$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa File: 28F87D180A1611F0BC8FD10DC4F9AE02.roa (raw, json) Hash identifier: m3TKEHo+4f4PhVTsk8vFCNaTsfWtmI9Nex70/u6yw60= Subject key identifier: DA:9C:D3:83:AD:7C:67:FB:9F:83:BD:94:C5:9B:9E:3D:55:2E:82:39 Certificate issuer: /CN=A912DB97/serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Certificate serial: AF Authority key identifier: C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:02:09 +0000 ROA not before: Wed 26 Mar 2025 07:44:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132703 IP address blocks: 103.18.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB97, serialNumber=C1F4A39861CAD3CF3784218DEDA7A05E852F227F Validity Not Before: Mar 26 07:44:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e471-bb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:c8:10:2d:27:a4:a2:1f:2c:bf:b7:9a:36: cf:24:6e:6c:fc:2d:36:42:36:a7:4d:60:ab:f5:bd: 0c:79:e8:41:3e:9e:77:51:63:cc:0b:bd:d0:92:81: fb:b5:1e:54:aa:6f:ac:3a:74:37:9b:1e:69:6a:f8: 60:e0:1e:2f:e1:42:46:bf:e6:88:fe:db:09:cc:b8: f5:97:53:f4:ff:4a:3d:5b:db:d4:7f:5d:99:6b:3a: e4:f6:0c:cb:a6:f2:22:db:34:56:cf:ba:ed:07:83: ba:f3:e5:71:6e:99:9d:0c:14:26:b3:70:a9:52:83: f1:2a:62:61:13:d3:56:de:37:10:53:73:ed:b4:c8: cb:d1:a9:8c:e3:52:4f:14:37:1d:83:bf:da:d8:e3: 51:e5:54:ec:95:7c:87:1d:a7:4a:44:45:ed:74:41: 53:51:89:d8:5a:50:9e:0f:c3:2e:5a:db:78:da:16: c1:e5:ce:4a:5f:03:1a:38:2c:a7:f0:3f:33:a8:00: 88:ab:04:3d:e6:e0:8d:ce:14:ab:d5:f1:aa:ff:ff: 81:b9:fd:6a:0d:a0:96:dc:5d:cd:9f:34:f9:08:8d: 43:11:49:f3:06:9c:66:35:55:35:2d:54:10:e9:1e: f5:27:31:ab:f1:db:1e:6a:fa:c9:01:9d:b5:0b:a6: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9C:D3:83:AD:7C:67:FB:9F:83:BD:94:C5:9B:9E:3D:55:2E:82:39 X509v3 Authority Key Identifier: keyid:C1:F4:A3:98:61:CA:D3:CF:37:84:21:8D:ED:A7:A0:5E:85:2F:22:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/wfSjmGHK0883hCGN7aegXoUvIn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wfSjmGHK0883hCGN7aegXoUvIn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB97/5D8B52640A1411F0B43DC586C4F9AE02/28F87D180A1611F0BC8FD10DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.18.189.0/24 Signature Algorithm: sha256WithRSAEncryption a8:1f:43:9d:65:12:91:2e:72:20:e8:f8:b6:73:9a:79:c4:20: 0e:0f:c2:87:3b:23:3d:7a:35:e3:79:f8:07:09:35:f5:08:a4: f6:09:29:56:01:5e:e7:ec:37:e2:96:04:7e:0c:21:2c:ea:1a: 49:6b:7a:40:84:77:79:ab:70:ba:90:8f:94:d9:60:74:e4:1e: 8b:db:74:80:81:54:23:81:8e:59:3e:a8:bc:84:60:fe:f8:31: 29:7c:8e:22:65:61:0d:08:de:25:41:8f:71:d8:2e:ed:b2:94: 15:54:9e:c2:f0:62:af:ce:9a:44:e4:17:cb:07:08:db:57:c6: 41:ff:eb:82:38:62:ee:36:6a:5f:30:8e:1a:da:4c:2e:84:c0: cc:8b:a3:0c:4c:4e:94:40:cc:2e:7b:c1:77:64:43:3a:00:43: ff:1f:99:7f:d4:cd:ba:ea:d1:8c:7a:ae:6e:ad:ce:2e:4a:d2: 6b:16:b1:d6:5a:12:c3:8c:90:e5:e8:c1:c1:0c:6c:d5:17:5d: 90:fb:d0:01:7e:fa:2f:6b:e5:de:15:a7:ca:34:d5:ba:13:c1: 62:e5:99:d3:bf:86:7a:12:7c:c7:6b:a7:73:57:04:3f:9f:69: 7d:03:47:3c:e6:e9:7c:67:d7:ee:49:e4:41:18:ce:5a:b7:82: 6c:08:1e:a1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTcxMTAvBgNVBAUTKEMxRjRBMzk4NjFDQUQzQ0YzNzg0MjE4REVEQTdBMDVF ODUyRjIyN0YwHhcNMjUwMzI2MDc0NDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTQ3MS1iYjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQDIEC0npKIfLL+3mjbPJG5s/C02QjanTWCr9b0MeehBPp53UWPMC73QkoH7 tR5Uqm+sOnQ3mx5pavhg4B4v4UJGv+aI/tsJzLj1l1P0/0o9W9vUf12Zazrk9gzL pvIi2zRWz7rtB4O68+VxbpmdDBQms3CpUoPxKmJhE9NW3jcQU3PttMjL0amM41JP FDcdg7/a2ONR5VTslXyHHadKREXtdEFTUYnYWlCeD8MuWtt42hbB5c5KXwMaOCyn 8D8zqACIqwQ95uCNzhSr1fGq//+Buf1qDaCW3F3NnzT5CI1DEUnzBpxmNVU1LVQQ 6R71JzGr8dseavrJAZ21C6avvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNqc04Ot fGf7n4O9lMWbnj1VLoI5MB8GA1UdIwQYMBaAFMH0o5hhytPPN4Qhje2noF6FLyJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5Ny81RDhCNTI2NDBB MTQxMUYwQjQzREM1ODZDNEY5QUUwMi93ZlNqbUdISzA4ODNoQ0dON2FlZ1hvVXZJ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dmU2ptR0hLMDg4M2hDR043YWVnWG9VdkluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRCOTcvNUQ4QjUyNjQwQTE0MTFGMEI0M0RDNTg2QzRGOUFFMDIvMjhGODdEMTgw QTE2MTFGMEJDOEZEMTBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZxK9MA0GCSqGSIb3DQEBCwUAA4IBAQCoH0OdZRKRLnIg6Pi2c5p5 xCAOD8KHOyM9ejXjefgHCTX1CKT2CSlWAV7n7DfilgR+DCEs6hpJa3pAhHd5q3C6 kI+U2WB05B6L23SAgVQjgY5ZPqi8hGD++DEpfI4iZWENCN4lQY9x2C7tspQVVJ7C 8GKvzppE5BfLBwjbV8ZB/+uCOGLuNmpfMI4a2kwuhMDMi6MMTE6UQMwue8F3ZEM6 AEP/H5l/1M266tGMeq5urc4uStJrFrHWWhLDjJDl6MHBDGzVF12Q+9ABfvova+Xe FafKNNW6E8Fi5ZnTv4Z6EnzHa6dzVwQ/n2l9A0c85ul8Z9fuSeRBGM5at4JsCB6h -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:54 2026 by rpki-client