$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa File: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (raw, json) Hash identifier: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0= Subject key identifier: 90:44:3F:53:1D:FC:65:AA:7B:EF:73:7E:19:5B:A2:00:AA:8A:63:CB Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 05AC Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:47:33 +0000 ROA not before: Thu 02 Oct 2025 23:55:02 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136258 IP address blocks: 103.75.116.0/24 maxlen: 24 103.75.118.0/24 maxlen: 24 103.75.119.0/24 maxlen: 24 103.97.203.0/24 maxlen: 24 103.106.228.0/24 maxlen: 24 103.106.229.0/24 maxlen: 24 103.106.230.0/24 maxlen: 24 103.106.231.0/24 maxlen: 24 223.165.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Oct 2 23:55:02 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a594f5-bc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:fd:be:6c:01:ab:d2:d5:89:b4:9d:50:00: 4a:e3:0a:73:28:85:5a:aa:30:35:8b:09:69:52:52: 2e:1b:3c:6b:c3:e6:de:7d:4a:b1:03:6b:af:da:da: e3:48:a7:e1:29:02:43:b2:e0:bb:ab:bb:14:d7:59: 37:8f:0b:75:e0:eb:21:69:55:26:04:1c:d1:9e:1e: f6:6b:34:b0:60:f0:54:f7:25:ef:38:59:a5:b1:11: 8c:d9:a3:b1:5b:fc:b1:f4:75:c1:77:4e:1a:e8:d2: 81:2a:b9:da:16:93:c1:25:a8:82:11:35:2e:65:a3: b5:9a:0c:d4:09:0b:e9:dc:1f:42:f2:3e:e6:1a:53: 5b:69:53:93:bf:9a:0a:bc:32:87:02:76:9b:9a:26: d5:05:c8:ff:69:cc:a0:fe:98:d5:25:c7:73:d1:b2: 5d:f6:94:4c:f7:39:3b:3b:95:f4:b5:9b:c1:85:d3: 91:8e:81:65:c1:17:88:50:50:60:3f:47:41:71:b6: 9b:ba:5b:4c:93:ce:46:12:90:91:fe:51:32:c3:8b: 91:a0:33:d1:a9:f6:be:57:83:a7:7b:51:de:4f:47: 9d:7f:da:da:08:79:f9:b5:af:fc:68:22:f5:95:d9: d5:bf:4a:fb:ca:41:fe:19:e8:51:6a:0c:7a:be:50: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:44:3F:53:1D:FC:65:AA:7B:EF:73:7E:19:5B:A2:00:AA:8A:63:CB X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/5BC9A0B0C91211ED91C9A325C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.75.116.0/24 103.75.118.0/23 103.97.203.0/24 103.106.228.0/22 223.165.5.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:ba:af:6a:ac:af:73:24:06:b7:db:24:b6:55:84:89:b7:73: 08:ed:4d:f8:d4:c9:3e:75:09:23:e3:f0:72:0c:a5:df:4e:a8: 96:2b:ed:27:85:37:88:83:32:29:05:74:2e:86:7e:4c:96:d3: a8:06:2c:1a:d2:59:cd:3e:9e:da:12:0f:3f:da:09:30:e4:50: b1:05:72:c6:39:4e:64:3c:12:e3:35:c0:bd:e1:4b:83:ce:9c: 1f:91:32:3a:7b:98:a3:de:93:23:9b:ad:bb:f9:92:ac:5b:6a: 85:ff:ae:43:69:3c:d7:2d:cd:a5:1a:dc:cb:7e:f8:da:3f:9d: ee:80:56:05:f6:fc:8d:69:28:48:ff:c8:ea:5a:db:57:c6:8e: b9:4a:b2:e1:d2:10:3a:c1:94:f4:b3:ab:23:e1:19:3f:0a:6a: 38:9d:f3:9b:1b:09:69:a5:7c:0a:d6:5e:5c:86:da:09:58:ca: f1:f6:3a:65:d3:33:9a:75:d8:7e:05:1e:ea:13:84:db:02:d1: 86:5a:6e:8b:8a:63:69:1a:42:19:ee:0c:30:2f:44:03:cc:85: 7f:99:c2:a6:40:7f:48:31:12:0a:eb:64:db:ee:44:67:b4:1d: 35:78:cb:93:76:18:31:1b:99:ad:51:a7:5c:2a:6a:4f:52:8e: cf:6c:5a:46 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUxMDAyMjM1NTAyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTRmNS1iYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkjX9vmwBq9LVibSdUABK4wpzKIVaqjA1iwlpUlIuGzxrw+befUqxA2uv2trj SKfhKQJDsuC7q7sU11k3jwt14OshaVUmBBzRnh72azSwYPBU9yXvOFmlsRGM2aOx W/yx9HXBd04a6NKBKrnaFpPBJaiCETUuZaO1mgzUCQvp3B9C8j7mGlNbaVOTv5oK vDKHAnabmibVBcj/acyg/pjVJcdz0bJd9pRM9zk7O5X0tZvBhdORjoFlwReIUFBg P0dBcbabultMk85GEpCR/lEyw4uRoDPRqfa+V4One1HeT0edf9raCHn5ta/8aCL1 ldnVv0r7ykH+GehRagx6vlB4OQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJBEP1Md /GWqe+9zfhlbogCqimPLMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTJFNzAvQkVDNUNBNzIyMTFCMTFFQ0I0NUZENDJGQzRGOUFFMDIvNUJDOUEwQjBD OTEyMTFFRDkxQzlBMzI1QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZ0t0AwQBZ0t2AwQAZ2HLAwQCZ2rkAwQA36UFMA0GCSqGSIb3DQEB CwUAA4IBAQCduq9qrK9zJAa32yS2VYSJt3MI7U341Mk+dQkj4/ByDKXfTqiWK+0n hTeIgzIpBXQuhn5MltOoBiwa0lnNPp7aEg8/2gkw5FCxBXLGOU5kPBLjNcC94UuD zpwfkTI6e5ij3pMjm627+ZKsW2qF/65DaTzXLc2lGtzLfvjaP53ugFYF9vyNaShI /8jqWttXxo65SrLh0hA6wZT0s6sj4Rk/Cmo4nfObGwlppXwK1l5chtoJWMrx9jpl 0zOaddh+BR7qE4TbAtGGWm6LimNpGkIZ7gwwL0QDzIV/mcKmQH9IMRIK62Tb7kRn tB01eMuTdhgxG5mtUadcKmpPUo7PbFpG -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:19 2026 by rpki-client