$ rpki-client -vvf rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/49CEB44A28D111EDB364C870C4F9AE02.roa File: 49CEB44A28D111EDB364C870C4F9AE02.roa (raw, json) Hash identifier: KYxgbKkbHxGZy90LePidqYYy5WjWj5ewerN5tHIii0U= Subject key identifier: 72:F5:E4:53:52:F2:D0:A5:91:85:0C:5E:C8:7F:2A:D6:8C:6A:44:E1 Certificate issuer: /CN=A9123D28/serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Certificate serial: 02C3 Authority key identifier: 2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/49CEB44A28D111EDB364C870C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:24:17 +0000 ROA not before: Thu 05 Jun 2025 01:49:34 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56294 IP address blocks: 103.215.160.0/24 maxlen: 24 103.215.161.0/24 maxlen: 24 103.215.162.0/24 maxlen: 24 103.215.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123D28, serialNumber=2E06F3091AD58ED0633FF989B1FD329773EC3AA7 Validity Not Before: Jun 5 01:49:34 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e9a1-222b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:9a:10:4f:aa:cc:40:09:37:3f:d4:4a:01: 11:56:13:f3:7b:91:f2:70:d6:8b:25:5b:58:d7:8b: a6:93:66:30:7e:57:c0:02:1d:4b:70:ed:66:e6:95: 8d:99:41:43:0f:e9:df:6c:da:35:47:6b:37:07:d5: 7f:b3:b2:fb:81:80:67:47:bf:7a:93:81:33:f8:68: d9:0a:b1:6b:8f:65:e7:88:c6:d2:fa:56:4a:73:b1: 36:37:fa:9d:cd:36:38:13:60:11:ff:ee:df:02:3e: 38:cf:78:9f:69:1d:27:3f:b3:93:29:3d:94:68:f8: e8:fb:7f:b9:e5:b7:73:aa:0d:ee:2d:9c:82:5d:d2: 25:fa:06:e0:70:c8:00:fd:67:68:f0:fa:f0:47:fe: d7:98:85:d7:63:f2:5c:8f:6f:4e:55:33:b8:c3:3d: a6:48:b7:b8:ef:78:40:55:f2:0c:4a:fc:58:05:9e: 71:90:de:1c:28:ff:40:80:33:93:79:3b:1d:5a:60: 99:c7:20:89:7e:07:52:c4:ea:f4:79:b8:38:82:a7: 12:3e:53:55:98:ad:e1:ee:3a:78:2b:4f:01:80:dc: 54:3f:b3:75:60:d0:05:24:96:e6:a1:6d:af:78:84: 06:e5:2a:9f:ea:ab:39:c1:76:7e:57:d9:a4:b4:bb: a1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F5:E4:53:52:F2:D0:A5:91:85:0C:5E:C8:7F:2A:D6:8C:6A:44:E1 X509v3 Authority Key Identifier: keyid:2E:06:F3:09:1A:D5:8E:D0:63:3F:F9:89:B1:FD:32:97:73:EC:3A:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/LgbzCRrVjtBjP_mJsf0yl3PsOqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LgbzCRrVjtBjP_mJsf0yl3PsOqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123D28/4BDAEEDC28CE11EDB683396EC4F9AE02/49CEB44A28D111EDB364C870C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.215.160.0/22 Signature Algorithm: sha256WithRSAEncryption 68:39:d9:c3:4f:68:5d:51:12:44:9c:f1:ac:e2:d2:53:a4:35: 33:7f:3c:19:0d:6a:e8:b3:48:ee:f4:7b:2d:be:23:19:40:1a: 7e:3a:6c:39:e0:81:4b:1b:18:0e:ab:41:0f:b7:86:44:9d:90: 33:a7:de:8a:22:03:b9:97:7f:c0:fe:42:65:a5:90:a8:24:dc: ed:ff:59:b2:06:65:ff:50:a9:d4:ff:41:a4:33:b6:b8:b6:a0: 6d:26:fe:f2:f5:0d:72:b6:f5:fb:14:69:d2:c5:6a:26:00:e6: 95:ad:61:73:12:ae:ee:6c:96:23:43:d1:ca:c5:15:e6:bb:19: 7f:d1:88:21:79:7c:6b:17:54:5d:1d:61:69:85:ee:8d:d0:06: 46:bf:af:f7:f3:34:7b:cd:f9:38:53:17:9c:23:ac:c2:6f:18: 41:57:67:e9:b1:b6:a2:81:94:e1:0a:a6:1e:05:12:36:dc:b2: 0b:c5:55:1e:ef:b5:44:51:11:86:4d:10:72:6b:16:73:46:55: 3c:6c:22:bc:c9:f1:67:5c:27:e5:6e:c9:ca:3f:2b:30:a8:b5: ed:f9:8f:da:b0:19:e9:64:06:c2:a7:65:40:15:49:24:dc:c7: d1:5b:06:73:95:9b:df:9e:02:47:60:cd:4b:14:51:aa:3f:21: 73:97:5d:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNEMjgxMTAvBgNVBAUTKDJFMDZGMzA5MUFENThFRDA2MzNGRjk4OUIxRkQzMjk3 NzNFQzNBQTcwHhcNMjUwNjA1MDE0OTM0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTlhMS0yMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXGaEE+qzEAJNz/USgERVhPze5HycNaLJVtY14umk2YwflfAAh1LcO1m5pWN mUFDD+nfbNo1R2s3B9V/s7L7gYBnR796k4Ez+GjZCrFrj2XniMbS+lZKc7E2N/qd zTY4E2AR/+7fAj44z3ifaR0nP7OTKT2UaPjo+3+55bdzqg3uLZyCXdIl+gbgcMgA /Wdo8PrwR/7XmIXXY/Jcj29OVTO4wz2mSLe473hAVfIMSvxYBZ5xkN4cKP9AgDOT eTsdWmCZxyCJfgdSxOr0ebg4gqcSPlNVmK3h7jp4K08BgNxUP7N1YNAFJJbmoW2v eIQG5Sqf6qs5wXZ+V9mktLuh6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHL15FNS 8tClkYUMXsh/KtaMakThMB8GA1UdIwQYMBaAFC4G8wka1Y7QYz/5ibH9Mpdz7Dqn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0QyOC80QkRBRUVEQzI4 Q0UxMUVEQjY4MzM5NkVDNEY5QUUwMi9MZ2J6Q1JyVmp0QmpQX21Kc2YweWwzUHNP cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xnYnpDUnJWanRCalBfbUpzZjB5bDNQc09xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjNEMjgvNEJEQUVFREMyOENFMTFFREI2ODMzOTZFQzRGOUFFMDIvNDlDRUI0NEEy OEQxMTFFREIzNjRDODcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9egMA0GCSqGSIb3DQEBCwUAA4IBAQBoOdnDT2hdURJEnPGs4tJT pDUzfzwZDWros0ju9HstviMZQBp+Omw54IFLGxgOq0EPt4ZEnZAzp96KIgO5l3/A /kJlpZCoJNzt/1myBmX/UKnU/0GkM7a4tqBtJv7y9Q1ytvX7FGnSxWomAOaVrWFz Eq7ubJYjQ9HKxRXmuxl/0YgheXxrF1RdHWFphe6N0AZGv6/38zR7zfk4UxecI6zC bxhBV2fpsbaigZThCqYeBRI23LILxVUe77VEURGGTRByaxZzRlU8bCK8yfFnXCfl bsnKPyswqLXt+Y/asBnpZAbCp2VAFUkk3MfRWwZzlZvfngJHYM1LFFGqPyFzl11c -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:10 2026 by rpki-client