$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/E135D94C04A511EF84B5D783C4F9AE02.roa File: E135D94C04A511EF84B5D783C4F9AE02.roa (raw, json) Hash identifier: R/+mpIF7D2Ei1AS7/k2esMe46P023CSHvwSxqyATt3o= Subject key identifier: 84:C1:15:E7:55:54:59:F7:00:1B:D9:22:5E:C1:F2:07:78:A7:1C:EC Certificate issuer: /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421 Certificate serial: 0167 Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/E135D94C04A511EF84B5D783C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:54:24 +0000 ROA not before: Thu 01 May 2025 05:12:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152709 IP address blocks: 103.39.120.0/23 maxlen: 23 103.39.120.0/24 maxlen: 24 103.39.121.0/24 maxlen: 24 2001:df3:b740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421 Validity Not Before: May 1 05:12:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a59690-03aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6b:e7:c8:47:f8:72:10:1f:e1:1c:27:fb:98: 38:2b:6b:d0:2d:2a:e9:e4:3e:dd:26:36:c6:b8:42: 74:16:fa:79:d7:7f:6f:df:bc:53:fc:8b:ba:3b:ad: 0d:fb:c9:0c:e0:ac:cd:99:0c:d7:a1:e0:b4:c0:18: 73:bb:c3:0f:0f:e0:99:51:b2:f4:be:27:03:bc:e7: 87:3b:99:11:9e:44:40:a2:6a:aa:e6:ce:ee:58:68: 9b:c1:6b:e5:3b:a4:b1:5e:6e:ae:2a:63:05:8f:ef: ca:49:66:62:6d:69:c8:e9:09:9e:45:13:63:84:b4: 46:e5:36:94:75:00:f2:76:17:2b:9d:a5:d7:70:51: 9c:a4:63:3e:2a:42:83:31:50:82:2a:d9:30:e5:30: 10:64:e2:97:c1:ea:cf:7a:5f:46:33:7d:f5:f9:72: c2:e0:4a:bb:a7:f7:e7:21:2c:b4:4a:1a:5a:ab:b3: 09:ee:95:8c:a2:0b:a1:22:3b:a0:64:f3:43:bf:5e: 22:e1:f8:19:cb:77:f2:1d:44:ab:81:38:b9:c1:87: 12:a3:0c:ba:2d:75:5b:ae:a4:26:74:91:aa:00:37: 71:23:da:f8:2f:c4:49:b8:12:a1:50:76:11:89:e5: b0:f4:fc:88:4b:05:c7:ee:b7:09:a8:fe:d3:ab:f7: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C1:15:E7:55:54:59:F7:00:1B:D9:22:5E:C1:F2:07:78:A7:1C:EC X509v3 Authority Key Identifier: keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/E135D94C04A511EF84B5D783C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.120.0/23 IPv6: 2001:df3:b740::/48 Signature Algorithm: sha256WithRSAEncryption 9b:2f:b9:9c:71:5d:44:ed:70:f4:08:a3:d8:10:54:49:93:0c: 48:2e:6a:69:48:96:36:0d:43:a3:1a:82:19:3e:8b:aa:fe:a2: 6e:0a:52:aa:dc:13:f5:0d:30:0e:43:5a:f7:8e:d1:7d:86:06: 8c:e1:59:7f:5a:0a:c5:71:62:95:31:a8:bc:c9:91:77:81:2d: 22:4a:a0:83:9d:44:8f:97:47:d0:c3:c5:15:99:e9:cc:f9:41: 55:e5:6f:69:d7:6e:b7:2d:98:a4:e3:2a:62:35:3e:aa:b4:2f: ce:12:b2:74:8b:12:df:4b:d1:87:27:6e:c7:e3:47:01:e8:7b: 5f:f3:b7:a0:d1:cc:f7:3f:7f:dd:dc:0e:1b:c7:57:48:51:bc: 6f:21:16:d6:10:9a:b7:6e:3e:70:7e:55:43:19:57:b8:15:ff: 96:9a:cc:cb:d6:69:fa:a7:76:0b:61:a6:66:4b:08:7c:d7:fa: 69:4a:6d:0e:81:03:24:22:d6:a2:73:97:b4:f7:bb:83:4c:c4: aa:25:05:08:e3:bd:c6:03:ba:e9:2c:72:6e:32:69:55:2f:78: c9:4a:b9:ee:21:b5:fc:2a:29:bb:65:11:0b:87:e6:87:28:19: d1:e9:90:05:9c:18:f4:4f:1a:c9:e7:70:ae:05:82:c7:39:2f: c6:32:69:98 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NTYxMTAvBgNVBAUTKDU0QUE0RjIxMTNBMEQxQTFCN0VFNTUxMkJFQUU1Mzcx RUM2REE0MjEwHhcNMjUwNTAxMDUxMjAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTY5MC0wM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WvnyEf4chAf4Rwn+5g4K2vQLSrp5D7dJjbGuEJ0Fvp5139v37xT/Iu6O60N +8kM4KzNmQzXoeC0wBhzu8MPD+CZUbL0vicDvOeHO5kRnkRAomqq5s7uWGibwWvl O6SxXm6uKmMFj+/KSWZibWnI6QmeRRNjhLRG5TaUdQDydhcrnaXXcFGcpGM+KkKD MVCCKtkw5TAQZOKXwerPel9GM331+XLC4Eq7p/fnISy0Shpaq7MJ7pWMoguhIjug ZPNDv14i4fgZy3fyHUSrgTi5wYcSowy6LXVbrqQmdJGqADdxI9r4L8RJuBKhUHYR ieWw9PyISwXH7rcJqP7Tq/dfrQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFITBFedV VFn3ABvZIl7B8gd4pxzsMB8GA1UdIwQYMBaAFFSqTyEToNGht+5VEr6uU3HsbaQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU1Ni9CMTQ1RDAyRTAx N0MxMUVGQjg2NDMyNUFDNEY5QUUwMi9WS3BQSVJPZzBhRzM3bFVTdnE1VGNleHRw Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZLcFBJUk9nMGFHMzdsVVN2cTVUY2V4dHBDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NTYvQjE0NUQwMkUwMTdDMTFFRkI4NjQzMjVBQzRGOUFFMDIvRTEzNUQ5NEMw NEE1MTFFRjg0QjVENzgzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZyd4MA8EAgACMAkDBwAgAQ3zt0AwDQYJKoZIhvcNAQELBQADggEB AJsvuZxxXUTtcPQIo9gQVEmTDEguamlIljYNQ6Maghk+i6r+om4KUqrcE/UNMA5D WveO0X2GBozhWX9aCsVxYpUxqLzJkXeBLSJKoIOdRI+XR9DDxRWZ6cz5QVXlb2nX brctmKTjKmI1Pqq0L84SsnSLEt9L0YcnbsfjRwHoe1/zt6DRzPc/f93cDhvHV0hR vG8hFtYQmrduPnB+VUMZV7gV/5aazMvWafqndgthpmZLCHzX+mlKbQ6BAyQi1qJz l7T3u4NMxKolBQjjvcYDuukscm4yaVUveMlKue4htfwqKbtlEQuH5ocoGdHpkAWc GPRPGsnncK4Fgsc5L8YyaZg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:40 2026 by rpki-client