$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/AFDA40003AB511E9A79AA42DC4F9AE02.roa File: AFDA40003AB511E9A79AA42DC4F9AE02.roa (raw, json) Hash identifier: 56EKgLc289CWCDjAbc+739CAo2AEeIbXhwaJ6sVW/sQ= Subject key identifier: 6E:36:9E:5C:2F:FA:D3:16:94:91:B0:82:E5:2C:16:89:FC:31:6A:CC Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Certificate serial: 1120 Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/AFDA40003AB511E9A79AA42DC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:49:46 +0000 ROA not before: Mon 10 Mar 2025 17:37:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 3 IP address blocks: 103.134.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4384 (0x1120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897 Validity Not Before: Mar 10 17:37:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a59579-c7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:39:b2:cc:1d:e9:aa:17:0e:7f:92:ec:4a:9f: 7d:15:5a:26:ec:c3:97:ec:7a:e0:02:e9:b2:01:d1: 0e:f8:05:e4:63:e8:28:10:9b:82:46:29:cf:37:87: 77:d7:39:79:a3:10:03:47:48:98:0e:f3:ea:a9:9d: 1e:0d:fd:5e:c0:ec:c6:21:ad:7e:cf:ab:0e:a9:d1: f7:70:4a:47:4d:62:7e:24:ac:93:8c:3d:1c:8a:cb: 64:ea:5b:ce:ee:82:38:7f:fa:89:fd:a5:fd:06:a1: a5:3a:be:ec:dc:20:15:0b:86:a1:f5:24:80:d9:92: 5f:6f:10:b0:a1:ee:bb:10:62:c5:a5:fb:b4:5a:0f: c2:62:d9:3b:52:28:10:22:ec:91:da:aa:98:29:2a: ea:26:df:0e:48:38:60:89:a3:b3:4a:54:94:b2:8d: 17:c0:87:0f:d6:31:2b:02:48:e2:cb:22:c9:c0:1a: 2f:a4:50:37:fe:98:3d:79:25:9c:03:1d:1e:43:fa: 68:a8:7e:6f:e1:12:41:6a:93:93:63:08:52:de:25: 3d:2d:3c:e5:35:f3:3b:94:ec:ef:be:5c:ae:fd:97: 47:33:02:e6:a7:00:66:78:51:61:3b:72:cc:5f:8d: fd:80:40:ad:a3:58:7a:ff:07:a6:35:0d:51:e1:1a: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:36:9E:5C:2F:FA:D3:16:94:91:B0:82:E5:2C:16:89:FC:31:6A:CC X509v3 Authority Key Identifier: keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/AFDA40003AB511E9A79AA42DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.63.0/24 Signature Algorithm: sha256WithRSAEncryption 61:da:36:00:66:c3:7c:61:14:d5:57:9e:13:84:e5:2e:06:e4: 76:d3:3c:5b:de:73:7d:54:61:5e:14:32:ed:ba:a0:88:b4:c9: ae:aa:4d:01:7c:76:0e:0b:85:9f:7b:c6:a7:b3:f2:31:fa:91: 9d:f6:6e:ef:52:98:7e:37:51:4e:2b:fc:15:ea:71:cf:79:b3: d5:9a:4b:47:38:c6:53:34:d2:6c:de:b2:f6:48:15:0f:79:e6: 4c:fa:1d:d2:20:af:49:56:3a:b9:9f:7b:0f:64:95:95:65:7b: 27:b2:a9:ca:74:c3:db:27:7b:3d:0d:58:17:d3:ea:91:a7:5f: d0:86:2a:ab:8b:4a:e4:46:94:4d:c1:ec:42:13:38:fc:23:b8: 42:a7:df:19:49:c4:bf:bf:c6:b5:29:c3:09:52:05:68:12:fa: fd:0c:bf:e8:fa:cd:de:e9:b1:e8:cd:4e:84:c5:ea:f0:98:6a: 8f:71:9b:6e:26:e4:a7:d2:49:c2:62:65:66:38:d6:5e:f9:b4: 29:18:26:b5:1b:c6:ce:7e:23:67:63:10:79:c5:ff:bb:1a:35: 44:b1:29:aa:d4:20:32:26:cb:4e:36:a9:63:34:dc:f7:da:0b: 9a:22:fa:fd:8d:ad:b9:18:51:47:ef:59:32:05:e4:ec:1f:0a: 33:1e:5a:08 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICESAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlDRTkxMTAvBgNVBAUTKEQ1MEVFNjkzQ0I0ODQ0REQyRTc2MDM0QkVDQkQzNkE4 ODFDMzc4OTcwHhcNMjUwMzEwMTczNzEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTU3OS1jN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DmyzB3pqhcOf5LsSp99FVom7MOX7HrgAumyAdEO+AXkY+goEJuCRinPN4d3 1zl5oxADR0iYDvPqqZ0eDf1ewOzGIa1+z6sOqdH3cEpHTWJ+JKyTjD0cistk6lvO 7oI4f/qJ/aX9BqGlOr7s3CAVC4ah9SSA2ZJfbxCwoe67EGLFpfu0Wg/CYtk7UigQ IuyR2qqYKSrqJt8OSDhgiaOzSlSUso0XwIcP1jErAkjiyyLJwBovpFA3/pg9eSWc Ax0eQ/poqH5v4RJBapOTYwhS3iU9LTzlNfM7lOzvvlyu/ZdHMwLmpwBmeFFhO3LM X439gECto1h6/wemNQ1R4RphBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG42nlwv +tMWlJGwguUsFon8MWrMMB8GA1UdIwQYMBaAFNUO5pPLSETdLnYDS+y9NqiBw3iX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUNFOS82Q0JCODRGNDMx RjExMUU5OEE3QjkzMTdDNEY5QUUwMi8xUTdtazh0SVJOMHVkZ05MN0wwMnFJSERl SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRN21rOHRJUk4wdWRnTkw3TDAycUlIRGVKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlDRTkvNkNCQjg0RjQzMUYxMTFFOThBN0I5MzE3QzRGOUFFMDIvQUZEQTQwMDAz QUI1MTFFOUE3OUFBNDJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4Y/MA0GCSqGSIb3DQEBCwUAA4IBAQBh2jYAZsN8YRTVV54ThOUu BuR20zxb3nN9VGFeFDLtuqCItMmuqk0BfHYOC4Wfe8ans/Ix+pGd9m7vUph+N1FO K/wV6nHPebPVmktHOMZTNNJs3rL2SBUPeeZM+h3SIK9JVjq5n3sPZJWVZXsnsqnK dMPbJ3s9DVgX0+qRp1/Qhiqri0rkRpRNwexCEzj8I7hCp98ZScS/v8a1KcMJUgVo Evr9DL/o+s3e6bHozU6ExerwmGqPcZtuJuSn0knCYmVmONZe+bQpGCa1G8bOfiNn YxB5xf+7GjVEsSmq1CAyJstONqljNNz32guaIvr9ja25GFFH71kyBeTsHwozHloI -----END CERTIFICATE-----Generated at Mon Mar 2 23:08:38 2026 by rpki-client