$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/CB56435E3C5311EC81D0DB48C4F9AE02.roa File: CB56435E3C5311EC81D0DB48C4F9AE02.roa (raw, json) Hash identifier: 0b0yLOmIJ+nnKiDnQeLmI+PvdoR42fwtxsNPmLvqMWw= Subject key identifier: A0:D6:92:CA:E5:0D:DB:CF:CD:0D:BC:AE:A8:35:0C:9B:11:44:9A:80 Certificate issuer: /CN=A912C7B1/serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Certificate serial: 0528 Authority key identifier: A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/CB56435E3C5311EC81D0DB48C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:52:17 +0000 ROA not before: Sat 15 Mar 2025 00:15:49 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 55402 IP address blocks: 103.110.44.0/24 maxlen: 24 103.110.45.0/24 maxlen: 24 103.110.46.0/24 maxlen: 24 103.110.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7B1, serialNumber=A626CDCDB771E9655E6E91A1C72D12FB57D1C4E8 Validity Not Before: Mar 15 00:15:49 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3fe41-9333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:fd:1b:03:de:b3:6e:25:de:e8:7e:ed:04: 7d:bd:06:d0:1d:03:7c:5d:e0:a2:44:c4:23:ca:5b: 14:53:c8:20:ed:16:8b:3f:95:51:79:1c:2e:fd:0e: 9a:47:92:f5:e1:10:71:2e:57:96:6c:9e:33:48:57: 31:87:b4:bb:19:b6:86:ec:f6:df:bf:57:0b:41:d8: 5f:ef:49:41:ac:52:0d:a9:f3:38:6a:67:da:a3:72: da:43:ac:22:9a:be:f2:f2:70:c6:3e:03:9f:b5:08: 98:fe:39:78:0c:4e:39:e7:f3:80:9d:43:f1:d5:88: 84:b0:63:58:ac:13:15:de:fc:2d:c6:32:f1:ac:c4: 3b:23:95:b7:e4:c8:b1:a2:a2:51:b8:b8:15:b2:91: c0:20:2f:1a:91:34:0b:c7:96:30:c1:46:96:8f:96: 03:58:85:9e:96:58:84:fd:c1:08:90:52:e1:f7:7b: 12:81:f3:f4:3c:8d:25:34:67:13:d6:88:3b:5d:db: 08:39:90:e3:4c:7d:f0:9e:c8:8f:44:aa:ab:d4:e3: a4:34:81:bf:9c:11:73:35:71:d2:3f:60:53:a1:bf: e0:aa:62:51:25:fb:ec:35:64:00:70:11:fb:bc:6d: 27:e8:36:6b:08:08:10:b4:04:aa:26:a3:4f:6b:2e: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D6:92:CA:E5:0D:DB:CF:CD:0D:BC:AE:A8:35:0C:9B:11:44:9A:80 X509v3 Authority Key Identifier: keyid:A6:26:CD:CD:B7:71:E9:65:5E:6E:91:A1:C7:2D:12:FB:57:D1:C4:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/pibNzbdx6WVebpGhxy0S-1fRxOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pibNzbdx6WVebpGhxy0S-1fRxOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7B1/A0F480B63C4F11ECB871283EC4F9AE02/CB56435E3C5311EC81D0DB48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.110.44.0/22 Signature Algorithm: sha256WithRSAEncryption ba:4b:2e:04:be:14:ef:8e:4a:7a:ee:e8:c8:b6:c5:f7:a9:f0: 71:b2:96:27:5e:8d:0e:00:49:0f:53:42:44:38:f8:94:8e:f3: ca:39:e9:b9:2b:d6:75:14:9b:45:60:ca:e7:aa:cd:ab:43:d9: 04:fe:f0:01:d8:3d:ca:c5:bc:f2:a6:2a:ab:f3:0f:a2:c7:16: cf:f1:5d:ae:2b:ad:01:59:21:d3:83:76:72:72:bd:22:23:22: 71:5c:d1:0a:80:a8:5b:d3:b3:90:3d:ee:cd:40:75:de:09:11: ff:90:9a:58:ed:cf:55:c7:2d:24:57:5c:1e:ae:d0:54:1b:3b: 8e:7a:e1:0f:9c:25:61:06:ff:20:f8:8c:40:d4:da:bf:8d:a1: f5:72:c3:35:b7:a3:c4:d4:42:17:86:81:93:7b:d0:0c:4f:a7: 5e:1a:54:7e:f5:04:55:c8:28:cf:15:10:df:61:84:11:cf:8d: e1:e2:08:d5:64:60:6a:4c:e0:4d:c6:e5:ed:93:c9:bb:af:30: 27:c0:ee:02:1c:69:d0:96:5d:c0:22:a8:a6:35:87:02:55:b8: 7e:7e:32:dc:35:d3:24:99:b4:2e:14:74:f1:4d:a4:85:2f:ec: 5f:0b:2d:c1:49:ca:75:fb:90:ba:a4:72:0a:28:12:dc:f2:7b: bb:bf:09:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3QjExMTAvBgNVBAUTKEE2MjZDRENEQjc3MUU5NjU1RTZFOTFBMUM3MkQxMkZC NTdEMUM0RTgwHhcNMjUwMzE1MDAxNTQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmU0MS05MzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9f9GwPes24l3uh+7QR9vQbQHQN8XeCiRMQjylsUU8gg7RaLP5VReRwu/Q6a R5L14RBxLleWbJ4zSFcxh7S7GbaG7Pbfv1cLQdhf70lBrFINqfM4amfao3LaQ6wi mr7y8nDGPgOftQiY/jl4DE455/OAnUPx1YiEsGNYrBMV3vwtxjLxrMQ7I5W35Mix oqJRuLgVspHAIC8akTQLx5YwwUaWj5YDWIWelliE/cEIkFLh93sSgfP0PI0lNGcT 1og7XdsIOZDjTH3wnsiPRKqr1OOkNIG/nBFzNXHSP2BTob/gqmJRJfvsNWQAcBH7 vG0n6DZrCAgQtASqJqNPay73fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKDWksrl DdvPzQ28rqg1DJsRRJqAMB8GA1UdIwQYMBaAFKYmzc23cellXm6RocctEvtX0cTo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdCMS9BMEY0ODBCNjND NEYxMUVDQjg3MTI4M0VDNEY5QUUwMi9waWJOemJkeDZXVmVicEdoeHkwUy0xZlJ4 T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpYk56YmR4NldWZWJwR2h4eTBTLTFmUnhPZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3QjEvQTBGNDgwQjYzQzRGMTFFQ0I4NzEyODNFQzRGOUFFMDIvQ0I1NjQzNUUz QzUzMTFFQzgxRDBEQjQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ24sMA0GCSqGSIb3DQEBCwUAA4IBAQC6Sy4EvhTvjkp67ujItsX3 qfBxspYnXo0OAEkPU0JEOPiUjvPKOem5K9Z1FJtFYMrnqs2rQ9kE/vAB2D3Kxbzy piqr8w+ixxbP8V2uK60BWSHTg3Zycr0iIyJxXNEKgKhb07OQPe7NQHXeCRH/kJpY 7c9Vxy0kV1wertBUGzuOeuEPnCVhBv8g+IxA1Nq/jaH1csM1t6PE1EIXhoGTe9AM T6deGlR+9QRVyCjPFRDfYYQRz43h4gjVZGBqTOBNxuXtk8m7rzAnwO4CHGnQll3A IqimNYcCVbh+fjLcNdMkmbQuFHTxTaSFL+xfCy3BScp1+5C6pHIKKBLc8nu7vwlU -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:04 2026 by rpki-client