$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/F4299FF895A711F180BC0AEB3D11F970.roa File: F4299FF895A711F180BC0AEB3D11F970.roa (raw, json) Hash identifier: PmXSjv1wDQDznhKCnpf8rUER23M5yoMgmCPaXPNRsLs= Subject key identifier: 22:59:FC:CB:57:E3:3A:BF:BA:17:89:1C:53:B8:5D:8D:8D:86:0A:4D Certificate issuer: /CN=A912C039/serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Certificate serial: 0B11 Authority key identifier: 38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/F4299FF895A711F180BC0AEB3D11F970.roa Signing time: Tue 11 Aug 2026 17:14:20 +0000 ROA not before: Tue 11 Aug 2026 17:14:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138964 IP address blocks: 103.137.200.0/23 maxlen: 23 103.137.200.0/24 maxlen: 24 103.137.201.0/24 maxlen: 24 2407:efc0::/32 maxlen: 32 2407:efc0::/33 maxlen: 40 2407:efc0::/48 maxlen: 48 2407:efc0:1::/48 maxlen: 48 2407:efc0:3::/48 maxlen: 48 2407:efc0:4::/48 maxlen: 48 2407:efc0:5::/48 maxlen: 48 2407:efc0:8000::/33 maxlen: 37 2407:efc0:8000::/34 maxlen: 40 2407:efc0:c000::/35 maxlen: 40 2407:efc0:e000::/36 maxlen: 40 2407:efc0:f000::/37 maxlen: 40 2407:efc0:f800::/38 maxlen: 38 2407:efc0:f800::/39 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C039, serialNumber=38B5F7A72F64ECD25885F8B4758502E23DA838BB Validity Not Before: Aug 11 17:14:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a7b586c-f2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:9a:8d:07:8b:22:39:b6:83:3e:e4:cf:07: df:d0:74:58:12:66:0f:cf:f7:83:88:a6:b9:b0:d7: 8a:8f:00:a1:99:c7:1b:f4:d1:c1:e9:d8:d9:94:b9: 65:b9:89:4a:48:f0:8b:4b:e7:85:ad:e1:20:b6:8f: d9:35:96:46:3d:a7:39:88:81:2b:6f:b9:57:9f:b3: ed:16:54:72:24:22:f2:27:54:47:8c:a7:45:76:e2: b0:92:b3:e5:b2:79:82:f0:18:64:7c:4c:1c:dd:88: 09:d1:93:b4:a8:3f:71:0d:5a:1e:e7:d4:45:64:a6: a2:6c:89:4d:3f:4d:9e:9b:e1:5c:69:73:fa:93:a6: 9d:c9:d5:0f:19:ab:44:42:4d:54:73:3f:27:5a:c5: 78:a9:9c:70:ab:ef:e4:31:9a:24:88:31:23:5a:81: 59:16:1e:ef:02:68:47:c2:9b:53:1a:5d:96:22:c2: 37:16:a0:d5:bf:20:cc:6c:ed:5e:f8:9d:56:4b:e0: 5a:1b:0f:d1:b8:20:93:9c:b1:1f:05:0e:06:45:54: 43:e7:50:a9:6c:0a:ae:3c:bd:c7:af:2b:b9:29:ad: 5f:4e:8c:0a:0b:2c:dc:98:b0:a0:88:fb:a9:43:6d: d7:2a:71:80:84:44:79:df:97:b2:e1:de:19:67:54: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:59:FC:CB:57:E3:3A:BF:BA:17:89:1C:53:B8:5D:8D:8D:86:0A:4D X509v3 Authority Key Identifier: keyid:38:B5:F7:A7:2F:64:EC:D2:58:85:F8:B4:75:85:02:E2:3D:A8:38:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/OLX3py9k7NJYhfi0dYUC4j2oOLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OLX3py9k7NJYhfi0dYUC4j2oOLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C039/C25D02FE789D11EABDA6F05FC4F9AE02/F4299FF895A711F180BC0AEB3D11F970.roa sbgp-ipAddrBlock: critical IPv4: 103.137.200.0/23 IPv6: 2407:efc0::/32 Signature Algorithm: sha256WithRSAEncryption 59:47:14:23:c3:c3:14:81:ad:93:e3:40:95:2e:5e:ce:92:d2: 8a:e7:78:b5:ea:8f:fc:fa:16:7e:d9:7e:af:83:64:ff:05:d3: 3a:17:b4:93:d0:ce:27:9e:44:b7:7c:1a:f0:3a:38:ed:4c:d1: 0d:d3:7e:3a:11:f1:85:63:f9:75:2d:55:c0:53:98:ab:ea:18: 53:76:ae:65:c7:8e:f1:92:05:2d:c4:dd:77:d1:1a:7f:00:10: d1:19:e6:b6:bb:12:f3:af:8e:da:10:15:7a:7f:c1:d2:5f:b3: e1:63:15:2c:ca:2b:88:24:69:6b:e6:21:65:0b:ca:4b:c9:a1: 72:47:71:a7:70:15:46:f2:99:1d:6f:c8:bf:15:d9:0a:9a:b9: 31:66:28:48:fc:ab:4e:97:54:21:c7:2b:11:36:b2:2d:15:b4: 59:04:03:48:e5:6f:2a:d8:d8:94:70:1a:66:53:40:6a:78:3d: 49:d4:b8:d5:9a:77:81:49:33:0f:5f:5c:32:7a:29:0b:22:35: 42:8e:1e:81:e6:9f:f7:0b:af:be:48:fa:b2:36:89:2a:7c:b7: 8f:00:96:60:5b:6b:d2:e5:96:ac:f6:1d:34:98:47:8e:e8:b1: 0e:ba:b6:e7:8e:a8:95:e7:9a:2c:b2:52:46:fa:c8:cd:64:de: 85:1a:57:b4 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwMzkxMTAvBgNVBAUTKDM4QjVGN0E3MkY2NEVDRDI1ODg1RjhCNDc1ODUwMkUy M0RBODM4QkIwHhcNMjYwODExMTcxNDIwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdiNTg2Yy1mMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3quajQeLIjm2gz7kzwff0HRYEmYPz/eDiKa5sNeKjwChmccb9NHB6djZlLll uYlKSPCLS+eFreEgto/ZNZZGPac5iIErb7lXn7PtFlRyJCLyJ1RHjKdFduKwkrPl snmC8BhkfEwc3YgJ0ZO0qD9xDVoe59RFZKaibIlNP02em+FcaXP6k6adydUPGatE Qk1Ucz8nWsV4qZxwq+/kMZokiDEjWoFZFh7vAmhHwptTGl2WIsI3FqDVvyDMbO1e +J1WS+BaGw/RuCCTnLEfBQ4GRVRD51CpbAquPL3Hryu5Ka1fTowKCyzcmLCgiPup Q23XKnGAhER535ey4d4ZZ1TlaQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCJZ/MtX 4zq/uheJHFO4XY2NhgpNMB8GA1UdIwQYMBaAFDi196cvZOzSWIX4tHWFAuI9qDi7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzAzOS9DMjVEMDJGRTc4 OUQxMUVBQkRBNkYwNUZDNEY5QUUwMi9PTFgzcHk5azdOSlloZmkwZFlVQzRqMm9P THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09MWDNweTlrN05KWWhmaTBkWVVDNGoyb09Mcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMwMzkvQzI1RDAyRkU3ODlEMTFFQUJEQTZGMDVGQzRGOUFFMDIvRjQyOTlGRjg5 NUE3MTFGMTgwQkMwQUVCM0QxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4nIMA0EAgACMAcDBQAkB+/AMA0GCSqGSIb3DQEBCwUAA4IBAQBZ RxQjw8MUga2T40CVLl7OktKK53i16o/8+hZ+2X6vg2T/BdM6F7ST0M4nnkS3fBrw OjjtTNEN0346EfGFY/l1LVXAU5ir6hhTdq5lx47xkgUtxN130Rp/ABDRGea2uxLz r47aEBV6f8HSX7PhYxUsyiuIJGlr5iFlC8pLyaFyR3GncBVG8pkdb8i/FdkKmrkx ZihI/KtOl1QhxysRNrItFbRZBANI5W8q2NiUcBpmU0BqeD1J1LjVmneBSTMPX1wy eikLIjVCjh6B5p/3C6++SPqyNokqfLePAJZgW2vS5Zas9h00mEeO6LEOurbnjqiV 55osslJG+sjNZN6FGle0 -----END CERTIFICATE-----Generated at Wed Sep 23 10:15:11 2026 by rpki-client