$ rpki-client -vvf rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa File: D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa (raw, json) Hash identifier: C71NkIxWTn02peTNoMZAdVFU3QCiSYWoByajT9agFuU= Subject key identifier: A9:E4:0E:18:B8:75:35:A9:5A:17:0E:34:18:F2:8F:7E:C1:02:F8:A4 Certificate issuer: /CN=A913E23F/serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Certificate serial: 029C Authority key identifier: 02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:09:01 +0000 ROA not before: Fri 05 Sep 2025 02:38:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136141 IP address blocks: 103.13.192.0/24 maxlen: 24 103.13.193.0/24 maxlen: 24 2001:df1:53c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E23F, serialNumber=020B606DD9E8898A7D5DF5EA1CA3D996028E75D9 Validity Not Before: Sep 5 02:38:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4022c-8e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:36:f9:6e:00:98:e7:74:ac:49:d4:33:2b: 9f:e8:93:a1:05:42:92:92:d5:a8:06:d2:56:3c:57: 9e:64:73:a2:16:3a:cf:94:d3:2b:c6:06:fd:38:25: 8d:ab:97:19:d7:a0:0b:b3:67:b3:3a:6e:e2:7b:39: 0d:78:57:1b:59:78:b9:c6:1e:ad:10:e6:6b:c7:c8: 3a:88:c6:dc:d4:29:ae:73:20:ab:b0:32:ff:8a:21: 46:b2:42:9a:ee:bd:84:02:b5:56:fe:73:3b:ff:2a: 6d:d1:05:7a:8c:2a:fc:1c:32:c2:15:02:6d:d7:2d: ab:2c:e9:05:52:73:57:c3:73:3c:61:51:49:eb:33: 1e:0b:69:80:3f:18:99:40:9e:2c:c1:4c:a1:0a:b7: d6:0f:a3:5b:79:ef:d2:d6:9f:40:bc:9c:a0:7d:40: a9:eb:76:e6:f8:b7:84:7e:bc:f6:f8:bd:35:62:e8: e8:b9:03:82:d5:e2:13:a1:1e:03:22:1f:49:f4:98: e2:7e:7d:6b:1b:de:1e:b1:88:8d:48:22:76:1b:13: a2:9b:98:69:89:75:ce:da:b8:91:16:35:48:57:80: 47:44:9d:74:29:c7:02:66:26:c7:6f:0b:6c:22:07: 34:ce:62:2e:15:8a:88:63:d8:18:47:f2:f9:13:63: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E4:0E:18:B8:75:35:A9:5A:17:0E:34:18:F2:8F:7E:C1:02:F8:A4 X509v3 Authority Key Identifier: keyid:02:0B:60:6D:D9:E8:89:8A:7D:5D:F5:EA:1C:A3:D9:96:02:8E:75:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/AgtgbdnoiYp9XfXqHKPZlgKOddk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgtgbdnoiYp9XfXqHKPZlgKOddk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E23F/C64CAAA43E5211EDAAD4B64FC4F9AE02/D9F1B3C036DA11EEA0D3EE61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.13.192.0/23 IPv6: 2001:df1:53c0::/48 Signature Algorithm: sha256WithRSAEncryption 5c:f1:23:4a:24:25:d9:1e:3b:97:de:8f:37:fb:c6:a4:b8:90: 8d:19:c9:22:e5:f3:44:4a:ff:b6:58:cc:22:0a:5b:1e:03:8d: f1:3d:3e:57:78:cf:79:cd:d3:3f:5d:77:61:9d:de:b5:5f:9a: 01:1f:60:a4:c2:ed:42:62:cc:54:e9:f8:e3:89:3a:cc:e3:05: f5:c0:87:ce:06:43:e7:8b:c7:2e:ad:c3:f6:2b:b9:b8:0c:8a: 8a:42:08:ce:1a:94:51:e4:4c:4c:01:cb:ff:3b:62:bc:63:40: bb:e4:a8:d1:61:f7:06:40:3a:28:ab:87:49:2f:31:3c:cb:0c: 6a:49:d5:e7:f4:ab:c7:ad:5d:5f:d6:92:29:39:3b:04:b9:6e: d8:1e:75:3f:d2:1c:24:83:c9:bb:f6:28:40:bf:1a:f8:08:55: 0b:4b:20:9b:17:c3:eb:b6:55:48:15:8b:83:3c:4f:ab:83:27: b1:16:64:1a:62:f3:fb:07:fa:1b:31:f8:4f:56:bf:92:6d:b8: 8b:50:0f:40:1f:fe:10:2a:8a:41:18:40:ae:23:fa:5d:a6:24: a7:35:f7:16:be:56:b5:6d:ee:7b:09:c1:bc:a0:d0:db:14:c4: 5b:20:b3:80:9f:1e:b2:1b:39:6d:f4:bf:92:34:4b:c5:c4:74: a8:a8:e5:19 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UyM0YxMTAvBgNVBAUTKDAyMEI2MDZERDlFODg5OEE3RDVERjVFQTFDQTNEOTk2 MDI4RTc1RDkwHhcNMjUwOTA1MDIzODI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDIyYy04ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wc2+W4AmOd0rEnUMyuf6JOhBUKSktWoBtJWPFeeZHOiFjrPlNMrxgb9OCWN q5cZ16ALs2ezOm7iezkNeFcbWXi5xh6tEOZrx8g6iMbc1CmucyCrsDL/iiFGskKa 7r2EArVW/nM7/ypt0QV6jCr8HDLCFQJt1y2rLOkFUnNXw3M8YVFJ6zMeC2mAPxiZ QJ4swUyhCrfWD6Nbee/S1p9AvJygfUCp63bm+LeEfrz2+L01YujouQOC1eIToR4D Ih9J9Jjifn1rG94esYiNSCJ2GxOim5hpiXXO2riRFjVIV4BHRJ10KccCZibHbwts Igc0zmIuFYqIY9gYR/L5E2PDxwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKnkDhi4 dTWpWhcONBjyj37BAvikMB8GA1UdIwQYMBaAFAILYG3Z6ImKfV316hyj2ZYCjnXZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTIzRi9DNjRDQUFBNDNF NTIxMUVEQUFENEI2NEZDNEY5QUUwMi9BZ3RnYmRub2lZcDlYZlhxSEtQWmxnS09k ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FndGdiZG5vaVlwOVhmWHFIS1BabGdLT2Rkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0UyM0YvQzY0Q0FBQTQzRTUyMTFFREFBRDRCNjRGQzRGOUFFMDIvRDlGMUIzQzAz NkRBMTFFRUEwRDNFRTYxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZw3AMA8EAgACMAkDBwAgAQ3xU8AwDQYJKoZIhvcNAQELBQADggEB AFzxI0okJdkeO5fejzf7xqS4kI0ZySLl80RK/7ZYzCIKWx4DjfE9Pld4z3nN0z9d d2Gd3rVfmgEfYKTC7UJizFTp+OOJOszjBfXAh84GQ+eLxy6tw/YrubgMiopCCM4a lFHkTEwBy/87YrxjQLvkqNFh9wZAOiirh0kvMTzLDGpJ1ef0q8etXV/Wkik5OwS5 btgedT/SHCSDybv2KEC/GvgIVQtLIJsXw+u2VUgVi4M8T6uDJ7EWZBpi8/sH+hsx +E9Wv5JtuItQD0Af/hAqikEYQK4j+l2mJKc19xa+VrVt7nsJwbyg0NsUxFsgs4Cf HrIbOW30v5I0S8XEdKio5Rk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:12:19 2026 by rpki-client