$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/28E64612990811F09EE9C754C4F9AE02.roa File: 28E64612990811F09EE9C754C4F9AE02.roa (raw, json) Hash identifier: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4= Subject key identifier: D8:72:BA:BB:7C:A0:77:C6:10:6C:81:40:6E:77:F1:D2:BC:AD:00:6D Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: 0165 Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/28E64612990811F09EE9C754C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:15:55 +0000 ROA not before: Tue 17 Feb 2026 04:24:23 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 149493 IP address blocks: 117.18.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Feb 17 04:24:23 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a4744b-73b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:cc:2b:03:52:d5:dd:f5:cf:5d:56:cc:64: c1:9b:27:74:ff:f1:39:27:f2:32:aa:4c:24:fc:28: 2e:3c:cb:a0:5a:02:bb:d7:85:50:75:14:9c:1d:4d: b4:00:18:d8:6f:08:74:45:a8:67:fb:85:a1:9c:9d: 1c:68:b1:ac:5f:a3:e4:e3:46:c1:b3:3d:3f:58:ca: d5:74:85:18:26:e8:f7:20:f8:61:91:18:fa:a3:25: e4:bb:17:33:9a:7f:df:6e:bb:63:1d:98:47:65:c5: 06:63:4f:50:c4:6c:74:d7:6b:16:05:77:80:17:11: ca:95:52:eb:59:cc:fc:8f:c3:92:7f:9e:b0:b0:ec: 0d:1b:f0:d6:a3:23:db:e7:41:91:3a:63:c0:ac:a7: b8:05:bf:fe:cd:a6:94:5a:cc:29:24:33:79:2d:e3: 5c:c5:1d:24:9f:6a:23:09:40:72:3b:7c:17:cf:84: 2d:6b:83:a1:84:05:6d:54:c2:ed:fb:d3:d0:b0:2d: 17:53:1f:6e:90:36:41:cc:19:47:93:b8:57:b7:b4: 23:26:3e:9b:66:16:a4:ee:18:35:ad:74:25:3d:2c: e5:99:72:c8:97:3c:bc:09:03:f4:8a:2e:e6:fd:ff: 83:51:41:e0:14:e9:cd:c8:5c:55:d0:79:63:37:d7: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:BA:BB:7C:A0:77:C6:10:6C:81:40:6E:77:F1:D2:BC:AD:00:6D X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/28E64612990811F09EE9C754C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 117.18.103.0/24 Signature Algorithm: sha256WithRSAEncryption 06:cf:2b:46:18:bf:49:2c:e9:42:e8:50:d3:75:c6:1c:45:67: 62:c7:4b:71:89:f4:98:f4:97:65:e5:58:f3:4d:96:7a:85:a5: 72:67:a9:99:8f:49:c5:af:8d:88:ef:ad:83:0c:f0:f7:4a:4d: f4:03:76:39:5b:e9:b9:75:56:18:07:d5:3a:a3:56:f8:26:d3: f0:62:c9:82:0c:62:ef:79:8f:20:54:44:37:31:59:d9:a1:32: 73:52:67:c5:b1:36:79:92:ba:37:f4:c6:b8:5f:fb:e1:e6:97: a5:30:08:b4:a9:82:a6:4a:5e:9c:26:ae:45:d2:ab:2b:04:a0: b7:7d:42:4e:d4:f0:2a:81:d4:56:ce:af:d9:d8:af:a3:57:62: 8e:78:d5:61:fc:e3:ea:ce:94:c9:fa:40:4d:3f:e8:64:b5:57: e5:d4:a0:f3:89:25:d0:ef:7c:ea:4a:ca:12:80:a0:7e:42:82: c1:17:fb:a8:31:b5:15:31:1e:52:70:f7:47:a6:60:80:d7:5b: e2:7f:7c:1b:a4:eb:a9:bd:64:81:02:8b:b7:a2:45:42:7d:48: 52:2c:96:54:a8:e7:8c:6a:c6:95:f3:79:2b:77:7e:cb:ad:1a: 9c:2f:d3:98:31:09:39:06:22:91:10:13:b8:17:fc:8b:b0:74: a4:15:e5:bb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjYwMjE3MDQyNDIzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzQ0Yi03M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprfMKwNS1d31z11WzGTBmyd0//E5J/Iyqkwk/CguPMugWgK714VQdRScHU20 ABjYbwh0Rahn+4WhnJ0caLGsX6Pk40bBsz0/WMrVdIUYJuj3IPhhkRj6oyXkuxcz mn/fbrtjHZhHZcUGY09QxGx012sWBXeAFxHKlVLrWcz8j8OSf56wsOwNG/DWoyPb 50GROmPArKe4Bb/+zaaUWswpJDN5LeNcxR0kn2ojCUByO3wXz4Qta4OhhAVtVMLt +9PQsC0XUx9ukDZBzBlHk7hXt7QjJj6bZhak7hg1rXQlPSzlmXLIlzy8CQP0ii7m /f+DUUHgFOnNyFxV0HljN9d7iwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNhyurt8 oHfGEGyBQG538dK8rQBtMB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNFRDMvM0MxNjFGQTYyMTZDMTFFRjgwQjE1MzJCQzRGOUFFMDIvMjhFNjQ2MTI5 OTA4MTFGMDlFRTlDNzU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdRJnMA0GCSqGSIb3DQEBCwUAA4IBAQAGzytGGL9JLOlC6FDTdcYc RWdix0txifSY9Jdl5VjzTZZ6haVyZ6mZj0nFr42I762DDPD3Sk30A3Y5W+m5dVYY B9U6o1b4JtPwYsmCDGLveY8gVEQ3MVnZoTJzUmfFsTZ5kro39Ma4X/vh5pelMAi0 qYKmSl6cJq5F0qsrBKC3fUJO1PAqgdRWzq/Z2K+jV2KOeNVh/OPqzpTJ+kBNP+hk tVfl1KDziSXQ73zqSsoSgKB+QoLBF/uoMbUVMR5ScPdHpmCA11vif3wbpOupvWSB Aou3okVCfUhSLJZUqOeMasaV83krd37LrRqcL9OYMQk5BiKREBO4F/yLsHSkFeW7 -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:47 2026 by rpki-client