$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/2979BC38B09411EAA964465EC4F9AE02.roa File: 2979BC38B09411EAA964465EC4F9AE02.roa (raw, json) Hash identifier: 3TgfJcKtVv25yE8b/IOKhDazNbjHxuANTNvhbFUhyMk= Subject key identifier: 50:9B:C4:36:84:B1:97:3F:F1:5C:1D:26:1D:4A:B6:CC:79:71:D0:FA Certificate issuer: /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC Certificate serial: 097D Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/2979BC38B09411EAA964465EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:32:26 +0000 ROA not before: Wed 10 Dec 2025 19:43:32 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138035 IP address blocks: 103.120.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC Validity Not Before: Dec 10 19:43:32 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46a1a-63da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:a3:85:f1:27:17:57:98:32:58:18:85:77: 9a:e1:91:2f:34:3c:7e:7b:7f:62:f0:96:af:cb:cd: e0:8e:54:49:4d:35:68:7d:0b:bf:62:e0:4b:20:fb: 23:41:7c:5d:8f:20:93:7e:4c:56:e5:c9:b0:30:60: 32:40:17:b1:99:07:27:ef:c8:f8:7d:d1:5b:b1:6e: d3:2d:b3:28:16:bc:b9:0e:f2:c8:26:63:85:ea:cd: 64:d6:be:73:56:5c:70:36:9a:91:b5:92:49:bf:95: 62:22:18:b9:3c:2e:fb:47:4c:b6:44:79:56:5a:de: 58:c8:fb:9d:58:a7:b6:ab:04:6d:90:42:2e:40:09: 03:0b:39:ef:eb:d4:f2:54:d7:c7:b5:5e:20:75:f2: 49:75:aa:97:f9:fd:94:3b:c1:20:52:d4:ad:ea:ff: d0:4c:c1:e9:9e:66:0d:d2:99:eb:fb:55:ee:50:7a: e5:91:35:8b:e6:cb:65:76:ce:ef:2b:bd:e5:e7:ee: 9e:4b:d6:9c:d4:da:c5:f4:d4:24:17:90:7e:7c:41: 2e:f2:a5:12:5a:ca:db:dc:2c:a8:6b:a3:86:5f:2d: 24:10:55:d8:9a:1c:15:70:15:05:e0:8e:5f:f8:ef: a2:43:a3:e1:2b:2f:9b:c8:66:43:76:c0:a4:e2:74: 31:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9B:C4:36:84:B1:97:3F:F1:5C:1D:26:1D:4A:B6:CC:79:71:D0:FA X509v3 Authority Key Identifier: keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/2979BC38B09411EAA964465EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.41.0/24 Signature Algorithm: sha256WithRSAEncryption 68:69:88:84:21:22:f8:b2:93:88:84:d8:ad:0f:ad:18:dc:69: 76:91:2a:d3:c1:fe:98:d4:e5:b9:b3:cf:33:16:d6:b2:10:a3: fb:5c:10:cf:42:78:f1:ea:0a:e3:00:5a:cb:66:f9:12:3a:4b: 55:66:93:15:bf:00:95:fe:e0:16:51:1c:41:01:9d:f2:bc:51: 46:c2:93:3e:20:ae:f8:a3:51:68:55:72:70:b5:77:6c:ca:06: ce:bf:3b:fe:58:a5:1a:69:28:93:fb:9f:78:da:e6:20:4e:b2: ed:e3:14:0d:73:f9:33:0c:d0:e2:c1:87:69:30:62:50:34:83: 15:fd:1a:05:01:2b:f7:7b:ba:f5:30:d7:fd:87:1f:2a:cb:c3: 1d:f3:50:eb:6f:02:6b:61:6e:94:20:ee:15:c3:db:ad:24:84: 10:96:07:b1:d8:91:1b:31:23:5a:6d:0d:0b:f3:4e:86:a4:6c: ef:fc:6f:40:07:ae:11:56:7a:40:08:85:7a:0a:b3:e4:4e:47: f2:48:f6:b8:cb:7d:28:c1:48:8f:48:68:10:91:2e:76:8a:f7: b3:38:74:39:ee:7a:63:08:e6:d6:f9:1d:10:b6:9d:2e:d4:d4: 62:05:93:0d:a7:20:9c:df:fe:66:36:98:86:43:c7:9d:22:e0: b3:ad:90:c2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIwQUIxMTAvBgNVBAUTKDFCNTY2REVGNUY3OEUzMTlCRkMwRDE0MDBERTc1NUUy NjRBODJCQkMwHhcNMjUxMjEwMTk0MzMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmExYS02M2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNWjhfEnF1eYMlgYhXea4ZEvNDx+e39i8Javy83gjlRJTTVofQu/YuBLIPsj QXxdjyCTfkxW5cmwMGAyQBexmQcn78j4fdFbsW7TLbMoFry5DvLIJmOF6s1k1r5z VlxwNpqRtZJJv5ViIhi5PC77R0y2RHlWWt5YyPudWKe2qwRtkEIuQAkDCznv69Ty VNfHtV4gdfJJdaqX+f2UO8EgUtSt6v/QTMHpnmYN0pnr+1XuUHrlkTWL5stlds7v K73l5+6eS9ac1NrF9NQkF5B+fEEu8qUSWsrb3Cyoa6OGXy0kEFXYmhwVcBUF4I5f +O+iQ6PhKy+byGZDdsCk4nQx8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFCbxDaE sZc/8VwdJh1Ktsx5cdD6MB8GA1UdIwQYMBaAFBtWbe9feOMZv8DRQA3nVeJkqCu8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjBBQi82QkU1NTBCMEIw OTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4bV93TkZBRGVkVjRtU29L N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cxWnQ3MTk0NHhtX3dORkFEZWRWNG1Tb0s3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIwQUIvNkJFNTUwQjBCMDkzMTFFQThBRjMxNzVFQzRGOUFFMDIvMjk3OUJDMzhC MDk0MTFFQUE5NjQ0NjVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ3gpMA0GCSqGSIb3DQEBCwUAA4IBAQBoaYiEISL4spOIhNitD60Y 3Gl2kSrTwf6Y1OW5s88zFtayEKP7XBDPQnjx6grjAFrLZvkSOktVZpMVvwCV/uAW URxBAZ3yvFFGwpM+IK74o1FoVXJwtXdsygbOvzv+WKUaaSiT+5942uYgTrLt4xQN c/kzDNDiwYdpMGJQNIMV/RoFASv3e7r1MNf9hx8qy8Md81DrbwJrYW6UIO4Vw9ut JIQQlgex2JEbMSNabQ0L806GpGzv/G9AB64RVnpACIV6CrPkTkfySPa4y30owUiP SGgQkS52ivezOHQ57npjCObW+R0Qtp0u1NRiBZMNpyCc3/5mNpiGQ8edIuCzrZDC -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:05 2026 by rpki-client