$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/DE437646F8A911EB98242219C4F9AE02.roa File: DE437646F8A911EB98242219C4F9AE02.roa (raw, json) Hash identifier: MmgfA3qYqHflBFSU79GcWhbhyjAjfee+uU1hKepl8Bg= Subject key identifier: D6:0F:78:4E:D5:C2:BD:A8:D2:6E:D4:9C:11:DF:40:97:C9:9C:81:DA Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0BC7 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/DE437646F8A911EB98242219C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:58:35 +0000 ROA not before: Fri 02 May 2025 20:00:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.248.128.0/24 maxlen: 24 2403:5f40:ca00::/44 maxlen: 44 2403:5f40:ca00::/48 maxlen: 48 2403:5f40:ca01::/48 maxlen: 48 2403:5f40:ca02::/48 maxlen: 48 2403:5f40:ca03::/48 maxlen: 48 2403:5f40:ca04::/48 maxlen: 48 2403:5f40:ca05::/48 maxlen: 48 2403:5f40:ca06::/48 maxlen: 48 2403:5f40:ca07::/48 maxlen: 48 2403:5f40:ca08::/48 maxlen: 48 2403:5f40:ca09::/48 maxlen: 48 2403:5f40:ca0a::/48 maxlen: 48 2403:5f40:ca0b::/48 maxlen: 48 2403:5f40:ca0c::/48 maxlen: 48 2403:5f40:ca0d::/48 maxlen: 48 2403:5f40:ca0e::/48 maxlen: 48 2403:5f40:ca0f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3015 (0xbc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: May 2 20:00:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4460b-d044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c8:d6:6b:f1:65:0f:83:3b:f5:19:2e:f2:80: 89:2d:f7:25:98:5a:6f:6d:90:b5:ea:3e:08:de:25: 99:e4:a5:0f:f2:b6:77:8a:fc:25:98:48:38:9b:4c: 9e:9f:14:9f:6c:95:50:0a:a8:69:b0:a0:dc:74:d0: f0:08:f8:96:63:d1:c2:3c:d2:17:da:ce:e7:5c:3f: 66:4c:01:84:8e:07:12:02:f3:e8:58:91:fe:01:89: e0:2d:e6:9a:31:4e:1b:44:34:16:ab:34:17:f8:50: 01:b3:d4:4e:6b:0a:65:54:5f:e7:36:e3:d7:47:8e: d8:54:4b:7e:c8:41:24:60:02:48:65:20:16:8b:f9: 02:68:37:5b:1f:73:a7:82:4d:b4:85:5e:08:f9:e7: bd:cd:5d:35:55:86:c3:bd:6a:d4:15:7f:03:96:ed: 50:47:ec:b1:0f:a2:69:d7:1e:0a:41:21:78:b0:07: d6:28:28:05:e9:07:b3:68:91:f1:92:ec:57:1e:dc: 82:e0:a2:a6:3b:0a:3f:13:f5:e3:3f:17:ae:0b:67: eb:ed:33:4d:4e:bd:1f:7e:d3:cc:56:9d:a2:d3:ca: b5:af:a6:fd:7a:ea:17:77:47:02:f7:88:f5:30:5a: 81:24:31:f0:13:07:9c:d3:4c:26:fa:9b:f2:ef:af: 5b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0F:78:4E:D5:C2:BD:A8:D2:6E:D4:9C:11:DF:40:97:C9:9C:81:DA X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/DE437646F8A911EB98242219C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.248.128.0/24 IPv6: 2403:5f40:ca00::/44 Signature Algorithm: sha256WithRSAEncryption d4:8a:0b:45:51:06:11:55:0d:5c:2d:30:5e:3f:cc:14:fb:5e: ea:41:04:7a:b0:27:33:7e:d4:aa:ff:03:67:e5:a1:76:f7:aa: 18:1c:e5:3b:47:9b:75:ee:a9:c7:05:b5:e8:5f:ed:63:a2:e3: 0e:5f:b1:60:e5:1b:1a:a2:b2:8d:59:9d:eb:e6:9f:ac:fe:f1: c4:a1:a7:f6:88:59:5d:14:ed:a8:8a:72:71:80:02:18:4c:d0: 84:9c:5b:9a:38:ef:ea:72:c9:70:4d:2a:c2:48:36:a6:60:b5: f7:20:5f:43:8d:7d:1e:4b:9d:a6:44:b0:6c:6c:86:24:3d:56: 5d:74:76:39:df:84:7d:e9:91:f2:9c:8f:a8:e6:20:b1:75:67: b0:e1:90:9d:6c:a7:e2:22:5d:dc:39:3b:2e:fe:c5:e1:62:45: 33:90:3f:28:6f:d1:0e:bf:f0:66:35:2b:3d:7a:bb:81:62:95: 3d:38:48:6c:ae:5d:f1:1a:4f:c1:ac:82:ab:a5:d3:1f:ed:c7: e4:0e:99:6d:5c:ad:2c:0c:17:ae:c7:42:6a:ad:f6:27:53:66: b9:46:4a:49:e5:9c:75:56:ba:99:5a:e2:1a:42:8f:61:50:7e: f0:73:1f:de:e3:2d:72:5e:a5:b1:5c:7e:49:54:8a:cb:9d:69: cf:01:14:28 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICC8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUwNTAyMjAwMDExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDYwYi1kMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsjWa/FlD4M79Rku8oCJLfclmFpvbZC16j4I3iWZ5KUP8rZ3ivwlmEg4m0ye nxSfbJVQCqhpsKDcdNDwCPiWY9HCPNIX2s7nXD9mTAGEjgcSAvPoWJH+AYngLeaa MU4bRDQWqzQX+FABs9ROawplVF/nNuPXR47YVEt+yEEkYAJIZSAWi/kCaDdbH3On gk20hV4I+ee9zV01VYbDvWrUFX8Dlu1QR+yxD6Jp1x4KQSF4sAfWKCgF6QezaJHx kuxXHtyC4KKmOwo/E/XjPxeuC2fr7TNNTr0fftPMVp2i08q1r6b9euoXd0cC94j1 MFqBJDHwEwec00wm+pvy769bfQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNYPeE7V wr2o0m7UnBHfQJfJnIHaMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERENzgvRDRFOTY0OUM0MkY4MTFFQUI0NjBFOTNGQzRGOUFFMDIvREU0Mzc2NDZG OEE5MTFFQjk4MjQyMjE5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ/iAMA8EAgACMAkDBwQkA19AygAwDQYJKoZIhvcNAQELBQADggEB ANSKC0VRBhFVDVwtMF4/zBT7XupBBHqwJzN+1Kr/A2floXb3qhgc5TtHm3XuqccF tehf7WOi4w5fsWDlGxqiso1Znevmn6z+8cShp/aIWV0U7aiKcnGAAhhM0IScW5o4 7+pyyXBNKsJINqZgtfcgX0ONfR5LnaZEsGxshiQ9Vl10djnfhH3pkfKcj6jmILF1 Z7DhkJ1sp+IiXdw5Oy7+xeFiRTOQPyhv0Q6/8GY1Kz16u4FilT04SGyuXfEaT8Gs gqul0x/tx+QOmW1crSwMF67HQmqt9idTZrlGSknlnHVWupla4hpCj2FQfvBzH97j LXJepbFcfklUisudac8BFCg= -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:20 2026 by rpki-client