$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DA3891D484AB11F0BEE30678C4F9AE02.roa File: DA3891D484AB11F0BEE30678C4F9AE02.roa (raw, json) Hash identifier: hRtDrDOItVox8dkwIBAnEM25pBusJjpf+paHoWCM54Q= Subject key identifier: 5D:48:A0:34:B1:11:8B:10:42:FB:3A:A9:9D:C3:9A:7D:D9:C4:09:E5 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 08E1 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DA3891D484AB11F0BEE30678C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:53:52 +0000 ROA not before: Wed 08 Oct 2025 22:54:18 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 401948 IP address blocks: 103.209.233.0/24 maxlen: 24 103.209.234.0/24 maxlen: 24 163.53.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 8 22:54:18 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48b40-9ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f3:0c:7a:df:0d:1c:d0:22:86:c1:82:70:01: 2d:a5:3a:d8:26:b1:e1:4c:98:55:b7:89:91:a5:92: 93:37:d2:6f:e2:d6:1b:d4:9b:7a:48:a0:e5:c8:ba: 5f:c7:a1:7c:df:00:4d:80:47:56:63:df:70:96:9e: 88:fd:d7:db:b7:33:17:f7:6d:eb:53:42:84:7b:e8: b3:e6:b6:0f:1c:83:78:b1:66:14:31:d9:e5:ff:b4: a6:ab:03:0f:ed:ea:26:c9:11:10:c6:0b:7d:82:f3: ed:a9:ac:c2:99:10:40:7c:f9:31:a1:8b:c6:ce:0a: fc:ed:c5:3d:fe:80:38:d4:7e:92:93:1c:7b:da:41: 81:12:3f:2c:2a:e1:54:eb:9d:85:ff:80:6e:79:21: ae:91:1b:a5:38:71:9e:af:69:f6:14:f5:fd:9e:32: c2:d5:14:23:50:21:6c:50:27:ba:c2:c2:8f:d1:83: f4:79:75:2c:94:86:df:8a:0e:b2:53:ce:26:38:7a: 45:4d:39:d3:11:f6:3a:35:a2:1a:08:d3:42:3d:20: 19:f6:6c:65:dc:fc:3e:1d:29:b8:80:db:f2:5b:bc: a8:52:ad:aa:2b:24:14:54:d2:0c:09:a8:8b:d8:3f: 0e:9f:f7:0b:9e:28:41:00:5c:f8:c9:eb:c9:f9:37: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:48:A0:34:B1:11:8B:10:42:FB:3A:A9:9D:C3:9A:7D:D9:C4:09:E5 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/DA3891D484AB11F0BEE30678C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.233.0-103.209.234.255 163.53.17.0/24 Signature Algorithm: sha256WithRSAEncryption 23:45:b2:ed:75:b9:da:7c:05:c8:80:40:c0:19:4d:39:43:2f: 3a:7e:37:f2:15:50:2f:b8:c5:73:39:da:6c:cc:73:ee:7d:65: fb:9a:78:49:7a:2a:98:01:b4:36:84:81:a8:12:67:e2:ff:7f: 4c:fb:60:ab:4c:7b:6d:19:92:35:01:12:18:d5:9d:d8:5b:e4: ad:11:7e:d2:43:f1:66:ec:86:7e:f2:69:fb:72:f5:c4:ed:0b: ff:ad:ad:45:17:c9:99:02:68:aa:33:a8:11:0f:2e:1a:99:85: 7f:24:de:5c:a5:37:7a:aa:6e:33:f0:55:8e:46:33:a4:60:ac: 9a:68:ca:89:96:16:a7:5f:1c:f6:4d:af:ff:70:9d:39:19:01: 83:b1:8f:de:27:3c:9f:11:10:a0:2f:03:a2:3e:df:98:59:7d: bd:ed:8e:3a:e2:9d:b3:09:a2:d3:73:27:91:45:9f:3d:a8:a9: 55:b5:b1:08:27:f5:e8:57:97:30:82:e6:78:40:8d:e3:37:cc: 3e:59:ae:5a:1e:28:74:14:92:10:e0:07:72:73:49:70:9d:ab: 6e:5e:55:fd:c0:95:88:ee:e5:69:3f:a1:28:8d:48:cf:c9:3a: 25:f2:f6:a7:57:f6:6d:97:e7:44:ed:44:e7:1b:f4:d4:ad:1e: f7:fa:61:f7 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMDA4MjI1NDE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGI0MC05ZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPMMet8NHNAihsGCcAEtpTrYJrHhTJhVt4mRpZKTN9Jv4tYb1Jt6SKDlyLpf x6F83wBNgEdWY99wlp6I/dfbtzMX923rU0KEe+iz5rYPHIN4sWYUMdnl/7SmqwMP 7eomyREQxgt9gvPtqazCmRBAfPkxoYvGzgr87cU9/oA41H6Skxx72kGBEj8sKuFU 652F/4BueSGukRulOHGer2n2FPX9njLC1RQjUCFsUCe6wsKP0YP0eXUslIbfig6y U84mOHpFTTnTEfY6NaIaCNNCPSAZ9mxl3Pw+HSm4gNvyW7yoUq2qKyQUVNIMCaiL 2D8On/cLnihBAFz4yevJ+TfnPwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFF1IoDSx EYsQQvs6qZ3Dmn3ZxAnlMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvREEzODkxRDQ4 NEFCMTFGMEJFRTMwNjc4QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBABn0ekDBABn0eoDBACjNREwDQYJKoZIhvcNAQELBQADggEBACNF su11udp8BciAQMAZTTlDLzp+N/IVUC+4xXM52mzMc+59ZfuaeEl6KpgBtDaEgagS Z+L/f0z7YKtMe20ZkjUBEhjVndhb5K0RftJD8Wbshn7yafty9cTtC/+trUUXyZkC aKozqBEPLhqZhX8k3lylN3qqbjPwVY5GM6RgrJpoyomWFqdfHPZNr/9wnTkZAYOx j94nPJ8REKAvA6I+35hZfb3tjjrinbMJotNzJ5FFnz2oqVW1sQgn9ehXlzCC5nhA jeM3zD5ZrloeKHQUkhDgB3JzSXCdq25eVf3AlYju5Wk/oSiNSM/JOiXy9qdX9m2X 50TtROcb9NStHvf6Yfc= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:14 2026 by rpki-client