$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa File: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (raw, json) Hash identifier: vlIQijSPBbvP9L65iKqCctaPnA/4JGm7yNBkYuL1NNg= Subject key identifier: B6:90:89:3A:FA:7F:5D:5D:5B:E0:98:30:8C:5A:20:4B:39:CE:6B:D0 Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Certificate serial: 01C7 Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:25:00 +0000 ROA not before: Fri 27 Feb 2026 03:22:56 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.150.252.0/24 maxlen: 24 202.74.46.0/24 maxlen: 24 2400:a4a0:1::/48 maxlen: 48 2400:a4a0:30::/48 maxlen: 48 2400:a4a0:40::/48 maxlen: 48 2400:a4a0:41::/48 maxlen: 48 2400:a4a0:42::/48 maxlen: 48 2400:a4a0:90::/48 maxlen: 48 2400:a4a0:100::/48 maxlen: 48 2400:a4a0:101::/48 maxlen: 48 2400:a4a0:115::/48 maxlen: 48 2400:a4a0:a100::/48 maxlen: 48 2400:a4a0:aaa2::/48 maxlen: 48 2400:a4a0:aaa3::/48 maxlen: 48 2400:a4a0:aaa4::/48 maxlen: 48 2400:a4a0:aaa5::/48 maxlen: 48 2400:a4a0:b100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Validity Not Before: Feb 27 03:22:56 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a61c4c-49d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:7e:e3:53:fe:cd:68:93:c8:45:bb:c2:b1: 63:74:8c:cd:df:ec:4f:f5:a3:1f:3c:71:06:68:7f: b4:17:07:5c:02:c1:f7:8f:0a:2c:db:a7:74:0b:28: 12:67:85:8e:d0:cb:59:7f:db:f3:f9:c3:18:0d:35: a1:38:af:cc:b2:6a:90:eb:4c:2c:b8:43:83:dc:d6: 9c:22:2a:8c:df:85:86:88:c2:8e:d5:77:83:a3:24: 86:c8:40:5a:66:ea:f4:85:e7:81:c3:6e:5c:29:d3: b4:67:05:0e:58:aa:a1:9f:e7:d9:bc:9b:e7:07:cd: 93:e2:4e:5c:46:d4:6d:b6:61:70:9e:9b:48:89:fb: eb:12:40:55:85:8c:f2:6d:ff:91:77:7b:46:7b:e4: 1c:c5:fc:9f:ab:c4:90:a8:20:4d:96:e9:22:06:ae: 8d:d8:62:14:a9:89:e4:15:d5:4d:7d:5e:ee:be:49: 61:3a:a3:d6:14:eb:41:6d:a3:e9:36:ce:fd:f4:4f: c4:b0:e7:bc:e6:43:23:1c:52:ac:ae:6d:d4:fb:e0: 14:f4:bc:a3:ae:6d:53:d0:f2:cb:ed:c6:44:43:9a: a7:8a:2f:e2:5f:d1:ff:43:a2:dd:2a:23:52:bf:3e: 8b:44:3a:65:35:1f:c7:0d:4d:f4:5f:d0:93:b8:01: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:90:89:3A:FA:7F:5D:5D:5B:E0:98:30:8C:5A:20:4B:39:CE:6B:D0 X509v3 Authority Key Identifier: keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.150.252.0/24 202.74.46.0/24 IPv6: 2400:a4a0:1::/48 2400:a4a0:30::/48 2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff 2400:a4a0:90::/48 2400:a4a0:100::/47 2400:a4a0:115::/48 2400:a4a0:a100::/48 2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff 2400:a4a0:b100::/48 Signature Algorithm: sha256WithRSAEncryption 01:0c:39:87:2d:4d:a0:cc:ad:b4:3a:51:da:6f:91:7b:99:58: 56:8d:f1:75:8a:1a:d6:22:68:93:ef:8d:ad:42:90:bb:80:0d: c7:0f:d9:11:85:0d:5a:33:cb:7c:3d:eb:96:a1:8b:24:dd:61: 06:59:55:89:0a:d2:6d:8b:5c:ff:c0:3d:28:2f:b2:16:24:46: 85:05:11:76:a0:71:81:6a:7b:1b:16:d9:e6:da:32:6d:07:16: de:53:d7:04:53:a6:f4:2c:b3:99:47:17:60:a7:d4:9e:73:ae: 4b:d3:ae:9c:e0:0b:4c:20:26:74:7f:df:9d:db:b0:b8:35:44: ee:e8:2e:3c:49:57:de:21:eb:4c:2f:2f:34:07:2e:ea:57:95: b4:3d:a9:68:d0:78:01:86:50:da:bf:87:70:5a:51:e1:85:2c: b9:f9:e6:c8:6e:2f:03:a1:9b:20:68:d3:fc:86:99:7b:67:e2: a7:90:db:04:f4:f4:f0:8b:50:be:7b:00:d9:db:d9:4d:72:4a: bd:c9:e5:55:bc:98:4d:a1:22:c2:8a:f4:40:b6:36:42:d6:1b: 99:f8:2b:83:95:5f:55:c2:94:b7:ae:06:95:e3:c9:20:f7:98: 20:43:ae:db:4c:07:b4:55:a4:80:a0:5e:98:9f:a4:d0:a2:e4: 32:c7:6e:3e -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx M0Y4MEZCQkIwHhcNMjYwMjI3MDMyMjU2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWM0Yy00OWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4F+41P+zWiTyEW7wrFjdIzN3+xP9aMfPHEGaH+0FwdcAsH3jwos26d0CygS Z4WO0MtZf9vz+cMYDTWhOK/MsmqQ60wsuEOD3NacIiqM34WGiMKO1XeDoySGyEBa Zur0heeBw25cKdO0ZwUOWKqhn+fZvJvnB82T4k5cRtRttmFwnptIifvrEkBVhYzy bf+Rd3tGe+Qcxfyfq8SQqCBNlukiBq6N2GIUqYnkFdVNfV7uvklhOqPWFOtBbaPp Ns799E/EsOe85kMjHFKsrm3U++AU9Lyjrm1T0PLL7cZEQ5qnii/iX9H/Q6LdKiNS vz6LRDplNR/HDU30X9CTuAGElQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFLaQiTr6 f11dW+CYMIxaIEs5zmvQMB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlGMjIvQ0Y5QkY1RkU4RjJGMTFFRTlDQkZEOTYxQzRGOUFFMDIvNDEyMEY2QTI4 RjMwMTFFRUE2MUFDRjYyQzRGOUFFMDIucm9hMIGWBggrBgEFBQcBBwEB/wSBhjCB gzASBAIAATAMAwQAZ5b8AwQAykouMG0EAgACMGcDBwAkAKSgAAEDBwAkAKSgADAw EgMHBiQApKAAQAMHACQApKAAQgMHACQApKAAkAMHASQApKABAAMHACQApKABFQMH ACQApKChADASAwcBJACkoKqiAwcBJACkoKqkAwcAJACkoLEAMA0GCSqGSIb3DQEB CwUAA4IBAQABDDmHLU2gzK20OlHab5F7mVhWjfF1ihrWImiT742tQpC7gA3HD9kR hQ1aM8t8PeuWoYsk3WEGWVWJCtJti1z/wD0oL7IWJEaFBRF2oHGBansbFtnm2jJt BxbeU9cEU6b0LLOZRxdgp9Sec65L066c4AtMICZ0f9+d27C4NUTu6C48SVfeIetM Ly80By7qV5W0Palo0HgBhlDav4dwWlHhhSy5+ebIbi8DoZsgaNP8hpl7Z+KnkNsE 9PTwi1C+ewDZ29lNckq9yeVVvJhNoSLCivRAtjZC1huZ+CuDlV9VwpS3rgaV48kg 95ggQ67bTAe0VaSAoF6Yn6TQouQyx24+ -----END CERTIFICATE-----Generated at Thu Mar 26 03:29:08 2026 by rpki-client