$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa File: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (raw, json) Hash identifier: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc= Subject key identifier: C0:68:3E:93:6A:98:38:90:26:5E:93:F3:85:A3:FB:6A:53:69:EB:39 Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Certificate serial: 0289 Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:29:46 +0000 ROA not before: Sat 29 Nov 2025 00:27:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150375 IP address blocks: 103.18.204.0/23 maxlen: 23 2001:df1:6740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C Validity Not Before: Nov 29 00:27:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44d5a-1291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:ff:c1:b8:12:99:c7:57:ed:1d:9f:ed:2a: 2d:a0:c4:65:44:c1:3f:be:f4:ef:ec:83:f0:19:6d: 8e:07:f4:b7:c4:b3:46:46:f7:b9:cf:cd:06:ba:56: 7e:c2:3b:88:0e:86:92:ea:75:f9:73:65:ed:33:2f: c8:7c:c0:5c:37:05:fd:98:36:40:0d:5f:e9:1c:e6: 86:20:01:d1:6d:83:a6:19:30:38:78:a3:eb:79:8c: 63:62:53:86:0f:26:bb:b2:f1:08:0b:e3:67:f8:d8: cf:55:80:5d:79:44:b4:ce:a5:87:b4:67:f1:f6:b0: 25:fe:b9:86:9d:5f:1b:e0:bd:7d:a8:20:26:71:5c: de:f1:b0:84:eb:a6:2f:09:dc:85:72:4f:80:6d:2f: 16:45:5d:cb:9c:82:17:6f:c6:22:4f:33:0c:c9:50: d4:4e:72:ba:49:b8:58:d3:54:06:d3:a5:f9:5a:5f: 64:f7:96:eb:35:cb:20:79:31:30:b1:b8:4c:86:70: d1:6a:da:f4:39:45:ec:40:38:8a:bc:4c:4e:0e:d5: 86:61:fc:c0:fb:25:04:34:69:bc:c7:68:ca:96:ee: 5e:45:21:76:c0:99:42:b0:91:d5:c0:49:17:6e:20: 0b:f8:55:ee:22:69:5c:0a:cc:ca:3f:a8:b1:93:5a: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:68:3E:93:6A:98:38:90:26:5E:93:F3:85:A3:FB:6A:53:69:EB:39 X509v3 Authority Key Identifier: keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.18.204.0/23 IPv6: 2001:df1:6740::/48 Signature Algorithm: sha256WithRSAEncryption 6b:44:c9:9f:c3:10:c4:d9:a0:13:ae:fb:57:de:8d:ed:36:6f: 17:44:5d:aa:f1:96:e5:06:1a:a0:b0:b9:08:78:45:c2:b6:52: 78:75:a3:da:ee:80:f1:c5:f6:c3:5a:4d:17:62:a7:40:8c:e6: 60:c1:87:08:71:9b:7f:0d:88:2b:ec:6d:b4:8b:fc:05:ed:a1: 6a:b5:2b:ef:63:32:8d:5c:74:85:15:d0:4f:61:8e:bc:52:84: 85:b7:47:d2:5f:88:7e:c7:c2:c2:63:7d:bf:2c:d9:71:83:93: a9:30:d0:b3:f9:25:5e:50:c2:d0:de:59:91:07:da:34:22:6f: f1:7d:41:00:42:3f:84:31:29:8c:92:74:ce:9d:24:d6:4d:9c: 05:95:53:b4:89:fb:b0:9c:95:79:bc:86:57:2a:c3:b4:0d:da: 86:45:63:a9:94:6d:a5:7b:ec:b2:42:79:a4:bf:f0:cf:f4:42: d2:f7:a6:fa:08:55:8e:08:b7:53:1d:73:55:92:2a:56:43:f9: 51:33:53:41:ec:b2:4d:d6:95:38:c6:09:ad:54:d7:ca:9d:d9: 2b:35:26:8b:15:a9:eb:4a:f5:4e:2e:99:63:0d:c6:db:45:13: 8b:48:4b:9e:b5:d7:cc:f5:26:a8:b7:39:69:b4:d7:6a:3a:bf: e5:b6:23:89 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3 MEVGMkIxNEMwHhcNMjUxMTI5MDAyNzIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGQ1YS0xMjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8T/wbgSmcdX7R2f7SotoMRlRME/vvTv7IPwGW2OB/S3xLNGRve5z80GulZ+ wjuIDoaS6nX5c2XtMy/IfMBcNwX9mDZADV/pHOaGIAHRbYOmGTA4eKPreYxjYlOG Dya7svEIC+Nn+NjPVYBdeUS0zqWHtGfx9rAl/rmGnV8b4L19qCAmcVze8bCE66Yv CdyFck+AbS8WRV3LnIIXb8YiTzMMyVDUTnK6SbhY01QG06X5Wl9k95brNcsgeTEw sbhMhnDRatr0OUXsQDiKvExODtWGYfzA+yUENGm8x2jKlu5eRSF2wJlCsJHVwEkX biAL+FXuImlcCszKP6ixk1olFQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMBoPpNq mDiQJl6T84Wj+2pTaes5MB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ5MzcvQkYyREFCNkE0REZDMTFFRDk0QkQ2NjZCQzRGOUFFMDIvRDlBNUMxQkE0 REZFMTFFREJGMDBCQTZCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZxLMMA8EAgACMAkDBwAgAQ3xZ0AwDQYJKoZIhvcNAQELBQADggEB AGtEyZ/DEMTZoBOu+1feje02bxdEXarxluUGGqCwuQh4RcK2Unh1o9rugPHF9sNa TRdip0CM5mDBhwhxm38NiCvsbbSL/AXtoWq1K+9jMo1cdIUV0E9hjrxShIW3R9Jf iH7HwsJjfb8s2XGDk6kw0LP5JV5QwtDeWZEH2jQib/F9QQBCP4QxKYySdM6dJNZN nAWVU7SJ+7CclXm8hlcqw7QN2oZFY6mUbaV77LJCeaS/8M/0QtL3pvoIVY4It1Md c1WSKlZD+VEzU0Hssk3WlTjGCa1U18qd2Ss1JosVqetK9U4umWMNxttFE4tIS561 18z1Jqi3OWm012o6v+W2I4k= -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:28 2026 by rpki-client