$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/949A543291B011EDA9CB747CC4F9AE02.roa File: 949A543291B011EDA9CB747CC4F9AE02.roa (raw, json) Hash identifier: PkOsF2hTQSh3buTiKCZldxs2u/9datFbcXQ9jZ+jT/0= Subject key identifier: 5B:DE:B8:97:E9:87:10:FF:E5:CF:70:66:43:B3:D2:FA:55:D3:86:9A Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Certificate serial: 025C Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/949A543291B011EDA9CB747CC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:08:10 +0000 ROA not before: Thu 01 Jan 2026 02:21:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150423 IP address blocks: 103.38.250.0/23 maxlen: 24 2001:df1:88c0::/48 maxlen: 48 2401:f2e0::/40 maxlen: 40 2401:f2e0:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D36, serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4 Validity Not Before: Jan 1 02:21:24 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4100a-5bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:f3:d1:22:85:fd:06:5d:f2:c0:65:bb:31: c8:cf:68:83:b2:e0:03:31:e9:c5:64:69:20:a9:5e: 2d:67:5d:1a:9a:b7:c6:3e:38:8c:36:4b:a0:03:1e: db:1b:8c:15:b0:f5:15:56:c0:81:e5:a5:91:fb:a8: 66:11:35:6f:52:cf:ce:a0:a7:18:b7:23:5b:72:1a: 5d:bf:5c:86:84:4f:b1:4b:bd:52:29:7d:2a:90:f6: 48:26:80:e5:10:b0:9e:ce:91:60:f6:a0:7c:f9:a6: 46:1c:b3:78:12:29:e6:3f:64:de:eb:e1:26:ce:2f: 3a:47:9d:5f:ee:9e:ae:59:ad:82:61:c1:7b:79:b5: 96:b8:02:3f:3b:c7:4e:81:a3:ad:27:ae:ee:b4:ff: 3f:5c:9f:60:d1:06:6a:2e:af:2d:e6:f9:26:3f:a3: 6b:7c:0a:69:68:0f:a8:6a:51:8c:c4:26:80:6c:7e: 15:83:7c:50:44:81:90:1b:ed:6e:40:ef:15:24:dc: 73:52:ac:9a:f4:11:5c:1a:41:9f:0c:5d:45:33:dc: 51:15:4b:c3:75:5f:a5:e9:a1:32:cb:2a:4f:6e:c5: 50:dd:29:7d:fe:e5:cc:69:3e:87:0a:fa:02:a4:41: 7c:84:f8:70:f9:71:9d:bf:a7:92:55:28:16:80:c0: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DE:B8:97:E9:87:10:FF:E5:CF:70:66:43:B3:D2:FA:55:D3:86:9A X509v3 Authority Key Identifier: keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/949A543291B011EDA9CB747CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.38.250.0/23 IPv6: 2001:df1:88c0::/48 2401:f2e0::/39 Signature Algorithm: sha256WithRSAEncryption 33:9a:af:b8:1a:de:58:4e:3a:d9:6c:75:14:ec:ee:8d:2b:68: 32:a5:f3:33:48:52:5c:ed:5f:f0:0f:b1:ee:bb:2c:74:9a:05: 28:bf:59:22:a4:f8:85:c4:9d:f9:31:54:e9:1e:c3:46:3a:42: b4:11:cf:4b:01:cb:22:44:0a:33:90:52:3d:43:04:25:8a:a9: 2a:e2:2c:06:c4:01:1d:dd:2c:06:91:20:b0:68:bb:df:40:89: fc:38:12:6d:f2:32:a9:8d:b3:94:47:1f:87:87:40:df:72:c2: dd:a9:33:17:b9:a2:52:5c:44:d0:ef:fa:59:b9:c0:73:71:83: 31:01:32:99:45:a1:b8:2b:ab:dd:78:40:11:c2:5f:4e:39:06: 8f:db:3b:a5:b4:30:a7:d5:d5:6b:1c:28:ff:80:92:5c:9f:11: e2:aa:f8:51:94:12:5c:78:7a:f7:8f:9b:70:be:af:11:02:64: 45:ce:58:2d:5e:6b:56:5e:bd:63:fb:aa:ec:00:7d:e3:83:ea: dd:d4:b6:3c:5c:02:f1:19:a0:ef:c0:c1:12:77:2c:c6:df:6b: 95:db:01:74:fc:ac:ab:1e:9f:6d:9e:64:64:ae:98:31:ac:b9: ff:b5:d7:30:39:bc:eb:47:01:22:e0:d8:a1:1c:fb:68:42:f2: 89:54:a4:20 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFEMzYxMTAvBgNVBAUTKEMwQUVGNjI1QUY5RDUwNEFFODQ3RjY5MjNEQTg5MTA2 OUM5MDAzRjQwHhcNMjYwMTAxMDIyMTI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTAwYS01YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApifz0SKF/QZd8sBluzHIz2iDsuADMenFZGkgqV4tZ10amrfGPjiMNkugAx7b G4wVsPUVVsCB5aWR+6hmETVvUs/OoKcYtyNbchpdv1yGhE+xS71SKX0qkPZIJoDl ELCezpFg9qB8+aZGHLN4EinmP2Te6+Emzi86R51f7p6uWa2CYcF7ebWWuAI/O8dO gaOtJ67utP8/XJ9g0QZqLq8t5vkmP6NrfAppaA+oalGMxCaAbH4Vg3xQRIGQG+1u QO8VJNxzUqya9BFcGkGfDF1FM9xRFUvDdV+l6aEyyypPbsVQ3Sl9/uXMaT6HCvoC pEF8hPhw+XGdv6eSVSgWgMArrwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFFveuJfp hxD/5c9wZkOz0vpV04aaMB8GA1UdIwQYMBaAFMCu9iWvnVBK6Ef2kj2okQackAP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUQzNi9GQzEzQTNFNDkx QUExMUVEODBDMTdBNUVDNEY5QUUwMi93SzcySmEtZFVFcm9SX2FTUGFpUkJweVFB X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTFEMzYvRkMxM0EzRTQ5MUFBMTFFRDgwQzE3QTVFQzRGOUFFMDIvOTQ5QTU0MzI5 MUIwMTFFREE5Q0I3NDdDQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM BAIAATAGAwQBZyb6MBcEAgACMBEDBwAgAQ3xiMADBgEkAfLgADANBgkqhkiG9w0B AQsFAAOCAQEAM5qvuBreWE462Wx1FOzujStoMqXzM0hSXO1f8A+x7rssdJoFKL9Z IqT4hcSd+TFU6R7DRjpCtBHPSwHLIkQKM5BSPUMEJYqpKuIsBsQBHd0sBpEgsGi7 30CJ/DgSbfIyqY2zlEcfh4dA33LC3akzF7miUlxE0O/6WbnAc3GDMQEymUWhuCur 3XhAEcJfTjkGj9s7pbQwp9XVaxwo/4CSXJ8R4qr4UZQSXHh694+bcL6vEQJkRc5Y LV5rVl69Y/uq7AB944Pq3dS2PFwC8Rmg78DBEncsxt9rldsBdPysqx6fbZ5kZK6Y May5/7XXMDm860cBIuDYoRz7aELyiVSkIA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:47 2026 by rpki-client