$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/F33FD8F8EA5611EF8C0DD984C4F9AE02.roa File: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (raw, json) Hash identifier: WCPiO5Ha1079blFN6/BlJGEwWoFTxOIAz+1BJbqnQsY= Subject key identifier: D3:02:45:4A:3A:01:F1:0B:69:21:CC:E9:5B:38:F3:A0:13:AD:01:0E Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 011D Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/F33FD8F8EA5611EF8C0DD984C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:53:04 +0000 ROA not before: Wed 05 Mar 2025 07:53:01 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132906 IP address blocks: 103.148.240.0/24 maxlen: 24 103.164.7.0/24 maxlen: 24 2001:df2:fe80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Mar 5 07:53:01 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3e250-8338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:5f:a2:6c:32:b6:4a:00:0b:1a:30:43:f0: 37:ef:12:3f:a7:e7:f6:f6:37:b9:09:f8:e1:d3:19: a6:cc:6b:9e:1f:1b:2e:75:7e:3b:09:2b:06:ee:95: 2f:33:f8:ab:c7:d9:f1:d6:59:5e:2b:5b:18:6c:5d: 52:03:d3:91:60:35:23:a6:ae:0b:66:3a:38:0d:4b: cc:43:db:00:1e:68:5f:54:bd:f9:7d:aa:95:74:31: 3a:89:30:1d:fe:77:83:62:36:bf:84:55:f0:65:d2: 16:52:14:66:28:94:2e:b1:46:0d:6e:cf:ec:fb:95: 4d:1b:e2:61:e5:bf:e6:e4:e5:2c:b3:ba:63:2a:e7: 79:01:93:2e:5d:5e:5f:35:bd:1a:24:ff:5e:3b:a4: 8d:c4:e6:85:da:9e:04:e8:65:2c:de:d3:8b:d3:5f: 99:d6:a2:33:f6:f7:0c:bd:12:7c:c6:98:39:0a:72: 5e:c1:2f:26:4b:3e:eb:22:0d:6c:1a:72:45:e6:09: aa:33:d7:cd:b2:50:24:4c:c9:e5:d2:26:07:54:cc: 74:ab:3a:02:24:26:bc:6f:45:eb:de:70:8e:43:1c: 3b:89:5a:d4:fb:7b:82:7e:d0:1f:df:80:fa:86:89: fe:50:c1:03:47:53:73:58:03:4f:ec:e3:e0:4a:79: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:02:45:4A:3A:01:F1:0B:69:21:CC:E9:5B:38:F3:A0:13:AD:01:0E X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/F33FD8F8EA5611EF8C0DD984C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.240.0/24 103.164.7.0/24 IPv6: 2001:df2:fe80::/48 Signature Algorithm: sha256WithRSAEncryption 23:62:63:c3:8c:41:78:0b:7d:e4:9f:e1:e9:b7:a1:f7:2c:55: 7d:de:19:16:c8:cf:cd:2e:61:4b:1c:ba:86:f9:8e:e9:eb:99: dd:4f:ef:f2:b8:45:27:ad:df:7e:db:79:9d:f9:dd:9e:2d:8c: dc:76:a6:b8:61:d5:ae:81:f3:32:40:55:02:85:36:3c:0f:68: e2:ee:b9:34:e9:47:4e:54:ce:77:b3:bf:09:43:7d:2b:cf:55: 18:2b:b5:34:c2:5e:06:ee:09:49:49:0e:a8:bf:29:f6:d4:30: 73:85:0f:4d:68:2d:90:93:69:3c:a3:27:e4:e3:b4:af:79:39: 30:de:92:58:be:45:ca:34:a8:b7:74:d2:58:b4:3d:f1:6b:6b: e6:fd:ea:d7:0c:3c:23:db:6a:e3:7f:fb:2a:37:62:25:72:8b: 89:0d:8e:3f:63:6b:47:43:2f:76:c9:1f:1d:65:f1:bc:52:95: 34:4a:6f:c0:a0:c0:ad:e8:33:35:22:15:21:12:ac:12:48:84: 02:63:6a:f2:71:af:76:02:9e:88:13:20:d5:f4:de:ab:64:45: de:94:5d:cd:9f:df:a4:fc:fa:35:24:7e:91:44:5a:2c:92:50: 6a:fc:d9:02:28:10:2e:0a:87:f5:fe:a4:7b:43:24:4f:e4:6d: 62:1e:61:0c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwMzA1MDc1MzAxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTI1MC04MzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxVfomwytkoACxowQ/A37xI/p+f29je5Cfjh0xmmzGueHxsudX47CSsG7pUv M/irx9nx1lleK1sYbF1SA9ORYDUjpq4LZjo4DUvMQ9sAHmhfVL35faqVdDE6iTAd /neDYja/hFXwZdIWUhRmKJQusUYNbs/s+5VNG+Jh5b/m5OUss7pjKud5AZMuXV5f Nb0aJP9eO6SNxOaF2p4E6GUs3tOL01+Z1qIz9vcMvRJ8xpg5CnJewS8mSz7rIg1s GnJF5gmqM9fNslAkTMnl0iYHVMx0qzoCJCa8b0Xr3nCOQxw7iVrU+3uCftAf34D6 hon+UMEDR1NzWANP7OPgSnlBIQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFNMCRUo6 AfELaSHM6Vs486ATrQEOMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE4NUYvMjBGQjZEMjY3NTRFMTFFRjlDNzlBRjZFQzRGOUFFMDIvRjMzRkQ4RjhF QTU2MTFFRjhDMEREOTg0QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ5TwAwQAZ6QHMA8EAgACMAkDBwAgAQ3y/oAwDQYJKoZIhvcNAQEL BQADggEBACNiY8OMQXgLfeSf4em3ofcsVX3eGRbIz80uYUscuob5junrmd1P7/K4 RSet337beZ353Z4tjNx2prhh1a6B8zJAVQKFNjwPaOLuuTTpR05UznezvwlDfSvP VRgrtTTCXgbuCUlJDqi/KfbUMHOFD01oLZCTaTyjJ+TjtK95OTDekli+Rco0qLd0 0li0PfFra+b96tcMPCPbauN/+yo3YiVyi4kNjj9ja0dDL3bJHx1l8bxSlTRKb8Cg wK3oMzUiFSESrBJIhAJjavJxr3YCnogTINX03qtkRd6UXc2f36T8+jUkfpFEWiyS UGr82QIoEC4Kh/X+pHtDJE/kbWIeYQw= -----END CERTIFICATE-----Generated at Mon Mar 2 08:13:19 2026 by rpki-client