$ rpki-client -vvf rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa File: A591C4A2933D11EEA6B4A653C4F9AE02.roa (raw, json) Hash identifier: 33jY169XoCiQKnoARmSKHREnC+gvvxfcNZ2WYeIMJe4= Subject key identifier: 3F:1F:CE:76:53:5F:F4:42:D6:EF:FB:B6:DB:73:0A:47:40:15:81:AB Certificate issuer: /CN=A912B129/serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Certificate serial: 01AB Authority key identifier: 2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:06:03 +0000 ROA not before: Wed 29 Oct 2025 03:48:42 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132353 IP address blocks: 103.14.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B129, serialNumber=2C8D1A58056ED188FE8580E70D1DE50F4C3DA270 Validity Not Before: Oct 29 03:48:42 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a439bb-cb5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:9f:ac:96:45:7f:22:6e:63:af:86:ee:77: 85:2d:6e:f9:b9:6f:e5:e2:36:1d:5c:09:6b:a2:f5: 85:58:2b:f7:a9:ae:a6:ad:1d:b1:4d:95:5b:48:71: 5e:a3:5a:39:2f:eb:17:37:67:9a:66:cb:9f:8e:fe: d8:7a:6d:ef:27:90:40:d5:47:9f:30:87:fa:d0:e7: 6f:59:fc:12:9c:c6:e2:32:0e:7d:67:14:ff:eb:77: 09:2e:25:a9:29:19:a2:d7:a2:55:b0:23:55:57:b1: 01:79:a8:58:c3:71:7e:3c:32:0e:af:18:d9:43:ce: 74:6a:ec:21:f3:4a:9f:fe:82:3a:79:a5:30:f9:16: d7:a8:4e:11:73:1d:ab:5f:5d:c4:cf:bc:af:c7:d3: 6e:46:e8:90:c3:d2:c3:39:cb:7c:12:59:45:6b:69: 3a:a3:33:07:86:6e:09:6c:8a:66:09:ad:96:f7:69: a0:b4:03:76:5c:e7:1c:0a:64:d4:02:31:d9:cd:c3: 57:c2:5c:dd:95:26:54:36:84:ff:61:71:73:89:b9: fd:42:aa:51:84:f7:b5:84:2e:62:50:b3:26:21:23: f2:1c:bb:54:e6:64:a2:9b:1b:78:aa:60:58:df:f0: ea:19:69:41:72:14:da:e9:ba:4a:eb:6c:04:2a:cd: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1F:CE:76:53:5F:F4:42:D6:EF:FB:B6:DB:73:0A:47:40:15:81:AB X509v3 Authority Key Identifier: keyid:2C:8D:1A:58:05:6E:D1:88:FE:85:80:E7:0D:1D:E5:0F:4C:3D:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/LI0aWAVu0Yj-hYDnDR3lD0w9onA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LI0aWAVu0Yj-hYDnDR3lD0w9onA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B129/4B3CEEB4933D11EE8A950253C4F9AE02/A591C4A2933D11EEA6B4A653C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.14.180.0/24 Signature Algorithm: sha256WithRSAEncryption 27:bd:8e:57:83:f3:1a:8b:f0:7e:71:da:2a:85:64:16:24:55: ab:b6:29:09:53:37:9f:e9:37:2f:1d:ba:c1:6d:c1:b8:60:cc: f9:53:c8:b8:f7:b6:94:cd:95:a6:5b:a2:cd:c5:a2:00:6b:64: 3e:1c:3b:b5:18:8b:69:21:52:12:a2:9d:a8:2b:a7:37:fb:e6: 41:4d:44:f3:4a:6b:ca:ea:80:c9:04:5a:9b:1b:2d:39:0e:aa: f9:b6:00:d3:86:b9:3a:1f:c0:59:23:34:86:3f:5f:84:7e:05: 03:99:a2:10:d3:02:9a:3a:7a:4f:ae:38:f8:d8:a8:a1:35:47: 7e:8e:55:d6:02:8b:6d:7a:be:3c:4b:d6:00:d7:e3:1c:2f:c5: a7:9f:36:03:6d:29:d2:9e:e7:50:e4:e6:32:17:d8:fb:07:e8: 58:db:38:8a:22:22:45:77:b9:9c:6c:1d:9d:8c:15:e1:bc:f5: d5:40:70:2e:a7:0a:62:7b:79:3e:b9:61:37:c4:32:13:35:9c: a3:d8:49:60:ba:c0:c3:d4:aa:82:c2:ab:ed:e7:58:17:cf:8e: 55:31:a1:c3:9b:bb:db:9f:ce:cf:f4:3f:84:7d:00:7a:76:20: 12:6c:ef:d8:b6:18:63:96:85:fc:99:f8:c2:da:30:1f:f7:28: e5:42:72:90 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMjkxMTAvBgNVBAUTKDJDOEQxQTU4MDU2RUQxODhGRTg1ODBFNzBEMURFNTBG NEMzREEyNzAwHhcNMjUxMDI5MDM0ODQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzliYi1jYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/GfrJZFfyJuY6+G7neFLW75uW/l4jYdXAlrovWFWCv3qa6mrR2xTZVbSHFe o1o5L+sXN2eaZsufjv7Yem3vJ5BA1UefMIf60OdvWfwSnMbiMg59ZxT/63cJLiWp KRmi16JVsCNVV7EBeahYw3F+PDIOrxjZQ850auwh80qf/oI6eaUw+RbXqE4Rcx2r X13Ez7yvx9NuRuiQw9LDOct8EllFa2k6ozMHhm4JbIpmCa2W92mgtAN2XOccCmTU AjHZzcNXwlzdlSZUNoT/YXFzibn9QqpRhPe1hC5iULMmISPyHLtU5mSimxt4qmBY 3/DqGWlBchTa6bpK62wEKs1tOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD8fznZT X/RC1u/7tttzCkdAFYGrMB8GA1UdIwQYMBaAFCyNGlgFbtGI/oWA5w0d5Q9MPaJw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyOS80QjNDRUVCNDkz M0QxMUVFOEE5NTAyNTNDNEY5QUUwMi9MSTBhV0FWdTBZai1oWURuRFIzbEQwdzlv bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJMGFXQVZ1MFlqLWhZRG5EUjNsRDB3OW9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIxMjkvNEIzQ0VFQjQ5MzNEMTFFRThBOTUwMjUzQzRGOUFFMDIvQTU5MUM0QTI5 MzNEMTFFRUE2QjRBNjUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZw60MA0GCSqGSIb3DQEBCwUAA4IBAQAnvY5Xg/Mai/B+cdoqhWQW JFWrtikJUzef6TcvHbrBbcG4YMz5U8i497aUzZWmW6LNxaIAa2Q+HDu1GItpIVIS op2oK6c3++ZBTUTzSmvK6oDJBFqbGy05Dqr5tgDThrk6H8BZIzSGP1+EfgUDmaIQ 0wKaOnpPrjj42KihNUd+jlXWAotter48S9YA1+McL8WnnzYDbSnSnudQ5OYyF9j7 B+hY2ziKIiJFd7mcbB2djBXhvPXVQHAupwpie3k+uWE3xDITNZyj2ElgusDD1KqC wqvt51gXz45VMaHDm7vbn87P9D+EfQB6diASbO/YthhjloX8mfjC2jAf9yjlQnKQ -----END CERTIFICATE-----Generated at Thu Mar 26 11:55:08 2026 by rpki-client