$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/127604E20F8B11EF87FC5918C4F9AE02.roa File: 127604E20F8B11EF87FC5918C4F9AE02.roa (raw, json) Hash identifier: hsqDK4dEteoc0Mxqmy0cSR10HwSRl8nmy2mfYdV9jCM= Subject key identifier: 54:5B:0A:99:63:14:61:8D:BB:02:C0:E2:57:13:21:BE:21:8F:03:15 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: 0165 Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/127604E20F8B11EF87FC5918C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:08:13 +0000 ROA not before: Fri 29 Aug 2025 05:55:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 61112 IP address blocks: 103.255.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: Aug 29 05:55:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5a7dc-cfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:9b:c5:39:55:e2:7b:36:1f:63:46:82:87: 82:fa:e8:c1:63:a9:b2:29:1c:5a:94:61:c9:ed:e4: 83:9b:dc:c4:b5:95:37:6b:4c:a3:d2:b2:36:48:ed: 5c:48:bc:a7:f1:45:1a:75:8a:a9:a7:e4:df:0d:d4: 6c:82:72:a9:74:54:46:d3:6f:6e:17:58:42:84:4b: bc:bd:36:3f:f5:1f:77:8d:3d:2e:40:f0:04:19:f3: a6:3a:64:5e:d0:a8:08:23:65:c0:7b:ae:64:13:c3: b2:81:ac:ef:2a:9a:f8:51:43:7c:db:c9:a3:58:09: 54:37:c8:63:ae:2e:56:ff:46:a2:86:e3:89:bb:35: 83:97:af:f8:12:17:32:74:57:a3:0c:03:81:9f:86: 41:d5:74:42:a7:23:57:7b:44:4d:af:45:26:d2:13: d4:7a:e5:58:ea:e7:2f:72:5c:ca:fe:4c:76:56:e6: 00:56:38:0b:5e:7a:ed:67:04:bb:d4:e0:8e:df:83: ed:9e:1f:b2:fe:2c:32:44:e7:ec:17:4e:ad:81:1c: ae:c3:88:8b:a7:fb:52:71:41:b1:ee:dc:36:cc:14: ee:19:09:51:60:dc:53:67:90:7f:6b:91:94:fe:a4: 6d:ec:e3:c0:52:c0:18:5a:9a:9d:cc:99:dc:a8:23: 07:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5B:0A:99:63:14:61:8D:BB:02:C0:E2:57:13:21:BE:21:8F:03:15 X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/127604E20F8B11EF87FC5918C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.255.208.0/23 Signature Algorithm: sha256WithRSAEncryption 21:ce:4c:e2:9f:f3:e2:ff:66:d1:e3:c6:16:8f:3d:eb:30:04: d0:7a:fd:44:14:90:23:5c:d8:02:dd:2d:a2:f6:6b:ee:d5:64: d1:9c:53:0a:90:37:af:44:82:9f:49:17:8e:43:a8:15:72:f4: bb:07:b0:f0:4a:c2:8f:30:70:19:b8:c2:b4:9e:87:e5:cb:1f: 28:3c:41:be:5f:04:2c:31:25:bb:7a:2a:9c:39:cf:41:ac:53: d2:e8:85:c7:59:e2:33:ec:36:32:9c:d7:48:1a:a5:e0:5f:72: 7c:03:42:67:e6:47:e3:18:ac:f8:48:b1:87:13:97:97:b4:b4: 0c:7c:a0:9b:5b:ea:6c:e2:b9:43:24:58:fc:50:2d:57:32:10: 3c:79:67:36:a6:5a:9b:6e:8f:d1:54:8b:6d:96:e1:8c:33:3c: e3:b0:02:98:ae:aa:20:49:ac:af:d8:a5:bb:48:64:46:b0:0a: d9:59:07:27:cd:f7:12:e9:bc:20:d8:da:2b:fb:5f:0c:af:7d: 45:25:ba:60:6d:96:67:56:35:d1:0c:60:a1:7a:76:fe:99:d3: 8a:35:8b:97:e8:d9:18:83:1a:73:86:8b:eb:e8:47:0a:d5:fd: 8f:48:4d:a9:31:80:e9:02:b4:86:fb:04:14:b0:7e:64:d7:d5: 25:23:63:a7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjUwODI5MDU1NTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTdkYy1jZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjqabxTlV4ns2H2NGgoeC+ujBY6myKRxalGHJ7eSDm9zEtZU3a0yj0rI2SO1c SLyn8UUadYqpp+TfDdRsgnKpdFRG029uF1hChEu8vTY/9R93jT0uQPAEGfOmOmRe 0KgII2XAe65kE8OygazvKpr4UUN828mjWAlUN8hjri5W/0aihuOJuzWDl6/4Ehcy dFejDAOBn4ZB1XRCpyNXe0RNr0Um0hPUeuVY6ucvclzK/kx2VuYAVjgLXnrtZwS7 1OCO34Ptnh+y/iwyROfsF06tgRyuw4iLp/tScUGx7tw2zBTuGQlRYNxTZ5B/a5GU /qRt7OPAUsAYWpqdzJncqCMHwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFRbCplj FGGNuwLA4lcTIb4hjwMVMB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIyOUIvOEEzRTFEMUEwRjgyMTFFRjgyNjZGMDVFQzRGOUFFMDIvMTI3NjA0RTIw RjhCMTFFRjg3RkM1OTE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ//QMA0GCSqGSIb3DQEBCwUAA4IBAQAhzkzin/Pi/2bR48YWjz3r MATQev1EFJAjXNgC3S2i9mvu1WTRnFMKkDevRIKfSReOQ6gVcvS7B7DwSsKPMHAZ uMK0noflyx8oPEG+XwQsMSW7eiqcOc9BrFPS6IXHWeIz7DYynNdIGqXgX3J8A0Jn 5kfjGKz4SLGHE5eXtLQMfKCbW+ps4rlDJFj8UC1XMhA8eWc2plqbbo/RVIttluGM MzzjsAKYrqogSayv2KW7SGRGsArZWQcnzfcS6bwg2Nor+18Mr31FJbpgbZZnVjXR DGChenb+mdOKNYuX6NkYgxpzhovr6EcK1f2PSE2pMYDpArSG+wQUsH5k19UlI2On -----END CERTIFICATE-----Generated at Thu Mar 26 07:52:53 2026 by rpki-client