$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa File: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (raw, json) Hash identifier: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc= Subject key identifier: E1:3C:1E:0E:18:24:37:A5:CD:E0:46:7B:75:B2:FA:EF:36:6E:C5:E7 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 033A Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:04:35 +0000 ROA not before: Thu 31 Jul 2025 02:08:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150005 IP address blocks: 103.190.136.0/23 maxlen: 23 103.190.136.0/24 maxlen: 24 103.190.137.0/24 maxlen: 24 2001:df0:edc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Jul 31 02:08:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40f33-1d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:eb:fe:41:33:b2:a3:d0:d2:b6:36:59:01:73: 43:41:ac:19:38:41:35:5b:83:99:86:43:84:1e:a5: 4e:2a:1b:aa:35:cc:48:17:1e:de:a2:2b:10:b2:c6: e0:89:49:e3:12:bb:61:2f:39:07:41:a8:1d:c3:cc: f6:14:32:79:01:5a:d5:d5:fe:c1:df:20:5d:5e:d1: c6:72:79:84:15:f3:b2:33:b0:22:c5:0c:df:d5:b4: fe:00:f8:2d:4f:7a:cb:09:5f:43:a7:27:58:4c:bb: 4a:2d:e9:5e:ae:08:50:c9:0d:73:78:35:82:4c:3b: 2f:7b:db:31:26:d7:47:b7:8b:84:75:84:eb:32:c3: 3f:d8:2d:b1:65:20:fe:3f:3f:ab:7b:fc:46:90:96: 65:1d:6b:aa:fd:4e:4e:f3:24:ea:60:6b:b8:89:14: ef:1f:1d:c2:8a:13:be:b9:c1:d7:a1:e9:52:7d:25: 57:aa:20:2b:56:24:10:bf:e8:20:93:86:cf:71:0d: 95:cb:1d:94:60:6d:2f:97:f8:d7:c9:44:fb:c4:6a: 43:1f:4e:fb:65:8b:03:9c:3b:8e:44:1a:37:c8:b9: 7c:ea:5e:60:03:97:8f:98:88:f5:c1:99:64:e9:88: 21:ce:47:7e:3e:a5:ed:e7:52:36:20:a7:d5:af:e0: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3C:1E:0E:18:24:37:A5:CD:E0:46:7B:75:B2:FA:EF:36:6E:C5:E7 X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.190.136.0/23 IPv6: 2001:df0:edc0::/48 Signature Algorithm: sha256WithRSAEncryption ba:20:d3:eb:dd:b4:fa:22:f3:66:98:33:cf:c6:7d:48:5c:14: 74:fd:83:32:3d:d8:6c:6d:7e:36:1b:12:7c:82:92:da:1d:59: 92:d2:46:3c:f5:a0:6a:77:f2:54:d0:61:18:e5:fe:93:3e:f2: 03:19:59:b2:ef:8b:54:8f:89:ae:45:68:06:29:d7:b1:90:88: ac:3c:f3:6c:9e:90:14:a3:08:21:8d:73:6f:a0:9f:93:61:e5: 73:b6:6a:e0:19:48:ef:a7:56:05:d6:b3:e9:fb:5e:96:b1:90: d3:58:bf:00:59:ef:e0:06:c6:eb:5b:2c:a4:d2:ed:87:2a:c2: fb:5b:7e:67:69:10:dd:a8:67:84:34:03:00:ca:1b:54:73:33: 9a:59:99:74:6e:bb:19:6d:68:eb:b9:3d:38:f3:82:a6:3c:df: e9:80:44:95:cc:82:1a:6f:1f:42:81:62:e5:40:12:60:a4:ee: f4:aa:d5:36:60:60:2f:81:f0:28:68:5f:f2:95:4e:41:b3:9e: 03:ac:c7:ed:3f:57:f4:19:f5:49:39:2d:93:a2:76:7b:5b:d4: c8:b8:ad:da:2e:d5:25:3c:19:2a:5e:33:37:08:ca:4b:01:a1: 8d:02:57:63:8c:2b:11:73:52:3c:59:24:ce:86:7f:a8:d9:3e: 58:85:85:cf -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjUwNzMxMDIwODMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGYzMy0xZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ov+QTOyo9DStjZZAXNDQawZOEE1W4OZhkOEHqVOKhuqNcxIFx7eoisQssbg iUnjErthLzkHQagdw8z2FDJ5AVrV1f7B3yBdXtHGcnmEFfOyM7AixQzf1bT+APgt T3rLCV9DpydYTLtKLelerghQyQ1zeDWCTDsve9sxJtdHt4uEdYTrMsM/2C2xZSD+ Pz+re/xGkJZlHWuq/U5O8yTqYGu4iRTvHx3CihO+ucHXoelSfSVXqiArViQQv+gg k4bPcQ2Vyx2UYG0vl/jXyUT7xGpDH077ZYsDnDuORBo3yLl86l5gA5ePmIj1wZlk 6Yghzkd+PqXt51I2IKfVr+AOzwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOE8Hg4Y JDelzeBGe3Wy+u82bsXnMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQ0MkEvQUI0RTUyNDRGQzM5MTFFQzk1QzgxMzg3QzRGOUFFMDIvMEY5REI4RTBG QzNEMTFFQ0FENjE5QzM1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ76IMA8EAgACMAkDBwAgAQ3w7cAwDQYJKoZIhvcNAQELBQADggEB ALog0+vdtPoi82aYM8/GfUhcFHT9gzI92GxtfjYbEnyCktodWZLSRjz1oGp38lTQ YRjl/pM+8gMZWbLvi1SPia5FaAYp17GQiKw882yekBSjCCGNc2+gn5Nh5XO2auAZ SO+nVgXWs+n7XpaxkNNYvwBZ7+AGxutbLKTS7YcqwvtbfmdpEN2oZ4Q0AwDKG1Rz M5pZmXRuuxltaOu5PTjzgqY83+mARJXMghpvH0KBYuVAEmCk7vSq1TZgYC+B8Cho X/KVTkGzngOsx+0/V/QZ9Uk5LZOidntb1Mi4rdou1SU8GSpeMzcIyksBoY0CV2OM KxFzUjxZJM6Gf6jZPliFhc8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:37 2026 by rpki-client