$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/4D6224A80C4A11EAABCEF428C4F9AE02.roa File: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (raw, json) Hash identifier: kLfSpY3kUgZtSnGVsreS4YqZQYWqK6EsvelahK7CL7I= Subject key identifier: 91:B7:4E:7D:D1:93:6B:3C:42:66:BB:D3:3A:8C:EB:2B:FA:27:E0:2E Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0CCC Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/4D6224A80C4A11EAABCEF428C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:53:51 +0000 ROA not before: Sat 28 Feb 2026 19:15:41 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137435 IP address blocks: 103.108.112.0/22 maxlen: 22 103.108.112.0/24 maxlen: 24 103.108.113.0/24 maxlen: 24 103.108.114.0/24 maxlen: 24 103.108.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Feb 28 19:15:41 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a444ef-9619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:f7:fe:ba:f7:ff:10:ff:a0:cd:69:6d:c6: 6c:c6:9c:5c:be:cf:89:02:cb:83:f9:f1:83:c9:04: 17:8d:ca:e3:31:68:c7:44:3a:c8:47:73:49:83:56: 02:d7:5d:28:67:f7:b6:ec:2d:b9:35:d1:9b:dc:f6: 83:83:79:9c:d5:c4:05:b9:6b:55:78:2f:9e:fa:57: 2a:bf:1c:a1:19:31:eb:5d:5c:12:7f:00:d9:95:4a: da:0c:1b:9c:e1:ab:76:b2:db:85:bf:a0:2f:a8:9a: 1c:7d:92:1f:d5:8d:f2:d9:e1:aa:e7:f5:42:29:b8: 93:60:60:86:f2:7c:3b:45:20:b2:85:7c:80:fa:56: 20:7b:e2:3d:17:2d:e0:12:84:0b:db:60:be:fe:bb: bc:ae:d0:f6:13:40:6a:9a:9d:0d:4b:c3:ae:01:fd: 23:71:85:b4:8a:a9:05:59:70:1e:51:e2:58:48:59: 7a:9b:fd:01:0e:ce:99:b8:41:a9:fb:ab:b1:2b:90: f3:15:5f:d5:c0:ed:9d:ec:01:02:f6:c2:67:f0:d2: 37:07:84:f6:49:48:2a:6e:75:7e:6f:a0:de:1c:87: 16:a5:80:52:2a:c6:6f:54:91:36:f9:c8:c3:95:1c: fd:29:a4:27:8a:e1:72:53:2a:40:5f:ec:cc:2b:ef: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:4E:7D:D1:93:6B:3C:42:66:BB:D3:3A:8C:EB:2B:FA:27:E0:2E X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/4D6224A80C4A11EAABCEF428C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.112.0/22 Signature Algorithm: sha256WithRSAEncryption 25:e6:25:0b:8c:cf:f0:fe:e5:a8:bb:c2:94:83:04:d4:0a:03: 07:09:61:b4:12:dc:b7:07:70:01:d6:59:c8:86:22:af:ae:9d: fe:46:e0:1b:4d:07:66:18:39:b3:8d:e2:99:34:de:aa:50:90: bf:a8:e8:9c:26:4b:38:43:b0:ee:45:1d:2c:89:10:87:2f:27: be:c2:a4:c1:b8:12:fe:70:ec:d6:89:1e:77:c4:f2:5c:0a:4c: d5:63:47:06:03:64:0d:57:57:9d:8f:03:02:f3:60:b5:ee:5c: a0:52:25:1a:a8:09:06:12:85:95:9f:2d:a5:a3:fb:fd:14:a6: fa:7e:94:61:66:0b:0a:5a:a5:e0:5c:f5:03:4e:72:1e:17:28: ab:90:0f:6d:5f:75:ff:1b:5b:e7:db:ef:4c:6a:b1:76:85:e7: 51:27:ec:72:f0:c7:fd:3c:8d:26:a0:43:62:30:19:3f:7e:ca: 16:d5:3f:58:27:72:d0:3a:61:ac:cc:c5:ce:59:ee:af:6b:26: 1f:64:74:71:91:91:5c:7d:a8:d6:91:fd:e6:9a:1a:3a:16:1b: 4c:d7:fe:38:b2:a5:a2:2d:1c:4c:03:3a:d1:6b:ce:b9:38:36: 6e:39:84:c5:dc:4f:4a:54:6f:f0:f7:2c:fc:8d:2b:d8:94:b4: 9e:d5:db:47 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjYwMjI4MTkxNTQxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDRlZi05NjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlL3/rr3/xD/oM1pbcZsxpxcvs+JAsuD+fGDyQQXjcrjMWjHRDrIR3NJg1YC 110oZ/e27C25NdGb3PaDg3mc1cQFuWtVeC+e+lcqvxyhGTHrXVwSfwDZlUraDBuc 4at2stuFv6AvqJocfZIf1Y3y2eGq5/VCKbiTYGCG8nw7RSCyhXyA+lYge+I9Fy3g EoQL22C+/ru8rtD2E0Bqmp0NS8OuAf0jcYW0iqkFWXAeUeJYSFl6m/0BDs6ZuEGp +6uxK5DzFV/VwO2d7AEC9sJn8NI3B4T2SUgqbnV+b6DeHIcWpYBSKsZvVJE2+cjD lRz9KaQniuFyUypAX+zMK+/9VQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJG3Tn3R k2s8Qma70zqM6yv6J+AuMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTMwNDkvQURBQzUyODIwOUQ2MTFFQTlFQjMzODFDQzRGOUFFMDIvNEQ2MjI0QTgw QzRBMTFFQUFCQ0VGNDI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2xwMA0GCSqGSIb3DQEBCwUAA4IBAQAl5iULjM/w/uWou8KUgwTU CgMHCWG0Ety3B3AB1lnIhiKvrp3+RuAbTQdmGDmzjeKZNN6qUJC/qOicJks4Q7Du RR0siRCHLye+wqTBuBL+cOzWiR53xPJcCkzVY0cGA2QNV1edjwMC82C17lygUiUa qAkGEoWVny2lo/v9FKb6fpRhZgsKWqXgXPUDTnIeFyirkA9tX3X/G1vn2+9MarF2 hedRJ+xy8Mf9PI0moENiMBk/fsoW1T9YJ3LQOmGszMXOWe6vayYfZHRxkZFcfajW kf3mmho6FhtM1/44sqWiLRxMAzrRa865ODZuOYTF3E9KVG/w9yz8jSvYlLSe1dtH -----END CERTIFICATE-----Generated at Mon Mar 2 09:56:21 2026 by rpki-client