$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa File: DA0A5C9280BE11EB88ED2418C4F9AE02.roa (raw, json) Hash identifier: XeXtEW/KsiEzC5r/caIgiJO4VXTpipHESNAQNUm+mxI= Subject key identifier: 35:67:A6:0D:2B:5B:73:B6:98:7E:55:A1:1A:A2:7B:F5:47:68:62:AE Certificate issuer: /CN=A9128918/serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Certificate serial: 0DDE Authority key identifier: 25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa Signing time: Sun 04 Oct 2026 18:35:27 +0000 ROA not before: Sun 04 Oct 2026 18:35:27 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 134599 IP address blocks: 103.121.36.0/24 maxlen: 24 103.121.37.0/24 maxlen: 24 103.121.38.0/24 maxlen: 24 103.121.39.0/24 maxlen: 24 2404:5fc0::/36 maxlen: 36 2404:5fc0:1000::/36 maxlen: 36 2404:5fc0:2000::/36 maxlen: 36 2404:5fc0:3000::/36 maxlen: 36 2404:5fc0:4000::/36 maxlen: 36 2404:5fc0:5000::/36 maxlen: 36 2404:5fc0:6000::/36 maxlen: 36 2404:5fc0:7000::/36 maxlen: 36 2404:5fc0:8000::/36 maxlen: 36 2404:5fc0:9000::/36 maxlen: 36 2404:5fc0:a000::/36 maxlen: 36 2404:5fc0:b000::/36 maxlen: 36 2404:5fc0:c000::/36 maxlen: 36 2404:5fc0:d000::/36 maxlen: 36 2404:5fc0:e000::/36 maxlen: 36 2404:5fc0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 18:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128918, serialNumber=2503775FAC3A6F47234CB832A637FC1082A47C44 Validity Not Before: Oct 4 18:35:27 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6ac29c6f-25c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:0c:8f:10:01:97:42:8b:5e:dd:3e:cd:ff: f7:51:4b:d9:96:22:09:00:5a:11:a4:67:3a:3a:d3: e6:80:f5:7d:cd:48:ba:29:a1:ba:f2:f1:3a:62:ef: 9d:71:da:82:f2:5b:bd:9c:4e:9a:00:3d:8b:01:e5: 92:78:31:bb:28:69:4b:40:eb:d1:1f:5e:e3:01:bc: 8a:ec:13:d2:ce:80:74:bf:d7:c0:3d:da:63:26:c9: f9:b4:23:e0:25:05:f2:92:ee:8c:35:39:c4:0a:91: 0d:35:92:aa:16:d5:26:1d:46:0f:31:ff:19:79:03: 34:2f:b8:d4:f9:85:ee:27:35:d2:7e:35:54:5d:f6: 67:e3:a2:a8:38:62:1d:72:84:32:46:d2:02:f0:a4: 50:a1:9a:98:77:22:82:b0:60:4a:69:ba:02:89:72: 58:6c:ef:ff:96:81:4f:14:1c:c6:56:82:b2:1d:26: ce:e7:44:c5:e1:3e:5a:ba:fb:92:c5:66:ca:ec:0c: 28:a9:b7:17:44:46:f2:8b:e9:6c:2d:d4:f8:f1:04: 39:1e:96:cf:be:1f:65:49:51:ce:63:94:d2:b9:a8: 89:a2:6c:c3:13:d6:7b:26:59:aa:30:ee:e2:2f:e2: ca:1c:b5:b7:5b:df:40:25:e3:a1:72:0b:68:d1:2f: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:A6:0D:2B:5B:73:B6:98:7E:55:A1:1A:A2:7B:F5:47:68:62:AE X509v3 Authority Key Identifier: keyid:25:03:77:5F:AC:3A:6F:47:23:4C:B8:32:A6:37:FC:10:82:A4:7C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/JQN3X6w6b0cjTLgypjf8EIKkfEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQN3X6w6b0cjTLgypjf8EIKkfEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128918/E98FDFD4F67211E991ED0B16C4F9AE02/DA0A5C9280BE11EB88ED2418C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.36.0/22 IPv6: 2404:5fc0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:21:d6:f2:ad:5d:63:ae:0b:2d:15:2b:70:6e:c7:71:66:64: c1:53:94:5d:74:e9:3b:78:40:d7:50:92:cd:5b:a0:c7:38:ef: 82:cb:b4:de:a5:eb:1d:67:b2:66:3a:a0:a9:af:03:41:01:25: 29:18:be:5a:73:7a:c1:92:76:c4:27:fa:d4:41:d3:d6:52:48: e8:13:03:ee:86:6d:36:cd:63:ed:bf:a7:73:bc:52:62:b5:16: 67:f5:b5:52:82:0d:62:6b:67:fd:1a:9b:9f:65:47:b3:19:20: db:67:60:59:39:18:e1:b9:3e:ad:1c:0c:10:a8:21:65:37:f4: dd:bb:89:e6:7c:50:ef:6a:57:17:1a:2a:f6:99:05:40:79:cf: de:ea:e2:9e:11:47:66:33:69:e7:9b:aa:b9:95:da:0b:23:92: e3:78:25:a4:95:65:39:47:8e:7a:c1:c6:f8:d8:ca:95:f4:c8: 20:69:c5:33:31:82:22:0e:cb:c7:b5:57:85:c7:18:6a:27:48: 1e:b2:db:9c:a9:20:90:b9:81:3b:55:89:f7:22:da:75:d4:b5: 9f:cc:f4:3d:05:78:d6:de:36:cb:19:99:ac:69:76:0b:45:e6: eb:b0:19:ad:08:6f:b0:5c:b2:f3:88:80:e1:49:46:47:2a:24: 44:b0:63:24 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5MTgxMTAvBgNVBAUTKDI1MDM3NzVGQUMzQTZGNDcyMzRDQjgzMkE2MzdGQzEw ODJBNDdDNDQwHhcNMjYxMDA0MTgzNTI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyOWM2Zi0yNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuawMjxABl0KLXt0+zf/3UUvZliIJAFoRpGc6OtPmgPV9zUi6KaG68vE6Yu+d cdqC8lu9nE6aAD2LAeWSeDG7KGlLQOvRH17jAbyK7BPSzoB0v9fAPdpjJsn5tCPg JQXyku6MNTnECpENNZKqFtUmHUYPMf8ZeQM0L7jU+YXuJzXSfjVUXfZn46KoOGId coQyRtIC8KRQoZqYdyKCsGBKaboCiXJYbO//loFPFBzGVoKyHSbO50TF4T5auvuS xWbK7AwoqbcXREbyi+lsLdT48QQ5HpbPvh9lSVHOY5TSuaiJomzDE9Z7JlmqMO7i L+LKHLW3W99AJeOhcgto0S8/CQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDVnpg0r W3O2mH5VoRqie/VHaGKuMB8GA1UdIwQYMBaAFCUDd1+sOm9HI0y4MqY3/BCCpHxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODkxOC9FOThGREZENEY2 NzIxMUU5OTFFRDBCMTZDNEY5QUUwMi9KUU4zWDZ3NmIwY2pUTGd5cGpmOEVJS2tm RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pRTjNYNnc2YjBjalRMZ3lwamY4RUlLa2ZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5MTgvRTk4RkRGRDRGNjcyMTFFOTkxRUQwQjE2QzRGOUFFMDIvREEwQTVDOTI4 MEJFMTFFQjg4RUQyNDE4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3kkMA0EAgACMAcDBQAkBF/AMA0GCSqGSIb3DQEBCwUAA4IBAQB+ IdbyrV1jrgstFStwbsdxZmTBU5RddOk7eEDXUJLNW6DHOO+Cy7TepesdZ7JmOqCp rwNBASUpGL5ac3rBknbEJ/rUQdPWUkjoEwPuhm02zWPtv6dzvFJitRZn9bVSgg1i a2f9GpufZUezGSDbZ2BZORjhuT6tHAwQqCFlN/Tdu4nmfFDvalcXGir2mQVAec/e 6uKeEUdmM2nnm6q5ldoLI5LjeCWklWU5R456wcb42MqV9MggacUzMYIiDsvHtVeF xxhqJ0gestucqSCQuYE7VYn3Itp11LWfzPQ9BXjW3jbLGZmsaXYLRebrsBmtCG+w XLLziIDhSUZHKiREsGMk -----END CERTIFICATE-----Generated at Tue Oct 6 20:32:40 2026 by rpki-client