$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa File: DA505546B74C11ED916B5A6AC4F9AE02.roa (raw, json) Hash identifier: 1ZUq5NCREZOo2LQMgkIbmL4UYX8AA9o4c/aesFsgTbA= Subject key identifier: C4:2A:16:FC:0D:81:62:AC:D9:2F:7A:16:9A:6F:0D:B6:E0:2F:5E:6F Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Certificate serial: 1300 Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:54:59 +0000 ROA not before: Tue 06 Jan 2026 17:14:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 0 IP address blocks: 103.104.19.0/24 maxlen: 24 103.125.244.0/22 maxlen: 22 103.125.245.0/24 maxlen: 24 103.125.246.0/24 maxlen: 24 116.89.244.0/24 maxlen: 24 2401:fdc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4864 (0x1300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E Validity Not Before: Jan 6 17:14:24 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47d73-54f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:cb:a2:75:d5:5c:87:c9:f2:85:c9:98:ff: 7e:e1:a6:c5:4e:0f:10:7a:ae:23:03:f5:b1:72:e9: 95:06:f3:27:be:6f:82:ba:1a:b8:ce:87:61:71:bb: f1:29:d1:9d:2b:98:68:dd:c4:2f:3c:6a:9d:cf:74: 11:5c:18:94:16:4c:3a:04:cb:c9:7a:ef:e2:dd:f3: d0:90:4b:b4:67:17:39:bb:b9:92:ba:99:3a:74:93: e7:c5:e6:d9:76:59:55:98:a0:57:e0:29:34:bc:6d: 0e:69:94:61:29:2c:6d:f4:77:ee:9e:32:85:a2:fe: 4d:1d:e8:7d:cd:fb:fd:b9:8d:29:2b:3c:53:79:18: 73:b3:2e:7a:73:d2:f2:b7:52:76:71:54:64:08:0b: 7b:bb:cc:05:d6:c3:d8:ff:08:17:9f:30:b2:97:8f: b5:62:cf:ff:72:71:9b:64:4d:0f:15:02:98:59:8b: 08:51:a8:5f:57:bb:c4:c2:d5:1c:ad:de:0c:18:f7: 13:d1:44:bf:f6:14:3d:ab:4e:41:56:80:4f:6c:3a: 16:76:e6:c3:e3:52:81:af:6f:12:f6:19:d2:0c:8a: 55:73:44:37:bb:a0:dd:42:6f:2d:86:0f:47:3b:a9: 2c:f8:b3:7f:f0:3a:ce:de:be:43:c5:85:3b:27:30: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2A:16:FC:0D:81:62:AC:D9:2F:7A:16:9A:6F:0D:B6:E0:2F:5E:6F X509v3 Authority Key Identifier: keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/DA505546B74C11ED916B5A6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.19.0/24 103.125.244.0/22 116.89.244.0/24 IPv6: 2401:fdc0::/44 Signature Algorithm: sha256WithRSAEncryption 2a:1b:36:9c:be:fe:24:01:30:a5:7c:94:e8:5f:29:ee:4f:30: 02:67:af:70:d7:45:15:7f:dd:fd:40:42:e5:e8:ef:f2:1a:7a: d3:5a:69:59:b3:28:85:86:26:ee:48:f0:5a:e0:1f:bd:2f:3d: 44:46:5a:a0:0a:a0:09:a1:09:0f:84:42:88:ef:b0:07:e2:79: 59:05:39:01:5f:f7:06:ef:5d:4b:ff:f5:1a:ab:b2:b0:4c:a8: b2:68:4c:6d:5b:19:41:56:4b:4c:4b:1d:a6:62:8b:e7:e0:c2: db:af:e6:05:84:54:91:1a:ac:34:67:86:de:63:56:55:41:97: 58:a7:1d:de:ec:99:2f:f0:60:fd:f9:4c:e0:c9:a3:56:45:46: 3a:a2:67:f0:a5:56:d4:53:d4:50:06:f7:04:6e:20:bb:d5:3c: de:05:05:48:17:d0:0b:20:9c:17:cb:b5:93:f1:87:9d:c1:12: 1d:ba:cb:d4:ae:34:eb:9c:b8:bf:bd:84:f4:1b:b3:6e:fb:d0: c0:b4:4f:63:18:e0:31:e9:66:62:2d:51:94:cd:b6:41:57:d5: 2d:3e:83:4c:7a:a0:e3:31:22:1b:f7:37:5c:57:25:b3:8b:d1: 21:63:98:b7:08:d5:d3:14:56:e3:fb:b1:0f:07:d2:fa:f1:f0: 39:49:cc:33 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICEwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ4NjAxMTAvBgNVBAUTKEJDNTM2QzAwRjg1RjU5MDQxRDlDNEMyOTYxRjcyMjQy QkY2MEQ1MUUwHhcNMjYwMTA2MTcxNDI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q3My01NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxHLonXVXIfJ8oXJmP9+4abFTg8Qeq4jA/WxcumVBvMnvm+Cuhq4zodhcbvx KdGdK5ho3cQvPGqdz3QRXBiUFkw6BMvJeu/i3fPQkEu0Zxc5u7mSupk6dJPnxebZ dllVmKBX4Ck0vG0OaZRhKSxt9HfunjKFov5NHeh9zfv9uY0pKzxTeRhzsy56c9Ly t1J2cVRkCAt7u8wF1sPY/wgXnzCyl4+1Ys//cnGbZE0PFQKYWYsIUahfV7vEwtUc rd4MGPcT0US/9hQ9q05BVoBPbDoWdubD41KBr28S9hnSDIpVc0Q3u6DdQm8thg9H O6ks+LN/8DrO3r5DxYU7JzANGQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFMQqFvwN gWKs2S96FppvDbbgL15vMB8GA1UdIwQYMBaAFLxTbAD4X1kEHZxMKWH3IkK/YNUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDg2MC9CNDAxQzk4MkU5 NzAxMUU4QjAzNTkzNTlDNEY5QUUwMi92Rk5zQVBoZldRUWRuRXdwWWZjaVFyOWcx UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZGTnNBUGhmV1FRZG5Fd3BZZmNpUXI5ZzFSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ4NjAvQjQwMUM5ODJFOTcwMTFFOEIwMzU5MzU5QzRGOUFFMDIvREE1MDU1NDZC NzRDMTFFRDkxNkI1QTZBQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQAZ2gTAwQCZ330AwQAdFn0MA8EAgACMAkDBwQkAf3AAAAwDQYJKoZI hvcNAQELBQADggEBACobNpy+/iQBMKV8lOhfKe5PMAJnr3DXRRV/3f1AQuXo7/Ia etNaaVmzKIWGJu5I8FrgH70vPURGWqAKoAmhCQ+EQojvsAfieVkFOQFf9wbvXUv/ 9RqrsrBMqLJoTG1bGUFWS0xLHaZii+fgwtuv5gWEVJEarDRnht5jVlVBl1inHd7s mS/wYP35TODJo1ZFRjqiZ/ClVtRT1FAG9wRuILvVPN4FBUgX0AsgnBfLtZPxh53B Eh26y9SuNOucuL+9hPQbs2770MC0T2MY4DHpZmItUZTNtkFX1S0+g0x6oOMxIhv3 N1xXJbOL0SFjmLcI1dMUVuP7sQ8H0vrx8DlJzDM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:00 2026 by rpki-client