$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/507A39A632B011EE89DFF774C4F9AE02.roa File: 507A39A632B011EE89DFF774C4F9AE02.roa (raw, json) Hash identifier: t9gfSRrRBhg5aKee6bLsa2HCvO/wXMYsjYUGDi3D7i0= Subject key identifier: 7B:E5:3B:C3:FA:9D:36:2A:1B:F6:86:2D:84:7D:F7:80:05:84:4E:6A Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 1821 Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/507A39A632B011EE89DFF774C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:30:57 +0000 ROA not before: Sat 22 Nov 2025 16:34:49 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137047 IP address blocks: 103.103.42.0/24 maxlen: 24 103.103.43.0/24 maxlen: 24 103.120.70.0/24 maxlen: 24 103.120.71.0/24 maxlen: 24 2402:2ec0::/34 maxlen: 34 2402:2ec0:4000::/34 maxlen: 34 2402:2ec0:8000::/34 maxlen: 34 2402:2ec0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6177 (0x1821) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: Nov 22 16:34:49 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45bb1-d386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:b4:a5:bd:90:92:c0:82:86:49:1e:f5:4d: c9:e7:66:08:6b:e6:ff:c2:b1:79:10:9a:bb:af:15: d4:06:35:f6:68:64:eb:60:ad:11:57:0e:3c:1e:0a: 27:6a:6d:3b:11:cf:02:44:3d:d0:a2:29:d6:90:5b: 7d:b6:a3:a1:2e:c0:b6:a8:19:60:1f:ee:97:af:8f: e4:03:e4:8c:5d:fb:bb:e1:42:02:98:d4:03:1a:b6: 7e:e6:ee:89:47:8a:8a:41:ab:bd:2f:14:e9:39:88: 65:06:d8:18:da:64:57:83:4a:d0:16:43:2f:4c:ca: 66:5c:df:ee:89:c0:84:30:d8:9c:74:05:ae:b6:21: 2f:63:3b:64:fc:4d:e4:05:f7:b9:10:23:53:76:6d: 88:4b:50:c4:cc:58:c6:fc:6f:74:a5:de:7e:68:bb: c0:e2:73:ca:de:f0:33:e3:a1:03:35:42:b0:a7:1c: 89:a4:a9:48:dc:b8:3f:26:12:27:8b:ae:23:0c:21: e3:c0:ca:72:91:8c:d8:05:34:0f:1f:f4:60:5b:9e: 93:ae:28:e4:48:74:1a:92:b2:ae:9c:77:c8:19:87: 73:28:17:a7:8c:83:88:4d:61:60:cf:39:be:72:cc: 2d:2f:64:7a:90:19:e0:e5:35:be:66:ca:16:ff:9b: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E5:3B:C3:FA:9D:36:2A:1B:F6:86:2D:84:7D:F7:80:05:84:4E:6A X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/507A39A632B011EE89DFF774C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.42.0/23 103.120.70.0/23 IPv6: 2402:2ec0::/32 Signature Algorithm: sha256WithRSAEncryption 83:d8:23:67:b9:2a:33:0c:4c:55:fb:fd:82:38:07:74:53:ce: 1a:5d:c7:91:5a:d3:58:8f:b2:8f:0f:57:bc:af:2c:d0:d9:a1: 84:15:d3:1c:dd:e4:0e:41:b0:df:e4:19:0f:f8:76:48:ce:65: 82:1d:b1:2f:8c:91:58:fa:f4:a2:76:a5:1d:23:5d:88:e7:d8: 78:f5:c0:f4:7f:e8:c8:ba:2f:43:f7:32:1b:2c:70:84:ba:ef: 12:aa:0c:6e:be:1f:c2:75:9f:a6:76:f5:e2:56:e3:9d:b8:3a: ed:f6:9d:ae:13:31:d0:a6:04:e5:00:ab:d7:7c:9d:8a:5e:60: 94:73:89:d2:57:d9:32:79:15:c5:2c:b2:6e:c6:96:0a:46:13: c7:7b:78:9f:a9:3b:d5:e5:63:34:6d:c6:21:44:71:79:e0:e8: 1f:49:13:bb:07:3f:e3:82:03:0b:92:94:5d:a6:a2:dd:23:11: a0:13:aa:f4:f0:c5:05:ee:10:0c:d7:54:5c:e9:6f:b6:66:92: da:1c:df:d6:5f:3c:d9:30:af:9e:c9:b0:e0:f0:9b:e1:8c:84: 10:43:65:08:a4:7f:fb:f8:7b:53:b5:5a:d2:24:bf:95:0b:e3: 9f:13:c8:cd:91:d9:ad:0b:cc:19:d6:b9:f9:fa:4a:9b:8a:37: ab:85:c3:67 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjUxMTIyMTYzNDQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWJiMS1kMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyu0pb2QksCChkke9U3J52YIa+b/wrF5EJq7rxXUBjX2aGTrYK0RVw48Hgon am07Ec8CRD3QoinWkFt9tqOhLsC2qBlgH+6Xr4/kA+SMXfu74UICmNQDGrZ+5u6J R4qKQau9LxTpOYhlBtgY2mRXg0rQFkMvTMpmXN/uicCEMNicdAWutiEvYztk/E3k Bfe5ECNTdm2IS1DEzFjG/G90pd5+aLvA4nPK3vAz46EDNUKwpxyJpKlI3Lg/JhIn i64jDCHjwMpykYzYBTQPH/RgW56TrijkSHQakrKunHfIGYdzKBenjIOITWFgzzm+ cswtL2R6kBng5TW+ZsoW/5sfTQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHvlO8P6 nTYqG/aGLYR994AFhE5qMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4RTIvNEM5MDhBMjJFMEI2MTFFN0IyRDBGRDgwQzRGOUFFMDIvNTA3QTM5QTYz MkIwMTFFRTg5REZGNzc0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ2cqAwQBZ3hGMA0EAgACMAcDBQAkAi7AMA0GCSqGSIb3DQEBCwUA A4IBAQCD2CNnuSozDExV+/2COAd0U84aXceRWtNYj7KPD1e8ryzQ2aGEFdMc3eQO QbDf5BkP+HZIzmWCHbEvjJFY+vSidqUdI12I59h49cD0f+jIui9D9zIbLHCEuu8S qgxuvh/CdZ+mdvXiVuOduDrt9p2uEzHQpgTlAKvXfJ2KXmCUc4nSV9kyeRXFLLJu xpYKRhPHe3ifqTvV5WM0bcYhRHF54OgfSRO7Bz/jggMLkpRdpqLdIxGgE6r08MUF 7hAM11Rc6W+2ZpLaHN/WXzzZMK+eybDg8JvhjIQQQ2UIpH/7+HtTtVrSJL+VC+Of E8jNkdmtC8wZ1rn5+kqbijerhcNn -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:37 2026 by rpki-client