$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/C90C4476FBA611E9BA00AB33C4F9AE02.roa File: C90C4476FBA611E9BA00AB33C4F9AE02.roa (raw, json) Hash identifier: 3Xi7wtEGd4JYA4AAv2yv0nPxB/PtZ4h9SU2C5rJNJXI= Subject key identifier: 0D:8D:24:EC:80:01:6B:74:4E:38:07:F2:E4:96:1F:1C:EB:F4:E7:46 Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Certificate serial: 1151 Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/C90C4476FBA611E9BA00AB33C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:09:02 +0000 ROA not before: Thu 12 Feb 2026 17:15:01 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138596 IP address blocks: 103.134.28.0/22 maxlen: 22 103.134.28.0/24 maxlen: 24 103.134.29.0/24 maxlen: 24 103.134.30.0/24 maxlen: 24 103.134.31.0/24 maxlen: 24 2404:5bc0::/32 maxlen: 32 2404:5bc0:10::/48 maxlen: 48 2404:5bc0:20::/48 maxlen: 48 2404:5bc0:30::/48 maxlen: 48 2404:5bc0:40::/48 maxlen: 48 2404:5bc0:50::/48 maxlen: 48 2404:5bc0:60::/48 maxlen: 48 2404:5bc0:70::/48 maxlen: 48 2404:5bc0:80::/48 maxlen: 48 2404:5bc0:90::/48 maxlen: 48 2404:5bc0:200::/40 maxlen: 40 2404:5bc0:200::/64 maxlen: 64 2404:5bc0:400::/48 maxlen: 48 2404:5bc0:401::/48 maxlen: 48 2404:5bc0:402::/48 maxlen: 48 2404:5bc0:403::/48 maxlen: 48 2404:5bc0:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4433 (0x1151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7 Validity Not Before: Feb 12 17:15:01 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a472ad-5f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:ee:5f:e9:f2:53:f1:8a:af:a3:3c:88:d4: ba:3d:91:26:cb:4d:42:10:7d:55:31:5f:54:b7:c4: 01:77:8c:18:0a:14:77:0d:3d:27:e8:43:8b:62:c1: 74:3e:b4:fd:83:fb:ac:fe:20:73:20:46:9f:a5:38: ff:ca:b8:bb:32:db:15:d8:b1:5c:9d:4a:bc:3e:8f: c9:ae:9d:8b:97:cc:28:8e:8b:b4:fb:3e:f5:3c:7c: 7b:96:1c:d8:74:96:06:b3:37:06:a9:cc:41:a0:4d: 14:63:c8:8e:2d:97:7f:ed:f4:fd:06:95:dd:64:75: 2d:2d:91:a1:44:1c:58:03:0e:aa:91:fc:4a:e4:d9: 1a:f0:0c:74:dc:f4:c7:81:49:fe:94:77:c4:28:b9: 7e:83:d7:f7:bd:57:60:ad:95:a5:ef:c3:d8:3e:93: 21:59:dc:d2:34:2e:ec:6c:93:a4:4e:be:1a:80:8e: 32:e0:af:4a:18:f5:b7:58:c4:15:24:e5:cd:0c:cd: 73:b7:97:05:72:dd:8c:ad:35:b2:41:27:30:91:00: 2f:97:4f:5c:d4:f7:c7:f6:93:21:d4:2c:4d:6d:e3: 5c:0e:47:07:f2:2a:85:0e:8a:a7:d9:94:94:5a:a9: eb:10:4e:ff:9f:b0:e5:7b:17:d3:24:9c:93:27:53: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8D:24:EC:80:01:6B:74:4E:38:07:F2:E4:96:1F:1C:EB:F4:E7:46 X509v3 Authority Key Identifier: keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/C90C4476FBA611E9BA00AB33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.28.0/22 IPv6: 2404:5bc0::/32 Signature Algorithm: sha256WithRSAEncryption 60:a8:3f:8f:3e:c5:27:81:1a:80:61:b6:bd:9d:1c:5d:12:d2: cd:ba:4e:33:cf:f2:92:95:15:fa:ae:3e:85:e5:58:3b:fb:db: ea:d5:eb:c1:ed:5f:2c:88:82:70:0c:42:71:f6:ec:65:4b:e5: 65:9c:aa:ef:9c:c2:f3:aa:45:ec:df:db:63:34:fa:81:70:18: c3:dc:6d:af:ec:94:9b:9c:25:96:dc:40:16:ba:ef:74:e0:b2: fc:92:88:62:54:6f:d2:6b:82:97:ed:15:0a:7d:bd:e4:db:3f: cd:5e:49:66:5b:9b:2c:ba:f3:ca:72:60:1b:7e:b3:da:a2:49: df:63:a0:76:c2:1f:a3:a6:8a:39:73:ba:7d:2d:ea:eb:9d:9b: 7e:53:7c:6a:14:52:9e:1f:45:38:db:9e:1f:6d:7e:12:5e:8c: 93:c1:e0:fb:a5:f2:e9:1a:08:4e:64:62:36:61:23:53:ec:11: 0f:d9:7f:cd:f0:66:9b:64:d7:41:63:e1:ac:e4:6d:2c:65:c3: ab:36:ca:65:db:5d:d6:0d:33:fa:41:2e:57:7c:77:b8:62:aa: 13:c5:4f:31:62:73:53:60:dd:7d:16:04:34:40:43:a0:23:18: 32:44:ed:c3:9f:bd:03:51:bc:9c:44:91:c1:12:11:65:c7:3e: 12:c7:84:38 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICEVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1 MTlDQjE5QzcwHhcNMjYwMjEyMTcxNTAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzJhZC01ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBfuX+nyU/GKr6M8iNS6PZEmy01CEH1VMV9Ut8QBd4wYChR3DT0n6EOLYsF0 PrT9g/us/iBzIEafpTj/yri7MtsV2LFcnUq8Po/Jrp2Ll8wojou0+z71PHx7lhzY dJYGszcGqcxBoE0UY8iOLZd/7fT9BpXdZHUtLZGhRBxYAw6qkfxK5Nka8Ax03PTH gUn+lHfEKLl+g9f3vVdgrZWl78PYPpMhWdzSNC7sbJOkTr4agI4y4K9KGPW3WMQV JOXNDM1zt5cFct2MrTWyQScwkQAvl09c1PfH9pMh1CxNbeNcDkcH8iqFDoqn2ZSU WqnrEE7/n7DlexfTJJyTJ1OJPQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFA2NJOyA AWt0TjgH8uSWHxzr9OdGMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4 NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJBMjgvQTQ3RDIwMjgyODU1MTFFOUFEMzgxMTUxQzRGOUFFMDIvQzkwQzQ0NzZG QkE2MTFFOUJBMDBBQjMzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4YcMA0EAgACMAcDBQAkBFvAMA0GCSqGSIb3DQEBCwUAA4IBAQBg qD+PPsUngRqAYba9nRxdEtLNuk4zz/KSlRX6rj6F5Vg7+9vq1evB7V8siIJwDEJx 9uxlS+VlnKrvnMLzqkXs39tjNPqBcBjD3G2v7JSbnCWW3EAWuu904LL8kohiVG/S a4KX7RUKfb3k2z/NXklmW5ssuvPKcmAbfrPaoknfY6B2wh+jpoo5c7p9LerrnZt+ U3xqFFKeH0U4254fbX4SXoyTweD7pfLpGghOZGI2YSNT7BEP2X/N8GabZNdBY+Gs 5G0sZcOrNspl213WDTP6QS5XfHe4YqoTxU8xYnNTYN19FgQ0QEOgIxgyRO3Dn70D UbycRJHBEhFlxz4Sx4Q4 -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:22 2026 by rpki-client