$ rpki-client -vvf rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/CB2788CAAB4C11EDB3DC7336C4F9AE02.roa File: CB2788CAAB4C11EDB3DC7336C4F9AE02.roa (raw, json) Hash identifier: GbmFJbbelNZSeQtz3x+IHWFg+LPNIaQa4LtKPhQUg28= Subject key identifier: 26:8A:34:A7:21:47:9D:2F:8D:AE:D5:38:EB:7F:40:4A:EE:99:84:03 Certificate issuer: /CN=A911C3BB/serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Certificate serial: 0244 Authority key identifier: 73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/CB2788CAAB4C11EDB3DC7336C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:09:24 +0000 ROA not before: Tue 03 Feb 2026 02:22:04 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150710 IP address blocks: 103.65.220.0/23 maxlen: 23 103.65.220.0/24 maxlen: 24 103.65.221.0/24 maxlen: 24 2001:df1:c7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C3BB, serialNumber=73FBB58F5571F3F4C62A63FDF5AFEF9CB70E7403 Validity Not Before: Feb 3 02:22:04 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a41053-816e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:2b:c5:0e:da:90:93:f5:8e:7a:fd:4c:49: 6c:52:ac:47:d6:41:04:cf:0e:06:40:d0:7d:64:7e: 19:77:cd:bb:d5:fd:0d:44:cd:20:ff:f6:ec:d8:ed: fd:25:f5:eb:38:31:03:34:9b:67:00:20:10:de:40: d3:61:89:61:1f:db:8a:fc:dd:f6:60:39:7d:db:ae: 11:eb:f6:c1:cf:7f:54:8e:bc:e5:5d:e7:50:8a:ec: df:b8:d8:7b:46:82:61:cb:52:21:53:7b:0e:b7:3b: 75:14:80:d1:91:be:78:2c:b2:59:b1:0b:ba:d8:86: 3f:65:fb:5c:34:21:c6:77:c7:18:71:ed:d5:36:8f: a8:3b:45:f2:16:cc:21:26:09:cd:3f:f3:f6:c6:f4: fc:2e:d4:f6:12:7b:58:5d:44:51:70:6e:b2:7f:79: 13:1b:09:1b:be:ae:4d:20:53:45:a8:e7:56:81:ec: aa:ce:c6:a8:6f:34:2a:52:f1:9f:9d:fe:fe:a6:a5: 03:ed:88:ba:be:d2:00:76:ad:bd:dc:9b:10:82:e5: 86:42:27:53:83:73:0a:82:9a:06:84:29:f0:c8:34: 41:a3:73:74:8c:29:75:2a:4a:9c:56:dc:d1:70:55: 3b:cb:a2:ed:af:79:10:d3:8a:bc:35:67:9f:b7:24: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8A:34:A7:21:47:9D:2F:8D:AE:D5:38:EB:7F:40:4A:EE:99:84:03 X509v3 Authority Key Identifier: keyid:73:FB:B5:8F:55:71:F3:F4:C6:2A:63:FD:F5:AF:EF:9C:B7:0E:74:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/c_u1j1Vx8_TGKmP99a_vnLcOdAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_u1j1Vx8_TGKmP99a_vnLcOdAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C3BB/C908879AAB4911ED9FB40B35C4F9AE02/CB2788CAAB4C11EDB3DC7336C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.65.220.0/23 IPv6: 2001:df1:c7c0::/48 Signature Algorithm: sha256WithRSAEncryption 55:d1:a9:75:03:ae:e3:c6:7c:84:5f:67:f1:3a:6a:5f:5b:91: 85:d3:30:4a:62:45:14:fc:52:80:93:08:ec:2a:7f:cd:58:da: a7:cd:eb:04:2c:99:ea:24:a2:a7:e8:73:ff:c5:3f:0d:95:68: 29:8f:89:0b:fa:63:3c:13:15:80:e8:5f:bc:3d:4d:37:69:ae: 12:3a:4a:70:cd:ef:3d:e2:3b:f7:6a:e4:c1:b6:df:c8:cd:32: f7:71:f0:a4:3b:57:60:87:6b:70:1c:f8:39:1a:41:fe:1c:ec: a2:77:15:e9:62:2a:b8:83:ea:dd:0f:49:f6:f0:eb:46:f5:6a: 9d:d7:1e:29:05:0d:6d:68:45:cf:43:df:e1:ad:ff:b4:6b:4c: e7:e2:cf:c6:eb:00:29:aa:9d:3e:0e:50:2b:2b:74:f3:d2:cc: 65:a1:64:bb:9f:38:59:17:44:5c:8b:67:b5:22:c0:01:6c:2e: 7e:a6:64:47:19:6d:7b:ce:3e:b7:42:02:11:87:f8:0a:ff:53: 0c:15:5c:33:6e:a6:97:70:1b:81:9c:a3:13:c3:af:87:67:ea: b2:e7:67:d9:46:ec:89:4a:4b:f5:f6:2a:3c:26:a2:5d:93:62: 7b:99:9e:ef:2a:42:c1:c8:3d:af:25:71:53:8b:86:cc:9b:a0: 6d:64:6f:36 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzQkIxMTAvBgNVBAUTKDczRkJCNThGNTU3MUYzRjRDNjJBNjNGREY1QUZFRjlD QjcwRTc0MDMwHhcNMjYwMjAzMDIyMjA0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTA1My04MTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqsrxQ7akJP1jnr9TElsUqxH1kEEzw4GQNB9ZH4Zd8271f0NRM0g//bs2O39 JfXrODEDNJtnACAQ3kDTYYlhH9uK/N32YDl9264R6/bBz39UjrzlXedQiuzfuNh7 RoJhy1IhU3sOtzt1FIDRkb54LLJZsQu62IY/ZftcNCHGd8cYce3VNo+oO0XyFswh JgnNP/P2xvT8LtT2EntYXURRcG6yf3kTGwkbvq5NIFNFqOdWgeyqzsaobzQqUvGf nf7+pqUD7Yi6vtIAdq293JsQguWGQidTg3MKgpoGhCnwyDRBo3N0jCl1KkqcVtzR cFU7y6Ltr3kQ04q8NWeftyQeFwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCaKNKch R50vja7VOOt/QErumYQDMB8GA1UdIwQYMBaAFHP7tY9VcfP0xipj/fWv75y3DnQD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzNCQi9DOTA4ODc5QUFC NDkxMUVEOUZCNDBCMzVDNEY5QUUwMi9jX3UxajFWeDhfVEdLbVA5OWFfdm5MY09k QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfdTFqMVZ4OF9UR0ttUDk5YV92bkxjT2RBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMzQkIvQzkwODg3OUFBQjQ5MTFFRDlGQjQwQjM1QzRGOUFFMDIvQ0IyNzg4Q0FB QjRDMTFFREIzREM3MzM2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ0HcMA8EAgACMAkDBwAgAQ3xx8AwDQYJKoZIhvcNAQELBQADggEB AFXRqXUDruPGfIRfZ/E6al9bkYXTMEpiRRT8UoCTCOwqf81Y2qfN6wQsmeokoqfo c//FPw2VaCmPiQv6YzwTFYDoX7w9TTdprhI6SnDN7z3iO/dq5MG238jNMvdx8KQ7 V2CHa3Ac+DkaQf4c7KJ3FeliKriD6t0PSfbw60b1ap3XHikFDW1oRc9D3+Gt/7Rr TOfiz8brACmqnT4OUCsrdPPSzGWhZLufOFkXRFyLZ7UiwAFsLn6mZEcZbXvOPrdC AhGH+Ar/UwwVXDNuppdwG4GcoxPDr4dn6rLnZ9lG7IlKS/X2Kjwmol2TYnuZnu8q QsHIPa8lcVOLhsyboG1kbzY= -----END CERTIFICATE-----Generated at Mon Mar 2 08:15:30 2026 by rpki-client