$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa File: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (raw, json) Hash identifier: jyqFCgst06RVpDB0gLXfdOd67pDYJBgZGVMmj+J0u70= Subject key identifier: 56:6F:52:C1:6A:A7:5C:3C:08:15:86:55:55:F2:59:E2:91:A4:B1:BF Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B89 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa Signing time: Tue 28 Apr 2026 19:26:01 +0000 ROA not before: Tue 28 Apr 2026 19:26:01 +0000 ROA not after: Fri 28 Aug 2026 00:00:00 +0000 asID: 140091 IP address blocks: 103.5.120.0/23 maxlen: 23 103.5.120.0/24 maxlen: 24 103.5.121.0/24 maxlen: 24 103.148.104.0/24 maxlen: 24 103.153.202.0/24 maxlen: 24 2001:df2:ce80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2953 (0xb89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Apr 28 19:26:01 2026 GMT Not After : Aug 28 00:00:00 2026 GMT Subject: CN=69f109c9-fcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:39:1d:2e:f7:e4:23:3b:bb:3a:66:7f:ec: 5a:ec:94:dd:1d:b0:23:fd:2f:f3:31:4d:6a:60:6f: 4f:63:8d:c3:88:18:80:b9:b9:74:0c:3c:1a:c2:3d: 27:2b:4d:a4:ea:e0:80:c0:5e:c9:66:47:01:a0:77: 05:ee:02:8b:c4:e5:94:5f:30:02:b1:17:83:0f:18: a9:e8:49:59:07:6d:3c:3a:6a:c9:4f:62:57:83:9e: 81:6d:f2:91:32:f7:8e:44:6a:5f:e8:0a:c4:0e:99: 32:d3:5d:99:31:9a:51:ff:96:88:bf:2d:8f:9d:73: 17:ce:5d:48:90:c6:6c:76:15:aa:1f:3f:08:0c:1b: 7a:af:d2:a6:95:01:bb:a0:f5:5f:dd:e2:f1:ad:a1: 7d:3f:5a:3a:43:e5:82:38:a5:0d:84:11:e7:73:e2: 3f:32:16:40:1d:43:ff:0a:e8:21:0f:c2:5e:fc:75: a2:65:ba:1b:1a:f9:68:87:2b:fb:49:ba:47:dc:d5: f2:e7:57:b9:88:62:c8:a2:a7:8f:0a:ef:91:79:5e: 0d:26:55:e2:95:bb:62:12:67:9a:d6:ec:98:1a:c1: 3a:c3:e5:d7:12:03:85:a4:2c:15:9a:68:6d:aa:75: aa:5b:2d:a1:56:0c:33:75:6d:91:ed:a0:b5:ef:b9: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6F:52:C1:6A:A7:5C:3C:08:15:86:55:55:F2:59:E2:91:A4:B1:BF X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.120.0/23 103.148.104.0/24 103.153.202.0/24 IPv6: 2001:df2:ce80::/48 Signature Algorithm: sha256WithRSAEncryption 50:5e:84:81:d0:a4:4e:5b:2c:dc:b6:cf:ef:b1:26:67:86:53: 69:28:a0:99:cb:13:79:7a:26:48:fb:d5:42:cf:74:39:f4:0e: 08:22:1c:21:83:c0:5f:62:7f:b8:f3:76:2b:82:72:62:d7:3e: 7a:f3:e5:04:a9:b4:85:a7:2e:b3:db:a6:5a:ad:ff:68:14:90: 75:c9:d1:8b:41:a7:c6:1b:0f:e3:10:f1:5a:d2:6d:1c:dd:0e: 7a:8c:78:6d:41:b3:9f:af:78:35:19:dc:8a:57:69:49:ed:90: 60:d7:3d:ea:0f:cf:f0:fb:ed:80:72:40:df:18:c1:87:11:45: 4f:e8:f2:0b:7e:c5:fc:34:9a:85:b3:99:39:81:4a:54:31:48: 97:3f:62:d0:7b:7b:07:36:e6:39:40:f4:24:a8:d2:4c:64:5c: 1e:fe:12:a5:0e:78:75:98:77:4c:fe:a2:45:81:30:7b:79:38: bf:04:fa:a8:d4:78:5b:ca:64:85:e5:9b:bd:b4:7a:6b:1c:6d: c8:02:e9:ec:6b:0f:b7:f6:f7:40:bc:3d:2e:68:cc:3f:3d:af: 20:80:e0:0e:f6:fc:19:ee:3f:cf:32:21:a3:69:05:a7:e6:29: 67:86:12:58:b7:6f:ca:7a:e0:31:8a:0d:8e:22:fa:91:30:74: 1f:10:91:45 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjYwNDI4MTkyNjAxWhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWYxMDljOS1mY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuec5HS735CM7uzpmf+xa7JTdHbAj/S/zMU1qYG9PY43DiBiAubl0DDwawj0n K02k6uCAwF7JZkcBoHcF7gKLxOWUXzACsReDDxip6ElZB208OmrJT2JXg56BbfKR MveORGpf6ArEDpky012ZMZpR/5aIvy2PnXMXzl1IkMZsdhWqHz8IDBt6r9KmlQG7 oPVf3eLxraF9P1o6Q+WCOKUNhBHnc+I/MhZAHUP/CughD8Je/HWiZbobGvlohyv7 SbpH3NXy51e5iGLIoqePCu+ReV4NJlXilbtiEmea1uyYGsE6w+XXEgOFpCwVmmht qnWqWy2hVgwzdW2R7aC177lyXQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFFZvUsFq p1w8CBWGVVXyWeKRpLG/MB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhGRTgvMTJGOTZGQjI0RUZCMTFFQThENjk0RDBEQzRGOUFFMDIvNEFFRTVEMTQ0 RUZDMTFFQTlEMDAzMTBGQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBZwV4AwQAZ5RoAwQAZ5nKMA8EAgACMAkDBwAgAQ3yzoAwDQYJKoZI hvcNAQELBQADggEBAFBehIHQpE5bLNy2z++xJmeGU2kooJnLE3l6Jkj71ULPdDn0 DggiHCGDwF9if7jzdiuCcmLXPnrz5QSptIWnLrPbplqt/2gUkHXJ0YtBp8YbD+MQ 8VrSbRzdDnqMeG1Bs5+veDUZ3IpXaUntkGDXPeoPz/D77YByQN8YwYcRRU/o8gt+ xfw0moWzmTmBSlQxSJc/YtB7ewc25jlA9CSo0kxkXB7+EqUOeHWYd0z+okWBMHt5 OL8E+qjUeFvKZIXlm720emscbcgC6exrD7f290C8PS5ozD89ryCA4A72/BnuP88y IaNpBafmKWeGEli3b8p64DGKDY4i+pEwdB8QkUU= -----END CERTIFICATE-----Generated at Wed May 13 08:44:21 2026 by rpki-client