$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/D23C5270E02111E9B4A3923FC4F9AE02.roa File: D23C5270E02111E9B4A3923FC4F9AE02.roa (raw, json) Hash identifier: DgN4HYG0Ge4rNgYzbp7pU5juBkf2LCQihGrPJdM6ERY= Subject key identifier: A6:A1:D8:0A:47:5F:3D:74:DE:BC:08:30:AD:7F:00:85:0A:E9:5C:7A Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0DA6 Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/D23C5270E02111E9B4A3923FC4F9AE02.roa Signing time: Fri 20 Mar 2026 18:22:49 +0000 ROA not before: Fri 20 Mar 2026 18:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136439 IP address blocks: 103.138.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3494 (0xda6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Mar 20 18:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69bd9078-d738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:4c:2f:f8:85:40:64:29:17:11:04:ce:77: a1:3e:64:e5:96:76:5d:5c:3d:e6:42:2c:bd:26:9b: df:1a:86:cd:e8:2c:6c:c3:a5:c7:c5:b3:8c:8e:4b: 81:d2:dc:62:81:b7:e0:e9:19:e2:f1:49:1c:74:76: 89:3e:34:78:b8:a8:00:ee:fd:53:2c:65:9d:ec:0c: b0:37:b3:ae:4c:6d:07:06:40:50:fc:58:0a:2b:8b: a3:c8:ca:88:23:bd:3b:29:56:e8:2b:12:5a:e4:b3: fa:0b:4d:a2:0e:db:da:4f:d1:6e:c9:ff:1d:c3:b8: a6:40:5f:35:a9:af:c3:b6:c3:e1:5e:b4:44:f8:78: 73:7f:ed:bd:dd:98:c3:31:0b:8b:e9:20:08:37:59: c9:dc:75:ac:62:4d:91:b3:ca:9e:53:42:c0:ff:e9: c3:0c:cd:a3:c0:e8:65:99:63:4f:2e:5f:62:65:a7: 97:ec:05:42:87:6c:3c:3a:40:ad:1e:6d:5f:6a:68: dd:9a:cc:7a:92:cd:e8:c9:be:4f:a3:00:bb:f5:9c: 1c:42:42:0b:56:c8:47:a1:2c:f2:5d:50:eb:8e:fe: 38:2c:54:67:1f:e7:22:c5:0a:71:c5:d4:29:1a:7a: 34:05:fe:83:6f:f5:42:50:0f:c2:28:52:7f:c5:af: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A1:D8:0A:47:5F:3D:74:DE:BC:08:30:AD:7F:00:85:0A:E9:5C:7A X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/D23C5270E02111E9B4A3923FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.77.0/24 Signature Algorithm: sha256WithRSAEncryption 80:1d:36:87:76:2b:48:a7:62:a0:7b:c1:70:8f:55:3b:af:4b: 6a:b4:b2:95:1c:4e:0b:9c:03:4c:45:f8:42:78:80:84:ec:a5: 53:cd:7c:85:a2:b3:e5:62:95:eb:fa:03:a1:8d:b0:3c:52:50: 1a:c1:a8:35:85:63:cc:aa:33:43:4f:b5:62:4e:4e:c1:ad:ef: db:51:cc:4d:4e:78:8f:3b:27:e4:44:9c:4a:2f:62:94:fd:b9: 52:32:a1:f6:71:bc:6e:fa:06:03:34:a9:9b:90:cf:5f:eb:74: 59:31:01:07:08:e0:1b:d4:18:64:73:d3:23:ea:1f:83:56:a8: 71:4f:cc:83:5a:d5:a5:1e:8c:af:86:ae:15:9d:96:50:c6:12: 04:90:66:ae:d8:9a:a6:6c:ff:ab:93:58:49:11:e5:8a:6e:81: 28:d8:83:7c:b8:87:1b:c5:6a:3e:29:f9:8a:97:2d:6c:0e:f9: 71:77:53:82:01:a9:34:83:f9:58:83:f2:5e:a5:9b:64:26:ed: 8a:fd:02:36:6a:a6:19:f2:f4:38:32:3d:66:cb:af:b7:e0:7e: c8:a8:db:3f:70:36:e0:b5:b4:61:a9:67:85:a2:e3:ac:d4:35: 03:31:d6:d1:13:46:26:00:d3:8d:5b:66:2d:47:ed:70:27:84: 04:3e:be:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYwMzIwMTgyMjQ5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJkOTA3OC1kNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvghML/iFQGQpFxEEznehPmTllnZdXD3mQiy9JpvfGobN6Cxsw6XHxbOMjkuB 0txigbfg6Rni8UkcdHaJPjR4uKgA7v1TLGWd7AywN7OuTG0HBkBQ/FgKK4ujyMqI I707KVboKxJa5LP6C02iDtvaT9Fuyf8dw7imQF81qa/DtsPhXrRE+Hhzf+293ZjD MQuL6SAIN1nJ3HWsYk2Rs8qeU0LA/+nDDM2jwOhlmWNPLl9iZaeX7AVCh2w8OkCt Hm1famjdmsx6ks3oyb5PowC79ZwcQkILVshHoSzyXVDrjv44LFRnH+cixQpxxdQp Gno0Bf6Db/VCUA/CKFJ/xa9MdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKah2ApH Xz103rwIMK1/AIUK6Vx6MB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhFMDAvODk5MUVCOUVFMDIwMTFFOTgyQjM3QTNBQzRGOUFFMDIvRDIzQzUyNzBF MDIxMTFFOUI0QTM5MjNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4pNMA0GCSqGSIb3DQEBCwUAA4IBAQCAHTaHditIp2Kge8Fwj1U7 r0tqtLKVHE4LnANMRfhCeICE7KVTzXyForPlYpXr+gOhjbA8UlAawag1hWPMqjND T7ViTk7Bre/bUcxNTniPOyfkRJxKL2KU/blSMqH2cbxu+gYDNKmbkM9f63RZMQEH COAb1Bhkc9Mj6h+DVqhxT8yDWtWlHoyvhq4VnZZQxhIEkGau2JqmbP+rk1hJEeWK boEo2IN8uIcbxWo+KfmKly1sDvlxd1OCAak0g/lYg/JepZtkJu2K/QI2aqYZ8vQ4 Mj1my6+34H7IqNs/cDbgtbRhqWeFouOs1DUDMdbRE0YmANONW2YtR+1wJ4QEPr5j -----END CERTIFICATE-----Generated at Thu Mar 26 19:13:49 2026 by rpki-client