$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/8405155C69EB11EF933A993CC4F9AE02.roa File: 8405155C69EB11EF933A993CC4F9AE02.roa (raw, json) Hash identifier: 6/dXduBGzp0fOt3H0jel27vj2BC5gLfjT1zUeVEO9J0= Subject key identifier: B1:80:70:17:78:C6:7D:0F:4D:90:68:88:6E:73:86:18:7F:E7:08:A2 Certificate issuer: /CN=A91E8D22/serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Certificate serial: 0225 Authority key identifier: 1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/8405155C69EB11EF933A993CC4F9AE02.roa Signing time: Sat 11 Apr 2026 03:34:33 +0000 ROA not before: Sat 11 Apr 2026 03:34:33 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 133053 IP address blocks: 103.120.219.0/24 maxlen: 24 103.251.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D22, serialNumber=1DEE17A6A3380EE488EF3B6E2125B878E6407248 Validity Not Before: Apr 11 03:34:33 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d9c149-daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:f6:46:38:42:d7:0c:1d:7c:18:8f:eb:92: 02:4b:10:87:5b:99:55:05:7c:ca:fe:5f:1a:71:db: 4b:3c:dd:8c:5b:1a:b3:b0:86:ef:9b:6e:39:d1:a4: 9a:41:f5:98:63:4f:36:77:c5:a4:02:e8:39:8d:26: ac:7b:bb:9c:4b:9c:ea:9c:ac:86:4d:60:39:39:94: 48:c2:e1:46:d3:03:57:ad:aa:f3:1c:96:22:71:ea: 1e:ec:d0:a3:35:f0:37:23:f4:e7:35:e1:26:3a:99: 6f:49:71:3f:4c:1c:f2:64:65:5d:a4:92:07:a2:88: 6b:39:d5:80:2c:b2:f7:be:cc:3e:cf:77:ff:81:9c: d6:8b:ab:6c:d5:07:c9:e5:25:55:21:db:60:a4:15: 95:eb:82:12:b0:ca:3a:76:bc:2b:0d:a3:c7:0a:2c: 9d:04:7b:65:fe:ad:f5:43:d8:97:c1:2f:a6:5a:05: 05:c9:5a:78:8f:60:a7:a2:4b:a4:e8:d7:e8:5d:1e: 58:e6:cd:03:44:a4:72:7b:02:2b:db:af:01:89:5d: 1b:0d:d5:b2:68:57:d6:8a:2a:63:cd:f7:98:58:ee: 0e:04:ec:9f:ff:2b:bb:c5:45:91:f0:53:19:8a:2b: f4:ba:83:dc:64:e7:d0:1e:ce:66:a6:a9:85:d8:bf: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:80:70:17:78:C6:7D:0F:4D:90:68:88:6E:73:86:18:7F:E7:08:A2 X509v3 Authority Key Identifier: keyid:1D:EE:17:A6:A3:38:0E:E4:88:EF:3B:6E:21:25:B8:78:E6:40:72:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/He4XpqM4DuSI7ztuISW4eOZAckg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He4XpqM4DuSI7ztuISW4eOZAckg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D22/3F7D68A8FDE511ED87841770C4F9AE02/8405155C69EB11EF933A993CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.219.0/24 103.251.171.0/24 Signature Algorithm: sha256WithRSAEncryption 57:5d:c1:f8:b2:84:22:2b:6c:84:19:ac:ef:33:06:f9:ce:10: e6:5a:22:55:e6:36:68:be:88:e1:29:e5:4a:0f:3c:6b:ba:03: 25:8d:e1:b8:7c:fd:10:5b:5e:69:ac:0a:21:99:5d:11:7c:18: c9:d3:5e:9d:7c:e8:24:5f:d2:38:64:d8:7c:e4:60:ac:0a:d6: 98:3b:1c:df:f3:b5:ec:00:a1:86:65:ee:05:80:a5:82:ee:fb: b7:b0:b2:df:54:31:d8:02:24:b4:9a:85:0f:6e:09:38:81:23: cb:12:03:62:bd:42:39:7c:34:29:de:51:84:29:f9:2d:8a:d6: 8f:31:3d:b4:bf:31:45:4a:36:bb:4e:dd:cc:68:7b:26:11:4b: a3:90:3f:7a:8a:b1:f4:95:d4:36:22:99:0d:1e:60:93:68:b4: 94:76:e0:23:eb:b4:9f:be:62:12:a2:b6:90:0f:8f:f3:83:09: 1b:35:63:ce:8b:37:66:74:fe:a0:83:e9:00:2e:e4:ee:77:1c: 87:40:3f:21:6c:71:d0:40:21:e3:9c:95:da:d5:a1:08:2b:67: 5e:1f:80:9c:26:cf:ae:89:e3:d6:47:97:97:ef:eb:1b:39:36: c2:17:16:b0:69:19:44:a3:46:06:04:be:f1:7c:8f:7e:ae:7b: 30:47:58:c9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjIxMTAvBgNVBAUTKDFERUUxN0E2QTMzODBFRTQ4OEVGM0I2RTIxMjVCODc4 RTY0MDcyNDgwHhcNMjYwNDExMDMzNDMzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ5YzE0OS1kYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYv2RjhC1wwdfBiP65ICSxCHW5lVBXzK/l8acdtLPN2MWxqzsIbvm2450aSa QfWYY082d8WkAug5jSase7ucS5zqnKyGTWA5OZRIwuFG0wNXrarzHJYiceoe7NCj NfA3I/TnNeEmOplvSXE/TBzyZGVdpJIHoohrOdWALLL3vsw+z3f/gZzWi6ts1QfJ 5SVVIdtgpBWV64ISsMo6drwrDaPHCiydBHtl/q31Q9iXwS+mWgUFyVp4j2Cnokuk 6NfoXR5Y5s0DRKRyewIr268BiV0bDdWyaFfWiipjzfeYWO4OBOyf/yu7xUWR8FMZ iiv0uoPcZOfQHs5mpqmF2L80IwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLGAcBd4 xn0PTZBoiG5zhhh/5wiiMB8GA1UdIwQYMBaAFB3uF6ajOA7kiO87biEluHjmQHJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyMi8zRjdENjhBOEZE RTUxMUVEODc4NDE3NzBDNEY5QUUwMi9IZTRYcHFNNER1U0k3enR1SVNXNGVPWkFj a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hlNFhwcU00RHVTSTd6dHVJU1c0ZU9aQWNrZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThEMjIvM0Y3RDY4QThGREU1MTFFRDg3ODQxNzcwQzRGOUFFMDIvODQwNTE1NUM2 OUVCMTFFRjkzM0E5OTNDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3jbAwQAZ/urMA0GCSqGSIb3DQEBCwUAA4IBAQBXXcH4soQiK2yE GazvMwb5zhDmWiJV5jZovojhKeVKDzxrugMljeG4fP0QW15prAohmV0RfBjJ016d fOgkX9I4ZNh85GCsCtaYOxzf87XsAKGGZe4FgKWC7vu3sLLfVDHYAiS0moUPbgk4 gSPLEgNivUI5fDQp3lGEKfktitaPMT20vzFFSja7Tt3MaHsmEUujkD96irH0ldQ2 IpkNHmCTaLSUduAj67SfvmISoraQD4/zgwkbNWPOizdmdP6gg+kALuTudxyHQD8h bHHQQCHjnJXa1aEIK2deH4CcJs+uiePWR5eX7+sbOTbCFxawaRlEo0YGBL7xfI9+ rnswR1jJ -----END CERTIFICATE-----Generated at Fri Apr 17 12:01:29 2026 by rpki-client