$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa File: F38DEBFC83E911EA993D9515C4F9AE02.roa (raw, json) Hash identifier: xYf6QNwyh/TfYBwfKMFox0Y2KD6yEqZCCyhoM2C9YaA= Subject key identifier: 50:FE:8D:46:AD:38:BD:A2:41:88:FE:3D:C2:3C:62:52:76:59:59:A7 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 0A4E Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:30:54 +0000 ROA not before: Fri 30 May 2025 20:56:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139605 IP address blocks: 103.150.156.0/23 maxlen: 23 103.150.156.0/24 maxlen: 24 103.150.157.0/24 maxlen: 24 2001:df3:7b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2638 (0xa4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: May 30 20:56:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4074e-ea8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:f1:55:40:35:f5:bc:53:77:81:86:9b:86: 05:40:1b:20:63:a0:44:ed:d4:f8:f1:16:19:95:ba: 76:90:96:f0:44:b2:c8:f7:87:81:73:d3:12:a4:28: 29:ec:8a:b4:66:dc:1f:55:a9:0c:00:4b:e3:ea:80: c1:c3:e4:41:c5:89:b3:d5:c4:7c:ee:9b:b7:39:14: 6a:7a:12:f4:97:b6:d7:6a:e5:07:1b:5d:10:02:0a: ec:c9:18:35:0c:41:a0:29:ae:d5:fd:d4:2c:9c:c6: fd:5b:ee:f9:59:39:a9:3e:2d:95:6a:e3:99:4f:94: 72:77:f7:d7:c0:fd:6f:19:55:d9:0d:95:8f:da:ca: 0d:0c:6d:67:55:1d:db:f9:3a:b5:78:1d:5c:12:e2: 22:5f:50:ec:ce:69:9f:fe:bd:1f:79:da:4b:d9:7e: a6:e1:01:22:44:1d:4f:f2:01:dd:cf:5f:35:5b:61: 42:d7:4a:a0:41:8c:33:82:35:a2:03:f2:35:25:64: 12:fd:36:0e:d2:4b:1d:5d:fb:ef:17:3c:2e:3e:ba: 8c:fc:7a:18:8a:32:27:1d:dd:d8:28:a8:29:9c:6d: e2:68:1a:de:3b:a2:d6:5f:ad:ac:e0:42:7d:08:42: 4e:a3:a5:d2:91:1d:e7:02:51:8a:51:e4:cf:6c:97: 82:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FE:8D:46:AD:38:BD:A2:41:88:FE:3D:C2:3C:62:52:76:59:59:A7 X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.150.156.0/23 IPv6: 2001:df3:7b80::/48 Signature Algorithm: sha256WithRSAEncryption 77:4a:1b:db:fb:39:90:98:ba:20:82:44:f7:ee:c1:bb:c8:45: ac:73:cc:9d:c5:9a:ab:f5:5c:10:4a:44:27:f0:29:a6:11:80: c0:d1:ae:e7:a4:65:b7:72:e9:81:ad:33:44:28:51:65:c3:33: 09:21:00:f2:db:ee:1c:18:96:9b:e4:22:36:8e:08:3e:f1:03: 4b:73:5e:e4:6d:dc:e4:a9:ae:30:87:fc:f5:1b:40:14:71:2b: fb:9c:b1:e8:17:75:c8:65:53:fd:1a:fb:78:a7:45:e4:d3:d0: 2a:db:57:cc:3b:23:47:36:11:d8:73:79:74:35:16:3e:8a:8e: 74:cf:61:a2:ce:1f:8f:3a:66:f7:d2:2c:64:a5:30:39:04:23: 2a:c8:13:76:a2:57:a7:7b:d3:92:34:cd:d8:d7:c8:51:d9:a5: 7d:a8:4f:a2:11:db:5a:67:f5:cb:3a:88:2c:9a:58:94:e6:84: 53:8e:22:61:a3:95:03:63:09:09:a9:a7:58:d1:5f:6f:1a:d1: 37:1d:e2:df:4b:3b:f2:f1:8c:8f:26:2a:85:96:1f:6e:db:9a: 99:8a:9b:80:9e:61:16:20:b9:81:16:32:c0:74:80:3d:94:12: 37:ab:17:8e:74:46:99:fe:5f:cc:7c:fd:cb:12:65:30:0b:2c: d8:8d:5b:f7 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjUwNTMwMjA1NjQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDc0ZS1lYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uXxVUA19bxTd4GGm4YFQBsgY6BE7dT48RYZlbp2kJbwRLLI94eBc9MSpCgp 7Iq0ZtwfVakMAEvj6oDBw+RBxYmz1cR87pu3ORRqehL0l7bXauUHG10QAgrsyRg1 DEGgKa7V/dQsnMb9W+75WTmpPi2VauOZT5Ryd/fXwP1vGVXZDZWP2soNDG1nVR3b +Tq1eB1cEuIiX1Dszmmf/r0fedpL2X6m4QEiRB1P8gHdz181W2FC10qgQYwzgjWi A/I1JWQS/TYO0ksdXfvvFzwuPrqM/HoYijInHd3YKKgpnG3iaBreO6LWX62s4EJ9 CEJOo6XSkR3nAlGKUeTPbJeCMQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFD+jUat OL2iQYj+PcI8YlJ2WVmnMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQ3MTcvMzk4ODkwMDA4M0U4MTFFQUI3NzAwNTEzQzRGOUFFMDIvRjM4REVCRkM4 M0U5MTFFQTk5M0Q5NTE1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5acMA8EAgACMAkDBwAgAQ3ze4AwDQYJKoZIhvcNAQELBQADggEB AHdKG9v7OZCYuiCCRPfuwbvIRaxzzJ3Fmqv1XBBKRCfwKaYRgMDRruekZbdy6YGt M0QoUWXDMwkhAPLb7hwYlpvkIjaOCD7xA0tzXuRt3OSprjCH/PUbQBRxK/ucsegX dchlU/0a+3inReTT0CrbV8w7I0c2EdhzeXQ1Fj6KjnTPYaLOH486ZvfSLGSlMDkE IyrIE3aiV6d705I0zdjXyFHZpX2oT6IR21pn9cs6iCyaWJTmhFOOImGjlQNjCQmp p1jRX28a0Tcd4t9LO/LxjI8mKoWWH27bmpmKm4CeYRYguYEWMsB0gD2UEjerF450 Rpn+X8x8/csSZTALLNiNW/c= -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:43 2026 by rpki-client