$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa File: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (raw, json) Hash identifier: CZ8FukxsKCIg6Atv3VXow/W+zrKqg+WvhItHfO7GP+4= Subject key identifier: 2D:19:35:9C:C5:71:37:A4:CE:3B:59:1C:BF:7D:1E:9E:D4:3D:73:79 Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Certificate serial: 06AC Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:56:59 +0000 ROA not before: Fri 30 Jan 2026 22:19:04 +0000 ROA not after: Tue 02 Jun 2026 00:00:00 +0000 asID: 59355 IP address blocks: 103.147.232.0/23 maxlen: 23 103.147.232.0/24 maxlen: 24 103.147.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3 Validity Not Before: Jan 30 22:19:04 2026 GMT Not After : Jun 2 00:00:00 2026 GMT Subject: CN=69a453bb-477a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:b8:e5:9d:7f:d6:99:ea:71:7e:dc:69:73: f4:fe:7c:d8:97:f0:34:41:c7:1e:7f:69:98:4b:db: e9:57:06:37:08:8b:a5:7e:4c:8b:46:08:9f:e3:10: 82:de:f4:8b:2e:bc:5f:db:d9:b0:81:a5:0f:4d:e9: ff:6c:c3:ba:1e:d3:4e:b0:e0:aa:bf:da:57:2d:34: 93:5a:fe:8a:e6:13:93:42:b2:5e:bf:fc:c2:ec:58: 40:fd:db:1c:ac:73:01:9e:6d:c4:18:20:02:7c:14: 60:ac:43:49:3e:da:0e:0f:2c:3e:29:37:c2:5e:ae: 60:43:19:e8:fd:e4:9b:fe:a1:8d:29:e4:de:68:78: c2:fa:7c:70:ec:ac:f8:75:81:9c:1c:a5:a9:f0:d7: f0:67:69:6d:65:01:ab:a9:32:82:17:9b:2b:0e:90: 29:8e:8e:0f:99:d7:89:8d:b2:97:a4:9a:1f:66:c8: a5:d7:53:d9:98:24:95:7b:e2:41:bc:3e:20:4a:c3: bf:d6:8c:da:d0:39:e5:0d:5d:bd:93:98:fe:d5:d9: c5:de:4c:cc:f9:09:72:df:c0:97:3f:8f:c5:b1:0b: 8d:43:b0:ca:08:d1:f7:3d:ee:34:b2:08:b8:24:72: 3b:39:c4:5b:42:e7:b8:7c:43:fb:8c:85:cd:34:0d: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:19:35:9C:C5:71:37:A4:CE:3B:59:1C:BF:7D:1E:9E:D4:3D:73:79 X509v3 Authority Key Identifier: keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/63F5A844A07211EBB1E80A0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.232.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:77:ff:04:86:2e:59:3c:aa:72:c0:86:4e:12:99:9f:f8:38: 47:0b:ab:94:36:77:6b:5c:00:3e:96:0e:cc:0a:35:24:e3:44: 19:6e:ef:df:69:b6:16:14:e1:1f:39:f1:0e:53:f2:3c:d9:c5: a7:e7:a3:63:97:a8:3c:e2:db:96:69:fb:7a:bd:3d:83:4d:62: 69:e1:15:cd:5a:81:05:88:ca:4f:67:68:3b:69:8a:1c:0f:9d: d9:14:c2:41:eb:e0:a4:ca:8a:5e:8d:ea:b5:94:c5:7c:c2:46: 1d:aa:6d:c4:0d:bb:dd:da:b7:ba:d0:7d:6e:ca:63:7e:07:f6: 6c:af:cd:fd:7b:11:cd:77:1c:d3:8b:63:bc:34:99:5b:72:4a: b3:56:71:e6:8a:63:7c:53:24:7f:e2:9e:73:f6:28:d8:d5:f3: d9:1c:be:36:db:13:7c:51:d9:fa:81:8c:3e:da:03:e5:d4:79: 42:7f:c3:45:96:da:ad:bb:ce:06:38:f5:a5:2f:f6:6e:7b:38: d6:3a:ea:ab:e3:1d:3a:07:a4:81:76:df:53:df:d7:0d:14:5a: 96:2e:85:cd:5f:1e:67:89:11:54:6c:5e:5b:11:83:f3:4b:6e: 95:9d:e3:ec:27:71:24:a5:14:c1:d7:2f:a2:1a:90:f2:d0:ff: a0:0b:a1:cb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdFQTgxMTAvBgNVBAUTKDQxQzExRDgxQUNCQUY2OTNFN0FENjFGQTExNEU3N0I5 RkQ0RjU3QzMwHhcNMjYwMTMwMjIxOTA0WhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTNiYi00NzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBy45Z1/1pnqcX7caXP0/nzYl/A0Qccef2mYS9vpVwY3CIulfkyLRgif4xCC 3vSLLrxf29mwgaUPTen/bMO6HtNOsOCqv9pXLTSTWv6K5hOTQrJev/zC7FhA/dsc rHMBnm3EGCACfBRgrENJPtoODyw+KTfCXq5gQxno/eSb/qGNKeTeaHjC+nxw7Kz4 dYGcHKWp8NfwZ2ltZQGrqTKCF5srDpApjo4PmdeJjbKXpJofZsil11PZmCSVe+JB vD4gSsO/1oza0DnlDV29k5j+1dnF3kzM+Qly38CXP4/FsQuNQ7DKCNH3Pe40sgi4 JHI7OcRbQue4fEP7jIXNNA1rVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC0ZNZzF cTekzjtZHL99Hp7UPXN5MB8GA1UdIwQYMBaAFEHBHYGsuvaT561h+hFOd7n9T1fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0VBOC84NDE3NTE1NkEw NzAxMUVCOUFCNkU2NUJDNEY5QUUwMi9RY0VkZ2F5NjlwUG5yV0g2RVU1M3VmMVBW OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FjRWRnYXk2OXBQbnJXSDZFVTUzdWYxUFY4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDdFQTgvODQxNzUxNTZBMDcwMTFFQjlBQjZFNjVCQzRGOUFFMDIvNjNGNUE4NDRB MDcyMTFFQkIxRTgwQTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5PoMA0GCSqGSIb3DQEBCwUAA4IBAQAsd/8Ehi5ZPKpywIZOEpmf +DhHC6uUNndrXAA+lg7MCjUk40QZbu/fabYWFOEfOfEOU/I82cWn56Njl6g84tuW aft6vT2DTWJp4RXNWoEFiMpPZ2g7aYocD53ZFMJB6+Ckyopejeq1lMV8wkYdqm3E Dbvd2re60H1uymN+B/Zsr839exHNdxzTi2O8NJlbckqzVnHmimN8UyR/4p5z9ijY 1fPZHL422xN8Udn6gYw+2gPl1HlCf8NFltqtu84GOPWlL/ZuezjWOuqr4x06B6SB dt9T39cNFFqWLoXNXx5niRFUbF5bEYPzS26VnePsJ3EkpRTB1y+iGpDy0P+gC6HL -----END CERTIFICATE-----Generated at Mon Mar 2 15:35:04 2026 by rpki-client