$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/6DDF503008E611F1A622C6722C3D8C67.roa File: 6DDF503008E611F1A622C6722C3D8C67.roa (raw, json) Hash identifier: rDAKA9Yax4eCoXJX6ldW5NMo2xVyobP0qNrUYPYQF3s= Subject key identifier: 97:35:95:C2:7C:B2:16:CD:27:46:56:0F:ED:32:55:9F:07:89:92:B7 Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Certificate serial: 0112 Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/6DDF503008E611F1A622C6722C3D8C67.roa Signing time: Thu 26 Mar 2026 13:12:38 +0000 ROA not before: Thu 26 Mar 2026 13:12:38 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138643 IP address blocks: 103.49.41.0/24 maxlen: 24 103.49.42.0/24 maxlen: 24 103.49.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9 Validity Not Before: Mar 26 13:12:38 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c530c6-a1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:99:86:cf:7d:58:12:47:fc:a9:86:67:47: 2d:81:79:7d:79:15:f8:cc:35:67:46:da:d3:ec:68: 8d:b3:f8:e9:45:99:0d:0a:d4:67:c8:4f:1e:81:15: 87:70:08:53:7f:8a:7f:27:60:65:76:b3:07:4f:8a: 5e:1d:7e:0b:96:fe:4d:8e:66:3c:cd:71:73:49:22: be:dc:7d:72:ea:9e:4a:40:96:c3:3c:74:6f:38:40: 7f:b0:5c:e8:07:68:66:70:a7:a0:42:96:34:43:45: f8:b9:61:be:1a:6a:49:37:68:13:5c:51:e6:6c:f8: b8:df:6d:17:55:16:8a:a1:66:02:0a:0d:49:e0:88: 33:64:8c:6c:87:4d:66:50:c8:e8:de:40:7e:8b:19: fc:71:c2:2c:ce:8a:29:15:6d:47:67:9c:73:14:4e: 1c:c6:4f:62:38:03:43:28:98:42:d4:96:8b:46:7c: b3:c1:da:b6:2d:13:5c:39:43:d2:91:9c:f7:5c:e7: 9a:4f:06:0a:e9:47:a9:1f:d1:15:d0:c9:dc:02:a1: b1:84:1a:d7:28:61:45:79:a2:f7:05:dc:d5:8b:aa: d6:97:ed:bc:3b:33:ed:9a:2a:55:dd:49:f0:41:a1: 84:fd:86:51:03:d7:cc:e6:9f:43:65:39:ab:8f:1e: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:35:95:C2:7C:B2:16:CD:27:46:56:0F:ED:32:55:9F:07:89:92:B7 X509v3 Authority Key Identifier: keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/6DDF503008E611F1A622C6722C3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.49.41.0-103.49.43.255 Signature Algorithm: sha256WithRSAEncryption 7d:1a:85:d1:6e:32:a2:30:37:0c:79:33:84:b9:67:dd:f9:41: 3d:dc:0f:ac:b1:b3:15:0b:38:4a:85:4e:09:be:17:8c:b4:32: 1f:e0:97:7c:b0:82:00:04:b8:ee:2b:98:18:61:99:5f:f4:86: 1b:67:ef:03:ce:c3:63:f2:10:7d:31:83:03:ff:62:95:8f:3d: d1:c1:f8:80:bd:c8:fe:f1:88:1f:7c:42:ec:14:21:58:09:4b: 06:cf:38:60:b0:08:df:76:25:b9:94:04:f9:99:d6:dc:05:5e: 9f:2a:68:f9:68:f9:55:bb:cc:e8:06:01:71:05:79:c3:ce:42: 33:51:3d:a7:88:7e:b5:39:96:eb:79:d2:dd:84:dc:69:38:ff: e0:43:cd:a5:cc:b6:19:62:2b:e7:ae:0e:6a:cc:87:1c:90:a9: 81:f0:05:be:88:50:74:5f:f7:ca:ee:d6:28:85:df:b9:82:95: ee:cf:9f:ef:b6:37:c1:23:29:b1:5b:53:1e:a5:65:dd:4d:8f: 4a:76:e6:97:cf:57:42:63:c1:2c:c7:f0:df:48:c6:8c:5d:f2: f7:c2:2e:09:5b:fe:2b:d9:1d:22:60:bf:a7:0e:c7:0b:fa:d7: 1d:6e:eb:6e:12:78:3c:a2:8f:37:6a:4d:2b:4f:aa:7b:da:89: c2:6c:30:e0 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4 QTZFRENGQjkwHhcNMjYwMzI2MTMxMjM4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1MzBjNi1hMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucOZhs99WBJH/KmGZ0ctgXl9eRX4zDVnRtrT7GiNs/jpRZkNCtRnyE8egRWH cAhTf4p/J2BldrMHT4peHX4Llv5NjmY8zXFzSSK+3H1y6p5KQJbDPHRvOEB/sFzo B2hmcKegQpY0Q0X4uWG+GmpJN2gTXFHmbPi4320XVRaKoWYCCg1J4IgzZIxsh01m UMjo3kB+ixn8ccIszoopFW1HZ5xzFE4cxk9iOANDKJhC1JaLRnyzwdq2LRNcOUPS kZz3XOeaTwYK6UepH9EV0MncAqGxhBrXKGFFeaL3BdzVi6rWl+28OzPtmipV3Unw QaGE/YZRA9fM5p9DZTmrjx5+fQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFJc1lcJ8 shbNJ0ZWD+0yVZ8HiZK3MB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjdFRUIvRjU3Qzk0QjBEM0JBMTFFRjk0N0IwNTgwQzRGOUFFMDIvNkRERjUwMzAw OEU2MTFGMUE2MjJDNjcyMkMzRDhDNjcucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABnMSkDBAJnMSgwDQYJKoZIhvcNAQELBQADggEBAH0ahdFuMqIw Nwx5M4S5Z935QT3cD6yxsxULOEqFTgm+F4y0Mh/gl3ywggAEuO4rmBhhmV/0hhtn 7wPOw2PyEH0xgwP/YpWPPdHB+IC9yP7xiB98QuwUIVgJSwbPOGCwCN92JbmUBPmZ 1twFXp8qaPlo+VW7zOgGAXEFecPOQjNRPaeIfrU5lut50t2E3Gk4/+BDzaXMthli K+euDmrMhxyQqYHwBb6IUHRf98ru1iiF37mCle7Pn++2N8EjKbFbUx6lZd1Nj0p2 5pfPV0JjwSzH8N9Ixoxd8vfCLglb/ivZHSJgv6cOxwv61x1u624SeDyijzdqTStP qnvaicJsMOA= -----END CERTIFICATE-----Generated at Sun Apr 5 21:04:16 2026 by rpki-client