75:cc:d9:76:f4:7e:e8:cf:a7:ce:b2:8d:4a:15: 83:fa:ea:85:05:19:fb:fc:60:8a:5c:63:08:59:ce: 9f:f9:6e:81:cd:c6:c9:8a:6e:d8:5d:89:b4:3c:2f: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:3E:D2:12:58:13:DE:A7:07:34:F9:89:79:98:31:D6:B0:E5:B7 X509v3 Authority Key Identifier: keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/29BE072046FF11EF9A76C461C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.116.134.0/23 103.9.94.0/23 103.28.28.0/22 103.37.132.0/22 103.40.216.0/22 103.240.12.0/22 103.245.4.0/22 IPv6: 2405:9e40::/32 Signature Algorithm: sha256WithRSAEncryption 3f:b3:4f:ef:66:b5:51:7a:7b:94:95:58:2c:ee:67:98:97:98: d9:38:bc:53:15:18:b3:a3:d4:d9:f2:49:91:d2:25:df:76:9a: 02:36:d9:71:28:5e:33:56:d1:81:98:d5:6b:fe:46:11:b9:b0: de:74:c8:62:41:61:ba:8c:d8:60:45:f5:fd:67:1b:84:18:d1: 9f:45:e6:02:60:c2:fc:c9:e9:d9:58:c9:c6:4f:05:3d:8a:33: 44:a9:36:86:24:cb:b6:25:65:8c:88:38:2b:3d:96:9c:87:e4: b7:2c:f5:4f:49:ee:e0:f1:f7:23:95:25:f8:b4:fb:7c:40:d8: 05:19:f7:2e:a7:70:88:10:d3:b9:ff:a8:78:a5:98:8d:9a:d9: f2:e8:d9:59:af:b5:b5:d5:2b:fb:70:f1:ec:63:95:fa:ab:31: 0f:40:e5:de:4e:4b:6d:7c:82:36:48:0c:a3:39:07:6b:4d:db: 9b:dd:dc:2c:51:ed:6f:0b:f4:71:b1:a9:cb:44:f9:6b:38:22: cc:25:72:0e:41:3c:d0:81:42:22:97:3a:7e:64:e4:8c:3f:1b: a1:a3:e6:bc:ac:be:a9:e4:00:3e:08:77:b7:7b:40:15:f8:91: 79:6f:e4:f9:1e:0f:f1:25:57:f1:35:c7:36:eb:c4:74:57:f1: 33:32:bd:d2 -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICCYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDQjExMTAvBgNVBAUTKDA3MkNERjY1MUIzMTJDQUZCREIwNDlBMzM1NjlGRUE2 RUY2Qzk1MTcwHhcNMjUxMjE5MDAyNDE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODA2MS1lYjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+dLrAixDsHc/16H4oBQSgXmdJnvYuLDhpZY8rXXRa/JhdJ95bl0xKyJ/bbD sa+QlHRNMDfbjkChkKBWWwzhmZyVGVzG+t/y82S+ZKcexyqQXbqz9ahxilSt+GkK 5cR/5ozAzcNiVYPlYZx4/U0bum+qCadyQoKyvNmyQTcZ9nTAvQMN5KvYE50Yj4PF JiQxPtDbeVq5rGLbq1Ld+fMBSqM64+NoesBLnTH8Yn33t0JoUt5Gkw/DuAl+ccOP xG7fmqthUJfslMD1pq0NYAZA4xmqdczZdvR+6M+nzrKNShWD+uqFBRn7/GCKXGMI Wc6f+W6BzcbJim7YXYm0PC+DcwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFJt4PtIS WBPepwc0+Yl5mDHWsOW3MB8GA1UdIwQYMBaAFAcs32UbMSyvvbBJozVp/qbvbJUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNCMS9EMDBERDQ5OEJD MDIxMUVBQjhDNzkwNDhDNEY5QUUwMi9CeXpmWlJzeExLLTlzRW1qTlduLXB1OXNs UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J5emZaUnN4TEstOXNFbWpOV24tcHU5c2xSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJDQjEvRDAwREQ0OThCQzAyMTFFQUI4Qzc5MDQ4QzRGOUFFMDIvMjlCRTA3MjA0 NkZGMTFFRjlBNzZDNDYxQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQBLXSGAwQBZwleAwQCZxwcAwQCZyWEAwQCZyjYAwQCZ/AMAwQCZ/UE MA0EAgACMAcDBQAkBZ5AMA0GCSqGSIb3DQEBCwUAA4IBAQA/s0/vZrVRenuUlVgs 7meYl5jZOLxTFRizo9TZ8kmR0iXfdpoCNtlxKF4zVtGBmNVr/kYRubDedMhiQWG6 jNhgRfX9ZxuEGNGfReYCYML8yenZWMnGTwU9ijNEqTaGJMu2JWWMiDgrPZach+S3 LPVPSe7g8fcjlSX4tPt8QNgFGfcup3CIENO5/6h4pZiNmtny6NlZr7W11Sv7cPHs Y5X6qzEPQOXeTkttfII2SAyjOQdrTdub3dwsUe1vC/RxsanLRPlrOCLMJXIOQTzQ gUIilzp+ZOSMPxuho+a8rL6p5AA+CHe3e0AV+JF5b+T5Hg/xJVfxNcc268R0V/Ez Mr3S -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:25 2026 by rpki-client