$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa File: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (raw, json) Hash identifier: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo= Subject key identifier: FC:2E:C8:45:8E:5C:E7:A2:D3:DA:89:D0:BC:CB:D2:54:04:D1:2B:5F Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 0254 Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:18:25 +0000 ROA not before: Sun 21 Dec 2025 02:23:04 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 6453 IP address blocks: 103.120.104.0/24 maxlen: 24 103.120.105.0/24 maxlen: 24 103.120.106.0/24 maxlen: 24 103.120.107.0/24 maxlen: 24 175.100.160.0/24 maxlen: 24 175.100.161.0/24 maxlen: 24 175.100.162.0/24 maxlen: 24 175.100.163.0/24 maxlen: 24 2405:a100:10::/44 maxlen: 44 2405:a100:20::/44 maxlen: 44 2405:a100:30::/44 maxlen: 44 2405:a100:40::/44 maxlen: 44 2405:a100:50::/44 maxlen: 44 2405:a100:60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 596 (0x254) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Dec 21 02:23:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a458c1-ec58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:0e:ae:28:e0:b8:31:13:f9:a5:81:6b:49: ae:e7:ef:5c:ed:09:a6:05:fa:9b:3e:a9:37:0d:eb: e6:56:83:50:c0:ec:b2:58:d0:e7:6b:f5:1a:a7:56: 72:26:65:a9:c9:36:c0:0b:04:4a:29:21:36:cd:9a: 69:78:64:b0:52:86:64:fd:a7:20:d5:b7:3a:aa:12: 47:c2:4a:e9:b7:4f:01:93:f8:88:a4:40:64:ba:f3: 1f:f4:39:35:28:85:bb:20:26:5d:dd:70:a3:cb:4c: cf:d9:30:98:fc:1e:20:27:48:a8:97:9a:e4:53:9b: 4c:8e:38:72:b4:09:19:c6:46:24:48:b0:a5:9a:13: bc:d7:72:ea:e7:10:c2:b5:ff:73:d0:f6:87:14:3b: c1:62:f0:50:80:c0:dc:22:f2:aa:cd:34:6e:57:7b: 4f:17:17:dc:f1:87:87:02:da:82:c7:f0:7b:10:6d: b2:83:dd:3a:74:18:ff:f1:2f:38:ab:42:0f:f9:19: 8b:a0:fe:70:b0:04:da:e9:a2:ee:15:12:d9:d8:5f: 78:63:70:24:e2:91:b6:34:bb:78:7d:48:40:e2:56: 7a:e6:74:8d:1b:98:85:68:29:7d:3e:ab:33:d7:88: 70:da:93:85:45:25:44:1c:8b:7a:f9:92:33:cb:7e: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2E:C8:45:8E:5C:E7:A2:D3:DA:89:D0:BC:CB:D2:54:04:D1:2B:5F X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.104.0/22 175.100.160.0/22 IPv6: 2405:a100:10::-2405:a100:6f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4a:d5:20:af:e0:e3:22:81:80:e4:d4:1a:cb:9b:d7:8f:fa:a5: af:2d:fb:35:e0:28:96:78:9b:fa:30:fe:ce:67:cb:f8:68:f5: 20:64:27:53:81:76:6a:ea:cc:ee:b6:63:8d:10:c5:80:1e:7f: 3a:bb:f7:c3:69:8b:da:ec:5c:99:a3:3b:9e:ab:cb:5f:9e:a1: db:8b:cf:ce:b6:71:80:26:a4:a2:7d:eb:7e:41:e0:56:a5:9b: 4b:5c:5f:ff:ca:34:d2:02:60:21:3f:bf:7d:96:9d:e2:67:2e: ef:7f:24:45:b4:46:fe:14:0d:08:2a:ca:1d:42:be:87:99:cc: 83:73:dc:6d:6b:f1:1d:11:40:b1:a5:5a:7f:67:07:bc:2d:8a: ba:fd:31:2f:01:bd:cd:c1:4e:91:2b:7d:09:bd:d1:bc:29:76: f8:f9:3f:20:a5:d3:b9:82:c1:3f:fb:0a:6a:1c:24:93:30:bd: 79:d5:d6:08:40:28:82:18:fd:c4:48:62:99:da:18:75:06:c0: 01:99:18:58:e9:28:b0:85:40:28:4e:52:ac:bb:35:13:bb:e6: e8:8e:00:8d:1a:08:f4:d7:24:d6:77:b3:31:56:f8:1f:88:30: a8:5f:d8:62:48:7a:5c:e6:2b:cc:f2:98:76:d6:4a:cd:79:b9: 92:9b:84:9e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjUxMjIxMDIyMzA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NThjMS1lYzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfkOrijguDET+aWBa0mu5+9c7QmmBfqbPqk3DevmVoNQwOyyWNDna/Uap1Zy JmWpyTbACwRKKSE2zZppeGSwUoZk/acg1bc6qhJHwkrpt08Bk/iIpEBkuvMf9Dk1 KIW7ICZd3XCjy0zP2TCY/B4gJ0iol5rkU5tMjjhytAkZxkYkSLClmhO813Lq5xDC tf9z0PaHFDvBYvBQgMDcIvKqzTRuV3tPFxfc8YeHAtqCx/B7EG2yg906dBj/8S84 q0IP+RmLoP5wsATa6aLuFRLZ2F94Y3Ak4pG2NLt4fUhA4lZ65nSNG5iFaCl9Pqsz 14hw2pOFRSVEHIt6+ZIzy36TTQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFPwuyEWO XOei09qJ0LzL0lQE0StfMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBEMEEvNTY0QTEzNUVEMjIyMTFFRDlBMjA2QzQ2QzRGOUFFMDIvRDFFQUExOENE MkJDMTFFRDlFN0E5QTFCQzRGOUFFMDIucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAS BAIAATAMAwQCZ3hoAwQCr2SgMBoEAgACMBQwEgMHBCQFoQAAEAMHBCQFoQAAYDAN BgkqhkiG9w0BAQsFAAOCAQEAStUgr+DjIoGA5NQay5vXj/qlry37NeAolnib+jD+ zmfL+Gj1IGQnU4F2aurM7rZjjRDFgB5/Orv3w2mL2uxcmaM7nqvLX56h24vPzrZx gCakon3rfkHgVqWbS1xf/8o00gJgIT+/fZad4mcu738kRbRG/hQNCCrKHUK+h5nM g3PcbWvxHRFAsaVaf2cHvC2Kuv0xLwG9zcFOkSt9Cb3RvCl2+Pk/IKXTuYLBP/sK ahwkkzC9edXWCEAoghj9xEhimdoYdQbAAZkYWOkosIVAKE5SrLs1E7vm6I4AjRoI 9Nck1nezMVb4H4gwqF/YYkh6XOYrzPKYdtZKzXm5kpuEng== -----END CERTIFICATE-----Generated at Sat Mar 7 17:28:41 2026 by rpki-client