$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/AD46C158EDA911EA977E1C36C4F9AE02.roa File: AD46C158EDA911EA977E1C36C4F9AE02.roa (raw, json) Hash identifier: 2Sypc2mrayj07nSA2R63Ko2GoXx3vyD4TE8lcoXnaoI= Subject key identifier: DC:3E:9C:12:B0:9F:27:89:4F:07:6A:76:36:9A:E7:AF:34:51:8A:74 Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Certificate serial: 0883 Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/AD46C158EDA911EA977E1C36C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:00:36 +0000 ROA not before: Sat 02 Aug 2025 17:27:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135553 IP address blocks: 103.65.188.0/22 maxlen: 24 202.3.75.0/24 maxlen: 24 203.20.63.0/24 maxlen: 24 203.28.143.0/24 maxlen: 24 203.34.154.0/24 maxlen: 24 2405:d680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1 Validity Not Before: Aug 2 17:27:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a48cd3-0782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:f4:12:79:29:89:42:a6:31:45:3e:3f:3f: 9a:14:70:f3:6e:e9:61:06:ee:4f:d2:52:71:ec:5a: 04:45:ad:1e:1e:9e:9b:d8:f5:51:b3:df:47:83:cf: f3:50:6e:28:a4:d2:1d:d6:61:f3:41:12:45:0a:00: ba:eb:c7:df:d1:9d:37:e3:50:95:f2:16:de:ce:15: 72:fe:db:1d:b2:3c:6d:c7:9c:ab:6b:2a:56:01:b0: 2b:5b:f1:f1:6b:f9:ad:99:62:56:ec:fb:03:89:3d: 73:c9:6d:22:cb:1c:7e:45:b0:c2:b4:eb:05:34:33: 50:cd:37:f1:1a:f4:f1:22:4f:4d:e3:d7:0c:a8:09: 85:a6:05:73:e6:58:82:09:28:ae:0b:2e:2e:e7:0e: 79:ae:00:1c:f0:26:c4:9c:e1:f1:de:46:4f:0b:0b: 2f:ab:f4:ca:54:db:46:89:21:f3:f6:2b:98:c8:85: 71:03:13:0a:27:0b:88:67:6f:06:37:59:11:d5:d7: 8a:9f:6f:29:3e:95:7a:7d:e2:1c:5e:eb:54:3d:46: b7:b5:98:49:5d:6b:8d:5a:f6:2d:87:15:dd:a8:3c: 2c:04:c6:43:2a:52:e6:d5:2c:05:b5:89:af:32:8f: 66:37:da:49:3b:00:ed:6d:cd:b1:b1:52:38:e5:73: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3E:9C:12:B0:9F:27:89:4F:07:6A:76:36:9A:E7:AF:34:51:8A:74 X509v3 Authority Key Identifier: keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/AD46C158EDA911EA977E1C36C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.65.188.0/22 202.3.75.0/24 203.20.63.0/24 203.28.143.0/24 203.34.154.0/24 IPv6: 2405:d680::/32 Signature Algorithm: sha256WithRSAEncryption 00:48:38:43:3f:54:76:b9:15:db:34:d5:6a:e4:89:d1:79:07: 2d:ee:4d:03:be:b6:23:4e:f2:81:ea:d0:57:4f:c9:d2:07:d4: dc:de:28:fd:d4:fd:5c:4c:02:62:1a:5b:0d:64:5d:a0:42:cf: bd:42:81:fb:e9:06:d9:40:c3:68:83:90:17:9e:34:4c:f9:bc: 5d:d5:3d:90:01:46:67:2b:24:ac:51:fc:ab:4f:a8:96:00:66: 8f:f9:ec:d2:63:2e:20:51:20:93:dd:24:68:60:c7:63:0b:a7: 98:11:7a:3f:74:40:2f:48:28:87:b4:b9:f6:8c:6a:a6:d8:fe: 41:0c:80:59:32:96:e9:0c:50:0d:ba:e6:f8:fa:7b:7a:b7:39: 54:ff:b3:91:ce:70:f5:bb:60:3e:21:e4:f0:89:29:a2:2b:f2: b2:8a:3c:c3:00:48:02:12:88:2c:67:d3:1e:39:95:2c:d4:01: 54:c6:b4:eb:63:91:6d:d8:91:8a:22:2b:64:e9:97:eb:7e:05: 62:54:7e:bf:38:fb:6e:0c:7a:26:fe:9d:a9:fe:45:0e:96:0a: 62:24:6d:ac:9a:c3:ee:96:07:dd:1e:03:b4:d7:11:ab:84:d1: ef:3b:15:9b:7c:fd:6f:cd:d9:45:d6:6e:fb:47:31:28:2c:6f: 58:5e:be:09 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAxMTkxMTAvBgNVBAUTKDlBNDQwMzA0MDNENTBCNzFCOTk4NDYzQjNBRTU2ODQz QjkyNTk1RTEwHhcNMjUwODAyMTcyNzA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGNkMy0wNzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFX0EnkpiUKmMUU+Pz+aFHDzbulhBu5P0lJx7FoERa0eHp6b2PVRs99Hg8/z UG4opNId1mHzQRJFCgC668ff0Z0341CV8hbezhVy/tsdsjxtx5yraypWAbArW/Hx a/mtmWJW7PsDiT1zyW0iyxx+RbDCtOsFNDNQzTfxGvTxIk9N49cMqAmFpgVz5liC CSiuCy4u5w55rgAc8CbEnOHx3kZPCwsvq/TKVNtGiSHz9iuYyIVxAxMKJwuIZ28G N1kR1deKn28pPpV6feIcXutUPUa3tZhJXWuNWvYthxXdqDwsBMZDKlLm1SwFtYmv Mo9mN9pJOwDtbc2xsVI45XM4+QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFNw+nBKw nyeJTwdqdjaa5680UYp0MB8GA1UdIwQYMBaAFJpEAwQD1QtxuZhGOzrlaEO5JZXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDExOS9FRUI3MUJFMjEz RjMxMUU5ODgyRjlCNjdDNEY5QUUwMi9ta1FEQkFQVkMzRzVtRVk3T3VWb1E3a2xs ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rUURCQVBWQzNHNW1FWTdPdVZvUTdrbGxlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAxMTkvRUVCNzFCRTIxM0YzMTFFOTg4MkY5QjY3QzRGOUFFMDIvQUQ0NkMxNThF REE5MTFFQTk3N0UxQzM2QzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZ0G8AwQAygNLAwQAyxQ/AwQAyxyPAwQAyyKaMA0EAgACMAcDBQAk BdaAMA0GCSqGSIb3DQEBCwUAA4IBAQAASDhDP1R2uRXbNNVq5InReQct7k0DvrYj TvKB6tBXT8nSB9Tc3ij91P1cTAJiGlsNZF2gQs+9QoH76QbZQMNog5AXnjRM+bxd 1T2QAUZnKySsUfyrT6iWAGaP+ezSYy4gUSCT3SRoYMdjC6eYEXo/dEAvSCiHtLn2 jGqm2P5BDIBZMpbpDFANuub4+nt6tzlU/7ORznD1u2A+IeTwiSmiK/KyijzDAEgC EogsZ9MeOZUs1AFUxrTrY5Ft2JGKIitk6ZfrfgViVH6/OPtuDHom/p2p/kUOlgpi JG2smsPulgfdHgO01xGrhNHvOxWbfP1vzdlF1m77RzEoLG9YXr4J -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:24 2026 by rpki-client