$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/5BE1A39CDFF411EDAF183A6BC4F9AE02.roa File: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (raw, json) Hash identifier: NkxHKbtoUp0+3tPsUIQtJd1qKCp6YkrV3mW/saca7sc= Subject key identifier: 50:F0:36:7B:EF:D7:A0:25:6B:9E:E5:31:E2:F6:EF:F3:78:B0:79:3A Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 0225 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/5BE1A39CDFF411EDAF183A6BC4F9AE02.roa Signing time: Thu 05 Mar 2026 02:36:42 +0000 ROA not before: Thu 05 Mar 2026 02:36:42 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 9294 IP address blocks: 103.101.176.0/24 maxlen: 24 103.101.177.0/24 maxlen: 24 103.101.178.0/24 maxlen: 24 103.101.179.0/24 maxlen: 24 103.181.134.0/24 maxlen: 24 103.181.135.0/24 maxlen: 24 116.204.184.0/24 maxlen: 24 116.204.185.0/24 maxlen: 24 116.204.186.0/24 maxlen: 24 116.204.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Mar 5 02:36:42 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a8ec3a-61f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:95:d7:24:e5:54:01:85:f9:96:ee:2e:ee: be:76:df:a7:59:18:35:b5:64:ba:5b:b9:32:2e:93: 38:c1:c2:83:c2:d2:44:18:03:73:e9:a6:57:47:bc: 57:78:b7:db:22:9b:96:72:2b:d9:dd:34:2f:5d:cb: ec:12:ac:f6:7f:1c:9d:4d:ba:f3:85:93:33:dc:97: 28:e1:79:fc:58:0e:ef:de:a0:b3:38:0d:5a:1a:95: 29:64:f1:0e:7a:da:bd:07:79:92:b1:ac:de:8a:cd: a7:8a:1b:1c:85:a4:63:ea:21:f7:b6:10:e1:30:28: ac:3b:08:60:5f:69:57:16:55:1a:55:f5:80:ee:d0: 52:f8:86:9d:29:73:53:39:78:e8:d7:8f:28:f3:c2: f4:3c:28:52:51:ba:d4:dd:a4:92:af:1c:b2:39:c6: 2c:45:1e:7b:da:0a:d3:41:97:20:57:e5:4c:1a:c7: 64:b0:af:d8:b9:f7:3c:0e:6d:34:c5:3a:55:fd:1e: 89:29:50:1d:45:4c:4b:40:b6:47:98:34:46:bb:bb: bc:64:c8:41:a5:2d:71:10:c2:bd:36:cf:8d:8f:9a: 6d:11:f4:fe:9e:18:42:45:d3:7c:fd:03:52:06:c2: 2a:39:3b:29:40:5a:d6:ae:2b:ae:1d:80:98:54:40: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F0:36:7B:EF:D7:A0:25:6B:9E:E5:31:E2:F6:EF:F3:78:B0:79:3A X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/5BE1A39CDFF411EDAF183A6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.176.0/22 103.181.134.0/23 116.204.184.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:8c:fa:1c:4f:6f:01:4e:75:13:e4:21:be:a8:71:19:75:5c: b2:ef:87:23:64:ec:8e:4a:a2:b0:a5:b5:62:f6:d7:72:44:2f: 35:9c:d2:80:ea:ff:b8:29:8a:2e:ce:22:48:6a:7c:67:7d:72: 8d:cb:85:4c:c0:b5:d9:4e:d9:b9:bb:fa:03:76:a3:0c:09:d2: 94:23:66:8d:3f:90:c6:1e:5a:8b:7e:a2:ab:1c:11:51:cb:bc: 11:aa:ef:6d:3b:b1:aa:ee:e3:4f:61:62:01:04:ce:83:e7:34: fa:bd:53:a4:95:f6:7c:01:00:a9:5e:8e:62:27:f9:60:0c:9d: 00:54:a4:9e:ed:5f:22:0d:41:44:c3:91:fb:7d:46:ad:10:b2: 5f:36:1e:68:99:1a:64:64:99:fb:04:29:22:1e:92:b0:d5:c6: e1:4b:07:ef:79:2c:86:af:67:46:d6:19:96:79:1a:16:27:b8: 52:4b:28:b4:52:1e:41:e3:51:de:a1:b6:d0:9e:e1:c1:d7:6e: 19:da:fb:d3:54:ab:fb:d2:ac:f9:c1:e5:ee:09:18:ca:ce:f9: eb:fb:1f:3f:36:9f:6e:6c:5e:19:72:b2:ad:50:af:48:29:94: f3:55:37:a8:06:49:47:e1:95:88:76:42:24:08:d6:e1:60:0f: 0d:9f:5f:04 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjYwMzA1MDIzNjQyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4ZWMzYS02MWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfOV1yTlVAGF+ZbuLu6+dt+nWRg1tWS6W7kyLpM4wcKDwtJEGANz6aZXR7xX eLfbIpuWcivZ3TQvXcvsEqz2fxydTbrzhZMz3Jco4Xn8WA7v3qCzOA1aGpUpZPEO etq9B3mSsazeis2nihschaRj6iH3thDhMCisOwhgX2lXFlUaVfWA7tBS+IadKXNT OXjo148o88L0PChSUbrU3aSSrxyyOcYsRR572grTQZcgV+VMGsdksK/Yufc8Dm00 xTpV/R6JKVAdRUxLQLZHmDRGu7u8ZMhBpS1xEMK9Ns+Nj5ptEfT+nhhCRdN8/QNS BsIqOTspQFrWriuuHYCYVECPnQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFDwNnvv 16Ala57lMeL27/N4sHk6MB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFDNDkvN0E3RjE5NzJERkYxMTFFREIwQ0FFQjY5QzRGOUFFMDIvNUJFMUEzOUNE RkY0MTFFREFGMTgzQTZCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ2WwAwQBZ7WGAwQCdMy4MA0GCSqGSIb3DQEBCwUAA4IBAQAejPoc T28BTnUT5CG+qHEZdVyy74cjZOyOSqKwpbVi9tdyRC81nNKA6v+4KYouziJIanxn fXKNy4VMwLXZTtm5u/oDdqMMCdKUI2aNP5DGHlqLfqKrHBFRy7wRqu9tO7Gq7uNP YWIBBM6D5zT6vVOklfZ8AQCpXo5iJ/lgDJ0AVKSe7V8iDUFEw5H7fUatELJfNh5o mRpkZJn7BCkiHpKw1cbhSwfveSyGr2dG1hmWeRoWJ7hSSyi0Uh5B41HeobbQnuHB 124Z2vvTVKv70qz5weXuCRjKzvnr+x8/Np9ubF4ZcrKtUK9IKZTzVTeoBklH4ZWI dkIkCNbhYA8Nn18E -----END CERTIFICATE-----Generated at Thu Mar 26 06:42:45 2026 by rpki-client