$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/450DDD84EA0A11F09D7A92E76F6F56BC.roa File: 450DDD84EA0A11F09D7A92E76F6F56BC.roa (raw, json) Hash identifier: kJnM7EoAenCH3PCIlTPoGD0IpncArPRKG0ulKlcXT+o= Subject key identifier: A8:0F:6A:79:CD:68:41:77:B2:CC:B2:C2:98:99:78:BD:29:86:DF:63 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0BC5 Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/450DDD84EA0A11F09D7A92E76F6F56BC.roa Signing time: Sun 01 Mar 2026 18:06:59 +0000 ROA not before: Mon 05 Jan 2026 07:47:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 202736 IP address blocks: 103.6.20.0/24 maxlen: 24 103.6.21.0/24 maxlen: 24 103.6.22.0/24 maxlen: 24 103.6.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Jan 5 07:47:47 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48043-912b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:d6:ba:56:ec:ef:c0:0c:60:21:2a:86:9f: 08:0a:2a:18:36:48:47:d6:58:98:33:d1:b9:5d:7f: 6c:37:11:96:7e:9a:3e:b8:66:13:c7:e3:ee:0a:37: 0f:d1:ea:75:80:ae:5e:92:71:3c:e9:90:f7:cd:3c: 61:06:d4:c6:64:0e:df:0a:a4:23:54:ab:c4:e8:56: b3:13:60:d0:48:14:e5:0e:b1:4b:06:96:34:a0:a1: e1:be:03:da:95:10:e4:07:99:23:3e:d8:8a:0e:49: c5:03:75:d9:86:61:53:68:98:31:c1:96:3e:fb:04: 02:70:67:72:5e:21:1d:5e:06:88:df:08:16:82:60: 3c:a4:fe:12:b6:c8:1b:ca:16:a9:ff:7e:5a:6a:0a: 24:2e:92:dc:f3:8c:89:3a:8f:13:61:10:f3:5c:e0: d9:4e:8b:62:a0:8d:90:99:01:56:3d:60:a6:88:51: 20:cc:49:c9:a6:e7:18:85:28:96:c4:5d:2c:d0:90: 81:b7:74:ea:f3:cf:e2:d8:70:08:ac:46:02:f1:d9: 30:b3:8e:65:21:1d:9a:95:ab:29:98:7b:c5:de:68: 8e:d0:d1:17:ca:33:8c:c0:af:c9:02:0c:ec:93:1d: 66:8e:e5:55:45:d5:12:8e:26:8c:e4:3f:bc:bc:8e: e6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0F:6A:79:CD:68:41:77:B2:CC:B2:C2:98:99:78:BD:29:86:DF:63 X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/450DDD84EA0A11F09D7A92E76F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.6.20.0/22 Signature Algorithm: sha256WithRSAEncryption b5:e9:86:5f:19:01:f6:33:c6:27:aa:5a:84:6b:36:0b:a8:cc: 05:26:23:49:ad:cf:0c:e2:9d:9b:1b:1f:a1:19:4d:c8:d8:01: ee:f1:e1:53:fa:dd:7d:7d:60:a1:4f:95:3d:d4:cf:c6:cd:eb: 15:34:b2:b6:22:31:d3:a3:62:48:02:22:f9:ee:e6:f0:53:11: 42:76:8d:1f:15:ba:3b:88:c5:13:ee:da:fa:5e:06:be:1a:5c: a2:bb:73:7a:a4:10:4f:6f:0c:d8:28:fa:b8:87:92:ac:07:f5: e9:6f:4b:c0:d4:27:f2:bd:ac:47:00:32:e6:f9:8c:34:79:40: 10:e9:cb:b6:cc:b3:5e:69:27:65:7e:1f:1e:87:d7:d0:c9:19: bc:82:45:52:e8:6c:5a:ba:29:e9:9a:32:0f:da:33:e8:8b:d8: 2a:9d:37:29:b7:b0:9d:0d:36:13:c5:96:1b:97:86:33:4b:9d: 53:e0:65:27:d6:df:23:67:7c:58:cd:bc:5c:43:93:8c:8f:64: 35:e1:78:3f:81:2e:02:b9:c5:f9:06:2f:1d:71:1e:a3:5f:fa: ad:8b:27:5c:ef:97:8a:08:b3:63:56:d7:ab:57:84:c5:da:28: d4:7d:0e:b2:27:72:ba:93:e3:91:11:be:e5:1b:19:1c:df:9b: 2e:77:7a:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjYwMTA1MDc0NzQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODA0My05MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3jWulbs78AMYCEqhp8ICioYNkhH1liYM9G5XX9sNxGWfpo+uGYTx+PuCjcP 0ep1gK5eknE86ZD3zTxhBtTGZA7fCqQjVKvE6FazE2DQSBTlDrFLBpY0oKHhvgPa lRDkB5kjPtiKDknFA3XZhmFTaJgxwZY++wQCcGdyXiEdXgaI3wgWgmA8pP4Stsgb yhap/35aagokLpLc84yJOo8TYRDzXODZTotioI2QmQFWPWCmiFEgzEnJpucYhSiW xF0s0JCBt3Tq88/i2HAIrEYC8dkws45lIR2alaspmHvF3miO0NEXyjOMwK/JAgzs kx1mjuVVRdUSjiaM5D+8vI7mdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKgPannN aEF3ssyywpiZeL0pht9jMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I3QjIvNDA2NjUwMDg0MTZGMTFFQUI1QzdDQTY1QzRGOUFFMDIvNDUwREREODRF QTBBMTFGMDlEN0E5MkU3NkY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwYUMA0GCSqGSIb3DQEBCwUAA4IBAQC16YZfGQH2M8YnqlqEazYL qMwFJiNJrc8M4p2bGx+hGU3I2AHu8eFT+t19fWChT5U91M/GzesVNLK2IjHTo2JI AiL57ubwUxFCdo0fFbo7iMUT7tr6Xga+Glyiu3N6pBBPbwzYKPq4h5KsB/Xpb0vA 1CfyvaxHADLm+Yw0eUAQ6cu2zLNeaSdlfh8eh9fQyRm8gkVS6GxauinpmjIP2jPo i9gqnTcpt7CdDTYTxZYbl4YzS51T4GUn1t8jZ3xYzbxcQ5OMj2Q14Xg/gS4CucX5 Bi8dcR6jX/qtiydc75eKCLNjVterV4TF2ijUfQ6yJ3K6k+OREb7lGxkc35sud3pi -----END CERTIFICATE-----Generated at Mon Mar 2 04:20:17 2026 by rpki-client