$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa File: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (raw, json) Hash identifier: nvx3GHSjm1FoBsodAOrWvu9aA6Bfe7UFufBA3q/5SPM= Subject key identifier: FC:DB:D2:EA:E3:5A:08:40:B4:DF:B1:A4:72:64:BE:D6:5C:B6:86:3B Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 025B Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa Signing time: Thu 29 Jan 2026 01:22:09 +0000 ROA not before: Thu 29 Jan 2026 01:22:09 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132831 IP address blocks: 103.54.78.0/24 maxlen: 24 103.54.79.0/24 maxlen: 24 103.124.187.0/24 maxlen: 24 103.134.118.0/24 maxlen: 24 103.134.119.0/24 maxlen: 24 103.242.126.0/24 maxlen: 24 103.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 01:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Jan 29 01:22:09 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697ab641-4c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:60:19:84:31:07:53:23:f9:57:f3:64:31:af: 12:5d:11:12:95:6a:be:4f:38:25:7d:ec:0e:8b:a9: ec:88:f6:a7:6f:cd:46:83:09:2d:a3:e5:d7:a7:de: 32:9a:4a:fe:00:fc:5c:17:58:81:59:22:c6:64:fa: 75:9a:69:80:7f:70:3f:56:14:0f:99:4c:3b:47:d6: fa:f9:8a:c4:7d:72:16:81:5b:75:6b:50:9e:23:63: 18:db:6f:53:91:0b:c4:c4:b2:48:77:e7:ab:c6:05: 10:60:1b:de:db:21:cd:b4:16:e4:b3:c2:9e:30:ab: aa:ce:a4:80:27:3d:94:2e:27:f4:df:bd:8b:65:a8: d5:3b:4f:42:69:6d:f9:e6:09:b2:e8:1d:b9:78:a0: 76:41:87:4d:38:5d:e3:22:fa:ad:05:d9:e9:45:0a: 78:6c:7e:e5:b5:84:90:58:65:4a:79:6e:5b:84:99: 65:f5:64:a3:07:0a:b3:64:de:fc:87:bb:9b:bb:43: 87:9c:09:1f:1e:4c:5d:57:36:d2:23:77:50:b5:7b: 95:3b:b5:ac:31:89:89:29:60:ba:12:54:77:d0:33: 1b:1f:07:13:2d:21:92:08:f4:33:07:94:c0:17:fb: d4:8e:c2:9d:8a:91:0f:aa:a0:b0:7b:dd:58:4c:77: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DB:D2:EA:E3:5A:08:40:B4:DF:B1:A4:72:64:BE:D6:5C:B6:86:3B X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.54.78.0/23 103.124.187.0/24 103.134.118.0/23 103.242.126.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:9a:f7:ec:34:5a:00:43:5b:e6:11:e0:e4:ff:6d:9b:b7:a7: b2:df:0f:cf:8c:0f:09:9b:23:ba:1d:14:a8:da:93:ae:14:3d: b8:c4:b3:b9:26:68:14:62:9d:cf:58:f4:a0:2d:58:79:12:a4: 28:3d:78:73:76:99:7e:c3:37:2a:dd:a9:34:56:33:44:9a:fe: c5:d2:4a:b2:29:ab:39:d7:80:e1:0a:1b:d6:81:98:1a:14:1b: 8a:d2:0b:19:b1:41:e3:18:f2:76:aa:c9:ed:8b:fb:bf:d4:7b: 84:ae:33:dc:e3:c4:10:2f:b9:6d:74:70:44:58:39:72:7a:9d: ff:29:d4:16:8e:ce:1d:bf:83:f6:90:38:19:da:9e:56:2a:70: 91:9f:2a:d3:fe:a6:f7:69:fd:07:13:82:2c:4d:b9:2b:bf:cb: b1:42:13:ac:f9:9d:de:e4:1c:45:32:ac:66:59:70:b3:09:b1: f8:30:40:e5:c8:76:bc:d6:76:b1:63:ed:bf:a3:18:0f:5e:61: 6d:63:d4:d9:d1:de:fa:00:3e:1b:35:de:32:6f:92:5a:15:b2: 47:cc:d7:df:b2:75:ea:9c:f9:22:0d:76:28:37:85:ac:a6:25: 9f:e3:45:1f:4b:38:61:9c:59:08:52:20:e2:6d:f4:1a:a4:9c: 18:31:ba:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjYwMTI5MDEyMjA5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhYjY0MS00YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WAZhDEHUyP5V/NkMa8SXRESlWq+TzglfewOi6nsiPanb81Ggwkto+XXp94y mkr+APxcF1iBWSLGZPp1mmmAf3A/VhQPmUw7R9b6+YrEfXIWgVt1a1CeI2MY229T kQvExLJId+erxgUQYBve2yHNtBbks8KeMKuqzqSAJz2ULif0372LZajVO09CaW35 5gmy6B25eKB2QYdNOF3jIvqtBdnpRQp4bH7ltYSQWGVKeW5bhJll9WSjBwqzZN78 h7ubu0OHnAkfHkxdVzbSI3dQtXuVO7WsMYmJKWC6ElR30DMbHwcTLSGSCPQzB5TA F/vUjsKdipEPqqCwe91YTHdBcQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFPzb0urj WghAtN+xpHJkvtZctoY7MB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjJFQTIvMTUyNTM0MTQ4NTYzMTFFRDgyRkIxMDJEQzRGOUFFMDIvQzIwRjcxRTA5 OTJBMTFFRUJERTRBRjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAFnNk4DBABnfLsDBAFnhnYDBAFn8n4wDQYJKoZIhvcNAQEL BQADggEBAEqa9+w0WgBDW+YR4OT/bZu3p7LfD8+MDwmbI7odFKjak64UPbjEs7km aBRinc9Y9KAtWHkSpCg9eHN2mX7DNyrdqTRWM0Sa/sXSSrIpqznXgOEKG9aBmBoU G4rSCxmxQeMY8naqye2L+7/Ue4SuM9zjxBAvuW10cERYOXJ6nf8p1BaOzh2/g/aQ OBnanlYqcJGfKtP+pvdp/QcTgixNuSu/y7FCE6z5nd7kHEUyrGZZcLMJsfgwQOXI drzWdrFj7b+jGA9eYW1j1NnR3voAPhs13jJvkloVskfM19+ydeqc+SINdig3haym JZ/jRR9LOGGcWQhSIOJt9BqknBgxuu8= -----END CERTIFICATE-----Generated at Fri Feb 20 00:13:16 2026 by rpki-client