$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/28382F96644E11EEA1DCB653C4F9AE02.roa File: 28382F96644E11EEA1DCB653C4F9AE02.roa (raw, json) Hash identifier: Hn/cKj3PeYZoLPGpaN1fINnhbucRAfAoTwU5JZOQO60= Subject key identifier: BD:3E:3C:95:98:2C:BB:C1:6E:44:BA:0D:44:1E:C3:77:DE:D5:3D:58 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: 01D9 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/28382F96644E11EEA1DCB653C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:09:14 +0000 ROA not before: Fri 21 Nov 2025 02:19:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151845 IP address blocks: 103.249.112.0/23 maxlen: 24 2401:4260:1::/48 maxlen: 48 2401:4260:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Nov 21 02:19:25 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4569a-f51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:1f:6e:06:8d:bd:d6:fe:44:cf:0f:32:a5: d7:52:22:ec:72:3f:a8:1c:36:23:13:ee:f4:d2:8a: a8:84:1c:1d:25:7e:f1:dc:95:05:ca:20:c4:f1:d0: 09:5c:3a:e3:6f:72:11:23:7e:8c:0a:33:fc:da:40: 9d:eb:ed:3c:bb:13:9d:0f:31:ed:de:cf:60:31:57: c6:bf:9d:15:d4:98:ba:d9:51:b3:7a:ce:4d:f2:5f: 71:35:f8:fb:ef:fb:69:0d:11:07:04:a6:dc:b4:97: c4:c7:05:fb:32:ea:af:21:7f:0c:32:16:5b:c6:a5: ea:65:46:95:96:b9:f2:3a:23:7b:c0:d5:cc:a7:85: 42:0f:ac:5a:18:04:85:f5:21:f3:17:df:c2:7a:26: 55:bc:2b:e7:fc:ab:33:fa:06:9a:0e:16:b2:0e:d3: 5e:f4:67:5c:a2:41:d7:14:22:3a:91:fa:2a:a0:d3: a5:76:91:c0:11:14:8a:9f:b2:a3:fe:c0:bc:d1:6c: e6:27:b9:17:21:05:9d:63:5c:0f:c5:ec:3d:34:67: 73:b8:16:10:70:c0:4a:73:db:e1:61:c1:12:3a:48: 9f:cc:71:7b:be:7a:d7:dc:27:7b:58:2c:dd:77:6e: 45:f2:38:b9:2a:2a:66:ca:d4:fa:91:be:d9:b4:88: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3E:3C:95:98:2C:BB:C1:6E:44:BA:0D:44:1E:C3:77:DE:D5:3D:58 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/28382F96644E11EEA1DCB653C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.249.112.0/23 IPv6: 2401:4260:1::-2401:4260:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 35:4d:95:a1:3b:d5:35:96:75:ee:90:d7:9f:91:7c:b0:ea:18: e6:61:42:f1:6c:7e:bf:a1:7f:eb:be:48:f4:83:74:01:3f:e1: af:d2:bd:fd:aa:90:c8:e5:cf:bc:40:67:76:91:76:64:64:f8: c2:ae:b2:6d:cc:5f:03:1e:b8:03:df:64:54:7b:7a:2d:e5:0d: cf:f7:51:1b:19:79:2e:f9:f5:2e:53:02:13:ba:2a:0e:b2:d5: 38:f7:55:b7:60:40:b4:e0:9e:1d:c0:e0:d4:81:ac:08:2e:cb: 64:bd:57:1e:ec:bc:e5:87:58:42:63:1a:a4:c0:37:fc:e8:d8: ad:8e:38:70:dd:35:07:2f:b5:5d:62:83:b2:92:eb:e8:91:46: a5:57:00:b9:15:2e:0e:ff:98:6e:f6:90:4e:95:69:af:46:61: 9a:88:c1:9b:05:12:c1:b2:96:67:cc:59:06:8d:0b:8e:f1:5b: 88:93:47:9e:a9:49:06:6e:2d:fd:27:b7:f2:68:69:fc:fd:e3: 74:00:f8:14:4b:50:76:cc:a8:82:0f:30:34:a3:9b:ac:5d:55: 1a:f0:75:83:4f:1c:82:95:82:ee:d4:c0:dd:a8:21:96:d2:fa: 57:87:08:34:94:53:94:2f:39:da:e0:eb:6f:8e:0a:88:60:30: 51:3b:44:bb -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjUxMTIxMDIxOTI1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTY5YS1mNTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAwfbgaNvdb+RM8PMqXXUiLscj+oHDYjE+700oqohBwdJX7x3JUFyiDE8dAJ XDrjb3IRI36MCjP82kCd6+08uxOdDzHt3s9gMVfGv50V1Ji62VGzes5N8l9xNfj7 7/tpDREHBKbctJfExwX7MuqvIX8MMhZbxqXqZUaVlrnyOiN7wNXMp4VCD6xaGASF 9SHzF9/CeiZVvCvn/Ksz+gaaDhayDtNe9GdcokHXFCI6kfoqoNOldpHAERSKn7Kj /sC80WzmJ7kXIQWdY1wPxew9NGdzuBYQcMBKc9vhYcESOkifzHF7vnrX3Cd7WCzd d25F8ji5KipmytT6kb7ZtIju8wIDAQABo4ICfDCCAngwHQYDVR0OBBYEFL0+PJWY LLvBbkS6DUQew3fe1T1YMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzJCN0EvMDZBMTk2MDI2NDREMTFFRTg0RDQwMzRGQzRGOUFFMDIvMjgzODJGOTY2 NDRFMTFFRUExRENCNjUzQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAM BAIAATAGAwQBZ/lwMBoEAgACMBQwEgMHACQBQmAAAQMHACQBQmAAAjANBgkqhkiG 9w0BAQsFAAOCAQEANU2VoTvVNZZ17pDXn5F8sOoY5mFC8Wx+v6F/675I9IN0AT/h r9K9/aqQyOXPvEBndpF2ZGT4wq6ybcxfAx64A99kVHt6LeUNz/dRGxl5Lvn1LlMC E7oqDrLVOPdVt2BAtOCeHcDg1IGsCC7LZL1XHuy85YdYQmMapMA3/OjYrY44cN01 By+1XWKDspLr6JFGpVcAuRUuDv+YbvaQTpVpr0ZhmojBmwUSwbKWZ8xZBo0LjvFb iJNHnqlJBm4t/Se38mhp/P3jdAD4FEtQdsyogg8wNKObrF1VGvB1g08cgpWC7tTA 3aghltL6V4cINJRTlC852uDrb44KiGAwUTtEuw== -----END CERTIFICATE-----Generated at Mon Mar 2 22:34:31 2026 by rpki-client