$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa File: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (raw, json) Hash identifier: tmG9UV1j6ss0SYe2VwRFR5LxDz9mwNx2QSiZOYtwbyg= Subject key identifier: 1F:F5:3A:60:48:2C:9D:17:52:71:AC:77:BE:F7:77:72:25:3B:46:9F Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Certificate serial: 030F Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:05:51 +0000 ROA not before: Fri 19 Sep 2025 02:09:08 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134573 IP address blocks: 103.120.230.0/23 maxlen: 23 103.120.230.0/24 maxlen: 24 103.120.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE Validity Not Before: Sep 19 02:09:08 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42b9f-c753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6e:ff:e8:2e:cf:1f:9a:a9:bc:ba:3f:69:32: 7e:34:75:15:8b:36:fa:5b:04:3a:0c:f0:49:b1:a0: b5:c0:ae:5f:0f:85:7e:4b:6f:e5:28:23:cd:69:60: bd:0b:8e:97:3c:d5:e8:5d:d5:48:06:24:26:89:e1: 6c:92:48:2b:2c:87:a7:b0:33:69:0e:f6:1a:7d:cb: 56:1f:19:8a:1a:18:22:d9:f0:17:1a:39:75:8a:21: 02:68:be:68:a3:9b:8a:75:ec:67:bb:ad:b1:6d:39: 8f:80:e5:47:d1:79:2d:0c:f5:4d:2f:3d:57:2b:4f: 5b:47:83:ae:0a:a4:2a:9b:ef:12:71:24:72:1a:35: c2:c3:d9:f2:09:cf:1a:b9:66:85:71:71:6d:ef:d1: ab:e6:2c:c3:13:50:ad:53:04:51:32:58:c9:fe:a3: 2a:83:7b:8d:d2:6d:d1:47:57:34:a1:6e:8b:4e:18: 7f:45:de:08:83:16:cc:6e:43:a2:86:a4:39:9b:20: 8b:03:61:cb:9a:3e:27:46:5e:94:67:1c:1a:d2:9f: 84:8d:e6:91:56:84:44:08:76:f2:da:71:85:7c:1f: 04:79:d6:09:47:2f:8d:29:8a:98:d7:92:71:08:c4: 5b:53:aa:40:e5:88:0a:24:5f:b1:b9:94:00:15:1f: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:3A:60:48:2C:9D:17:52:71:AC:77:BE:F7:77:72:25:3B:46:9F X509v3 Authority Key Identifier: keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.230.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:ae:7a:58:6d:e1:75:3a:31:93:71:2f:66:76:0d:3f:2d:78: ab:1c:2e:34:91:31:f7:03:3c:6a:ae:ab:94:8a:06:b3:ba:9c: 4a:5e:71:4f:f1:19:3e:27:98:a6:09:31:43:a1:ae:b1:d0:3c: 15:f4:18:ca:32:cb:98:ee:a4:49:cf:4c:b5:da:c4:ef:6c:24: df:ba:dc:52:3d:35:e5:71:19:1c:57:96:99:e3:1f:1d:ab:6c: 67:47:ee:0f:cd:9d:c9:19:cd:39:1d:10:14:59:d1:8d:ac:08: a3:aa:00:21:b2:cf:9e:30:28:ea:ed:a8:72:6b:2b:1e:3c:f7: f9:38:4d:c4:ee:41:b1:4e:b8:5e:03:c6:c7:2b:17:12:bc:6b: 52:94:06:f8:b4:34:1a:6d:c4:9d:60:b2:8d:ea:67:c3:69:f1: aa:63:79:c4:41:b7:de:f1:de:74:b2:30:1b:fc:b6:36:2c:7d: 53:fa:45:74:28:65:63:db:01:d2:26:09:02:ee:c9:d9:82:95: 36:31:f2:99:e0:02:c8:83:4f:16:f6:36:e4:90:69:a8:d7:78: 75:32:a8:fb:f5:47:81:be:66:59:31:c3:e0:26:db:6a:9e:63: 0d:42:26:77:69:c8:dc:4a:77:28:3f:a9:e5:66:ef:25:b2:0f: e2:2b:ee:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJBNkQxMTAvBgNVBAUTKEZDN0IzOTRGOEY5Q0JGOUNERDIwOTNDMjcyNkRERkU5 MTNGQUE5Q0UwHhcNMjUwOTE5MDIwOTA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmI5Zi1jNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8G7/6C7PH5qpvLo/aTJ+NHUVizb6WwQ6DPBJsaC1wK5fD4V+S2/lKCPNaWC9 C46XPNXoXdVIBiQmieFskkgrLIensDNpDvYafctWHxmKGhgi2fAXGjl1iiECaL5o o5uKdexnu62xbTmPgOVH0XktDPVNLz1XK09bR4OuCqQqm+8ScSRyGjXCw9nyCc8a uWaFcXFt79Gr5izDE1CtUwRRMljJ/qMqg3uN0m3RR1c0oW6LThh/Rd4IgxbMbkOi hqQ5myCLA2HLmj4nRl6UZxwa0p+EjeaRVoRECHby2nGFfB8EedYJRy+NKYqY15Jx CMRbU6pA5YgKJF+xuZQAFR8LswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB/1OmBI LJ0XUnGsd773d3IlO0afMB8GA1UdIwQYMBaAFPx7OU+PnL+c3SCTwnJt3+kT+qnO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkE2RC83RjhENjNCNDBD Q0IxMUVEQjNDRDQ3NjhDNEY5QUUwMi9fSHM1VDQtY3Y1emRJSlBDY20zZjZSUDZx YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19IczVUNC1jdjV6ZElKUENjbTNmNlJQNnFjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDJBNkQvN0Y4RDYzQjQwQ0NCMTFFREIzQ0Q0NzY4QzRGOUFFMDIvN0IxOEM1QjQw Q0NFMTFFRDk3Qzk0MzE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3jmMA0GCSqGSIb3DQEBCwUAA4IBAQBbrnpYbeF1OjGTcS9mdg0/ LXirHC40kTH3AzxqrquUigazupxKXnFP8Rk+J5imCTFDoa6x0DwV9BjKMsuY7qRJ z0y12sTvbCTfutxSPTXlcRkcV5aZ4x8dq2xnR+4PzZ3JGc05HRAUWdGNrAijqgAh ss+eMCjq7ahyaysePPf5OE3E7kGxTrheA8bHKxcSvGtSlAb4tDQabcSdYLKN6mfD afGqY3nEQbfe8d50sjAb/LY2LH1T+kV0KGVj2wHSJgkC7snZgpU2MfKZ4ALIg08W 9jbkkGmo13h1Mqj79UeBvmZZMcPgJttqnmMNQiZ3acjcSncoP6nlZu8lsg/iK+7b -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:59 2026 by rpki-client