$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/DF0BED1069E511EE92E9E35AC4F9AE02.roa File: DF0BED1069E511EE92E9E35AC4F9AE02.roa (raw, json) Hash identifier: 6ziz8Vbwbuo+v5DPJFlqhouxjGTzfKMnl6UQDVob9A0= Subject key identifier: 93:2A:A3:CF:DF:3F:8E:B9:03:80:69:24:E1:40:B7:56:0B:C9:81:76 Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 01D2 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/DF0BED1069E511EE92E9E35AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:22:26 +0000 ROA not before: Wed 09 Apr 2025 04:09:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142032 IP address blocks: 103.149.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 03:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Apr 9 04:09:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a43d92-57e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b6:ac:0c:db:9f:88:d2:79:c8:5a:a6:e3:89: 11:37:28:fe:59:17:ea:b0:20:5c:87:db:ea:59:18: 87:c0:21:fd:82:7f:d6:30:25:ab:2a:f4:cf:a8:b1: 8f:bf:7d:c5:d0:37:24:3a:c6:d4:95:06:22:50:7f: 3b:3e:d7:5e:ed:c2:23:ee:04:a0:b1:5f:d9:94:8b: 5b:f0:82:02:18:85:5a:34:79:69:50:a1:3f:cd:d9: 22:ed:fe:a7:57:96:a3:a5:ee:07:f8:cd:ae:6b:a5: 8a:22:4e:78:d9:db:08:00:84:dc:7e:55:32:52:b2: bb:b5:c0:0f:c9:8c:a1:a7:6d:e6:e1:9b:e2:72:1f: dd:7e:81:64:b0:64:82:99:bc:9f:2d:9b:04:d1:94: 58:da:be:b7:c5:2b:c2:de:4e:77:20:79:87:84:20: 71:2d:ce:6e:d2:b0:21:59:d3:47:7b:5b:ce:ed:18: 2b:bb:c8:53:ff:18:d6:ef:28:e7:13:c1:cb:43:18: 02:b4:96:86:a9:d8:5f:50:79:5a:11:23:b1:18:5f: 90:65:56:cb:21:26:bf:c2:a1:70:90:7c:90:e1:67: ca:6c:24:32:5d:32:e0:03:d5:f4:61:c4:90:d5:1d: 91:12:44:ad:b8:8b:56:82:e9:1e:6a:f2:b4:67:e2: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2A:A3:CF:DF:3F:8E:B9:03:80:69:24:E1:40:B7:56:0B:C9:81:76 X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/DF0BED1069E511EE92E9E35AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.200.0/23 Signature Algorithm: sha256WithRSAEncryption 32:79:bc:49:74:5d:f7:a3:29:d4:e8:ee:56:27:89:b3:12:d0: 3a:00:be:ed:e0:89:15:83:71:48:f5:87:4e:6b:7d:62:66:7b: 40:60:0b:72:29:a3:de:31:ce:af:fb:f6:8c:4c:21:00:92:36: ae:1f:d6:a4:7a:6c:a6:4d:f7:e0:96:95:6c:42:c9:c1:2d:e4: 27:f8:8e:17:e9:35:3b:63:6d:19:e9:50:a8:55:e3:1d:cc:69: d0:51:ba:21:02:7a:b7:2a:0b:f3:bf:da:b6:90:a6:70:36:ff: 57:fb:b9:8c:79:f9:f7:ee:6c:db:ea:12:36:ee:57:53:0e:b4: fd:89:c6:46:d5:9c:c4:ec:d6:10:05:c7:db:71:4b:58:43:76: ab:6e:da:a8:2a:0c:2d:d4:74:a6:16:9d:05:01:e5:fd:50:d3: c3:8c:a1:de:4a:e0:ea:cb:0a:94:70:c3:18:aa:e1:3c:d3:ad: 70:44:a6:53:23:c5:d8:a6:ae:b9:9f:df:c8:bc:0b:21:04:9a: 7b:d0:e8:5a:e5:39:22:ab:a2:96:99:0a:e4:28:68:e3:e6:23: a2:30:7e:37:8c:69:0a:0d:80:1a:2f:85:bc:50:21:4f:88:40: 0c:da:74:64:01:f2:08:4e:c3:36:1e:44:23:5d:76:99:ae:53: 3b:7b:86:a4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNDA5MDQwOTQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2Q5Mi01N2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLasDNufiNJ5yFqm44kRNyj+WRfqsCBch9vqWRiHwCH9gn/WMCWrKvTPqLGP v33F0DckOsbUlQYiUH87Ptde7cIj7gSgsV/ZlItb8IICGIVaNHlpUKE/zdki7f6n V5ajpe4H+M2ua6WKIk542dsIAITcflUyUrK7tcAPyYyhp23m4Zvich/dfoFksGSC mbyfLZsE0ZRY2r63xSvC3k53IHmHhCBxLc5u0rAhWdNHe1vO7Rgru8hT/xjW7yjn E8HLQxgCtJaGqdhfUHlaESOxGF+QZVbLISa/wqFwkHyQ4WfKbCQyXTLgA9X0YcSQ 1R2REkStuItWgukeavK0Z+Kg7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJMqo8/f P465A4BpJOFAt1YLyYF2MB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZDN0MvMkI1Q0FBRTg2OUU1MTFFRUJCNjY4MjQ2QzRGOUFFMDIvREYwQkVEMTA2 OUU1MTFFRTkyRTlFMzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5XIMA0GCSqGSIb3DQEBCwUAA4IBAQAyebxJdF33oynU6O5WJ4mz EtA6AL7t4IkVg3FI9YdOa31iZntAYAtyKaPeMc6v+/aMTCEAkjauH9akemymTffg lpVsQsnBLeQn+I4X6TU7Y20Z6VCoVeMdzGnQUbohAnq3Kgvzv9q2kKZwNv9X+7mM efn37mzb6hI27ldTDrT9icZG1ZzE7NYQBcfbcUtYQ3arbtqoKgwt1HSmFp0FAeX9 UNPDjKHeSuDqywqUcMMYquE8061wRKZTI8XYpq65n9/IvAshBJp70Oha5Tkiq6KW mQrkKGjj5iOiMH43jGkKDYAaL4W8UCFPiEAM2nRkAfIITsM2HkQjXXaZrlM7e4ak -----END CERTIFICATE-----Generated at Wed Mar 4 17:13:13 2026 by rpki-client