$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/C11EB2BACB5911F0BEAC2433C4F9AE02.roa File: C11EB2BACB5911F0BEAC2433C4F9AE02.roa (raw, json) Hash identifier: AyFWVAjP0bY1LUKkTu0jDgulxPnrUezSws8ZVyn0wzU= Subject key identifier: 08:C0:6A:A9:9C:75:81:70:AD:63:AD:17:E0:A4:1E:4B:4A:4E:EA:24 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 02BC Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/C11EB2BACB5911F0BEAC2433C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:40:13 +0000 ROA not before: Thu 27 Nov 2025 06:24:40 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149994 IP address blocks: 103.7.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: Nov 27 06:24:40 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46bed-9b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:7e:62:c9:f7:cb:ed:45:6b:56:9b:64:a0: d1:e1:55:93:e7:8b:40:83:ff:ac:22:21:0b:65:30: e4:ba:7f:41:b4:2d:da:f0:fb:65:38:58:b6:58:9d: 57:c6:ec:2d:46:da:dd:8c:dd:08:5f:1f:c1:7c:a9: b8:36:65:c4:53:56:37:fc:0d:44:be:8d:4a:14:82: b4:65:f5:3b:55:09:f5:15:cf:5d:eb:a5:bc:d1:5a: 3b:76:6e:39:c0:9e:36:fd:91:2e:04:b7:e9:b2:88: 05:c3:a9:24:fe:43:8d:76:4a:c6:54:a7:99:56:07: 9d:0b:11:bb:f4:b1:27:a0:3a:bd:b3:de:89:1b:fb: 8a:7e:32:65:6c:d7:d1:e4:ae:71:0f:00:e1:dd:f8: 82:2f:b0:b9:1d:ae:85:57:d0:bf:6c:1c:b1:92:25: 68:1a:fe:c9:ec:ea:0f:df:54:04:fc:07:a8:59:85: 7b:6d:a9:b4:d8:5d:65:59:bf:41:90:57:21:1c:8a: 49:ed:54:3a:89:f8:02:23:13:c0:23:52:fb:1f:31: 4b:61:65:31:55:a0:1e:eb:7b:8e:39:cc:d8:98:e9: 04:5d:f2:1e:47:97:f7:74:83:f9:72:0f:e5:6f:a0: 80:da:7d:6f:a3:f8:20:09:f3:3a:cc:83:0f:76:6f: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C0:6A:A9:9C:75:81:70:AD:63:AD:17:E0:A4:1E:4B:4A:4E:EA:24 X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/C11EB2BACB5911F0BEAC2433C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.7.123.0/24 Signature Algorithm: sha256WithRSAEncryption d3:12:cd:38:ba:e4:68:85:89:51:3c:8d:f7:6d:a0:99:95:f8: 2e:c9:33:31:be:48:6b:79:d4:61:f8:40:0b:1c:54:cf:77:e9: 46:61:e3:33:97:1c:21:b8:06:e5:8d:e8:68:5c:f3:b8:aa:b4: 57:d7:c4:fc:32:5a:fd:c7:8e:15:bc:73:0f:36:99:de:7c:ae: bb:77:12:4e:04:5d:ff:a7:8a:82:c9:1d:ea:63:87:0d:de:45: 26:22:0d:d4:a3:8f:3b:2a:1f:11:4c:85:62:ae:30:7b:3b:72: f0:ff:69:c5:73:b4:18:1c:84:f9:be:87:9d:94:59:72:88:63: 59:71:7e:2a:27:9f:da:19:94:c2:7c:d6:f9:86:43:fc:62:00: 4e:76:bc:eb:ff:16:ab:e2:86:af:7a:11:32:da:32:3d:7d:28: c2:5d:b4:3b:d4:ec:33:2f:8d:25:cc:5a:36:a8:b4:2f:55:3c: 6e:dd:66:1b:d1:22:81:a5:bd:6e:e7:79:d5:76:e9:eb:b2:1b: 9e:34:7b:3c:cf:09:0c:2e:df:88:9f:f3:0a:ff:1e:02:9e:f3: 47:d3:62:80:c9:ec:8c:c0:20:03:66:7f:57:b2:33:1b:10:d7: 33:4f:b5:db:68:bd:da:8d:b6:a2:5a:88:8d:33:cb:bb:e3:d7: 51:bd:a4:0c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjUxMTI3MDYyNDQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmJlZC05YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA151+Ysn3y+1Fa1abZKDR4VWT54tAg/+sIiELZTDkun9BtC3a8PtlOFi2WJ1X xuwtRtrdjN0IXx/BfKm4NmXEU1Y3/A1Evo1KFIK0ZfU7VQn1Fc9d66W80Vo7dm45 wJ42/ZEuBLfpsogFw6kk/kONdkrGVKeZVgedCxG79LEnoDq9s96JG/uKfjJlbNfR 5K5xDwDh3fiCL7C5Ha6FV9C/bByxkiVoGv7J7OoP31QE/AeoWYV7bam02F1lWb9B kFchHIpJ7VQ6ifgCIxPAI1L7HzFLYWUxVaAe63uOOczYmOkEXfIeR5f3dIP5cg/l b6CA2n1vo/ggCfM6zIMPdm/GnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAjAaqmc dYFwrWOtF+CkHktKTuokMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcxNDIvOTY2MTg1QkEzODNDMTFFREIwOUYwMjE0QzRGOUFFMDIvQzExRUIyQkFD QjU5MTFGMEJFQUMyNDMzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZwd7MA0GCSqGSIb3DQEBCwUAA4IBAQDTEs04uuRohYlRPI33baCZ lfguyTMxvkhredRh+EALHFTPd+lGYeMzlxwhuAbljehoXPO4qrRX18T8Mlr9x44V vHMPNpnefK67dxJOBF3/p4qCyR3qY4cN3kUmIg3Uo487Kh8RTIVirjB7O3Lw/2nF c7QYHIT5voedlFlyiGNZcX4qJ5/aGZTCfNb5hkP8YgBOdrzr/xar4oavehEy2jI9 fSjCXbQ71OwzL40lzFo2qLQvVTxu3WYb0SKBpb1u53nVdunrshueNHs8zwkMLt+I n/MK/x4CnvNH02KAyeyMwCADZn9XsjMbENczT7XbaL3ajbaiWoiNM8u749dRvaQM -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:04 2026 by rpki-client