$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa File: 0853C13CA2F011E9B721795CC4F9AE02.roa (raw, json) Hash identifier: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok= Subject key identifier: FB:8A:6C:CE:C3:28:DA:61:C1:60:91:8F:03:D3:BD:2B:F4:DF:8B:72 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0ECD Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:36:33 +0000 ROA not before: Tue 02 Sep 2025 18:08:09 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139301 IP address blocks: 103.141.6.0/24 maxlen: 24 103.141.7.0/24 maxlen: 24 2405:8c0::/48 maxlen: 48 2405:8c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3789 (0xecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Sep 2 18:08:09 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a424c1-8fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ab:06:cc:d2:41:70:01:60:2d:a4:d1:31:b1: 83:ad:ac:a9:8b:b2:d8:2c:a0:2e:45:ad:5d:12:73: 55:fd:b8:ea:76:7f:03:62:0b:9b:5e:0b:47:86:e5: e2:cd:b7:4e:78:d3:c9:75:b7:9e:6c:ae:83:8b:c8: a7:e4:96:20:41:80:79:15:5b:1e:76:fb:6e:c1:ad: e8:76:e3:59:d2:45:02:8d:72:73:90:f6:9b:39:19: af:97:d3:c6:9f:f8:69:10:ab:45:e8:d0:78:3f:25: f5:29:d1:1c:16:64:59:e0:2d:93:2d:69:d0:4c:9d: f1:12:94:a2:43:15:fb:dd:ee:da:fa:8f:ba:cf:e7: 18:76:d2:95:d0:b2:9b:bc:43:e3:d8:71:ad:b2:45: 24:a3:b6:37:5e:e7:29:26:70:3f:02:a5:7b:ec:d5: 23:6e:96:d1:17:2c:03:94:1a:c1:0d:13:aa:22:b6: 62:2f:e3:28:8e:1f:50:68:a5:8b:2f:c2:b3:f5:a7: 83:dc:ec:6e:9f:5a:4c:a0:99:90:5b:6e:0f:23:cc: 58:7f:ff:c5:df:7e:3a:3c:6e:bb:53:a8:d3:62:b9: 8a:dd:e0:75:93:85:be:9e:84:88:25:dc:6a:12:fc: 52:ec:3d:42:5b:45:ca:74:35:92:b5:c6:79:00:28: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8A:6C:CE:C3:28:DA:61:C1:60:91:8F:03:D3:BD:2B:F4:DF:8B:72 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.6.0/23 IPv6: 2405:8c0::/47 Signature Algorithm: sha256WithRSAEncryption 7a:04:0e:3f:ea:42:5e:32:ad:c2:8b:7a:e7:24:8d:9c:76:07: 9e:18:6b:71:96:1b:47:30:2d:18:e8:7f:19:be:79:b8:56:ac: ab:6a:86:f4:04:d1:de:d3:30:62:f3:e1:5a:b4:8c:90:c3:5d: 7a:94:84:8f:24:e8:ea:e3:95:81:5d:17:0f:29:a3:8a:2d:a8: 5a:00:78:bb:05:5e:b4:fc:a3:b6:71:ec:f8:e4:8f:44:ff:02: a9:9f:a6:dd:eb:23:5c:fa:d2:40:07:f5:46:b0:df:ea:f9:07: 91:b2:a1:00:32:7f:7b:05:ec:1d:29:2d:0e:40:df:2c:56:b1: 97:5f:38:02:00:64:8d:0e:6d:a9:c9:48:1e:a2:7c:31:e4:ef: 02:ae:8d:c8:1d:74:73:04:ab:0a:b1:6e:17:d8:47:43:f0:3a: 74:ee:f6:90:3f:cd:4f:90:e9:f4:82:ae:80:3e:66:a1:c2:b6: 6a:66:be:7e:06:24:79:78:c4:6c:ed:47:38:36:20:4f:26:71: 5f:e8:e5:ae:8e:d9:95:3f:86:48:8a:8d:51:79:5b:d3:e9:0c: f9:80:44:b1:c1:19:52:f1:4d:ef:ab:71:98:43:f5:76:1e:d9: 82:e0:fb:b4:9a:25:a1:f8:74:28:bf:ca:b3:fd:86:9a:f3:dd: a4:64:37:01 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUwOTAyMTgwODA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjRjMS04ZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqsGzNJBcAFgLaTRMbGDraypi7LYLKAuRa1dEnNV/bjqdn8DYgubXgtHhuXi zbdOeNPJdbeebK6Di8in5JYgQYB5FVsedvtuwa3oduNZ0kUCjXJzkPabORmvl9PG n/hpEKtF6NB4PyX1KdEcFmRZ4C2TLWnQTJ3xEpSiQxX73e7a+o+6z+cYdtKV0LKb vEPj2HGtskUko7Y3XucpJnA/AqV77NUjbpbRFywDlBrBDROqIrZiL+Mojh9QaKWL L8Kz9aeD3Oxun1pMoJmQW24PI8xYf//F3346PG67U6jTYrmK3eB1k4W+noSIJdxq EvxS7D1CW0XKdDWStcZ5ACjGhQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPuKbM7D KNphwWCRjwPTvSv034tyMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI4ODAvMUY1MTE4QTRBMkVGMTFFOTlENEUwQTVCQzRGOUFFMDIvMDg1M0MxM0NB MkYwMTFFOUI3MjE3OTVDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ40GMA8EAgACMAkDBwEkBQjAAAAwDQYJKoZIhvcNAQELBQADggEB AHoEDj/qQl4yrcKLeuckjZx2B54Ya3GWG0cwLRjofxm+ebhWrKtqhvQE0d7TMGLz 4Vq0jJDDXXqUhI8k6OrjlYFdFw8po4otqFoAeLsFXrT8o7Zx7Pjkj0T/Aqmfpt3r I1z60kAH9Uaw3+r5B5GyoQAyf3sF7B0pLQ5A3yxWsZdfOAIAZI0ObanJSB6ifDHk 7wKujcgddHMEqwqxbhfYR0PwOnTu9pA/zU+Q6fSCroA+ZqHCtmpmvn4GJHl4xGzt Rzg2IE8mcV/o5a6O2ZU/hkiKjVF5W9PpDPmARLHBGVLxTe+rcZhD9XYe2YLg+7Sa JaH4dCi/yrP9hprz3aRkNwE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:22 2026 by rpki-client