$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa File: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (raw, json) Hash identifier: oPPTl1sV6xGDw5Unly6kTOoNd3Ow/tpEEI0WHWs24Fo= Subject key identifier: 0B:D8:B8:65:0C:40:73:89:13:DE:88:11:C2:AC:DD:E3:E7:9C:1A:01 Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 23A8 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:53:45 +0000 ROA not before: Fri 02 Jan 2026 16:14:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134839 IP address blocks: 103.222.238.0/24 maxlen: 24 103.245.176.0/24 maxlen: 24 103.247.180.0/24 maxlen: 24 2001:df7:a401::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9128 (0x23a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Jan 2 16:14:36 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46109-347a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f8:2c:37:d8:4b:25:1f:fb:71:1e:58:73:c7: ba:98:0c:e3:00:c4:a0:62:94:98:14:45:6f:03:27: b8:94:77:e2:b3:84:eb:c2:ed:f7:f1:70:4c:70:3e: dc:80:b6:69:fc:22:4b:51:32:28:0a:c8:14:d7:1a: 3e:bc:8e:7f:69:73:5a:c2:31:ef:14:60:b0:25:6c: 05:0d:b8:7f:ed:49:da:9d:60:d5:57:e4:64:35:27: 5a:a7:b6:0d:55:a1:4c:3c:d1:08:ca:27:d2:a2:c5: e6:a0:49:88:80:78:de:81:6e:4f:41:06:16:8a:ef: 3c:e8:20:d2:66:5a:be:bf:9a:02:10:ac:a9:f4:59: aa:08:1b:ba:65:15:6b:74:06:00:26:07:42:0f:d2: 62:0a:11:76:5f:92:31:3e:2e:92:7a:ca:d5:56:28: 9b:42:83:b3:a7:f6:94:07:6b:30:9c:b5:b2:34:09: 3e:9e:a3:c2:a6:c1:bc:e1:4a:10:0a:79:6b:9a:99: d2:c1:ff:77:2b:94:f6:37:b3:55:2b:d3:ea:34:68: 59:33:6b:78:e4:41:87:fe:6b:44:1a:cb:bc:53:be: dc:59:e5:cf:cb:46:bf:16:fb:1f:be:fb:f1:f8:0d: 52:8b:50:9a:e2:65:ca:d7:0c:d3:b8:b8:c7:90:f7: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D8:B8:65:0C:40:73:89:13:DE:88:11:C2:AC:DD:E3:E7:9C:1A:01 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/CBF9AD5449E811E6BAF4525DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.222.238.0/24 103.245.176.0/24 103.247.180.0/24 IPv6: 2001:df7:a401::/48 Signature Algorithm: sha256WithRSAEncryption 3c:57:37:89:d0:2f:ad:8f:bf:99:28:47:74:c3:f9:4a:2d:88: 5b:c4:6d:87:f1:0c:6d:0b:06:8a:96:8f:c6:41:d4:76:e7:9f: 7e:35:df:7c:77:70:f4:5c:60:c0:c6:fd:79:dd:eb:e4:f3:c2: a6:30:6a:c0:2d:b7:6f:e7:0a:86:a2:9e:da:98:70:64:12:2d: 36:c0:1c:83:6f:64:d2:be:13:f7:a6:a1:dd:21:58:bd:da:a0: bf:97:bc:db:a9:e7:58:21:3a:80:b9:00:d8:36:b6:4e:0b:d7: 01:33:99:45:f0:65:9a:41:bf:e4:98:80:3b:3a:39:16:00:7d: b3:a2:da:cb:53:b8:d7:6e:fe:97:01:70:29:03:e8:0b:f0:0f: d4:8f:9d:e5:6e:aa:16:c9:65:db:e8:91:26:ed:bb:b3:99:03: 5b:1a:50:ea:73:83:1e:54:b9:59:2d:9a:2a:78:b0:64:05:83: c8:08:9e:69:49:f0:14:55:cd:e7:bd:1b:94:3a:15:be:ae:d2: e3:52:d4:32:46:51:1a:ec:80:f7:f7:77:10:84:0d:0b:ce:63: 0e:e4:be:74:f9:f2:17:d6:e4:d4:6f:67:51:52:40:88:5b:df: ab:a1:e8:55:aa:1f:2a:a3:88:fd:ec:e2:86:d2:12:8c:54:8a: 97:c7:84:b1 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICI6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjYwMTAyMTYxNDM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjEwOS0zNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/gsN9hLJR/7cR5Yc8e6mAzjAMSgYpSYFEVvAye4lHfis4Trwu338XBMcD7c gLZp/CJLUTIoCsgU1xo+vI5/aXNawjHvFGCwJWwFDbh/7UnanWDVV+RkNSdap7YN VaFMPNEIyifSosXmoEmIgHjegW5PQQYWiu886CDSZlq+v5oCEKyp9FmqCBu6ZRVr dAYAJgdCD9JiChF2X5IxPi6SesrVViibQoOzp/aUB2swnLWyNAk+nqPCpsG84UoQ CnlrmpnSwf93K5T2N7NVK9PqNGhZM2t45EGH/mtEGsu8U77cWeXPy0a/Fvsfvvvx +A1Si1Ca4mXK1wzTuLjHkPe6FQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFAvYuGUM QHOJE96IEcKs3ePnnBoBMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjczNDIvNkREQkM3RkM5MzI3MTFFNUE4MUYzMDNFQzRGOUFFMDIvQ0JGOUFENTQ0 OUU4MTFFNkJBRjQ1MjVEQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQAZ97uAwQAZ/WwAwQAZ/e0MA8EAgACMAkDBwAgAQ33pAEwDQYJKoZI hvcNAQELBQADggEBADxXN4nQL62Pv5koR3TD+UotiFvEbYfxDG0LBoqWj8ZB1Hbn n34133x3cPRcYMDG/Xnd6+TzwqYwasAtt2/nCoaintqYcGQSLTbAHINvZNK+E/em od0hWL3aoL+XvNup51ghOoC5ANg2tk4L1wEzmUXwZZpBv+SYgDs6ORYAfbOi2stT uNdu/pcBcCkD6AvwD9SPneVuqhbJZdvokSbtu7OZA1saUOpzgx5UuVktmip4sGQF g8gInmlJ8BRVzee9G5Q6Fb6u0uNS1DJGURrsgPf3dxCEDQvOYw7kvnT58hfW5NRv Z1FSQIhb36uh6FWqHyqjiP3s4obSEoxUipfHhLE= -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:58 2026 by rpki-client