$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa File: 5E0B2804158811EEA0660D12C4F9AE02.roa (raw, json) Hash identifier: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs= Subject key identifier: 6E:A0:80:AB:97:F5:F6:A2:56:B7:46:85:A6:B7:80:5A:A9:46:5F:90 Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 03F9 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:37:22 +0000 ROA not before: Thu 21 Aug 2025 01:08:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55424 IP address blocks: 103.17.60.0/22 maxlen: 22 103.17.60.0/23 maxlen: 24 103.17.62.0/23 maxlen: 24 117.104.224.0/21 maxlen: 24 163.47.160.0/22 maxlen: 22 163.47.160.0/24 maxlen: 24 163.47.161.0/24 maxlen: 24 163.47.162.0/24 maxlen: 24 163.47.163.0/24 maxlen: 24 175.106.32.0/22 maxlen: 22 175.106.32.0/24 maxlen: 24 175.106.33.0/24 maxlen: 24 175.106.34.0/24 maxlen: 24 175.106.35.0/24 maxlen: 24 175.106.40.0/23 maxlen: 24 175.106.48.0/24 maxlen: 24 175.106.57.0/24 maxlen: 24 175.106.58.0/24 maxlen: 24 175.106.59.0/24 maxlen: 24 175.106.60.0/24 maxlen: 24 175.106.61.0/24 maxlen: 24 175.106.62.0/24 maxlen: 24 175.106.63.0/24 maxlen: 24 2400:3080::/32 maxlen: 32 2400:3080::/45 maxlen: 45 2400:3080:8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Aug 21 01:08:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a58482-97b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:d6:57:38:ef:0c:3f:df:b3:6a:10:85:13: 8a:bf:03:6e:e4:2c:41:10:03:d8:e2:dc:c9:b3:2d: 2f:8a:76:d6:46:70:c3:88:49:54:66:7a:37:5e:23: 96:37:e5:e8:29:30:ee:33:d3:55:e6:c4:a8:bf:81: 93:6c:0f:ce:d5:f9:a7:2a:b2:96:0b:f7:31:bf:5d: 8c:a5:cd:ec:66:72:83:f9:b4:df:ac:16:6c:62:45: 5e:49:83:f0:7d:51:94:5f:00:b4:9a:57:f3:02:ef: cd:d8:d1:05:c5:e8:1c:cf:24:70:9f:30:5b:f5:15: 35:9e:6c:e7:cf:f0:c5:3b:8b:ce:41:a9:e7:69:88: 8c:f6:97:65:22:1b:2e:75:76:b9:be:64:1a:fb:4f: 58:ce:16:c9:c2:a1:b0:f7:06:14:e0:ed:c6:cc:06: 26:2d:55:67:3e:90:5d:99:d5:82:b7:89:e0:f9:e9: d9:7a:9b:8e:ff:e5:39:c7:fb:ab:35:cf:19:a5:1e: 1a:e4:c9:d3:d3:34:88:b9:cb:3b:12:72:92:34:aa: 1c:d7:b9:6a:dd:ed:81:1f:0f:34:54:32:0e:88:58: 51:a0:5c:45:1d:d7:c4:2b:20:cd:83:c4:5c:8d:a7: d9:8a:af:f4:26:01:b5:12:cd:61:07:81:b4:32:4e: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:80:AB:97:F5:F6:A2:56:B7:46:85:A6:B7:80:5A:A9:46:5F:90 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.17.60.0/22 117.104.224.0/21 163.47.160.0/22 175.106.32.0/22 175.106.40.0/23 175.106.48.0/24 175.106.57.0-175.106.63.255 IPv6: 2400:3080::/32 Signature Algorithm: sha256WithRSAEncryption 56:8c:7f:01:46:48:79:3a:08:a8:fd:45:f1:05:0e:4d:47:b0: 1c:11:3f:ae:fc:05:76:cd:fc:0e:71:5a:aa:ee:bc:a5:a4:4d: fe:64:33:6f:7e:f2:eb:8b:b4:79:85:dd:e8:91:37:ed:82:b8: e1:49:c7:5a:ef:31:d1:1f:05:35:0f:4a:9e:5e:d2:f2:5b:0f: 2a:26:37:56:a3:01:f7:bb:70:3a:a7:c5:8e:d9:36:15:39:48: 80:26:2e:76:32:1a:3b:a5:e6:f1:57:74:92:4a:16:9a:87:f0: 0c:81:52:e6:a6:80:0f:43:3d:b7:41:43:e5:1c:11:42:58:0f: 4a:1a:15:d6:df:cd:24:7f:76:02:28:56:7c:9e:72:66:ba:e1: b1:fd:74:d1:46:51:64:4a:0f:eb:fd:50:b6:81:e4:24:0b:a2: 74:a7:6c:1e:88:fa:79:28:93:a1:24:65:f6:71:8d:7e:48:a5: d2:82:1b:f8:2c:7e:35:4d:73:5c:e2:1f:02:6e:af:4d:d8:14: 14:f9:49:06:6b:51:f1:2d:2c:81:a6:d2:11:6d:c2:28:df:37: 40:94:09:6b:0e:16:25:50:40:4d:25:67:3f:80:47:67:ed:47: ce:f6:7d:35:6f:4c:db:f9:73:54:85:62:61:e3:c8:90:4f:25: 73:c0:7c:d7 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjUwODIxMDEwODI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODQ4Mi05N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUrWVzjvDD/fs2oQhROKvwNu5CxBEAPY4tzJsy0vinbWRnDDiElUZno3XiOW N+XoKTDuM9NV5sSov4GTbA/O1fmnKrKWC/cxv12Mpc3sZnKD+bTfrBZsYkVeSYPw fVGUXwC0mlfzAu/N2NEFxegczyRwnzBb9RU1nmznz/DFO4vOQannaYiM9pdlIhsu dXa5vmQa+09YzhbJwqGw9wYU4O3GzAYmLVVnPpBdmdWCt4ng+enZepuO/+U5x/ur Nc8ZpR4a5MnT0zSIucs7EnKSNKoc17lq3e2BHw80VDIOiFhRoFxFHdfEKyDNg8Rc jafZiq/0JgG1Es1hB4G0Mk7HlwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFG6ggKuX 9faiVrdGhaa3gFqpRl+QMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxMzgvNjNBNEQxQkNDNDdBMTFFQzhCMzQ0OTY0QzRGOUFFMDIvNUUwQjI4MDQx NTg4MTFFRUEwNjYwRDEyQzRGOUFFMDIucm9hMFoGCCsGAQUFBwEHAQH/BEswSTA4 BAIAATAyAwQCZxE8AwQDdWjgAwQCoy+gAwQCr2ogAwQBr2ooAwQAr2owMAwDBACv ajkDBAavagAwDQQCAAIwBwMFACQAMIAwDQYJKoZIhvcNAQELBQADggEBAFaMfwFG SHk6CKj9RfEFDk1HsBwRP678BXbN/A5xWqruvKWkTf5kM29+8uuLtHmF3eiRN+2C uOFJx1rvMdEfBTUPSp5e0vJbDyomN1ajAfe7cDqnxY7ZNhU5SIAmLnYyGjul5vFX dJJKFpqH8AyBUuamgA9DPbdBQ+UcEUJYD0oaFdbfzSR/dgIoVnyecma64bH9dNFG UWRKD+v9ULaB5CQLonSnbB6I+nkok6EkZfZxjX5IpdKCG/gsfjVNc1ziHwJur03Y FBT5SQZrUfEtLIGm0hFtwijfN0CUCWsOFiVQQE0lZz+AR2ftR872fTVvTNv5c1SF YmHjyJBPJXPAfNc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:07 2026 by rpki-client