$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa File: 1BB9CAB6578011E99E80631AC4F9AE02.roa (raw, json) Hash identifier: R10os2GVAU1pg56KEoXBll908hbE1lHWdHzq1cEqVa8= Subject key identifier: D8:6F:38:99:C6:DC:2C:6A:31:82:26:E3:60:8E:6F:49:A3:FD:E3:A9 Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 1058 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:35:40 +0000 ROA not before: Sat 06 Sep 2025 17:57:39 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134595 IP address blocks: 103.121.12.0/24 maxlen: 24 103.121.13.0/24 maxlen: 24 103.121.14.0/24 maxlen: 24 103.121.15.0/24 maxlen: 24 2403:6240::/32 maxlen: 32 2403:6240::/36 maxlen: 36 2403:6240:1000::/36 maxlen: 36 2403:6240:2000::/36 maxlen: 36 2403:6240:3000::/36 maxlen: 36 2403:6240:4000::/36 maxlen: 36 2403:6240:5000::/36 maxlen: 36 2403:6240:6000::/36 maxlen: 36 2403:6240:7000::/36 maxlen: 36 2403:6240:8000::/36 maxlen: 36 2403:6240:9000::/36 maxlen: 36 2403:6240:a000::/36 maxlen: 36 2403:6240:b000::/36 maxlen: 36 2403:6240:c000::/36 maxlen: 36 2403:6240:d000::/36 maxlen: 36 2403:6240:e000::/36 maxlen: 36 2403:6240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 17:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4184 (0x1058) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Sep 6 17:57:39 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4248c-89cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:b2:a8:88:1e:cc:88:66:db:ad:a0:59:75: 33:4d:09:b3:b2:d4:bb:80:ef:bf:a3:00:85:1f:27: e2:b0:80:6e:e0:25:b1:ab:42:50:c9:d1:c9:a8:9f: 1d:83:19:ab:55:c4:cf:b9:97:52:8b:92:82:28:db: 07:d5:2f:c2:47:f1:49:d1:d9:16:d0:78:fa:5b:5c: e0:3f:b6:07:b6:ae:42:25:f4:16:ac:76:93:c6:aa: 0a:5f:51:a3:76:54:77:64:36:6f:ba:23:33:fa:93: 91:f5:a5:bb:00:01:f3:18:ea:e7:6c:35:98:12:1d: 70:b7:d1:11:36:d8:7b:5f:6e:cd:3d:f5:3f:ee:fb: b8:80:4d:3f:bb:7b:d6:b0:c2:c7:43:ff:e0:84:d1: 17:0e:70:f2:94:5f:51:26:22:5f:ba:2c:34:b4:17: cf:e9:8f:52:62:9d:fd:e4:81:c8:6f:a5:ff:89:67: 3e:0d:73:fb:4e:6f:3e:1e:ce:cb:24:f1:8f:ed:e9: e4:82:20:7b:4e:6f:6c:8d:31:e4:dd:37:b0:f5:4f: 9a:d9:17:b2:7a:06:3b:51:f7:b7:18:77:05:43:ef: 4c:e7:bc:a3:e0:41:78:d7:9b:53:b2:13:2a:66:a8: 74:ad:30:bd:f2:2e:dc:64:6a:0a:f2:f2:c0:d5:65: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:38:99:C6:DC:2C:6A:31:82:26:E3:60:8E:6F:49:A3:FD:E3:A9 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.12.0/22 IPv6: 2403:6240::/32 Signature Algorithm: sha256WithRSAEncryption 71:6f:38:37:7a:48:9f:91:a3:29:ca:06:38:6f:00:73:61:b9: 13:79:d7:e6:ff:e6:d1:ba:d2:ff:2d:f3:fe:52:53:a0:d0:ad: 99:59:81:8f:8c:3e:50:f6:4c:ea:0d:e3:56:8e:b4:3e:1e:19: 00:43:50:41:bc:99:bf:1e:af:f1:1e:70:5d:a8:80:25:f0:01: 2c:14:21:db:8b:e6:d8:bf:b2:c8:53:30:0b:4f:12:a4:9a:42: f4:d6:ef:f2:90:7d:3e:3d:6d:ba:b8:63:6f:06:1c:0c:92:bf: ce:5b:48:d1:2d:f1:aa:b7:57:3a:e5:a9:22:fb:a7:6c:52:ab: 77:49:4a:00:cb:7f:30:d3:80:8a:ad:d5:63:a2:a9:80:0f:7b: 81:c5:1a:0a:a3:b1:cd:52:71:81:6a:a4:1d:05:29:c4:3d:32: d6:25:44:95:78:7e:1f:d2:0c:c4:6a:61:3e:77:eb:14:a8:0b: 01:12:47:cb:00:09:cb:d5:ba:4f:c2:a4:eb:b8:49:c6:c4:9f: 3c:97:a2:0a:d5:09:aa:a6:37:b1:c6:6a:8b:c3:1a:69:4d:bd: 6f:27:dd:c9:39:d7:e4:b7:c9:9d:3b:d2:0d:e3:91:76:4a:be: ba:22:e7:05:7b:ac:f1:ee:8f:ba:48:bf:1a:39:2d:4d:6c:98: 79:c2:93:31 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICEFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwOTA2MTc1NzM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjQ4Yy04OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgayqIgezIhm262gWXUzTQmzstS7gO+/owCFHyfisIBu4CWxq0JQydHJqJ8d gxmrVcTPuZdSi5KCKNsH1S/CR/FJ0dkW0Hj6W1zgP7YHtq5CJfQWrHaTxqoKX1Gj dlR3ZDZvuiMz+pOR9aW7AAHzGOrnbDWYEh1wt9ERNth7X27NPfU/7vu4gE0/u3vW sMLHQ//ghNEXDnDylF9RJiJfuiw0tBfP6Y9SYp395IHIb6X/iWc+DXP7Tm8+Hs7L JPGP7enkgiB7Tm9sjTHk3Tew9U+a2ReyegY7Ufe3GHcFQ+9M57yj4EF415tTshMq Zqh0rTC98i7cZGoK8vLA1WVxgwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNhvOJnG 3CxqMYIm42COb0mj/eOpMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk2QTcvMjZFNzQ5OTY1NzdGMTFFOThFOTBDQTE4QzRGOUFFMDIvMUJCOUNBQjY1 NzgwMTFFOTlFODA2MzFBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3kMMA0EAgACMAcDBQAkA2JAMA0GCSqGSIb3DQEBCwUAA4IBAQBx bzg3ekifkaMpygY4bwBzYbkTedfm/+bRutL/LfP+UlOg0K2ZWYGPjD5Q9kzqDeNW jrQ+HhkAQ1BBvJm/Hq/xHnBdqIAl8AEsFCHbi+bYv7LIUzALTxKkmkL01u/ykH0+ PW26uGNvBhwMkr/OW0jRLfGqt1c65aki+6dsUqt3SUoAy38w04CKrdVjoqmAD3uB xRoKo7HNUnGBaqQdBSnEPTLWJUSVeH4f0gzEamE+d+sUqAsBEkfLAAnL1bpPwqTr uEnGxJ88l6IK1QmqpjexxmqLwxppTb1vJ93JOdfkt8mdO9IN45F2Sr66IucFe6zx 7o+6SL8aOS1NbJh5wpMx -----END CERTIFICATE-----Generated at Tue Mar 3 00:59:03 2026 by rpki-client