$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/F343C4ECF93911ECBD1E663DC4F9AE02.roa File: F343C4ECF93911ECBD1E663DC4F9AE02.roa (raw, json) Hash identifier: HI47TeUKkkUj9tj7DCBcCUp4twqgQ+xfdt81d27bT2U= Subject key identifier: F3:AB:CA:A0:92:C0:77:F7:53:CC:B7:60:25:A3:84:14:7C:4E:A2:F6 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 0340 Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/F343C4ECF93911ECBD1E663DC4F9AE02.roa Signing time: Sat 21 Feb 2026 00:21:33 +0000 ROA not before: Sat 21 Feb 2026 00:21:33 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 21788 IP address blocks: 103.107.143.0/24 maxlen: 24 103.121.26.0/24 maxlen: 24 103.121.27.0/24 maxlen: 24 103.135.95.0/24 maxlen: 24 2001:df2:2340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Feb 21 00:21:33 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6998fa8d-aad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f3:5e:70:ef:e5:bf:eb:df:96:ae:56:3c:52: 2c:9e:e2:e0:82:99:f3:41:72:6b:0e:1d:24:ec:fc: a8:83:2e:7a:b5:41:31:9b:a9:fa:0c:7e:e6:86:34: fe:a5:62:ac:d9:37:2e:45:94:56:68:7f:d5:ae:1a: 85:56:28:25:ba:d8:1c:d9:22:79:c5:2b:bb:f0:33: de:a2:89:c6:0b:54:b2:ac:6f:73:26:27:33:e4:a9: d1:32:15:b4:b4:62:e9:78:2a:8e:53:e6:9d:d2:13: 3c:64:d5:7f:77:ac:b1:31:8d:28:8d:86:13:5a:a5: b3:ff:6a:c3:51:ab:ab:52:84:a5:d3:85:be:15:21: a4:dc:da:d0:35:24:9e:78:b7:5f:1e:b5:f2:ad:16: 82:ac:f8:aa:a1:5e:6f:3c:eb:79:85:de:14:a9:89: bf:72:9b:47:bc:2b:b7:23:bf:bb:4d:f1:48:f6:36: b8:17:a8:7d:28:f5:7b:d9:6f:7d:52:3b:e2:75:a2: 7c:61:d2:d4:9f:fd:14:3c:d4:47:d6:5a:fd:51:2b: 5b:94:b7:98:1d:e1:39:ec:22:b4:43:73:19:01:48: c1:a6:31:b3:f5:5f:fe:58:30:32:89:f7:ff:42:b3: 08:db:b5:15:37:50:13:81:f9:4a:ec:32:3f:5d:67: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:CA:A0:92:C0:77:F7:53:CC:B7:60:25:A3:84:14:7C:4E:A2:F6 X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/F343C4ECF93911ECBD1E663DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.107.143.0/24 103.121.26.0/23 103.135.95.0/24 IPv6: 2001:df2:2340::/48 Signature Algorithm: sha256WithRSAEncryption cf:82:91:06:e6:47:31:6a:ac:c0:98:8d:b3:ca:fe:02:96:5f: da:23:be:97:75:6d:18:9a:bb:06:e4:65:12:4a:6b:e3:dc:c1: 9b:fe:92:d9:2b:b7:a5:60:3e:74:99:8a:3e:3e:52:ca:a7:82: 23:15:75:5f:ae:6c:6d:69:3f:02:f0:de:26:9e:37:04:b5:6d: 5c:14:10:f8:70:ed:ed:6f:a3:d3:bb:c4:39:2d:b1:2e:e4:26: bd:9e:19:27:2a:91:9b:6a:0e:7e:48:4f:f0:ac:4b:45:62:27: 4c:7f:93:63:a5:d3:74:1a:00:5e:8c:c2:3c:ae:f7:b7:38:14: 61:96:a3:c8:04:7e:57:41:41:6d:66:87:cd:8b:01:4e:a5:a5: c1:85:ba:ac:32:ec:1f:c8:96:51:aa:83:6b:01:66:da:8a:42: 09:17:5a:64:3d:2d:32:b4:bf:2a:1f:69:c1:67:70:7e:e3:9d: 40:df:ab:11:6f:93:f7:fa:08:69:f8:01:f6:18:17:10:5e:a9: c3:79:c4:2f:d9:53:41:fb:ed:f8:20:bc:86:d6:47:42:61:d6: b7:d9:82:b4:2b:41:fa:fd:45:2a:8c:92:1e:1a:66:f4:59:f4: fd:f7:d1:4c:49:65:09:64:76:5c:7e:9b:2a:bf:aa:ac:30:56: 32:3c:b6:f5 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjYwMjIxMDAyMTMzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTk4ZmE4ZC1hYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fNecO/lv+vflq5WPFIsnuLggpnzQXJrDh0k7Pyogy56tUExm6n6DH7mhjT+ pWKs2TcuRZRWaH/VrhqFViglutgc2SJ5xSu78DPeoonGC1SyrG9zJicz5KnRMhW0 tGLpeCqOU+ad0hM8ZNV/d6yxMY0ojYYTWqWz/2rDUaurUoSl04W+FSGk3NrQNSSe eLdfHrXyrRaCrPiqoV5vPOt5hd4UqYm/cptHvCu3I7+7TfFI9ja4F6h9KPV72W99 UjvidaJ8YdLUn/0UPNRH1lr9UStblLeYHeE57CK0Q3MZAUjBpjGz9V/+WDAyiff/ QrMI27UVN1ATgflK7DI/XWdyrwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFPOryqCS wHf3U8y3YCWjhBR8TqL2MB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhEQjIvMDQ3REMzODhGOTM2MTFFQzkyMUI4MTBFQzRGOUFFMDIvRjM0M0M0RUNG OTM5MTFFQ0JEMUU2NjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBABna48DBAFneRoDBABnh18wDwQCAAIwCQMHACABDfIjQDAN BgkqhkiG9w0BAQsFAAOCAQEAz4KRBuZHMWqswJiNs8r+ApZf2iO+l3VtGJq7BuRl Ekpr49zBm/6S2Su3pWA+dJmKPj5SyqeCIxV1X65sbWk/AvDeJp43BLVtXBQQ+HDt 7W+j07vEOS2xLuQmvZ4ZJyqRm2oOfkhP8KxLRWInTH+TY6XTdBoAXozCPK73tzgU YZajyAR+V0FBbWaHzYsBTqWlwYW6rDLsH8iWUaqDawFm2opCCRdaZD0tMrS/Kh9p wWdwfuOdQN+rEW+T9/oIafgB9hgXEF6pw3nEL9lTQfvt+CC8htZHQmHWt9mCtCtB +v1FKoySHhpm9Fn0/ffRTEllCWR2XH6bKr+qrDBWMjy29Q== -----END CERTIFICATE-----Generated at Mon Mar 2 01:51:49 2026 by rpki-client