$ rpki-client -vvf rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/59AA22D06FFD11EA9160902DC4F9AE02.roa File: 59AA22D06FFD11EA9160902DC4F9AE02.roa (raw, json) Hash identifier: 4ySgU+Qbw483DuuzbhZ9kLRgi9y2rOI0pD1mNDl5sN4= Subject key identifier: C7:09:59:29:49:FD:F1:59:37:F7:77:46:18:FC:BD:04:A5:78:EB:8A Certificate issuer: /CN=A9118309/serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Certificate serial: 0ABD Authority key identifier: B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/59AA22D06FFD11EA9160902DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:47:55 +0000 ROA not before: Thu 08 May 2025 19:56:13 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140042 IP address blocks: 103.147.200.0/23 maxlen: 23 103.147.200.0/24 maxlen: 24 103.147.201.0/24 maxlen: 24 2405:bfc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 19:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2749 (0xabd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118309, serialNumber=B60D5A7C363F0F4D932FE317B90CE6CF80D283C9 Validity Not Before: May 8 19:56:13 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4276a-f7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:15:6d:f8:9c:da:c8:2c:0e:f3:77:5d:ee: d8:a2:ec:9d:53:3e:c9:c2:42:8d:3a:93:fc:85:8f: db:2a:51:6d:80:2d:f9:e5:ed:f2:1d:4d:03:21:70: 99:6d:c2:71:d1:2c:13:cf:5c:22:1c:d8:81:81:fb: ec:4e:be:5b:e3:ce:36:e1:90:a5:6f:0b:15:d0:96: 29:f0:65:6c:d5:a3:81:c9:fd:02:2d:98:f5:e2:bd: c1:91:79:fe:0a:36:da:93:93:79:3d:27:86:9b:b9: 8e:f9:67:46:b6:8b:d4:d9:94:d9:4e:4a:fe:d3:76: b1:35:87:7d:c8:ca:21:7a:f8:f5:08:fd:eb:e8:1c: 0b:6f:de:40:a9:d0:69:1f:87:9c:f1:73:08:7f:a2: f1:bd:2d:3b:33:b6:16:ab:62:72:78:00:cc:ee:a9: 82:ca:54:9e:aa:20:29:5b:98:5a:88:7f:38:cc:4b: 64:98:3d:38:88:27:ec:a4:9b:bf:52:71:82:c7:b1: 04:e1:02:62:51:4a:8c:79:8c:3e:35:da:5b:fc:ba: 1c:d7:77:78:40:03:18:58:1a:c2:b7:4c:e9:f2:34: 39:d9:f9:e2:df:58:84:61:0b:d8:cf:ee:ea:88:34: b2:38:4c:ba:81:c3:4c:fe:c7:45:ff:2c:80:e1:90: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:59:29:49:FD:F1:59:37:F7:77:46:18:FC:BD:04:A5:78:EB:8A X509v3 Authority Key Identifier: keyid:B6:0D:5A:7C:36:3F:0F:4D:93:2F:E3:17:B9:0C:E6:CF:80:D2:83:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/tg1afDY_D02TL-MXuQzmz4DSg8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tg1afDY_D02TL-MXuQzmz4DSg8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118309/1A48DC866FFC11EA88F3D22BC4F9AE02/59AA22D06FFD11EA9160902DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.200.0/23 IPv6: 2405:bfc0::/32 Signature Algorithm: sha256WithRSAEncryption 21:1a:1c:81:20:d6:c0:7c:dc:f8:bd:01:cf:f3:e3:67:d2:b5: 98:81:90:82:de:57:58:0a:f2:4a:59:53:ba:a1:68:dd:56:90: 89:91:79:7b:3f:8c:fc:4c:9a:ee:84:93:7c:d3:57:c6:15:ec: d3:c3:bc:9d:a8:8c:7b:65:98:78:1d:4e:5f:c6:ec:b8:dc:b9: 68:f5:d2:68:9f:85:54:19:cd:2d:ce:95:17:dd:55:f8:33:15: 82:e3:a3:7a:ca:78:d6:f0:e7:4c:e9:bb:9f:81:fc:93:17:e5: f2:78:87:5e:74:d1:de:f2:a2:c5:b6:56:ba:19:46:58:bf:95: a9:76:41:cf:61:ef:06:31:77:d9:5b:41:f5:71:36:0e:e0:0d: 33:c9:10:67:8a:95:c5:75:5c:d8:d0:ed:d0:2d:6a:b4:da:64: c6:22:d3:5d:e2:a0:72:3f:91:08:7e:bb:75:87:98:40:50:ca: 08:42:a7:42:aa:43:54:eb:b5:19:38:52:4a:17:b7:31:fc:96: f3:53:3e:4b:42:55:6f:fa:a2:48:c3:93:72:df:d0:0a:b6:08: c5:fa:85:fc:dc:f8:de:7c:c9:b8:d1:f7:ec:19:ac:2d:41:ea: b6:a4:43:b7:af:ae:ba:76:a7:ee:f0:13:bf:25:0f:f9:27:49: 74:cf:3a:08 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzMDkxMTAvBgNVBAUTKEI2MEQ1QTdDMzYzRjBGNEQ5MzJGRTMxN0I5MENFNkNG ODBEMjgzQzkwHhcNMjUwNTA4MTk1NjEzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjc2YS1mN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPsVbfic2sgsDvN3Xe7YouydUz7JwkKNOpP8hY/bKlFtgC355e3yHU0DIXCZ bcJx0SwTz1wiHNiBgfvsTr5b48424ZClbwsV0JYp8GVs1aOByf0CLZj14r3BkXn+ Cjbak5N5PSeGm7mO+WdGtovU2ZTZTkr+03axNYd9yMohevj1CP3r6BwLb95AqdBp H4ec8XMIf6LxvS07M7YWq2JyeADM7qmCylSeqiApW5haiH84zEtkmD04iCfspJu/ UnGCx7EE4QJiUUqMeYw+Ndpb/Loc13d4QAMYWBrCt0zp8jQ52fni31iEYQvYz+7q iDSyOEy6gcNM/sdF/yyA4ZBxFwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMcJWSlJ /fFZN/d3Rhj8vQSleOuKMB8GA1UdIwQYMBaAFLYNWnw2Pw9Nky/jF7kM5s+A0oPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODMwOS8xQTQ4REM4NjZG RkMxMUVBODhGM0QyMkJDNEY5QUUwMi90ZzFhZkRZX0QwMlRMLU1YdVF6bXo0RFNn OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RnMWFmRFlfRDAyVEwtTVh1UXptejREU2c4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTgzMDkvMUE0OERDODY2RkZDMTFFQTg4RjNEMjJCQzRGOUFFMDIvNTlBQTIyRDA2 RkZEMTFFQTkxNjA5MDJEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5PIMA0EAgACMAcDBQAkBb/AMA0GCSqGSIb3DQEBCwUAA4IBAQAh GhyBINbAfNz4vQHP8+Nn0rWYgZCC3ldYCvJKWVO6oWjdVpCJkXl7P4z8TJruhJN8 01fGFezTw7ydqIx7ZZh4HU5fxuy43Llo9dJon4VUGc0tzpUX3VX4MxWC46N6ynjW 8OdM6bufgfyTF+XyeIdedNHe8qLFtla6GUZYv5WpdkHPYe8GMXfZW0H1cTYO4A0z yRBnipXFdVzY0O3QLWq02mTGItNd4qByP5EIfrt1h5hAUMoIQqdCqkNU67UZOFJK F7cx/JbzUz5LQlVv+qJIw5Ny39AKtgjF+oX83PjefMm40ffsGawtQeq2pEO3r666 dqfu8BO/JQ/5J0l0zzoI -----END CERTIFICATE-----Generated at Sat Mar 7 17:28:28 2026 by rpki-client