$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/F843F2B4127E11EE9694E22BC4F9AE02.roa File: F843F2B4127E11EE9694E22BC4F9AE02.roa (raw, json) Hash identifier: ZGbwzVl74XwRlHevCNln8j4Z5CRs273vj7yv+GAf7/M= Subject key identifier: 8F:8E:AA:2B:BC:AF:AD:2B:BC:BC:26:88:1C:67:A5:5E:18:D8:0A:DD Certificate issuer: /CN=A913CDE5/serialNumber=F9941694B6A77B24C583FA78B527E54BB6D5BF9F Certificate serial: 0200 Authority key identifier: F9:94:16:94:B6:A7:7B:24:C5:83:FA:78:B5:27:E5:4B:B6:D5:BF:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/F843F2B4127E11EE9694E22BC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:15:52 +0000 ROA not before: Tue 17 Jun 2025 03:01:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151422 IP address blocks: 103.228.38.0/23 maxlen: 23 103.228.38.0/24 maxlen: 24 103.228.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.crl rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CDE5, serialNumber=F9941694B6A77B24C583FA78B527E54BB6D5BF9F Validity Not Before: Jun 17 03:01:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a411d7-c9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:d6:25:6a:3b:1d:e8:78:1c:a9:2f:99:66: a5:03:03:05:07:2c:5b:e2:6a:1a:29:ef:bb:02:ee: 04:19:ce:29:48:25:af:3c:22:6b:aa:85:e5:69:3f: a1:5e:d7:78:30:8a:c0:41:ef:0f:ab:d1:79:b7:d9: 63:83:41:53:37:91:cb:7a:6b:d2:bb:90:36:3a:0e: 99:68:88:24:18:64:36:64:63:39:97:96:aa:f3:55: b0:ef:c7:b6:51:5a:1e:1a:06:fa:ec:75:d5:ac:6a: 8b:d4:93:6d:e0:e7:19:cc:40:fa:c9:c0:81:5c:c6: 25:70:bf:db:d4:10:f7:dd:8c:ea:a5:a7:c8:b6:54: 91:e2:63:2a:1c:54:8d:c2:ec:65:d3:eb:6b:97:75: be:98:93:f4:14:dc:ff:93:89:13:21:6a:e0:12:97: 20:12:4a:d8:c5:00:b6:44:3e:5c:4b:c6:06:7d:58: 35:44:ef:62:25:86:35:e1:72:a9:cb:e5:7d:9b:35: f9:00:23:14:d2:3d:9e:ca:23:a3:d5:cc:c7:6f:ff: 7c:c0:dc:c7:08:58:9b:92:4c:48:42:44:35:84:bf: bc:2b:78:38:64:de:ef:72:a1:8b:85:3b:3f:6b:0f: 2e:4b:8c:4a:38:af:3a:8d:2b:7a:4d:2f:ec:0f:90: 57:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8E:AA:2B:BC:AF:AD:2B:BC:BC:26:88:1C:67:A5:5E:18:D8:0A:DD X509v3 Authority Key Identifier: keyid:F9:94:16:94:B6:A7:7B:24:C5:83:FA:78:B5:27:E5:4B:B6:D5:BF:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/-ZQWlLaneyTFg_p4tSflS7bVv58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZQWlLaneyTFg_p4tSflS7bVv58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDE5/4993B7FC127B11EEB27E8C2BC4F9AE02/F843F2B4127E11EE9694E22BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.38.0/23 Signature Algorithm: sha256WithRSAEncryption 47:42:8e:9c:db:6d:4c:e8:70:bf:24:bd:41:41:6b:59:fe:5c: a7:05:15:25:51:83:40:5f:d6:c3:26:b5:78:87:aa:68:1c:a0: aa:b9:9f:00:16:b5:ae:40:8e:13:89:e3:4f:ac:35:6e:96:53: da:e7:6b:58:f0:ba:32:21:b0:17:06:8b:c2:a0:76:bc:bb:90: 23:44:94:ec:8a:51:ce:64:61:32:07:b1:b6:f6:c0:4e:89:6b: 8e:8e:52:3f:20:a2:a5:ea:b9:64:f5:bb:be:89:51:12:2a:6f: f7:08:5c:69:f4:7e:75:40:5d:96:d0:c1:18:9e:10:52:60:62: 4e:8a:7a:f4:c9:7c:96:7d:ec:0b:f0:2e:8c:3e:9f:8c:8f:a0: e8:06:6f:48:3e:00:69:99:73:63:a3:2c:f4:2f:63:b0:05:15: fb:33:a4:44:e6:6a:b1:00:c5:af:bf:d1:09:99:30:90:3d:38: ae:e2:99:d7:c4:1a:26:26:24:8e:46:92:20:95:d3:7f:cb:e0: 4b:ab:a1:bb:16:a2:4e:52:7d:71:4f:80:78:68:11:c2:9e:5f: e0:e6:04:ee:03:e2:c8:77:d3:c3:2e:49:06:85:e5:c9:9b:62: a5:3d:5a:bb:28:6c:21:25:48:b6:6d:8a:22:7f:fe:59:4d:92: fb:06:5d:72 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NERTUxMTAvBgNVBAUTKEY5OTQxNjk0QjZBNzdCMjRDNTgzRkE3OEI1MjdFNTRC QjZENUJGOUYwHhcNMjUwNjE3MDMwMTU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTFkNy1jOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhdPWJWo7Heh4HKkvmWalAwMFByxb4moaKe+7Au4EGc4pSCWvPCJrqoXlaT+h Xtd4MIrAQe8Pq9F5t9ljg0FTN5HLemvSu5A2Og6ZaIgkGGQ2ZGM5l5aq81Ww78e2 UVoeGgb67HXVrGqL1JNt4OcZzED6ycCBXMYlcL/b1BD33YzqpafItlSR4mMqHFSN wuxl0+trl3W+mJP0FNz/k4kTIWrgEpcgEkrYxQC2RD5cS8YGfVg1RO9iJYY14XKp y+V9mzX5ACMU0j2eyiOj1czHb/98wNzHCFibkkxIQkQ1hL+8K3g4ZN7vcqGLhTs/ aw8uS4xKOK86jSt6TS/sD5BXjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI+Oqiu8 r60rvLwmiBxnpV4Y2ArdMB8GA1UdIwQYMBaAFPmUFpS2p3skxYP6eLUn5Uu21b+f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0RFNS80OTkzQjdGQzEy N0IxMUVFQjI3RThDMkJDNEY5QUUwMi8tWlFXbExhbmV5VEZnX3A0dFNmbFM3YlZ2 NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aUVdsTGFuZXlURmdfcDR0U2ZsUzdiVnY1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NERTUvNDk5M0I3RkMxMjdCMTFFRUIyN0U4QzJCQzRGOUFFMDIvRjg0M0YyQjQx MjdFMTFFRTk2OTRFMjJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+QmMA0GCSqGSIb3DQEBCwUAA4IBAQBHQo6c221M6HC/JL1BQWtZ /lynBRUlUYNAX9bDJrV4h6poHKCquZ8AFrWuQI4TieNPrDVullPa52tY8LoyIbAX BovCoHa8u5AjRJTsilHOZGEyB7G29sBOiWuOjlI/IKKl6rlk9bu+iVESKm/3CFxp 9H51QF2W0MEYnhBSYGJOinr0yXyWfewL8C6MPp+Mj6DoBm9IPgBpmXNjoyz0L2Ow BRX7M6RE5mqxAMWvv9EJmTCQPTiu4pnXxBomJiSORpIgldN/y+BLq6G7FqJOUn1x T4B4aBHCnl/g5gTuA+LId9PDLkkGheXJm2KlPVq7KGwhJUi2bYoif/5ZTZL7Bl1y -----END CERTIFICATE-----Generated at Mon Mar 2 08:34:15 2026 by rpki-client