$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa File: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (raw, json) Hash identifier: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8= Subject key identifier: F7:84:80:08:A5:65:8A:9E:2C:3F:34:9B:A4:98:37:B2:E9:D2:27:16 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0516 Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:01:20 +0000 ROA not before: Wed 01 Oct 2025 00:27:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138170 IP address blocks: 103.121.218.0/23 maxlen: 23 103.121.218.0/24 maxlen: 24 103.121.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Oct 1 00:27:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a454c0-86f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:89:5e:69:ec:af:10:f0:31:bc:2c:80:83: 11:22:03:ae:11:72:96:d5:aa:5b:c0:97:7d:f0:e9: 15:78:e9:4f:be:e6:19:b2:37:9b:bf:09:c2:30:4b: d6:9b:b7:58:74:55:da:fd:40:a8:2a:57:54:f0:9e: 6c:11:e4:18:91:8f:38:7f:2f:5d:27:1f:98:b8:47: 2d:7c:e0:8b:e9:62:4b:c3:0a:8f:cf:58:ea:86:55: 98:b6:f9:7a:26:6e:43:a7:8d:2c:8e:d9:50:85:3a: 05:0a:90:8c:16:16:a8:57:a3:8a:d0:2d:9e:98:6b: d9:7a:82:b5:34:30:90:d2:83:e1:9d:97:c6:db:b1: 43:6e:50:58:65:a5:ba:e1:c1:aa:c8:06:16:1c:b7: 68:76:19:3b:28:62:fb:54:6c:4b:d7:dd:9e:16:80: 4c:86:d4:02:61:ba:10:28:68:3d:e6:63:dd:36:0f: b8:4c:ea:c7:6d:ff:46:8f:c5:eb:a8:3f:f6:67:ec: 84:2e:c6:fa:2c:d7:c0:63:a1:b6:60:75:06:72:ba: b2:75:66:f6:c4:61:fa:8c:81:4d:aa:68:4b:30:1a: 36:ce:b0:8b:12:48:0a:7e:95:1f:53:9b:39:ba:cd: 87:80:ca:d4:59:62:1e:75:86:a0:c5:61:cc:a8:5f: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:84:80:08:A5:65:8A:9E:2C:3F:34:9B:A4:98:37:B2:E9:D2:27:16 X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/1291593861AC11ED9EFE1B4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.218.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:0b:29:5e:48:a6:f5:9e:20:59:07:99:d8:d2:4f:28:e7:52: 34:0f:1d:5d:e8:ab:fd:ae:f1:ad:79:0e:20:5a:8d:b4:0d:5d: c4:d5:09:64:a2:f9:08:9f:ab:e1:5b:e3:63:aa:df:7e:3a:d2: eb:87:c4:ad:50:69:02:14:84:62:c2:a0:39:79:bd:f7:06:c9: 6e:14:b8:bf:82:2a:7c:36:d8:22:7b:6c:77:fb:f3:37:70:fe: e4:2d:22:6f:ab:53:d6:8e:00:9c:d3:0a:26:7c:e9:ef:3b:a5: bc:ec:fc:09:9b:62:ff:cc:e6:75:a5:b1:ea:42:59:3f:3b:6e: 8e:e8:c0:de:5a:ff:17:7a:26:71:e7:36:cd:31:00:3f:54:7b: de:7b:07:f1:8b:c7:e1:21:a0:f4:7c:85:8e:52:75:11:75:16: b9:ad:c3:ad:38:85:c1:5c:bd:76:10:eb:a9:71:b8:fd:35:18: 6a:58:52:41:e1:f5:8d:1d:3e:26:e3:0c:37:b6:e1:80:d2:8f: 3d:bb:f2:60:22:c2:1e:1b:2d:84:59:26:a6:5b:56:6d:6c:b9: 00:f5:59:04:fe:8d:8a:52:a3:36:d2:a2:1b:1a:c4:eb:9d:ad: 28:92:ff:7c:a7:43:5e:cf:a2:84:0e:ba:ec:e2:3b:04:df:7e: 32:ed:c3:1e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjUxMDAxMDAyNzE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTRjMC04NmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zyJXmnsrxDwMbwsgIMRIgOuEXKW1apbwJd98OkVeOlPvuYZsjebvwnCMEvW m7dYdFXa/UCoKldU8J5sEeQYkY84fy9dJx+YuEctfOCL6WJLwwqPz1jqhlWYtvl6 Jm5Dp40sjtlQhToFCpCMFhaoV6OK0C2emGvZeoK1NDCQ0oPhnZfG27FDblBYZaW6 4cGqyAYWHLdodhk7KGL7VGxL192eFoBMhtQCYboQKGg95mPdNg+4TOrHbf9Gj8Xr qD/2Z+yELsb6LNfAY6G2YHUGcrqydWb2xGH6jIFNqmhLMBo2zrCLEkgKfpUfU5s5 us2HgMrUWWIedYagxWHMqF+blwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPeEgAil ZYqeLD80m6SYN7Lp0icWMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJDODkvOEZBOTdBRkU0NTEwMTFFQzhDODZFRDQ4QzRGOUFFMDIvMTI5MTU5Mzg2 MUFDMTFFRDlFRkUxQjREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3naMA0GCSqGSIb3DQEBCwUAA4IBAQBvCyleSKb1niBZB5nY0k8o 51I0Dx1d6Kv9rvGteQ4gWo20DV3E1QlkovkIn6vhW+Njqt9+OtLrh8StUGkCFIRi wqA5eb33BsluFLi/gip8Ntgie2x3+/M3cP7kLSJvq1PWjgCc0womfOnvO6W87PwJ m2L/zOZ1pbHqQlk/O26O6MDeWv8XeiZx5zbNMQA/VHveewfxi8fhIaD0fIWOUnUR dRa5rcOtOIXBXL12EOupcbj9NRhqWFJB4fWNHT4m4ww3tuGA0o89u/JgIsIeGy2E WSamW1ZtbLkA9VkE/o2KUqM20qIbGsTrna0okv98p0Nez6KEDrrs4jsE334y7cMe -----END CERTIFICATE-----Generated at Fri Mar 27 08:16:21 2026 by rpki-client