$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/E458D4E0F4A011E98C19332EC4F9AE02.roa File: E458D4E0F4A011E98C19332EC4F9AE02.roa (raw, json) Hash identifier: y3y5SrZwbym3PpRCNxxCZC+FmThIaCT84ESOqsCOxgw= Subject key identifier: 7D:33:93:A2:95:BC:71:E0:18:14:3C:3C:8F:39:8A:85:9B:4D:AB:C7 Certificate issuer: /CN=A913DA50/serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Certificate serial: 0D34 Authority key identifier: B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/E458D4E0F4A011E98C19332EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:39:49 +0000 ROA not before: Sat 31 Jan 2026 18:15:12 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138587 IP address blocks: 103.133.252.0/22 maxlen: 24 2404:57c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3380 (0xd34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA50, serialNumber=B5748475ABF59077818951CC1FE6ED8BD2F31213 Validity Not Before: Jan 31 18:15:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44fb5-e07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:67:68:a2:11:0d:c9:d9:62:07:70:70:90: 81:e0:1a:2b:c4:4c:1d:73:d7:34:bb:0d:0d:96:09: 55:3d:78:5e:23:e0:ef:0d:7b:33:7c:2e:f9:06:aa: d6:a8:45:30:3f:82:1b:db:43:1f:f5:b3:39:69:11: 01:48:56:c1:7b:11:d3:50:75:d4:41:f2:d7:e0:9e: 5d:f9:16:f2:3b:c3:75:78:38:f7:bd:e0:5e:f4:9f: 7a:4b:c0:9b:4d:05:81:6e:5c:25:64:dd:53:ed:40: 10:45:11:0a:f6:f1:6a:f8:b8:15:69:bb:de:c9:f5: a1:b9:4d:fa:43:90:0e:90:b4:66:8f:12:71:ed:f3: f9:f3:d7:be:e0:6f:86:41:65:b6:5c:f6:a5:89:2c: 7f:84:40:56:1c:1f:f3:4c:a9:db:a5:a8:d6:ef:12: 21:dd:de:b5:e5:19:60:ec:a4:9a:5e:ec:d0:6a:85: eb:47:e5:7d:39:78:d3:7d:dd:99:24:51:e4:fd:10: 3e:1a:30:3f:67:06:98:ed:cc:9a:28:73:66:e5:3b: 6e:0d:a6:b9:00:aa:b4:65:e9:0f:b6:83:bb:60:72: f5:bf:17:65:ea:40:a8:00:43:2c:47:49:c3:32:e4: 27:d8:9a:5b:7f:39:09:42:c2:4a:53:b4:e2:dc:29: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:33:93:A2:95:BC:71:E0:18:14:3C:3C:8F:39:8A:85:9B:4D:AB:C7 X509v3 Authority Key Identifier: keyid:B5:74:84:75:AB:F5:90:77:81:89:51:CC:1F:E6:ED:8B:D2:F3:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/tXSEdav1kHeBiVHMH-bti9LzEhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tXSEdav1kHeBiVHMH-bti9LzEhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA50/D49BD210F49F11E98BFFF82CC4F9AE02/E458D4E0F4A011E98C19332EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.252.0/22 IPv6: 2404:57c0::/32 Signature Algorithm: sha256WithRSAEncryption b8:83:b2:13:44:d3:d9:40:fd:3c:70:f8:f6:3e:71:8c:35:6f: 85:97:8c:2c:68:6a:48:69:68:f4:51:a0:80:d6:cc:b3:55:74: 47:df:ab:04:34:d2:c8:9e:d0:60:54:c7:70:f3:85:08:fe:c0: fe:f4:b6:6b:4e:8a:03:0d:83:b6:5e:78:de:35:d1:77:5e:28: 31:f4:44:4d:fb:dd:af:b6:46:5b:95:09:8a:b7:da:ff:c9:a1: e1:8e:ad:26:c1:35:cd:42:74:a1:74:3d:b1:aa:fe:55:0c:33: f4:06:5a:eb:0c:0c:e9:fa:05:35:af:a1:b9:80:7c:7d:e3:e7: c5:fc:cd:8f:86:ba:3e:1a:e2:3c:2d:0d:61:4f:ef:e1:c6:a5: 15:f4:d3:d4:ba:96:2c:9e:09:5b:38:e6:b5:58:e1:2f:05:46: 11:bd:1b:0b:ee:fd:a5:7a:73:f0:c4:12:ae:00:95:79:b3:a7: db:19:25:29:3b:98:60:3a:87:87:9c:29:3d:e8:b6:0f:1d:e1: e4:9d:bd:4b:c3:d4:29:0f:13:c1:f6:54:00:46:e0:92:b8:93: 97:4f:56:a1:d0:f0:06:5f:27:e5:e1:52:b9:c7:53:4d:85:41: 2b:42:3d:92:1b:63:97:e6:f4:f3:2d:27:58:05:e5:42:10:f0: a4:31:b7:34 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBNTAxMTAvBgNVBAUTKEI1NzQ4NDc1QUJGNTkwNzc4MTg5NTFDQzFGRTZFRDhC RDJGMzEyMTMwHhcNMjYwMTMxMTgxNTEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGZiNS1lMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/FnaKIRDcnZYgdwcJCB4BorxEwdc9c0uw0NlglVPXheI+DvDXszfC75BqrW qEUwP4Ib20Mf9bM5aREBSFbBexHTUHXUQfLX4J5d+RbyO8N1eDj3veBe9J96S8Cb TQWBblwlZN1T7UAQRREK9vFq+LgVabveyfWhuU36Q5AOkLRmjxJx7fP589e+4G+G QWW2XPaliSx/hEBWHB/zTKnbpajW7xIh3d615Rlg7KSaXuzQaoXrR+V9OXjTfd2Z JFHk/RA+GjA/ZwaY7cyaKHNm5TtuDaa5AKq0ZekPtoO7YHL1vxdl6kCoAEMsR0nD MuQn2JpbfzkJQsJKU7Ti3Cn2oQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH0zk6KV vHHgGBQ8PI85ioWbTavHMB8GA1UdIwQYMBaAFLV0hHWr9ZB3gYlRzB/m7YvS8xIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREE1MC9ENDlCRDIxMEY0 OUYxMUU5OEJGRkY4MkNDNEY5QUUwMi90WFNFZGF2MWtIZUJpVkhNSC1idGk5THpF aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RYU0VkYXYxa0hlQmlWSE1ILWJ0aTlMekVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0RBNTAvRDQ5QkQyMTBGNDlGMTFFOThCRkZGODJDQzRGOUFFMDIvRTQ1OEQ0RTBG NEEwMTFFOThDMTkzMzJFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4X8MA0EAgACMAcDBQAkBFfAMA0GCSqGSIb3DQEBCwUAA4IBAQC4 g7ITRNPZQP08cPj2PnGMNW+Fl4wsaGpIaWj0UaCA1syzVXRH36sENNLIntBgVMdw 84UI/sD+9LZrTooDDYO2XnjeNdF3Xigx9ERN+92vtkZblQmKt9r/yaHhjq0mwTXN QnShdD2xqv5VDDP0BlrrDAzp+gU1r6G5gHx94+fF/M2Phro+GuI8LQ1hT+/hxqUV 9NPUupYsnglbOOa1WOEvBUYRvRsL7v2lenPwxBKuAJV5s6fbGSUpO5hgOoeHnCk9 6LYPHeHknb1Lw9QpDxPB9lQARuCSuJOXT1ah0PAGXyfl4VK5x1NNhUErQj2SG2OX 5vTzLSdYBeVCEPCkMbc0 -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:53 2026 by rpki-client