$ rpki-client -vvf rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/E816DFFAA90111ED867DA161C4F9AE02.roa File: E816DFFAA90111ED867DA161C4F9AE02.roa (raw, json) Hash identifier: vb4T8uZCf2x+8euqTgS7w/JHSG99MYAiBw0Tkw+k354= Subject key identifier: 87:DA:4D:FA:21:F6:B8:4F:FD:2E:46:0C:AC:5A:5E:F2:0E:AA:A7:F6 Certificate issuer: /CN=A911A828/serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Certificate serial: 0242 Authority key identifier: 22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/E816DFFAA90111ED867DA161C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:09:18 +0000 ROA not before: Fri 09 Jan 2026 02:21:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150431 IP address blocks: 103.39.146.0/23 maxlen: 23 103.39.146.0/24 maxlen: 24 103.39.147.0/24 maxlen: 24 2001:df1:8cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A828, serialNumber=22603D6A33F06E0A9D10FBB1ED9E1D3749247001 Validity Not Before: Jan 9 02:21:26 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4104e-522a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:53:4e:3c:35:76:9e:a2:bf:da:40:b2:f4: 4d:98:78:cc:0c:19:08:c5:56:70:9b:db:f1:b3:34: 1c:98:4c:af:48:41:15:1c:f3:08:9a:d1:4d:f2:ea: c6:70:64:b4:dd:6d:ad:67:5d:7e:48:5e:cf:7e:16: 4c:84:dd:4d:03:43:7e:cc:f2:c4:9d:10:59:ac:48: ce:0a:c7:05:a4:1c:78:08:2a:af:bf:35:b1:b0:d3: 3a:0f:a5:31:a5:12:a3:31:20:ff:52:ee:86:ff:55: 90:fe:a9:3b:1d:10:dd:73:46:be:ab:68:68:8a:0c: 84:8f:80:99:29:69:a5:2e:1a:d0:cf:83:89:dc:97: d4:18:31:4d:c3:b3:ff:da:54:d3:14:95:6e:ef:b9: 8d:ca:59:ed:bc:88:31:26:fc:27:42:b7:f0:0e:18: 02:36:f1:cd:fb:59:c3:85:73:c4:ba:75:c5:9c:40: 5c:a7:9d:da:f8:69:e3:0e:1c:62:7d:ab:7a:03:cd: ea:8b:8c:9c:9e:92:2e:86:75:da:d5:d4:d5:24:ad: dd:c4:8d:c9:a8:89:6f:16:99:fd:c9:60:43:3c:b0: e5:e4:c1:48:53:47:8b:7a:b1:6f:1d:e7:50:a9:f5: 1f:4b:5d:b1:fb:e3:00:42:f1:c6:3e:a8:97:89:02: 46:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:4D:FA:21:F6:B8:4F:FD:2E:46:0C:AC:5A:5E:F2:0E:AA:A7:F6 X509v3 Authority Key Identifier: keyid:22:60:3D:6A:33:F0:6E:0A:9D:10:FB:B1:ED:9E:1D:37:49:24:70:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/ImA9ajPwbgqdEPux7Z4dN0kkcAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ImA9ajPwbgqdEPux7Z4dN0kkcAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A828/DDF9005AA8FE11ED9D50105DC4F9AE02/E816DFFAA90111ED867DA161C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.146.0/23 IPv6: 2001:df1:8cc0::/48 Signature Algorithm: sha256WithRSAEncryption 09:1d:00:57:89:a5:2c:01:89:83:52:15:21:82:9a:7f:3a:19: b9:45:19:66:1d:de:e3:9c:bb:a4:3d:4b:2b:0c:be:c0:a8:ef: 59:69:74:63:1e:bc:7c:ee:03:ba:41:44:5d:77:ee:3e:4b:46: f5:27:3f:07:a7:0f:26:8d:54:b2:59:1f:57:22:11:b2:a6:d1: da:df:c0:4b:c8:8a:93:60:d1:98:58:27:30:fe:5c:54:43:34: 4c:5c:00:80:e8:27:ca:11:d3:e6:0a:4c:8d:3c:0b:a9:9b:78: 94:83:6d:ef:c2:1e:5d:be:a2:94:08:d5:f7:fa:91:f9:ee:2c: 73:d5:10:60:5a:35:74:88:66:7e:6e:d9:6f:44:fd:dd:36:11: b4:20:99:91:d2:fc:3f:0d:43:78:e5:7d:01:ac:1a:28:9a:8c: 80:6b:69:40:bd:67:34:68:57:b1:59:99:6d:01:e4:2f:c9:9e: a4:e7:e5:01:9f:7a:de:d8:50:60:43:47:92:16:eb:8f:5c:90: a7:11:e2:31:79:5b:18:ed:d2:a4:75:e6:7e:33:d9:bb:df:b0: 7b:b6:22:d4:de:2e:79:39:e6:f4:08:e7:7c:ee:dc:95:92:76: 4c:fc:1f:cf:78:8d:79:02:6d:d3:51:ee:91:b7:dd:e9:82:94: ff:7e:9c:70 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE4MjgxMTAvBgNVBAUTKDIyNjAzRDZBMzNGMDZFMEE5RDEwRkJCMUVEOUUxRDM3 NDkyNDcwMDEwHhcNMjYwMTA5MDIyMTI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTA0ZS01MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWtTTjw1dp6iv9pAsvRNmHjMDBkIxVZwm9vxszQcmEyvSEEVHPMImtFN8urG cGS03W2tZ11+SF7PfhZMhN1NA0N+zPLEnRBZrEjOCscFpBx4CCqvvzWxsNM6D6Ux pRKjMSD/Uu6G/1WQ/qk7HRDdc0a+q2hoigyEj4CZKWmlLhrQz4OJ3JfUGDFNw7P/ 2lTTFJVu77mNylntvIgxJvwnQrfwDhgCNvHN+1nDhXPEunXFnEBcp53a+GnjDhxi fat6A83qi4ycnpIuhnXa1dTVJK3dxI3JqIlvFpn9yWBDPLDl5MFIU0eLerFvHedQ qfUfS12x++MAQvHGPqiXiQJGEQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIfaTfoh 9rhP/S5GDKxaXvIOqqf2MB8GA1UdIwQYMBaAFCJgPWoz8G4KnRD7se2eHTdJJHAB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTgyOC9EREY5MDA1QUE4 RkUxMUVEOUQ1MDEwNURDNEY5QUUwMi9JbUE5YWpQd2JncWRFUHV4N1o0ZE4wa2tj QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ltQTlhalB3YmdxZEVQdXg3WjRkTjBra2NBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE4MjgvRERGOTAwNUFBOEZFMTFFRDlENTAxMDVEQzRGOUFFMDIvRTgxNkRGRkFB OTAxMTFFRDg2N0RBMTYxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZyeSMA8EAgACMAkDBwAgAQ3xjMAwDQYJKoZIhvcNAQELBQADggEB AAkdAFeJpSwBiYNSFSGCmn86GblFGWYd3uOcu6Q9SysMvsCo71lpdGMevHzuA7pB RF137j5LRvUnPwenDyaNVLJZH1ciEbKm0drfwEvIipNg0ZhYJzD+XFRDNExcAIDo J8oR0+YKTI08C6mbeJSDbe/CHl2+opQI1ff6kfnuLHPVEGBaNXSIZn5u2W9E/d02 EbQgmZHS/D8NQ3jlfQGsGiiajIBraUC9ZzRoV7FZmW0B5C/JnqTn5QGfet7YUGBD R5IW649ckKcR4jF5Wxjt0qR15n4z2bvfsHu2ItTeLnk55vQI53zu3JWSdkz8H894 jXkCbdNR7pG33emClP9+nHA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:59 2026 by rpki-client