$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/DAAB94840EC911EBA913852BC4F9AE02.roa File: DAAB94840EC911EBA913852BC4F9AE02.roa (raw, json) Hash identifier: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE= Subject key identifier: F4:C6:DE:FA:E4:3A:E7:FC:3E:34:9C:16:9E:58:94:45:53:F2:50:0A Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Certificate serial: 0822 Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/DAAB94840EC911EBA913852BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:25:02 +0000 ROA not before: Fri 24 Oct 2025 22:11:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 23729 IP address blocks: 103.100.92.0/22 maxlen: 22 103.100.92.0/24 maxlen: 24 103.100.93.0/24 maxlen: 24 103.100.94.0/24 maxlen: 24 103.100.95.0/24 maxlen: 24 118.179.0.0/21 maxlen: 24 2401:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239 Validity Not Before: Oct 24 22:11:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4301e-3d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8e:83:35:16:3f:06:4f:00:13:26:64:f6:00: c5:b2:75:99:9e:1e:2f:9f:58:15:99:d8:05:0c:f4: 18:3d:36:7a:e6:3b:ee:94:46:9d:50:f2:15:c2:df: 81:4d:d0:76:4c:0a:8d:eb:57:21:22:db:af:8c:e3: ac:c5:b4:ce:c0:de:58:3c:64:8a:0a:e8:7c:83:a0: 4f:1a:20:ac:3d:0c:47:b4:06:b5:49:18:83:94:b3: 48:6f:f2:15:b5:48:68:c0:71:d0:f9:1e:c7:f3:fc: e4:09:b2:30:2f:89:88:87:8d:0a:7c:3f:b7:5b:a5: 08:48:54:99:81:40:e3:24:0e:5c:3b:6a:47:bf:bf: 3f:26:ee:f3:21:a9:04:3d:db:f5:2a:8e:3d:d2:bc: 58:ea:41:34:9b:e5:4b:b6:2d:a0:45:9c:56:c3:01: 3b:d2:6f:d4:5a:61:01:97:b2:aa:f7:dc:21:49:db: e9:b8:6a:5d:fe:16:c7:78:2d:c2:ec:93:c5:7c:f0: 0c:29:d4:3d:56:a4:88:e5:8e:c2:9c:41:a2:bc:f4: c6:bd:bd:ee:ca:6f:fc:31:e9:05:d0:fa:a9:eb:92: 41:0b:83:fc:29:19:78:69:4f:f2:dd:81:ad:ec:25: a4:38:0a:35:46:21:22:30:bd:9a:c4:a4:3c:88:fd: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C6:DE:FA:E4:3A:E7:FC:3E:34:9C:16:9E:58:94:45:53:F2:50:0A X509v3 Authority Key Identifier: keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/DAAB94840EC911EBA913852BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.100.92.0/22 118.179.0.0/21 IPv6: 2401:bac0::/32 Signature Algorithm: sha256WithRSAEncryption 5f:e3:65:09:1e:64:b6:57:89:e0:31:1e:fc:79:a3:6e:13:a6: 10:98:35:98:0a:81:de:b6:5a:b4:35:5f:77:53:41:05:9f:27: 4f:6c:9f:63:b2:cc:de:c6:53:d7:a6:3d:92:b3:28:1a:04:05: 53:22:04:57:3f:7f:df:78:80:26:32:6e:b7:6b:05:51:3b:45: 55:07:da:42:bc:39:fa:25:46:14:b0:2e:99:cf:4d:97:fb:39: 2d:59:f0:76:6a:a0:3c:e3:31:9d:e4:1e:d2:6e:05:3b:97:f1: 04:2e:1c:13:b5:09:38:14:e1:8f:eb:f7:3f:8b:d6:b2:af:84: 5c:9e:cb:09:02:4e:10:6f:6c:50:2e:f4:24:94:1f:7b:67:23: 19:ae:5b:64:55:2a:37:68:df:bb:cc:e2:68:81:8e:2f:98:62: 24:5c:3e:8b:c5:00:7b:13:05:fd:6e:ee:ad:aa:db:e4:dc:b3: 56:e7:95:00:13:09:44:fb:5b:11:cd:f6:7b:1a:b2:6a:be:88: bf:89:aa:a4:29:69:29:9a:3a:a4:8a:9c:86:1a:7b:82:aa:49: bf:f9:00:29:a9:fe:50:05:5f:71:97:b0:4d:58:d1:ac:a9:10: 6c:a5:21:04:f0:71:76:43:e7:0b:d6:ea:b4:f7:77:e9:b8:ce: 70:80:57:32 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix QUU1NDQyMzkwHhcNMjUxMDI0MjIxMTA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzAxZS0zZDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Y6DNRY/Bk8AEyZk9gDFsnWZnh4vn1gVmdgFDPQYPTZ65jvulEadUPIVwt+B TdB2TAqN61chItuvjOOsxbTOwN5YPGSKCuh8g6BPGiCsPQxHtAa1SRiDlLNIb/IV tUhowHHQ+R7H8/zkCbIwL4mIh40KfD+3W6UISFSZgUDjJA5cO2pHv78/Ju7zIakE Pdv1Ko490rxY6kE0m+VLti2gRZxWwwE70m/UWmEBl7Kq99whSdvpuGpd/hbHeC3C 7JPFfPAMKdQ9VqSI5Y7CnEGivPTGvb3uym/8MekF0Pqp65JBC4P8KRl4aU/y3YGt 7CWkOAo1RiEiML2axKQ8iP2rvQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPTG3vrk Ouf8PjScFp5YlEVT8lAKMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0QxMjEvOEIwRjhCMEMwRUM4MTFFQkE1MDQyQzJBQzRGOUFFMDIvREFBQjk0ODQw RUM5MTFFQkE5MTM4NTJCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ2RcAwQDdrMAMA0EAgACMAcDBQAkAbrAMA0GCSqGSIb3DQEBCwUA A4IBAQBf42UJHmS2V4ngMR78eaNuE6YQmDWYCoHetlq0NV93U0EFnydPbJ9jssze xlPXpj2SsygaBAVTIgRXP3/feIAmMm63awVRO0VVB9pCvDn6JUYUsC6Zz02X+zkt WfB2aqA84zGd5B7SbgU7l/EELhwTtQk4FOGP6/c/i9ayr4RcnssJAk4Qb2xQLvQk lB97ZyMZrltkVSo3aN+7zOJogY4vmGIkXD6LxQB7EwX9bu6tqtvk3LNW55UAEwlE +1sRzfZ7GrJqvoi/iaqkKWkpmjqkipyGGnuCqkm/+QApqf5QBV9xl7BNWNGsqRBs pSEE8HF2Q+cL1uq093fpuM5wgFcy -----END CERTIFICATE-----Generated at Thu Mar 26 22:04:25 2026 by rpki-client