$ rpki-client -vvf rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/4154E51AC91311EBA6226F45C4F9AE02.roa File: 4154E51AC91311EBA6226F45C4F9AE02.roa (raw, json) Hash identifier: pILIYLSoyXCPBfvCRHzHdNoR3Vcxlvl1vIwUNhIpUCE= Subject key identifier: 9B:3B:23:43:5F:8B:67:A2:92:DD:0D:A2:1A:94:1E:4A:22:B9:E4:A8 Certificate issuer: /CN=A9120FD4/serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Certificate serial: 0D3F Authority key identifier: 62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/4154E51AC91311EBA6226F45C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:52:15 +0000 ROA not before: Thu 18 Dec 2025 18:15:37 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58768 IP address blocks: 103.140.116.0/23 maxlen: 24 203.190.8.0/21 maxlen: 24 2400:fa40::/32 maxlen: 32 2400:fa40::/48 maxlen: 48 2400:fa40:1::/48 maxlen: 48 2400:fa40:2::/48 maxlen: 48 2400:fa40:3::/48 maxlen: 48 2400:fa40:4::/48 maxlen: 48 2400:fa40:5::/48 maxlen: 48 2400:fa40:a::/48 maxlen: 48 2400:fa40:b::/48 maxlen: 48 2400:fa40:a00::/40 maxlen: 40 2400:fa40:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3391 (0xd3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120FD4, serialNumber=62C6B1A0B2C3A614F3CB43FABB31BF81616B54B4 Validity Not Before: Dec 18 18:15:37 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4448e-925b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2f:dc:f6:4f:8f:a5:a0:3b:3d:24:4a:d5:c9: 23:ac:ca:52:fc:33:77:13:ad:48:aa:e5:75:bc:5c: 6e:67:bc:a9:aa:12:27:c9:7b:9a:28:26:6b:1b:b5: 9f:4f:d4:88:b8:f3:30:0a:45:73:b8:31:09:84:62: 06:26:4c:d8:c6:f8:59:a0:15:ae:b0:5f:be:4c:93: 51:8b:83:e5:34:3a:16:b4:ce:26:2a:1f:1e:d2:c6: 51:62:f7:e4:a7:40:cc:94:95:21:78:7a:cc:ea:33: b7:6a:0c:35:c7:f9:14:e3:60:a3:48:dd:6d:3a:aa: fa:35:19:7e:9f:59:aa:fc:21:53:b0:22:99:4f:98: a0:30:70:77:89:57:e6:52:4a:d4:4e:81:ab:d7:49: 8c:4b:16:ae:db:73:75:ad:ce:87:32:8e:62:e8:0e: c5:c8:9f:fa:4e:37:43:3b:03:38:47:0b:19:a5:4b: a5:b2:a4:e1:24:31:eb:5e:b7:d6:24:38:59:ae:b9: 10:d8:cd:50:bc:eb:38:0d:a2:65:0a:42:7c:2a:7d: 47:2f:e0:b5:f6:1f:8d:a2:ea:90:2f:dd:fa:97:94: 1d:4a:93:ca:41:a7:a1:7e:a9:6b:85:87:bc:65:ae: 27:e2:39:03:d5:e9:e2:74:64:31:bc:df:ff:a6:3a: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3B:23:43:5F:8B:67:A2:92:DD:0D:A2:1A:94:1E:4A:22:B9:E4:A8 X509v3 Authority Key Identifier: keyid:62:C6:B1:A0:B2:C3:A6:14:F3:CB:43:FA:BB:31:BF:81:61:6B:54:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/YsaxoLLDphTzy0P6uzG_gWFrVLQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsaxoLLDphTzy0P6uzG_gWFrVLQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120FD4/809C24D2F55111E99D5B7D3DC4F9AE02/4154E51AC91311EBA6226F45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.116.0/23 203.190.8.0/21 IPv6: 2400:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 03:76:7a:90:a3:18:e4:09:2e:cc:05:2e:06:b1:f1:6b:7b:90: e9:34:0f:17:e5:91:de:55:f5:92:f8:3f:0f:c8:fe:46:5a:37: 96:5c:ce:b3:b1:4e:5b:80:7d:c4:09:72:d9:9d:37:75:a4:7a: a4:a5:28:8f:db:a0:82:bc:c2:91:8a:1b:5d:82:3e:f8:97:72: 75:06:0d:16:99:56:a2:62:8f:2a:98:cd:f4:5e:a6:75:1f:d2: d0:6b:d4:64:13:d3:e3:cf:04:c7:5a:63:5a:59:59:11:1f:39: 8f:23:8d:0b:2d:7d:e0:31:af:d4:99:a4:0c:d3:42:5f:5a:ab: 2b:fd:c2:9a:9e:e4:ee:e2:d1:30:ba:f2:bf:f1:6d:ce:9f:06: 96:fd:5b:2c:80:38:69:20:47:89:ff:3b:fc:17:f5:92:b4:5e: 5b:9e:99:eb:44:6c:cf:47:a5:cd:9a:b8:63:12:e5:f4:08:59: 33:d1:7d:9b:eb:8d:88:f3:92:61:72:d7:59:af:a7:5f:8e:77: 56:e9:cd:38:e1:3f:90:4e:85:67:dd:1e:05:32:e0:53:d6:97: b1:44:b7:3a:4e:75:b7:bc:71:48:7b:2f:0b:02:c1:7b:a0:6e: a5:d8:62:92:74:59:61:57:4b:7f:c0:d6:56:fb:20:01:1c:cd: e5:e5:94:57 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGRDQxMTAvBgNVBAUTKDYyQzZCMUEwQjJDM0E2MTRGM0NCNDNGQUJCMzFCRjgx NjE2QjU0QjQwHhcNMjUxMjE4MTgxNTM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDQ4ZS05MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqS/c9k+PpaA7PSRK1ckjrMpS/DN3E61IquV1vFxuZ7ypqhInyXuaKCZrG7Wf T9SIuPMwCkVzuDEJhGIGJkzYxvhZoBWusF++TJNRi4PlNDoWtM4mKh8e0sZRYvfk p0DMlJUheHrM6jO3agw1x/kU42CjSN1tOqr6NRl+n1mq/CFTsCKZT5igMHB3iVfm UkrUToGr10mMSxau23N1rc6HMo5i6A7FyJ/6TjdDOwM4RwsZpUulsqThJDHrXrfW JDhZrrkQ2M1QvOs4DaJlCkJ8Kn1HL+C19h+NouqQL936l5QdSpPKQaehfqlrhYe8 Za4n4jkD1enidGQxvN//pjqlPwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJs7I0Nf i2eikt0NohqUHkoiueSoMB8GA1UdIwQYMBaAFGLGsaCyw6YU88tD+rsxv4Fha1S0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEZENC84MDlDMjREMkY1 NTExMUU5OUQ1QjdEM0RDNEY5QUUwMi9Zc2F4b0xMRHBoVHp5MFA2dXpHX2dXRnJW TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzYXhvTExEcGhUenkwUDZ1ekdfZ1dGclZMUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBGRDQvODA5QzI0RDJGNTUxMTFFOTlENUI3RDNEQzRGOUFFMDIvNDE1NEU1MUFD OTEzMTFFQkE2MjI2RjQ1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ4x0AwQDy74IMA0EAgACMAcDBQAkAPpAMA0GCSqGSIb3DQEBCwUA A4IBAQADdnqQoxjkCS7MBS4GsfFre5DpNA8X5ZHeVfWS+D8PyP5GWjeWXM6zsU5b gH3ECXLZnTd1pHqkpSiP26CCvMKRihtdgj74l3J1Bg0WmVaiYo8qmM30XqZ1H9LQ a9RkE9PjzwTHWmNaWVkRHzmPI40LLX3gMa/UmaQM00JfWqsr/cKanuTu4tEwuvK/ 8W3OnwaW/VssgDhpIEeJ/zv8F/WStF5bnpnrRGzPR6XNmrhjEuX0CFkz0X2b642I 85JhctdZr6dfjndW6c044T+QToVn3R4FMuBT1pexRLc6TnW3vHFIey8LAsF7oG6l 2GKSdFlhV0t/wNZW+yABHM3l5ZRX -----END CERTIFICATE-----Generated at Thu Mar 26 23:21:46 2026 by rpki-client