$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa File: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (raw, json) Hash identifier: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q= Subject key identifier: 40:9E:72:6A:54:5B:09:25:9E:86:D2:7E:54:23:40:F2:05:26:B1:F1 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0CA9 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:42:05 +0000 ROA not before: Wed 31 Dec 2025 19:15:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138437 IP address blocks: 103.125.120.0/22 maxlen: 24 2403:f340::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Dec 31 19:15:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4503c-e597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:6e:b5:7c:48:36:e4:4c:3a:d0:aa:a4:62: d9:a2:4f:64:65:e4:25:c1:a6:20:e2:f4:b7:7e:ab: 4a:ef:a0:ae:bb:35:18:42:46:c8:8e:aa:27:46:ce: 18:bc:0d:d1:67:41:4e:93:b7:a5:f6:72:13:8f:c9: f7:7d:07:a2:c4:3d:98:1b:5e:bc:f0:8e:7a:20:55: 49:ad:fd:db:bb:2d:ba:67:c3:bf:3d:8b:26:ef:ac: 0a:d1:8c:74:7d:1c:b5:78:ba:93:e3:f0:72:95:6d: 6a:67:ff:99:1f:6e:06:62:59:76:24:c8:e5:a1:7c: 96:fd:1a:af:97:b4:dc:4c:de:db:07:b6:27:1e:60: f2:ef:24:48:b5:23:05:72:84:f9:d0:30:e7:1a:cf: 79:82:63:29:b1:0c:0b:ad:36:6b:f6:52:6c:71:1a: 80:a0:be:7c:b7:ac:3d:a0:70:83:6c:df:53:c2:3d: 4e:b7:d8:52:39:3e:6e:83:dd:6d:42:12:00:47:f9: b4:c8:fa:bf:76:83:30:0f:14:f5:4c:17:e8:57:a4: 8a:9b:bc:ce:e2:7c:2f:1c:31:44:ab:b7:fe:6d:85: 6f:fd:65:99:9b:f3:d3:7c:5e:89:c5:79:e2:cd:53: 0c:3f:34:29:13:5d:2c:82:49:6a:78:d1:34:2a:22: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9E:72:6A:54:5B:09:25:9E:86:D2:7E:54:23:40:F2:05:26:B1:F1 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/5A0FAE220F7011EAB8E21167C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.125.120.0/22 IPv6: 2403:f340::/32 Signature Algorithm: sha256WithRSAEncryption 51:6b:08:71:5d:3d:2b:67:3b:ea:b2:9b:3a:76:36:92:dd:1c: 1f:2c:d4:c0:cd:c6:0f:c8:28:0f:c3:00:99:31:98:d9:cf:2f: 3c:ad:4b:21:42:72:0c:27:6c:03:46:3d:36:ab:99:ae:3a:0c: cb:77:d0:ed:db:2b:ea:1b:fb:5a:71:bf:dd:00:23:17:65:9c: 8e:98:53:79:d8:3e:3d:31:80:15:a8:53:bb:2f:89:e8:1f:40: c9:db:6f:58:6a:8b:60:24:ca:65:a6:04:07:ef:99:1f:f2:ef: 20:72:a7:0e:ce:2e:dd:e6:d4:7b:48:5d:12:5a:d6:27:00:16: 17:d6:f0:54:5d:ed:5d:f3:c4:61:17:c8:68:5e:22:31:3d:48: 2f:e0:12:e7:a0:d2:e5:dd:31:9b:dc:0a:3a:52:08:47:2c:ae: 7c:b2:e1:e0:21:18:2a:68:cb:a2:7b:89:94:e9:1a:4d:d5:d0: f5:46:09:98:8a:78:a0:1a:02:b6:cd:a0:22:65:8c:7b:f5:21: b3:cf:ce:43:bc:04:59:9a:16:13:44:99:c0:32:44:ae:aa:55: 48:92:23:a3:51:a0:df:42:9b:ad:43:f3:aa:06:8c:96:c9:5b: 44:ef:2b:37:8b:1e:21:ad:6d:d2:48:e4:73:5e:1b:5e:9d:cb: f1:10:33:0a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjUxMjMxMTkxNTEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTAzYy1lNTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwodutXxINuRMOtCqpGLZok9kZeQlwaYg4vS3fqtK76CuuzUYQkbIjqonRs4Y vA3RZ0FOk7el9nITj8n3fQeixD2YG1688I56IFVJrf3buy26Z8O/PYsm76wK0Yx0 fRy1eLqT4/BylW1qZ/+ZH24GYll2JMjloXyW/Rqvl7TcTN7bB7YnHmDy7yRItSMF coT50DDnGs95gmMpsQwLrTZr9lJscRqAoL58t6w9oHCDbN9Twj1Ot9hSOT5ug91t QhIAR/m0yPq/doMwDxT1TBfoV6SKm7zO4nwvHDFEq7f+bYVv/WWZm/PTfF6JxXni zVMMPzQpE10sgklqeNE0KiIzmQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFECecmpU WwklnobSflQjQPIFJrHxMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjk3REIvNEU0MTBBQ0UwRjZGMTFFQUFCMEFEQjY0QzRGOUFFMDIvNUEwRkFFMjIw RjcwMTFFQUI4RTIxMTY3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ314MA0EAgACMAcDBQAkA/NAMA0GCSqGSIb3DQEBCwUAA4IBAQBR awhxXT0rZzvqsps6djaS3RwfLNTAzcYPyCgPwwCZMZjZzy88rUshQnIMJ2wDRj02 q5muOgzLd9Dt2yvqG/tacb/dACMXZZyOmFN52D49MYAVqFO7L4noH0DJ229Yaotg JMplpgQH75kf8u8gcqcOzi7d5tR7SF0SWtYnABYX1vBUXe1d88RhF8hoXiIxPUgv 4BLnoNLl3TGb3Ao6UghHLK58suHgIRgqaMuie4mU6RpN1dD1RgmYinigGgK2zaAi ZYx79SGzz85DvARZmhYTRJnAMkSuqlVIkiOjUaDfQputQ/OqBoyWyVtE7ys3ix4h rW3SSORzXhtencvxEDMK -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:21 2026 by rpki-client