$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/129AA26CBD2111EBA76A3E11C4F9AE02.roa File: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (raw, json) Hash identifier: cbfqMcMwqjcXfTnCUXdYhPSWB3uKfxrHrfD55mLoBo0= Subject key identifier: 55:CB:3A:1F:FD:8D:6A:90:A4:02:2A:0B:69:1A:94:85:BD:BE:39:C7 Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 0665 Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/129AA26CBD2111EBA76A3E11C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:36:40 +0000 ROA not before: Sat 08 Nov 2025 21:43:47 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135345 IP address blocks: 103.125.148.0/24 maxlen: 24 103.125.149.0/24 maxlen: 24 103.125.150.0/24 maxlen: 24 103.125.151.0/24 maxlen: 24 2403:f640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: Nov 8 21:43:47 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a432d8-fcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:42:55:26:e3:a3:00:1e:1b:a5:11:35:50: 9f:f0:21:c1:6e:ff:e2:68:b4:d2:94:3e:16:d1:3a: 84:6d:9b:f1:d1:d6:8f:ec:15:08:b5:d3:43:b8:24: f1:3b:e6:55:52:56:27:f6:ab:1b:0b:fb:10:4d:79: 48:41:16:c9:5b:aa:39:67:75:7e:4d:13:78:2c:e5: fd:ed:71:15:ae:1e:88:f0:99:65:6b:6c:fd:7b:c6: dc:02:fb:6c:b8:ed:f9:0f:8d:5f:f2:14:fd:68:67: 3d:31:5e:7e:54:fb:01:d6:0e:a3:b5:85:64:84:9b: bd:a9:37:bc:9e:a9:44:94:3b:d0:e9:5f:c7:cd:fe: 0c:85:3d:1b:49:5e:4c:d7:e5:39:ad:3c:16:b6:68: 4b:7b:76:65:8a:b9:dc:16:e5:c1:1c:7e:fe:66:2b: 06:8b:6c:94:ff:11:cc:0a:a5:8e:d1:a9:52:d2:7f: 14:bc:d1:62:e0:b9:b7:21:7c:be:fd:7a:32:d3:98: c1:dc:90:05:c0:e0:ae:e8:8c:1c:6d:eb:44:f7:72: 5a:81:1b:95:94:53:77:91:06:2b:8f:c9:8b:b6:17: a6:0b:71:04:da:d5:b9:8b:ee:24:00:d2:77:69:bf: 6d:83:32:ff:20:18:5d:7d:03:a6:81:0f:2b:cb:c4: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CB:3A:1F:FD:8D:6A:90:A4:02:2A:0B:69:1A:94:85:BD:BE:39:C7 X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/129AA26CBD2111EBA76A3E11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.125.148.0/22 IPv6: 2403:f640::/32 Signature Algorithm: sha256WithRSAEncryption 35:86:d3:78:96:2d:af:dc:2f:8f:e5:91:bc:5c:bf:08:db:db: 37:67:22:98:5e:a8:e5:78:db:f2:95:eb:a7:66:99:bc:8b:e6: 93:fa:1a:3b:38:bd:e6:a1:86:4d:29:33:11:31:98:c6:48:4b: 88:40:ac:6f:9d:88:6a:f3:13:bc:94:be:de:20:41:d8:ab:89: ad:4a:3c:77:97:c0:b2:b4:8e:65:de:ac:f0:82:24:a1:64:69: 4e:4b:e7:e3:11:40:81:c1:dc:8d:ec:bc:7a:f4:56:79:99:df: 48:6a:b0:71:fe:ca:0e:2e:35:b9:10:af:a0:3d:45:7c:47:9f: b5:ea:67:be:7c:9a:0a:30:7d:48:da:bf:39:65:ec:28:e2:8c: 51:8f:81:04:22:e9:0c:21:37:90:75:b8:45:bb:bb:70:de:86: b7:f0:75:11:e5:5f:56:42:35:0a:7f:ec:ee:e6:ef:e4:d4:fe: 29:be:90:fb:04:3d:4b:ca:14:a2:06:6e:e1:e7:c0:c6:13:2f: b9:f7:41:20:b5:63:6e:56:93:5d:82:ec:4c:da:c9:30:7a:91: 25:2c:6b:83:ce:d9:a6:36:2e:f2:9f:c6:91:7e:75:3c:31:2f: 26:94:f9:66:d5:df:93:6a:7d:ce:2b:97:33:3b:0f:a0:12:70: 96:d7:fb:56 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjUxMTA4MjE0MzQ3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzJkOC1mY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq55CVSbjowAeG6URNVCf8CHBbv/iaLTSlD4W0TqEbZvx0daP7BUItdNDuCTx O+ZVUlYn9qsbC/sQTXlIQRbJW6o5Z3V+TRN4LOX97XEVrh6I8Jlla2z9e8bcAvts uO35D41f8hT9aGc9MV5+VPsB1g6jtYVkhJu9qTe8nqlElDvQ6V/Hzf4MhT0bSV5M 1+U5rTwWtmhLe3ZlirncFuXBHH7+ZisGi2yU/xHMCqWO0alS0n8UvNFi4Lm3IXy+ /Xoy05jB3JAFwOCu6IwcbetE93JagRuVlFN3kQYrj8mLthemC3EE2tW5i+4kANJ3 ab9tgzL/IBhdfQOmgQ8ry8RmuQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFXLOh/9 jWqQpAIqC2kalIW9vjnHMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAxQUYvOENCODU0NTZCRDFGMTFFQkJBRkQzRDEwQzRGOUFFMDIvMTI5QUEyNkNC RDIxMTFFQkE3NkEzRTExQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ32UMA0EAgACMAcDBQAkA/ZAMA0GCSqGSIb3DQEBCwUAA4IBAQA1 htN4li2v3C+P5ZG8XL8I29s3ZyKYXqjleNvyleunZpm8i+aT+ho7OL3moYZNKTMR MZjGSEuIQKxvnYhq8xO8lL7eIEHYq4mtSjx3l8CytI5l3qzwgiShZGlOS+fjEUCB wdyN7Lx69FZ5md9IarBx/soOLjW5EK+gPUV8R5+16me+fJoKMH1I2r85Zewo4oxR j4EEIukMITeQdbhFu7tw3oa38HUR5V9WQjUKf+zu5u/k1P4pvpD7BD1LyhSiBm7h 58DGEy+590EgtWNuVpNdguxM2skwepElLGuDztmmNi7yn8aRfnU8MS8mlPlm1d+T an3OK5czOw+gEnCW1/tW -----END CERTIFICATE-----Generated at Mon Mar 2 05:39:23 2026 by rpki-client