$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/514DBDFC98C711EAA0CFE582C4F9AE02.roa File: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (raw, json) Hash identifier: OakXz6uabwbVjZ3x8angGynzmkwZsBIUc2kp6w+BN9o= Subject key identifier: F9:33:53:B4:3D:32:6A:2A:B4:FB:EF:2B:D6:DC:74:28:CA:58:49:15 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 353A Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/514DBDFC98C711EAA0CFE582C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:36:37 +0000 ROA not before: Sun 02 Nov 2025 15:31:01 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45925 IP address blocks: 103.230.104.0/22 maxlen: 22 103.230.104.0/23 maxlen: 23 103.230.104.0/24 maxlen: 24 103.230.105.0/24 maxlen: 24 103.230.106.0/23 maxlen: 23 103.230.106.0/24 maxlen: 24 103.230.107.0/24 maxlen: 24 123.253.132.0/22 maxlen: 22 123.253.132.0/23 maxlen: 23 123.253.132.0/24 maxlen: 24 123.253.133.0/24 maxlen: 24 123.253.134.0/23 maxlen: 23 123.253.134.0/24 maxlen: 24 123.253.135.0/24 maxlen: 24 202.4.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13626 (0x353a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Nov 2 15:31:01 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a440e5-53cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:26:5b:1c:17:05:6e:fc:18:eb:45:31:a0: 4f:53:72:a3:ec:d3:4c:d7:fa:80:3c:93:ba:29:41: d6:ff:f9:0b:70:3e:51:11:d4:de:37:00:4d:72:0c: 11:4f:6d:fa:f5:6e:58:70:07:1f:7c:af:87:b5:1d: e2:6c:32:a4:a8:7e:05:43:d8:f2:ca:21:5a:78:17: 04:83:b2:51:f5:28:3a:05:99:2f:fb:21:37:a4:88: a8:67:1b:e8:4a:4a:a6:32:45:04:b2:73:a5:c0:2a: 56:5f:4d:6b:1e:7c:3f:81:b6:e2:51:b2:00:ab:21: a2:33:e3:3c:77:2a:b1:8d:db:98:7e:8f:94:14:59: e9:49:c0:df:71:52:88:ed:40:5f:0a:42:f4:77:b8: 41:01:64:0b:5b:6a:83:21:21:0b:ba:2d:87:3b:2e: e2:30:eb:8f:17:fb:1b:b0:e3:fa:62:80:40:91:3d: 4c:e9:e4:f7:ff:30:0e:6e:bf:4a:5f:f1:6f:d3:e6: 63:26:c5:76:40:07:b7:7b:82:e1:d4:74:bb:52:b7: 5e:f3:ae:39:e7:18:6a:73:62:54:1d:fe:a2:f7:5e: 36:42:a3:a8:98:b1:3b:f8:bb:cc:b8:e7:5a:cd:8a: 06:25:d4:f6:00:cf:d3:70:1b:33:ee:3b:79:cd:cd: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:33:53:B4:3D:32:6A:2A:B4:FB:EF:2B:D6:DC:74:28:CA:58:49:15 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/514DBDFC98C711EAA0CFE582C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.230.104.0/22 123.253.132.0/22 202.4.173.0/24 Signature Algorithm: sha256WithRSAEncryption 44:44:ce:21:94:8e:9f:63:8b:8c:5d:cd:0b:4f:51:aa:6c:4f: af:79:10:da:91:a7:a5:f4:02:b1:b5:e4:0f:79:7c:64:9b:2d: f0:3d:40:60:c8:c8:b1:51:c1:70:01:4f:f6:fa:1e:d6:2d:ff: ca:03:da:4d:95:c2:bd:16:8d:3e:fb:ed:54:ff:c6:85:64:96: 91:37:81:7f:25:99:af:09:48:4b:27:16:42:99:a9:ff:0c:91: cd:7e:71:8b:98:3c:74:80:f5:14:69:1a:e2:ee:fc:e4:6e:9c: 59:e7:14:dc:7d:5a:3f:63:90:33:7d:be:53:0f:40:68:ce:9c: ba:bf:03:de:3a:f3:b3:c1:2e:8a:67:a5:c7:4c:88:2f:19:b4: 80:85:17:31:ff:aa:c1:6c:2f:6c:0d:c8:64:e7:e0:20:54:5d: 97:fa:f5:2b:9a:0c:76:a0:1a:b0:13:34:39:8e:ee:14:1d:e6: ab:1a:01:ed:9d:c6:a9:59:26:24:f1:84:78:ff:86:4b:89:fb: 4b:55:23:2b:11:4c:fd:a7:01:01:60:e9:0e:3c:e6:c1:21:6c: ee:50:3f:0d:c8:5e:e1:0e:89:75:8c:9b:49:10:0c:97:a7:70: 44:6b:db:88:fd:b8:49:3e:9e:08:f2:ab:74:36:5e:45:44:83: a9:e4:31:07 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICNTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjUxMTAyMTUzMTAxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDBlNS01M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5kmWxwXBW78GOtFMaBPU3Kj7NNM1/qAPJO6KUHW//kLcD5REdTeNwBNcgwR T2369W5YcAcffK+HtR3ibDKkqH4FQ9jyyiFaeBcEg7JR9Sg6BZkv+yE3pIioZxvo SkqmMkUEsnOlwCpWX01rHnw/gbbiUbIAqyGiM+M8dyqxjduYfo+UFFnpScDfcVKI 7UBfCkL0d7hBAWQLW2qDISELui2HOy7iMOuPF/sbsOP6YoBAkT1M6eT3/zAObr9K X/Fv0+ZjJsV2QAe3e4Lh1HS7Urde86455xhqc2JUHf6i9142QqOomLE7+LvMuOda zYoGJdT2AM/TcBsz7jt5zc1GCQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPkzU7Q9 MmoqtPvvK9bcdCjKWEkVMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJBRUIvRUYyOUJBMkExREExMTFFMjg2OEI2ODk0MDhCMDJDRDIvNTE0REJERkM5 OEM3MTFFQUEwQ0ZFNTgyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ+ZoAwQCe/2EAwQAygStMA0GCSqGSIb3DQEBCwUAA4IBAQBERM4h lI6fY4uMXc0LT1GqbE+veRDakael9AKxteQPeXxkmy3wPUBgyMixUcFwAU/2+h7W Lf/KA9pNlcK9Fo0+++1U/8aFZJaRN4F/JZmvCUhLJxZCman/DJHNfnGLmDx0gPUU aRri7vzkbpxZ5xTcfVo/Y5Azfb5TD0Bozpy6vwPeOvOzwS6KZ6XHTIgvGbSAhRcx /6rBbC9sDchk5+AgVF2X+vUrmgx2oBqwEzQ5ju4UHearGgHtncapWSYk8YR4/4ZL iftLVSMrEUz9pwEBYOkOPObBIWzuUD8NyF7hDol1jJtJEAyXp3BEa9uI/bhJPp4I 8qt0Nl5FRIOp5DEH -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:35 2026 by rpki-client