$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/1C8955ACFB3911EFA7A85D5EC4F9AE02.roa File: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (raw, json) Hash identifier: yZGNlzCw9fYEkUgbHQXyzQMU/Eeaou90bAR9FcUS1CQ= Subject key identifier: 84:C6:0E:56:C8:F7:69:30:8D:C7:07:0D:76:58:A7:77:CB:AE:68:23 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: C9 Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/1C8955ACFB3911EFA7A85D5EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:17:12 +0000 ROA not before: Fri 09 Jan 2026 06:24:30 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135357 IP address blocks: 103.20.192.0/22 maxlen: 22 103.20.192.0/24 maxlen: 24 103.20.193.0/24 maxlen: 24 103.20.194.0/24 maxlen: 24 103.20.195.0/24 maxlen: 24 103.27.176.0/22 maxlen: 22 103.27.176.0/24 maxlen: 24 103.27.177.0/24 maxlen: 24 103.27.178.0/24 maxlen: 24 103.27.179.0/24 maxlen: 24 103.30.4.0/22 maxlen: 22 103.30.4.0/24 maxlen: 24 103.30.5.0/24 maxlen: 24 103.30.6.0/24 maxlen: 24 103.30.7.0/24 maxlen: 24 103.226.152.0/22 maxlen: 22 103.226.152.0/24 maxlen: 24 103.226.153.0/24 maxlen: 24 103.226.154.0/24 maxlen: 24 103.226.155.0/24 maxlen: 24 202.8.120.0/22 maxlen: 22 202.8.120.0/24 maxlen: 24 202.8.121.0/24 maxlen: 24 202.8.122.0/24 maxlen: 24 202.8.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Jan 9 06:24:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a42038-6fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:24:1d:6e:01:07:6a:b4:2e:0f:7c:0d:27: cb:7a:a9:44:2f:26:b8:f4:9a:d9:3d:d4:49:76:13: 8d:ac:3c:d9:e0:6c:11:60:47:f1:96:c3:91:46:9b: 0e:1f:32:ca:43:e5:67:50:a1:3f:78:0f:99:cd:5c: 45:de:30:d2:ad:82:37:88:1e:50:47:87:97:b9:2a: e7:85:ad:e7:51:c7:c3:98:b5:f9:b6:9e:d4:92:85: 2c:ba:f4:26:4d:5f:62:94:5f:75:c9:a3:56:cf:1b: 59:76:90:40:97:f3:69:ad:75:e1:cf:0b:a9:1f:13: 0a:8d:c2:c6:9a:b1:eb:1e:5c:1f:0e:dc:b4:c2:50: a2:10:b8:fb:2a:ce:54:a5:80:f0:7b:fc:ec:07:36: 75:38:92:d4:2f:d3:4c:03:8d:18:d9:32:7e:27:68: 98:e7:b0:36:5d:2e:42:fb:cf:10:3b:84:52:1d:4f: 6a:81:5a:f3:a0:c8:88:de:57:f5:9d:f0:62:c0:99: 54:06:d8:4e:af:8c:70:44:7f:0d:8d:32:e7:12:4f: e5:d6:52:92:a6:9e:3c:9e:53:0e:2a:7e:2c:3e:41: 18:73:73:f2:0f:c2:aa:05:6e:71:65:df:1b:52:fb: 21:fb:85:02:5a:95:eb:5b:4f:1c:3a:4d:70:c0:2d: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:0E:56:C8:F7:69:30:8D:C7:07:0D:76:58:A7:77:CB:AE:68:23 X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/1C8955ACFB3911EFA7A85D5EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.192.0/22 103.27.176.0/22 103.30.4.0/22 103.226.152.0/22 202.8.120.0/22 Signature Algorithm: sha256WithRSAEncryption 64:7a:f6:3f:ef:1f:0e:13:dc:1f:0a:db:53:7a:c7:e5:10:65: 48:3f:29:64:28:ab:68:c4:68:4b:67:61:c9:d1:59:36:ea:70: 2f:2f:e0:24:51:3b:7b:7c:4c:54:e7:cc:f1:f1:0e:a3:8c:43: 15:66:fb:66:e6:ec:b9:a2:db:0a:7c:cb:e1:1b:88:ed:36:22: 1a:c7:31:de:eb:32:66:3a:56:e2:6c:6f:5b:38:c9:01:8f:54: 5f:15:dc:40:60:a4:3a:b7:8b:61:1a:98:7a:12:6d:ec:bc:35: c1:d2:d7:52:a1:0f:5f:f7:9a:c9:11:91:31:86:64:70:a1:63: e5:7d:93:88:89:89:c3:e0:2e:10:de:e7:9d:cb:69:cd:7b:41: d7:75:b6:2e:5d:80:f7:87:09:23:44:ea:e6:36:f4:45:6d:8e: 7d:1d:d5:4f:c3:d6:13:dd:c6:4a:2a:b8:b4:96:4c:41:67:25: c6:94:f4:24:20:3d:a7:f6:b9:a5:3d:35:06:d4:a1:93:aa:cc: f5:22:5c:0e:ee:bb:a2:41:5e:06:b3:3d:48:f8:ab:ce:46:2a: b3:a6:cf:24:2d:0d:84:6c:85:70:72:70:18:78:b1:fd:97:39: 4e:14:9d:90:f8:7a:98:a0:b4:10:e4:39:f5:ac:1f:3b:c8:28: 39:81:0f:89 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5 QjZEMTE3RjIwHhcNMjYwMTA5MDYyNDMwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjAzOC02ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj1gkHW4BB2q0Lg98DSfLeqlELya49JrZPdRJdhONrDzZ4GwRYEfxlsORRpsO HzLKQ+VnUKE/eA+ZzVxF3jDSrYI3iB5QR4eXuSrnha3nUcfDmLX5tp7UkoUsuvQm TV9ilF91yaNWzxtZdpBAl/NprXXhzwupHxMKjcLGmrHrHlwfDty0wlCiELj7Ks5U pYDwe/zsBzZ1OJLUL9NMA40Y2TJ+J2iY57A2XS5C+88QO4RSHU9qgVrzoMiI3lf1 nfBiwJlUBthOr4xwRH8NjTLnEk/l1lKSpp48nlMOKn4sPkEYc3PyD8KqBW5xZd8b Uvsh+4UCWpXrW08cOk1wwC33OwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFITGDlbI 92kwjccHDXZYp3fLrmgjMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDEyNzQvRDk5RjNBRkFGQjIzMTFFRjlGMTVDNzRBQzRGOUFFMDIvMUM4OTU1QUNG QjM5MTFFRkE3QTg1RDVFQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZxTAAwQCZxuwAwQCZx4EAwQCZ+KYAwQCygh4MA0GCSqGSIb3DQEB CwUAA4IBAQBkevY/7x8OE9wfCttTesflEGVIPylkKKtoxGhLZ2HJ0Vk26nAvL+Ak UTt7fExU58zx8Q6jjEMVZvtm5uy5otsKfMvhG4jtNiIaxzHe6zJmOlbibG9bOMkB j1RfFdxAYKQ6t4thGph6Em3svDXB0tdSoQ9f95rJEZExhmRwoWPlfZOIiYnD4C4Q 3uedy2nNe0HXdbYuXYD3hwkjROrmNvRFbY59HdVPw9YT3cZKKri0lkxBZyXGlPQk ID2n9rmlPTUG1KGTqsz1IlwO7ruiQV4Gsz1I+KvORiqzps8kLQ2EbIVwcnAYeLH9 lzlOFJ2Q+HqYoLQQ5Dn1rB87yCg5gQ+J -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:50 2026 by rpki-client