$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa File: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (raw, json) Hash identifier: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI= Subject key identifier: E9:FF:F0:A0:F9:33:25:63:49:CC:C0:F7:85:B2:46:BD:2F:9E:36:C6 Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D02 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:58:31 +0000 ROA not before: Mon 12 Jan 2026 18:15:02 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132130 IP address blocks: 103.126.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3330 (0xd02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Jan 12 18:15:02 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46227-631e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:98:46:f7:61:f2:f0:35:5f:95:b1:26:d4: 1f:bb:b2:a0:f9:84:77:c3:82:d3:13:fa:4b:24:5d: 0b:a3:1e:a0:e6:9f:b6:17:a0:5a:64:e1:d9:22:3c: 24:79:39:1d:ff:7f:6f:f0:33:c7:10:df:7f:23:e4: 7a:9b:66:31:7d:dd:16:50:cc:20:74:49:02:cc:0a: 8a:5a:f5:15:32:29:b7:15:07:93:1e:90:e5:d1:34: 14:bf:7a:b8:52:50:c2:b4:21:a8:bd:72:10:7d:13: c5:64:98:4c:17:ad:43:f9:ad:ad:1f:70:f9:5b:4c: 8c:d9:54:26:58:25:15:30:cb:9d:75:96:88:8c:cd: db:49:05:cf:da:f2:90:31:1f:b5:2c:d0:3f:af:ef: 18:ff:98:14:03:75:41:39:7a:2c:0b:fb:bf:2c:6d: 81:3f:31:a8:45:30:99:18:a2:4a:d3:8c:14:86:b7: d5:43:a4:10:0c:36:a4:c0:90:9f:a6:ac:7e:70:eb: 10:a8:ca:4e:02:64:18:00:43:4a:c5:0f:3f:f7:ef: b5:3b:07:a0:cc:9c:b9:2a:29:f0:ec:5f:9c:eb:77: af:61:44:d9:4a:c6:50:e6:f6:a3:83:2a:00:f5:f0: 47:f9:f3:8f:ab:b4:ee:b3:a0:46:4e:b8:94:48:cb: fa:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FF:F0:A0:F9:33:25:63:49:CC:C0:F7:85:B2:46:BD:2F:9E:36:C6 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/E4B59AA2FF8311E9B1B99628C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.126.220.0/22 Signature Algorithm: sha256WithRSAEncryption 70:fa:7b:ce:e4:c7:e4:22:f8:dd:76:42:f5:0d:f0:16:70:77: 3e:3f:14:15:04:83:c1:af:ba:51:ab:22:4d:de:8b:29:d5:b0: db:d0:de:98:2c:cd:a7:a2:74:f6:9a:9a:24:5a:72:de:f3:65: 8b:4c:4b:4b:e5:60:0f:1f:6e:b7:15:0a:67:98:35:b8:ca:a0: 97:f2:23:02:4f:8f:e2:b2:d9:95:bd:fd:3d:ff:f3:e0:2a:90: ae:c9:18:a4:17:73:d2:ba:aa:50:8a:24:60:37:57:1b:60:1b: fe:95:02:f9:31:91:f3:34:fd:ea:aa:8a:c1:e7:d3:f9:a8:fc: d0:d1:46:95:bd:9a:3d:1c:02:c6:12:fc:19:42:e5:02:12:81: b7:f5:4b:64:b7:d3:ab:16:42:2a:12:57:06:2b:ec:be:5e:18: 81:55:a4:cd:ae:50:31:6c:e2:a6:61:27:98:54:f5:2b:5f:c0: 51:65:ee:38:bc:0f:94:e3:1a:13:82:bb:cb:71:c0:0f:bd:94: 2b:82:db:c9:9b:1c:06:6a:6c:e4:7e:e1:0c:74:16:e5:3a:e0: 39:87:a0:b9:fc:37:55:73:f0:23:a4:c0:17:c7:88:31:d7:0a: 89:c2:7b:8e:15:8b:cb:af:2a:02:e6:c7:5b:9d:f3:8c:dd:b1: ab:d6:b6:d4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwMTEyMTgxNTAyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjIyNy02MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQKYRvdh8vA1X5WxJtQfu7Kg+YR3w4LTE/pLJF0Lox6g5p+2F6BaZOHZIjwk eTkd/39v8DPHEN9/I+R6m2Yxfd0WUMwgdEkCzAqKWvUVMim3FQeTHpDl0TQUv3q4 UlDCtCGovXIQfRPFZJhMF61D+a2tH3D5W0yM2VQmWCUVMMuddZaIjM3bSQXP2vKQ MR+1LNA/r+8Y/5gUA3VBOXosC/u/LG2BPzGoRTCZGKJK04wUhrfVQ6QQDDakwJCf pqx+cOsQqMpOAmQYAENKxQ8/9++1OwegzJy5Kinw7F+c63evYUTZSsZQ5vajgyoA 9fBH+fOPq7Tus6BGTriUSMv6tQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOn/8KD5 MyVjSczA94WyRr0vnjbGMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJDRDkvMTdCNzhGMTZGRjgyMTFFOUI0MDJGQzI0QzRGOUFFMDIvRTRCNTlBQTJG RjgzMTFFOUIxQjk5NjI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ37cMA0GCSqGSIb3DQEBCwUAA4IBAQBw+nvO5MfkIvjddkL1DfAW cHc+PxQVBIPBr7pRqyJN3osp1bDb0N6YLM2nonT2mpokWnLe82WLTEtL5WAPH263 FQpnmDW4yqCX8iMCT4/istmVvf09//PgKpCuyRikF3PSuqpQiiRgN1cbYBv+lQL5 MZHzNP3qqorB59P5qPzQ0UaVvZo9HALGEvwZQuUCEoG39Utkt9OrFkIqElcGK+y+ XhiBVaTNrlAxbOKmYSeYVPUrX8BRZe44vA+U4xoTgrvLccAPvZQrgtvJmxwGamzk fuEMdBblOuA5h6C5/DdVc/AjpMAXx4gx1wqJwnuOFYvLryoC5sdbnfOM3bGr1rbU -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:15 2026 by rpki-client