$ rpki-client -vvf rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa File: 47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa (raw, json) Hash identifier: N/PJeJGpe5jwVdTA+VhHOpYYFuL79+kPqluBOU8PIYg= Subject key identifier: 3B:3B:AA:2F:36:06:39:D3:FC:62:F0:63:69:9C:9A:17:30:B4:01:8D Certificate issuer: /CN=A914B14E/serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Certificate serial: 0846 Authority key identifier: 3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:38:26 +0000 ROA not before: Sat 10 May 2025 20:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138945 IP address blocks: 103.137.128.0/24 maxlen: 24 103.140.198.0/24 maxlen: 24 2001:df0:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B14E, serialNumber=3CCD5F28A879EFBDBD3E55F4C2BCF28D6CDD5AEE Validity Not Before: May 10 20:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3fb02-b5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:ad:c6:98:29:32:a9:dc:ae:75:6e:aa:12: 7e:1c:3c:74:6f:34:92:6d:cd:a8:64:5a:e8:7a:3a: 93:85:19:9a:fc:d5:ad:dd:37:5e:c5:49:13:0e:1b: 75:ba:03:d2:88:87:9e:be:b1:ba:4d:8f:4a:9a:66: 54:45:0c:1a:bd:60:80:bf:b7:98:9e:0d:87:6e:82: 1b:53:22:ce:72:f0:0f:67:0f:cb:89:07:f7:cb:9d: 10:c0:81:6c:bc:c3:ce:3c:e7:37:b2:f7:72:86:8f: f1:b5:fe:e0:51:a8:7e:59:e4:e8:45:bf:2e:c2:94: e7:60:c8:11:4b:9e:c9:8c:dd:ae:9d:b3:fe:29:76: 0e:85:c8:f3:ef:41:0b:2e:e5:a5:96:e8:8b:ec:fc: 8e:0d:4f:9a:73:84:02:0e:b9:4c:68:1a:bd:2d:fd: e2:d3:6d:2d:d8:fc:9a:9a:8f:ef:b2:f3:d2:ec:be: 52:97:cd:a3:6b:b7:45:19:cd:fe:32:33:2f:af:b2: f3:45:54:97:85:45:99:aa:43:34:6f:95:5f:dc:61: 85:e6:b3:af:02:5f:6d:2a:37:4a:e8:20:16:fe:be: 74:2c:03:8e:e4:6f:23:27:e1:15:49:1a:87:29:ae: b5:c0:bb:f2:22:5b:db:61:c9:e5:20:c2:45:94:c6: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3B:AA:2F:36:06:39:D3:FC:62:F0:63:69:9C:9A:17:30:B4:01:8D X509v3 Authority Key Identifier: keyid:3C:CD:5F:28:A8:79:EF:BD:BD:3E:55:F4:C2:BC:F2:8D:6C:DD:5A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/PM1fKKh57729PlX0wrzyjWzdWu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM1fKKh57729PlX0wrzyjWzdWu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B14E/87F6848CFF8411EAB2A1C75BC4F9AE02/47F1DE34FF8611EA9DCF8D5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.137.128.0/24 103.140.198.0/24 IPv6: 2001:df0:1f80::/48 Signature Algorithm: sha256WithRSAEncryption a2:13:80:fe:e8:50:a2:c9:ea:ca:ea:1a:78:6e:88:43:38:3c: 31:e8:22:87:1e:7b:11:18:f2:dc:68:e7:94:f5:d5:59:ae:4e: 3a:c9:3b:11:e4:03:3c:20:0f:0a:bd:20:4e:d4:c3:3a:f9:9a: c2:54:85:f8:bb:5c:bb:fc:e4:c6:e7:97:bd:6f:2a:34:2e:47: 28:30:fc:89:8e:a6:36:cf:f9:31:b0:32:45:b8:1c:8a:82:74: fa:81:2a:15:19:e8:ec:4e:18:95:79:5a:1c:5b:5a:d3:af:dd: 99:98:91:a1:b8:f3:e7:2f:4d:f3:5b:1c:ff:42:99:6f:e6:49: d2:03:c5:c6:35:ea:bd:a9:2f:de:21:c8:41:53:15:9b:44:9f: a9:84:69:4f:51:b4:b6:71:f3:fb:39:1a:88:8e:1f:4c:eb:18: 9e:33:41:5b:40:ce:10:c5:44:7e:5c:f0:82:3f:4d:66:3e:6a: f6:ed:3a:04:3a:1c:f9:59:d7:a7:03:58:ad:eb:e7:28:d9:ea: d3:40:3f:b9:83:82:d9:80:58:c0:31:6b:67:b7:2f:07:11:f2: ad:ce:80:76:f5:25:93:f6:7e:5f:07:4c:22:28:05:3b:db:e5: 4b:0b:6a:0c:8b:52:6c:97:42:ac:a9:af:ed:64:3e:19:be:a6: ef:1f:a4:ab -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxNEUxMTAvBgNVBAUTKDNDQ0Q1RjI4QTg3OUVGQkRCRDNFNTVGNEMyQkNGMjhE NkNERDVBRUUwHhcNMjUwNTEwMjA1ODM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmIwMi1iNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2CtxpgpMqncrnVuqhJ+HDx0bzSSbc2oZFroejqThRma/NWt3TdexUkTDht1 ugPSiIeevrG6TY9KmmZURQwavWCAv7eYng2HboIbUyLOcvAPZw/LiQf3y50QwIFs vMPOPOc3svdyho/xtf7gUah+WeToRb8uwpTnYMgRS57JjN2unbP+KXYOhcjz70EL LuWlluiL7PyODU+ac4QCDrlMaBq9Lf3i020t2Pyamo/vsvPS7L5Sl82ja7dFGc3+ MjMvr7LzRVSXhUWZqkM0b5Vf3GGF5rOvAl9tKjdK6CAW/r50LAOO5G8jJ+EVSRqH Ka61wLvyIlvbYcnlIMJFlMYxaQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFDs7qi82 BjnT/GLwY2mcmhcwtAGNMB8GA1UdIwQYMBaAFDzNXyioee+9vT5V9MK88o1s3Vru MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjE0RS84N0Y2ODQ4Q0ZG ODQxMUVBQjJBMUM3NUJDNEY5QUUwMi9QTTFmS0toNTc3MjlQbFgwd3J6eWpXemRX dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNMWZLS2g1NzcyOVBsWDB3cnp5ald6ZFd1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEIxNEUvODdGNjg0OENGRjg0MTFFQUIyQTFDNzVCQzRGOUFFMDIvNDdGMURFMzRG Rjg2MTFFQTlEQ0Y4RDVEQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4mAAwQAZ4zGMA8EAgACMAkDBwAgAQ3wH4AwDQYJKoZIhvcNAQEL BQADggEBAKITgP7oUKLJ6srqGnhuiEM4PDHoIoceexEY8txo55T11VmuTjrJOxHk AzwgDwq9IE7Uwzr5msJUhfi7XLv85Mbnl71vKjQuRygw/ImOpjbP+TGwMkW4HIqC dPqBKhUZ6OxOGJV5WhxbWtOv3ZmYkaG48+cvTfNbHP9CmW/mSdIDxcY16r2pL94h yEFTFZtEn6mEaU9RtLZx8/s5GoiOH0zrGJ4zQVtAzhDFRH5c8II/TWY+avbtOgQ6 HPlZ16cDWK3r5yjZ6tNAP7mDgtmAWMAxa2e3LwcR8q3OgHb1JZP2fl8HTCIoBTvb 5UsLagyLUmyXQqypr+1kPhm+pu8fpKs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:06 2026 by rpki-client