$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/F56B35708C0011ED836F0539C4F9AE02.roa File: F56B35708C0011ED836F0539C4F9AE02.roa (raw, json) Hash identifier: mpFx+GVvx2W568CfIz+VjIPScWb9y6xnHlbKs64HIb0= Subject key identifier: 68:7A:2D:06:D0:0C:03:B1:2A:CA:81:90:AF:A0:B9:9B:AD:4C:0B:15 Certificate issuer: /CN=A913CB8B/serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Certificate serial: 0258 Authority key identifier: 3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/F56B35708C0011ED836F0539C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:06:44 +0000 ROA not before: Thu 15 Jan 2026 01:21:27 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 150704 IP address blocks: 103.65.116.0/23 maxlen: 23 103.65.116.0/24 maxlen: 24 103.65.117.0/24 maxlen: 24 2400:d120::/36 maxlen: 36 2400:d120:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CB8B, serialNumber=3E1F6265E9D214C9E16CB3382540D46223602158 Validity Not Before: Jan 15 01:21:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a40fb4-cd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:7b:4a:3a:6a:ae:f6:51:24:87:85:6c:0f: ab:32:8a:ab:c3:53:40:67:81:a0:b5:cb:33:b5:5e: a6:60:44:c8:91:2f:2b:60:53:4a:b2:c5:88:44:3d: 0b:38:82:24:77:8c:8e:d4:a5:73:fd:93:79:1f:00: 20:12:74:e2:ec:28:4b:f3:65:f7:7f:4f:68:2f:f7: 37:a4:5e:5f:6d:8e:c4:cc:f4:e5:d4:ec:ee:85:92: f6:99:18:33:d3:aa:b8:6b:16:84:00:8a:e2:46:ff: c8:fa:bd:fc:82:7b:dc:73:cf:a8:a9:e1:06:9b:f5: ca:55:ec:61:b3:c7:5c:f3:25:df:01:18:55:41:4e: 48:eb:7e:72:03:91:cd:5f:34:34:b5:9c:c7:97:07: 0f:38:f7:3a:e5:48:f6:f2:26:8d:0e:7a:9f:cd:58: 62:6d:ee:65:18:8d:07:95:06:a2:d9:f1:f1:46:0a: 9c:d7:87:93:9c:32:f0:7e:67:c3:00:37:ed:e4:d2: 52:7a:f1:95:8c:1e:c3:19:74:65:c2:83:d2:f1:9d: 2a:39:f2:db:6a:ba:cf:f5:df:46:e7:8b:a3:76:87: 4f:e7:a2:2d:16:0e:14:a1:0b:e9:23:b3:89:ac:aa: 66:f6:fa:ea:56:c7:f5:14:02:e3:c3:db:7b:09:1a: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7A:2D:06:D0:0C:03:B1:2A:CA:81:90:AF:A0:B9:9B:AD:4C:0B:15 X509v3 Authority Key Identifier: keyid:3E:1F:62:65:E9:D2:14:C9:E1:6C:B3:38:25:40:D4:62:23:60:21:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/Ph9iZenSFMnhbLM4JUDUYiNgIVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ph9iZenSFMnhbLM4JUDUYiNgIVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB8B/DD0473FA8BFD11ED983E5C32C4F9AE02/F56B35708C0011ED836F0539C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.65.116.0/23 IPv6: 2400:d120::/35 Signature Algorithm: sha256WithRSAEncryption 07:b2:25:02:ea:6f:a1:70:29:97:87:27:e4:88:fb:71:ed:d2: 4d:1b:ad:65:48:07:53:c7:9f:da:b2:d0:e8:f2:db:6b:84:f1: 92:04:dd:e8:f9:66:0d:30:1a:8e:e3:17:dc:86:57:f3:ce:93: 9f:e7:1d:5f:98:d7:cc:11:3c:c7:f7:34:9a:02:83:dd:1f:c4: 21:bc:57:b8:fd:2d:98:a4:d0:00:b2:78:07:33:15:80:78:07: 64:c8:7e:f6:37:85:45:3a:15:a7:ee:79:b1:17:b2:48:3b:86: 1d:88:65:69:15:39:65:e4:58:44:dc:8d:a1:1a:25:0d:3c:52: 10:af:1c:f2:ef:b1:88:d1:7e:29:a0:3d:68:2c:1d:66:de:b7: c8:3a:74:06:29:59:f6:c9:0b:cc:3a:7f:b8:6b:ae:a2:31:56: 10:18:be:7c:56:ff:06:97:5d:3b:a3:c2:3a:4f:a4:c0:ee:e4: df:6a:e9:cc:98:45:4a:9f:99:56:40:7b:6e:2b:10:a7:d3:d9: b5:4f:fd:45:85:2a:c5:c1:dd:78:cd:4c:0e:b5:51:fa:7b:6d: cf:2e:5f:1f:ee:c4:1c:31:c5:30:ff:49:74:56:aa:13:93:51: d5:83:0e:6c:d8:3f:85:b6:54:9c:0f:28:47:34:45:ba:7c:31: 25:0d:0d:83 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NCOEIxMTAvBgNVBAUTKDNFMUY2MjY1RTlEMjE0QzlFMTZDQjMzODI1NDBENDYy MjM2MDIxNTgwHhcNMjYwMTE1MDEyMTI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGZiNC1jZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssB7SjpqrvZRJIeFbA+rMoqrw1NAZ4GgtcsztV6mYETIkS8rYFNKssWIRD0L OIIkd4yO1KVz/ZN5HwAgEnTi7ChL82X3f09oL/c3pF5fbY7EzPTl1OzuhZL2mRgz 06q4axaEAIriRv/I+r38gnvcc8+oqeEGm/XKVexhs8dc8yXfARhVQU5I635yA5HN XzQ0tZzHlwcPOPc65Uj28iaNDnqfzVhibe5lGI0HlQai2fHxRgqc14eTnDLwfmfD ADft5NJSevGVjB7DGXRlwoPS8Z0qOfLbarrP9d9G54ujdodP56ItFg4UoQvpI7OJ rKpm9vrqVsf1FALjw9t7CRp/owIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFGh6LQbQ DAOxKsqBkK+guZutTAsVMB8GA1UdIwQYMBaAFD4fYmXp0hTJ4WyzOCVA1GIjYCFY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I4Qi9ERDA0NzNGQThC RkQxMUVEOTgzRTVDMzJDNEY5QUUwMi9QaDlpWmVuU0ZNbmhiTE00SlVEVVlpTmdJ VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BoOWlaZW5TRk1uaGJMTTRKVURVWWlOZ0lWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NCOEIvREQwNDczRkE4QkZEMTFFRDk4M0U1QzMyQzRGOUFFMDIvRjU2QjM1NzA4 QzAwMTFFRDgzNkYwNTM5QzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ0F0MA4EAgACMAgDBgUkANEgADANBgkqhkiG9w0BAQsFAAOCAQEA B7IlAupvoXApl4cn5Ij7ce3STRutZUgHU8ef2rLQ6PLba4TxkgTd6PlmDTAajuMX 3IZX886Tn+cdX5jXzBE8x/c0mgKD3R/EIbxXuP0tmKTQALJ4BzMVgHgHZMh+9jeF RToVp+55sReySDuGHYhlaRU5ZeRYRNyNoRolDTxSEK8c8u+xiNF+KaA9aCwdZt63 yDp0BilZ9skLzDp/uGuuojFWEBi+fFb/BpddO6PCOk+kwO7k32rpzJhFSp+ZVkB7 bisQp9PZtU/9RYUqxcHdeM1MDrVR+nttzy5fH+7EHDHFMP9JdFaqE5NR1YMObNg/ hbZUnA8oRzRFunwxJQ0Ngw== -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:31 2026 by rpki-client