$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/59962840D01911EE96596B16C4F9AE02.roa File: 59962840D01911EE96596B16C4F9AE02.roa (raw, json) Hash identifier: y1hStzic/YZJ1I+8JzXAyWcd1KU9dmVU0MUq2vt+Xgs= Subject key identifier: AB:78:55:99:2B:05:29:39:21:21:74:E3:40:23:1C:AE:29:E5:2E:60 Certificate issuer: /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Certificate serial: 01DF Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/59962840D01911EE96596B16C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:12:35 +0000 ROA not before: Thu 09 Oct 2025 05:03:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 213122 IP address blocks: 103.96.80.0/22 maxlen: 24 103.131.130.0/23 maxlen: 24 103.199.98.0/24 maxlen: 24 103.199.99.0/24 maxlen: 24 2401:3a60:1100::/40 maxlen: 40 2401:3a60:1200::/40 maxlen: 40 2401:3a60:1300::/40 maxlen: 40 2401:3a60:1400::/40 maxlen: 40 2401:3a60:1500::/40 maxlen: 40 2401:3a60:1600::/40 maxlen: 40 2401:3a60:3100::/40 maxlen: 40 2401:3a60:3200::/40 maxlen: 40 2401:3a60:3300::/40 maxlen: 40 2401:3a60:5000::/40 maxlen: 40 2401:3a60:5100::/40 maxlen: 40 2401:3a60:5200::/40 maxlen: 40 2401:3a60:5300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63 Validity Not Before: Oct 9 05:03:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46573-fa04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b1:81:c7:4d:84:9d:27:47:1e:2b:9d:3f:9c: bf:2e:a9:01:b1:e4:3f:df:3a:c0:63:ce:32:ea:a1: 88:a2:aa:e1:67:59:5a:c3:dc:79:03:bb:5b:99:52: 13:64:ea:e0:90:a5:c3:81:75:52:a3:38:c9:da:3f: 36:78:9a:63:7b:84:d6:9a:52:fb:4a:36:f7:eb:56: 82:8a:9d:6d:1f:aa:f8:d3:28:7c:36:66:7a:92:5f: 3e:34:93:7f:17:9e:fc:cb:c0:5d:60:16:5e:b6:27: 16:31:db:8a:12:4e:cf:af:df:5b:5d:96:ce:1a:a8: da:3f:ef:3d:58:e5:c6:a9:0c:ca:8a:41:c1:5d:87: 5a:da:1d:5d:47:4b:06:c7:48:c0:10:22:eb:b1:27: 50:22:d5:72:34:1c:c4:03:48:e7:dc:97:f8:49:af: b8:ff:c6:7c:68:42:a6:0e:31:68:32:03:77:e7:63: 6e:a0:ec:44:53:87:91:c5:83:b9:ba:cd:8a:2b:90: 27:7b:98:fb:81:cf:eb:a4:3a:25:db:fd:51:26:07: 00:66:26:8d:79:c0:40:fc:77:12:ca:0d:8d:82:27: e9:10:6a:51:bc:77:78:08:d6:bb:37:25:a8:c6:92: 48:49:21:db:c8:33:e8:19:e3:48:46:46:82:97:e8: 23:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:78:55:99:2B:05:29:39:21:21:74:E3:40:23:1C:AE:29:E5:2E:60 X509v3 Authority Key Identifier: keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/59962840D01911EE96596B16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.96.80.0/22 103.131.130.0/23 103.199.98.0/23 IPv6: 2401:3a60:1100::-2401:3a60:16ff:ffff:ffff:ffff:ffff:ffff 2401:3a60:3100::-2401:3a60:33ff:ffff:ffff:ffff:ffff:ffff 2401:3a60:5000::/38 Signature Algorithm: sha256WithRSAEncryption 47:7b:ee:b7:b6:b6:dc:6b:3d:18:ac:91:97:57:d5:33:38:3d: 9c:14:1f:e2:79:fe:ab:d4:ba:47:f5:ec:ed:7c:b0:67:40:05: 68:21:7b:17:ab:75:dd:2e:14:e9:ed:df:a9:83:70:c2:6d:b9: 68:9d:72:d8:8d:e4:f6:3a:2e:54:93:44:39:d3:a2:96:fe:a0: ed:cd:da:04:80:0e:8a:38:ac:f9:04:37:4c:2c:81:63:8f:05: 04:29:20:fa:3c:15:b0:6f:52:55:f7:58:1d:66:61:bf:04:22: b4:b2:16:a4:64:18:2b:98:d5:ae:4e:be:7c:12:69:53:b9:7b: 95:a8:81:e1:94:ce:ee:cc:38:35:57:fc:f6:4c:e4:09:d5:a6: 45:76:05:52:a7:16:17:54:46:ee:99:26:16:89:8a:cf:28:03: 4d:09:5c:e5:69:ec:4a:c3:0f:74:07:c4:5a:a7:7f:3e:cf:0d: 43:d1:08:3d:7c:7f:57:d7:64:08:92:07:28:61:e7:3f:78:21: 69:c6:73:93:c9:fc:72:00:3e:c1:78:d5:52:2b:6e:cd:2f:02: e4:09:3d:4b:5b:b1:db:9b:5f:4f:a7:0e:61:08:45:58:09:d0: da:42:82:7c:de:54:2c:b3:b1:09:ab:75:7e:f1:34:2a:12:dd: b7:e5:9b:60 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ5QjIxMTAvBgNVBAUTKDkxMjk1QkJCNzVCRkFBRUI5NTMxQjM5QjM2RUM3NTIx RERFMzBENjMwHhcNMjUxMDA5MDUwMzM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjU3My1mYTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorGBx02EnSdHHiudP5y/LqkBseQ/3zrAY84y6qGIoqrhZ1law9x5A7tbmVIT ZOrgkKXDgXVSozjJ2j82eJpje4TWmlL7Sjb361aCip1tH6r40yh8NmZ6kl8+NJN/ F578y8BdYBZeticWMduKEk7Pr99bXZbOGqjaP+89WOXGqQzKikHBXYda2h1dR0sG x0jAECLrsSdQItVyNBzEA0jn3Jf4Sa+4/8Z8aEKmDjFoMgN352NuoOxEU4eRxYO5 us2KK5Ane5j7gc/rpDol2/1RJgcAZiaNecBA/HcSyg2NgifpEGpRvHd4CNa7NyWo xpJISSHbyDPoGeNIRkaCl+gjuQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFKt4VZkr BSk5ISF040AjHK4p5S5gMB8GA1UdIwQYMBaAFJEpW7t1v6rrlTGzmzbsdSHd4w1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDlCMi8wQTZGM0I0Mjkx NTUxMUVFQTRDMEY2NjhDNEY5QUUwMi9rU2xidTNXX3F1dVZNYk9iTnV4MUlkM2pE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTbGJ1M1dfcXV1Vk1iT2JOdXgxSWQzakRXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ5QjIvMEE2RjNCNDI5MTU1MTFFRUE0QzBGNjY4QzRGOUFFMDIvNTk5NjI4NDBE MDE5MTFFRTk2NTk2QjE2QzRGOUFFMDIucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjAY BAIAATASAwQCZ2BQAwQBZ4OCAwQBZ8diMDIEAgACMCwwEAMGACQBOmARAwYAJAE6 YBYwEAMGACQBOmAxAwYCJAE6YDADBgIkATpgUDANBgkqhkiG9w0BAQsFAAOCAQEA R3vut7a23Gs9GKyRl1fVMzg9nBQf4nn+q9S6R/Xs7XywZ0AFaCF7F6t13S4U6e3f qYNwwm25aJ1y2I3k9jouVJNEOdOilv6g7c3aBIAOijis+QQ3TCyBY48FBCkg+jwV sG9SVfdYHWZhvwQitLIWpGQYK5jVrk6+fBJpU7l7laiB4ZTO7sw4NVf89kzkCdWm RXYFUqcWF1RG7pkmFomKzygDTQlc5WnsSsMPdAfEWqd/Ps8NQ9EIPXx/V9dkCJIH KGHnP3ghacZzk8n8cgA+wXjVUituzS8C5Ak9S1ux25tfT6cOYQhFWAnQ2kKCfN5U LLOxCat1fvE0KhLdt+WbYA== -----END CERTIFICATE-----Generated at Fri Mar 13 13:31:54 2026 by rpki-client