$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa File: 42C28C36A80711F0A622350DC4F9AE02.roa (raw, json) Hash identifier: BpCSL66Kcxa7BlGBFMkmM3b3I1bmGIXPHueAxzsNq50= Subject key identifier: 5C:CD:D2:77:5A:18:81:8B:DD:6E:53:15:A4:67:EB:CA:F4:23:3D:D0 Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 0287 Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:19:23 +0000 ROA not before: Sun 01 Feb 2026 01:22:05 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 150697 IP address blocks: 103.59.216.0/24 maxlen: 24 103.59.217.0/24 maxlen: 24 2001:df1:bac0::/48 maxlen: 48 2402:48a0::/33 maxlen: 33 2402:48a0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Feb 1 01:22:05 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4832b-20d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:e6:81:c5:c1:4c:4d:87:c4:96:f9:18:ad: dc:c0:2b:21:c0:11:92:7c:13:87:3a:39:c8:37:49: 8a:21:c0:92:5b:34:15:ef:3b:f4:f9:5e:81:08:44: ee:1f:b9:08:d2:1b:76:84:21:e0:5a:50:a3:7e:8d: c4:da:02:fd:d6:f6:7c:f4:75:30:ee:49:d1:c3:04: 72:c5:51:e0:3c:03:c6:49:60:e6:76:3c:aa:dd:81: 66:05:4a:29:1a:a6:9e:e2:b1:0e:49:ce:ef:0a:20: c6:e0:c0:f3:bf:f7:92:1c:24:f7:65:4a:ee:5e:5e: 4c:1e:83:c1:0f:5e:c4:b5:18:09:0a:cb:89:ce:94: fd:0f:c4:53:d2:de:41:5e:ec:c9:d7:6a:70:32:8f: 95:17:9a:bc:c9:a1:2d:ad:84:8a:f8:ee:e7:38:8e: 15:21:e0:f0:72:20:6e:26:d9:ac:60:e7:55:64:6c: 82:60:cb:ca:76:cb:98:0e:24:e0:33:9b:48:e4:f1: 79:2a:b9:2a:78:49:f6:90:be:25:82:79:64:ef:96: 0e:65:c1:53:7c:8c:56:71:dd:29:64:43:40:1d:73: 0c:f8:27:c0:03:d6:93:1d:5a:3b:42:f1:33:0e:68: 1d:08:e8:ab:fc:b1:26:1a:1a:5d:c3:32:4a:e2:98: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CD:D2:77:5A:18:81:8B:DD:6E:53:15:A4:67:EB:CA:F4:23:3D:D0 X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/42C28C36A80711F0A622350DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.59.216.0/23 IPv6: 2001:df1:bac0::/48 2402:48a0::/32 Signature Algorithm: sha256WithRSAEncryption 68:21:ad:b6:22:c4:ed:38:78:fd:c8:b5:4c:81:04:29:eb:04: 2a:bf:db:8b:d1:c3:7f:45:44:71:4e:a7:30:7b:3e:02:67:60: b9:fb:ac:e8:18:a4:97:78:10:03:c2:f2:03:20:48:0b:8c:7d: 75:48:b5:8f:bb:cf:c3:da:ed:a9:7c:93:5e:ea:f9:ef:ae:bb: 69:1a:56:e3:46:e3:a7:c4:b8:e0:04:36:62:e1:18:59:f8:b8: f6:9d:49:bc:74:fd:7c:34:97:3e:82:83:5c:c8:16:37:03:51: 5e:39:0b:3e:08:3f:99:9b:46:c1:1b:e3:07:8e:a6:ca:fd:61: bc:b3:d4:02:69:19:f5:10:52:33:b6:b1:49:c2:ef:6d:c4:ac: 75:59:4b:49:9c:07:c9:20:9a:c6:04:c7:6f:8d:98:e5:81:87: 05:0a:6b:32:59:a9:ce:48:03:0e:af:bc:3f:0a:df:a5:5a:69: 0c:b5:da:d5:cd:ee:0e:84:2e:e8:25:69:b2:f6:15:0f:db:e4: 01:23:80:b6:b7:49:be:21:b3:3d:26:f4:b8:80:97:51:bc:62: 7d:59:6e:0d:32:ff:88:1b:fd:5c:19:a9:da:e3:45:51:81:ba: ce:55:b1:00:8d:b3:df:3a:10:56:a1:fc:b7:21:fc:7d:24:ee: a4:60:8f:18 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjYwMjAxMDEyMjA1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODMyYi0yMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntXmgcXBTE2HxJb5GK3cwCshwBGSfBOHOjnIN0mKIcCSWzQV7zv0+V6BCETu H7kI0ht2hCHgWlCjfo3E2gL91vZ89HUw7knRwwRyxVHgPAPGSWDmdjyq3YFmBUop Gqae4rEOSc7vCiDG4MDzv/eSHCT3ZUruXl5MHoPBD17EtRgJCsuJzpT9D8RT0t5B XuzJ12pwMo+VF5q8yaEtrYSK+O7nOI4VIeDwciBuJtmsYOdVZGyCYMvKdsuYDiTg M5tI5PF5KrkqeEn2kL4lgnlk75YOZcFTfIxWcd0pZENAHXMM+CfAA9aTHVo7QvEz DmgdCOir/LEmGhpdwzJK4pguGQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFFzN0nda GIGL3W5TFaRn68r0Iz3QMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjEwNzEvMkYwRjdBNDg4NkI2MTFFREFBM0IyQjMzQzRGOUFFMDIvNDJDMjhDMzZB ODA3MTFGMEE2MjIzNTBEQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZzvYMBYEAgACMBADBwAgAQ3xusADBQAkAkigMA0GCSqGSIb3DQEB CwUAA4IBAQBoIa22IsTtOHj9yLVMgQQp6wQqv9uL0cN/RURxTqcwez4CZ2C5+6zo GKSXeBADwvIDIEgLjH11SLWPu8/D2u2pfJNe6vnvrrtpGlbjRuOnxLjgBDZi4RhZ +Lj2nUm8dP18NJc+goNcyBY3A1FeOQs+CD+Zm0bBG+MHjqbK/WG8s9QCaRn1EFIz trFJwu9txKx1WUtJnAfJIJrGBMdvjZjlgYcFCmsyWanOSAMOr7w/Ct+lWmkMtdrV ze4OhC7oJWmy9hUP2+QBI4C2t0m+IbM9JvS4gJdRvGJ9WW4NMv+IG/1cGana40VR gbrOVbEAjbPfOhBWofy3Ifx9JO6kYI8Y -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:41 2026 by rpki-client