$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa File: 286C872684B011F08D2ED42CC4F9AE02.roa (raw, json) Hash identifier: 4lK3vSvZyASPRpN/bG9PwFQnxmuj8sHL/MdbAP72+MQ= Subject key identifier: CF:D3:C0:CF:E3:FD:B7:51:8F:8C:2A:65:A1:04:79:C6:B5:19:50:18 Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 63 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:29:22 +0000 ROA not before: Sun 01 Mar 2026 09:29:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153995 IP address blocks: 103.147.18.0/23 maxlen: 23 103.147.18.0/24 maxlen: 24 103.147.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Mar 1 09:29:22 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a406f1-caa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:c1:03:49:42:cf:d6:2d:9a:60:22:cd:74: a7:71:4a:5b:84:0a:b7:5f:ca:5b:01:0a:79:ac:54: fc:a5:62:31:c9:d9:bb:38:d6:42:81:3c:4d:44:f4: 56:4b:39:3f:4b:1e:cc:47:2d:83:4c:57:40:45:1b: c8:78:a7:44:f7:b0:87:82:11:92:0a:b7:cc:0c:91: c7:22:2b:73:2f:2a:7a:b8:05:ac:a8:fb:5d:80:e7: ba:66:0e:22:00:42:89:4c:8a:28:ea:a0:9d:71:2c: 67:0d:63:c9:4e:46:62:c5:47:f8:a2:98:90:fb:71: 66:76:eb:b5:96:ed:df:52:fe:a2:48:98:80:04:b0: cf:85:25:df:e9:99:ff:a4:75:b3:db:df:58:ef:79: bf:9d:36:ea:b6:5b:3b:bf:20:02:8a:5c:fd:83:d5: e6:b2:68:d6:d9:f9:4c:03:f4:4d:90:55:61:a5:6f: fb:b4:40:99:d6:81:98:fa:38:ad:d6:da:9d:8d:ed: 6e:6b:e2:81:31:cb:5e:16:a2:a6:18:53:99:2e:cc: a1:68:67:95:3c:86:67:7f:f8:e8:ba:05:77:ce:00: 85:e5:40:b3:fa:0c:58:0f:56:9d:bf:96:40:e7:83: a1:e6:76:32:af:eb:4f:88:72:d2:5f:6a:68:80:a4: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D3:C0:CF:E3:FD:B7:51:8F:8C:2A:65:A1:04:79:C6:B5:19:50:18 X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.18.0/23 Signature Algorithm: sha256WithRSAEncryption d0:30:ea:a3:20:98:64:15:81:bd:eb:fd:e9:94:47:40:42:33: 6d:2c:1f:c1:db:85:11:f6:c1:39:61:6e:ff:45:3a:08:b5:55: 43:da:2f:08:67:0f:54:18:c9:38:93:c9:54:30:2e:c4:0f:0b: 09:4f:82:d3:fe:8c:3e:0e:39:2c:d7:98:81:89:f1:24:bd:d0: 92:56:bd:0f:ec:2f:21:40:e1:a6:a2:65:0d:d5:88:6c:e2:39: a8:5e:27:76:48:93:a4:c5:0e:28:06:dc:44:77:ad:e2:06:78: 1f:07:86:d9:13:85:4c:7b:37:53:ba:56:0a:cf:42:5a:47:d6: e6:ed:9c:68:61:3f:9f:10:87:18:20:bd:3b:b0:3c:ee:29:dd: c5:33:f6:1f:61:6e:21:88:51:a0:6b:54:60:ee:b8:ab:46:fb: f6:3e:ca:3f:88:5d:3b:39:4e:20:48:f8:97:28:68:50:2f:12: 28:53:3e:ec:ca:1d:49:fa:95:44:e8:58:2f:9d:20:69:a5:9b: 15:e4:bc:c0:96:f4:9b:17:72:77:eb:b1:86:6a:e7:8d:d4:f2: 8a:d4:f2:3e:91:ed:f0:1e:8a:bf:8b:54:95:7c:cf:1b:84:42: 2c:1a:3c:94:65:0c:19:bb:34:96:f7:25:39:cf:b6:18:dc:8b: e7:9d:8c:e2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNjAzMDEwOTI5MjJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQwNmYxLWNhYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVl8EDSULP1i2aYCLNdKdxSluECrdfylsBCnmsVPylYjHJ2bs41kKBPE1E9FZL OT9LHsxHLYNMV0BFG8h4p0T3sIeCEZIKt8wMkcciK3MvKnq4Bayo+12A57pmDiIA QolMiijqoJ1xLGcNY8lORmLFR/iimJD7cWZ267WW7d9S/qJImIAEsM+FJd/pmf+k dbPb31jveb+dNuq2Wzu/IAKKXP2D1eayaNbZ+UwD9E2QVWGlb/u0QJnWgZj6OK3W 2p2N7W5r4oExy14WoqYYU5kuzKFoZ5U8hmd/+Oi6BXfOAIXlQLP6DFgPVp2/lkDn g6HmdjKv60+IctJfamiApLzPAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUz9PAz+P9 t1GPjCploQR5xrUZUBgwHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFDRC9EODM1QTkwRTg0QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi8yODZDODcyNjg0 QjAxMUYwOEQyRUQ0MkNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnkxIwDQYJKoZIhvcNAQELBQADggEBANAw6qMgmGQVgb3r/emUR0BC M20sH8HbhRH2wTlhbv9FOgi1VUPaLwhnD1QYyTiTyVQwLsQPCwlPgtP+jD4OOSzX mIGJ8SS90JJWvQ/sLyFA4aaiZQ3ViGziOaheJ3ZIk6TFDigG3ER3reIGeB8HhtkT hUx7N1O6VgrPQlpH1ubtnGhhP58QhxggvTuwPO4p3cUz9h9hbiGIUaBrVGDuuKtG +/Y+yj+IXTs5TiBI+JcoaFAvEihTPuzKHUn6lUToWC+dIGmlmxXkvMCW9JsXcnfr sYZq543U8orU8j6R7fAeir+LVJV8zxuEQiwaPJRlDBm7NJb3JTnPthjci+edjOI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:26:54 2026 by rpki-client