$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/650CB2EE081C11EFA47C4687C4F9AE02.roa File: 650CB2EE081C11EFA47C4687C4F9AE02.roa (raw, json) Hash identifier: X2aMm64FsY4q8DmmBZE3dU3676xL5JYnap6j4BLKEW4= Subject key identifier: 27:7D:4F:49:32:CF:92:73:B9:E0:C3:35:C3:5D:1E:04:5E:FF:BB:70 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 0230 Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/650CB2EE081C11EFA47C4687C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:59:42 +0000 ROA not before: Thu 19 Feb 2026 18:25:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151054 IP address blocks: 103.121.184.0/24 maxlen: 24 103.121.185.0/24 maxlen: 24 2001:df3:bf40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D, serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Feb 19 18:25:55 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4383e-75e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:af:2e:de:85:5f:82:4c:4a:76:92:21:75: 47:ec:7d:79:11:41:78:60:73:e4:5f:12:61:13:4d: b1:b2:d0:64:d9:1c:fa:ce:47:79:8c:63:b9:07:5c: 38:9d:a8:a6:b2:3e:5c:ae:9d:b1:86:71:ad:d4:7e: 12:74:89:e2:c5:30:96:8e:8b:59:10:ce:a8:72:f0: ad:3d:9a:5c:c9:c2:c2:ce:2c:54:75:25:39:0b:23: fd:91:18:20:cf:bc:9e:d1:0e:91:09:b3:b6:ab:9b: b8:1c:df:8f:3b:5a:9a:29:74:73:66:00:b2:1b:66: 5b:19:45:00:14:aa:74:d1:16:1e:c1:58:f6:89:84: fd:a0:1c:b5:c3:e6:25:7a:06:ba:36:b1:a9:75:95: 8f:6b:3e:9c:36:2c:bb:12:00:96:12:91:c6:9f:66: 22:8d:1e:a9:9d:f5:ef:81:d5:2e:8a:bf:f5:13:ea: a3:a9:02:b4:79:5a:3b:ce:f1:d3:11:84:b8:cd:d9: 59:1c:9c:bd:a7:d5:41:9e:00:57:3a:4c:22:4f:82: b7:31:82:96:f3:b0:b6:6a:4e:3a:c7:76:6a:27:f0: e7:6e:de:5f:13:b0:ed:e3:3c:6f:41:3a:b9:5d:44: ea:8f:58:55:2b:a9:04:68:90:a7:36:71:cd:a6:10: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7D:4F:49:32:CF:92:73:B9:E0:C3:35:C3:5D:1E:04:5E:FF:BB:70 X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/650CB2EE081C11EFA47C4687C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.184.0/23 IPv6: 2001:df3:bf40::/48 Signature Algorithm: sha256WithRSAEncryption 27:67:d0:50:c0:6a:be:f6:25:4d:a8:61:9a:b6:dc:0c:bf:d6: 76:df:48:cd:5b:e8:fa:b9:3a:ef:99:fe:25:a5:43:2c:84:11: 19:41:41:fe:60:88:43:3c:6a:d8:6d:9f:0f:31:03:0a:7a:36: d0:bd:99:66:7a:e2:e9:19:bc:c4:87:8a:89:f4:22:eb:23:77: 14:cd:6b:cd:5a:77:9a:c6:0d:cf:bf:8e:93:20:99:3a:86:9c: 73:98:c6:3e:41:9b:51:f4:a4:eb:54:0e:e3:33:47:c6:c0:25: 0d:7b:e5:9c:5a:fd:58:a6:28:07:b0:ea:c8:e2:f4:83:f5:7a: 64:9c:39:dd:54:48:00:e7:ff:f9:cb:9d:59:fd:9e:38:63:c4: e4:e7:88:34:b6:bd:aa:13:c7:32:40:95:20:3b:6e:9b:a2:bb: 63:df:e0:25:21:9a:25:3d:c2:5d:69:42:b6:2b:24:17:c0:c1: 36:72:a9:51:f7:91:82:0b:20:60:55:ba:43:3b:31:07:1b:16: 2b:f4:f9:3d:05:20:94:1f:2b:2a:d2:50:72:c0:6c:cf:27:f1: 1d:51:6d:01:e8:50:20:db:cd:f4:09:91:c9:7a:7a:c8:75:6f: 30:d3:86:dc:d1:f9:eb:5c:b5:67:9d:5a:d7:0c:e1:25:21:c4: 78:61:cb:65 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjYwMjE5MTgyNTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzgzZS03NWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuESvLt6FX4JMSnaSIXVH7H15EUF4YHPkXxJhE02xstBk2Rz6zkd5jGO5B1w4 naimsj5crp2xhnGt1H4SdInixTCWjotZEM6ocvCtPZpcycLCzixUdSU5CyP9kRgg z7ye0Q6RCbO2q5u4HN+PO1qaKXRzZgCyG2ZbGUUAFKp00RYewVj2iYT9oBy1w+Yl ega6NrGpdZWPaz6cNiy7EgCWEpHGn2YijR6pnfXvgdUuir/1E+qjqQK0eVo7zvHT EYS4zdlZHJy9p9VBngBXOkwiT4K3MYKW87C2ak46x3ZqJ/Dnbt5fE7Dt4zxvQTq5 XUTqj1hVK6kEaJCnNnHNphD9XQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCd9T0ky z5JzueDDNcNdHgRe/7twMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJCMEQvOTA5Qjc5RjBFNTJCMTFFREIyRUI2NTg1QzRGOUFFMDIvNjUwQ0IyRUUw ODFDMTFFRkE0N0M0Njg3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ3m4MA8EAgACMAkDBwAgAQ3zv0AwDQYJKoZIhvcNAQELBQADggEB ACdn0FDAar72JU2oYZq23Ay/1nbfSM1b6Pq5Ou+Z/iWlQyyEERlBQf5giEM8atht nw8xAwp6NtC9mWZ64ukZvMSHion0IusjdxTNa81ad5rGDc+/jpMgmTqGnHOYxj5B m1H0pOtUDuMzR8bAJQ175Zxa/VimKAew6sji9IP1emScOd1USADn//nLnVn9njhj xOTniDS2vaoTxzJAlSA7bpuiu2Pf4CUhmiU9wl1pQrYrJBfAwTZyqVH3kYILIGBV ukM7MQcbFiv0+T0FIJQfKyrSUHLAbM8n8R1RbQHoUCDbzfQJkcl6esh1bzDThtzR +etctWedWtcM4SUhxHhhy2U= -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:18 2026 by rpki-client