$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/2C5C63329E5311EE8D49694BC4F9AE02.roa File: 2C5C63329E5311EE8D49694BC4F9AE02.roa (raw, json) Hash identifier: lCUoUv+f43f2WVQxLTt9/x7joh+RYHOTSuRXDeNCXQ8= Subject key identifier: 43:34:AA:0B:BC:10:29:52:AD:3C:1B:32:B3:CA:41:6E:AF:A6:3D:CF Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Certificate serial: 0289 Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/2C5C63329E5311EE8D49694BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:17:12 +0000 ROA not before: Wed 01 Oct 2025 03:30:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 32402 IP address blocks: 103.71.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 01:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA Validity Not Before: Oct 1 03:30:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47498-c5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:fd:29:66:ec:4a:00:4d:2d:2c:c9:13:82: cc:95:ab:99:0c:c1:26:9a:b1:0e:63:3a:4e:a9:cd: d3:14:7c:96:0e:27:25:3a:9b:40:48:51:17:35:be: 7e:9d:c2:c1:50:82:ac:54:48:46:88:82:96:b6:5f: 9d:37:51:f0:88:b9:93:d3:ef:f7:98:5e:5d:81:f3: 33:a0:63:1a:80:3f:af:03:d3:9d:b6:59:b5:73:2e: 31:26:68:7e:1a:89:1c:d0:ee:9b:c5:e7:3b:3c:fa: e7:7d:3c:ea:11:86:b9:51:23:14:17:c3:99:98:87: 2b:33:93:5d:af:cc:d3:51:34:48:7a:58:cf:72:a5: 06:98:4b:17:e3:27:98:24:c3:00:79:82:de:af:01: 6f:dd:71:87:0e:99:95:64:96:0f:5c:ce:3d:3c:b6: b0:88:e1:64:b9:fa:5a:5a:02:88:2f:b6:75:07:78: 17:bc:9e:eb:4c:74:42:35:1d:d4:86:24:1f:53:c1: ab:81:0f:4d:6b:24:70:ff:6c:d0:d5:c8:5f:97:84: 76:8d:62:18:07:51:35:12:7a:eb:97:21:e7:3c:df: d3:3f:56:02:72:f4:33:a5:eb:d8:34:3b:62:f1:fc: c3:92:d7:26:1f:ee:d3:83:2d:12:e9:6e:dc:e2:80: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:34:AA:0B:BC:10:29:52:AD:3C:1B:32:B3:CA:41:6E:AF:A6:3D:CF X509v3 Authority Key Identifier: keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/2C5C63329E5311EE8D49694BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.71.92.0/24 Signature Algorithm: sha256WithRSAEncryption 78:8e:5b:2e:20:1f:08:6b:4a:58:6a:83:69:9f:d2:be:d6:01: f0:3a:02:0d:36:0f:74:70:80:31:db:96:de:22:39:b3:45:11: 87:60:5b:89:40:63:1f:58:e7:0e:0d:c0:15:78:05:26:2e:73: dc:bb:23:af:c1:4d:ca:6e:c4:05:2e:20:c1:bd:91:49:02:9c: c4:89:57:9b:2d:15:d2:d6:ed:1b:07:e3:56:a4:f2:ed:ae:44: a6:9e:52:dc:25:f8:51:a3:c1:db:83:f4:54:9b:c8:f6:09:fb: 5d:62:8f:27:ab:03:2a:21:75:bd:60:92:a4:6b:e4:63:57:95: f6:ec:33:d1:9e:18:9f:8f:ff:2b:f7:19:bf:a6:5d:a1:f4:b8: 8c:be:ff:d0:20:08:5a:b0:99:a2:c9:d1:03:d8:5b:06:a6:22: f8:e3:17:c7:75:33:7a:9e:f8:05:44:45:9d:ec:83:8c:f4:ce: 81:52:85:e4:97:38:8c:6a:c9:5d:09:5c:6b:28:b8:d9:a2:04: f1:cc:3e:a7:aa:49:f5:e2:7d:11:c9:5d:41:52:24:ff:53:25: f5:25:70:c7:bf:ea:7a:16:32:63:bc:9f:8d:dc:fb:c8:a0:f2: 1b:47:6f:44:a9:f9:f0:cb:93:5d:a4:41:e1:ec:18:4f:16:a3: fc:df:f7:17 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1 MUI5Nzc3RkEwHhcNMjUxMDAxMDMzMDE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzQ5OC1jNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aH9KWbsSgBNLSzJE4LMlauZDMEmmrEOYzpOqc3TFHyWDiclOptASFEXNb5+ ncLBUIKsVEhGiIKWtl+dN1HwiLmT0+/3mF5dgfMzoGMagD+vA9Odtlm1cy4xJmh+ Gokc0O6bxec7PPrnfTzqEYa5USMUF8OZmIcrM5Ndr8zTUTRIeljPcqUGmEsX4yeY JMMAeYLerwFv3XGHDpmVZJYPXM49PLawiOFkufpaWgKIL7Z1B3gXvJ7rTHRCNR3U hiQfU8GrgQ9NayRw/2zQ1chfl4R2jWIYB1E1EnrrlyHnPN/TP1YCcvQzpevYNDti 8fzDktcmH+7Tgy0S6W7c4oDi5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEM0qgu8 EClSrTwbMrPKQW6vpj3PMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTZEREIvRTFDRENERDJCRTFCMTFFREE2MUFDRDg0QzRGOUFFMDIvMkM1QzYzMzI5 RTUzMTFFRThENDk2OTRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ0dcMA0GCSqGSIb3DQEBCwUAA4IBAQB4jlsuIB8Ia0pYaoNpn9K+ 1gHwOgINNg90cIAx25beIjmzRRGHYFuJQGMfWOcODcAVeAUmLnPcuyOvwU3KbsQF LiDBvZFJApzEiVebLRXS1u0bB+NWpPLtrkSmnlLcJfhRo8Hbg/RUm8j2CftdYo8n qwMqIXW9YJKka+RjV5X27DPRnhifj/8r9xm/pl2h9LiMvv/QIAhasJmiydED2FsG piL44xfHdTN6nvgFREWd7IOM9M6BUoXklziMasldCVxrKLjZogTxzD6nqkn14n0R yV1BUiT/UyX1JXDHv+p6FjJjvJ+N3PvIoPIbR29Eqfnwy5NdpEHh7BhPFqP83/cX -----END CERTIFICATE-----Generated at Tue Mar 10 08:52:06 2026 by rpki-client