$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/998B917421DA11EBAA441F75C4F9AE02.roa File: 998B917421DA11EBAA441F75C4F9AE02.roa (raw, json) Hash identifier: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk= Subject key identifier: 1D:0D:C4:AC:4E:F3:A5:88:FD:49:27:8D:BC:20:0F:84:B5:07:E0:57 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0CED Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/998B917421DA11EBAA441F75C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:40:22 +0000 ROA not before: Wed 31 Dec 2025 18:16:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138538 IP address blocks: 103.145.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3309 (0xced) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Dec 31 18:16:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47a06-c9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:f7:b5:06:c5:86:b2:0e:60:aa:e2:42:13: 30:99:84:81:fb:51:3b:98:43:53:e5:30:46:6b:a3: 29:5d:b1:6d:88:40:b5:3b:3c:9e:69:28:96:e0:91: 3a:53:19:08:71:52:74:85:45:6a:b2:72:b5:62:3a: 79:8e:26:b4:cd:b2:5b:a9:53:17:f3:25:22:cb:9c: 30:44:d6:bf:a6:04:74:27:12:00:2d:fd:75:c3:95: 6c:71:05:6c:66:6b:08:2a:7f:21:e8:49:fb:74:26: 55:54:ef:b5:17:51:fd:f9:35:df:96:40:77:b9:61: 86:d5:8f:fe:b4:e2:4c:11:e3:61:67:8e:1d:72:e8: 07:cd:41:3e:99:06:3e:91:cc:77:db:fa:69:1d:0f: 2e:14:0e:5e:5c:98:dc:62:7f:51:e2:9a:e1:9c:49: 44:fc:1b:33:8e:ed:6c:25:59:08:7a:54:b8:36:d3: 81:1c:62:1a:c5:58:3e:53:91:0b:08:ef:96:d0:e8: 79:3f:7f:0b:69:41:b2:bb:60:52:0a:b7:45:fc:f6: 97:b4:6a:6c:7d:26:0b:08:a6:9a:13:a8:62:1e:40: 5d:07:1d:2f:97:9f:7b:8d:92:1a:7b:0a:e8:f7:b9: 09:0d:77:d8:d0:dd:a5:7e:7a:c0:c0:95:17:1a:b5: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0D:C4:AC:4E:F3:A5:88:FD:49:27:8D:BC:20:0F:84:B5:07:E0:57 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/998B917421DA11EBAA441F75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.145.38.0/23 Signature Algorithm: sha256WithRSAEncryption ec:aa:23:20:26:7c:3f:ea:35:a0:16:0e:bc:a2:8a:78:85:9e: 4c:9a:d3:de:95:a3:f6:f3:47:ae:27:70:80:17:ab:55:f4:bc: 42:0b:73:0d:dd:c0:21:a5:fa:63:d6:73:0d:3c:37:0e:44:0e: ce:f6:ba:8b:93:de:63:50:b6:6f:e3:cc:c6:54:af:20:70:68: 3b:0a:fa:a6:17:08:f3:88:65:1c:fb:8d:a5:ea:60:1c:f7:c0: 6c:e5:f6:b7:91:c3:e7:48:2f:fc:7d:dc:6e:17:36:e8:27:a6: 5c:23:b2:67:6a:11:d0:16:48:be:c8:f3:e7:0c:cd:8a:75:57: 7c:a8:3c:07:0b:f9:c5:4b:a1:bc:6a:9d:ae:67:cf:02:e3:04: 13:b0:fb:e6:ba:3d:1a:e9:91:97:12:94:74:df:f2:ad:d7:ab: 5d:a7:06:bb:95:65:e6:27:ee:fd:5f:70:fa:dd:70:7f:63:66: 6d:19:d3:07:b8:14:55:ab:8b:eb:d3:6e:1f:1d:f0:ba:e3:6e: 98:3c:7a:dc:94:2f:16:8b:dd:f0:d3:04:be:16:bc:8a:ba:b9: 5b:65:3a:98:95:0a:a2:ed:4b:d7:26:a2:91:c3:fd:18:32:01: 7d:d7:24:06:ab:eb:8f:88:b2:d7:01:0c:96:09:35:f9:de:2d: 66:07:59:c2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUxMjMxMTgxNjEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2EwNi1jOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr373tQbFhrIOYKriQhMwmYSB+1E7mENT5TBGa6MpXbFtiEC1OzyeaSiW4JE6 UxkIcVJ0hUVqsnK1Yjp5jia0zbJbqVMX8yUiy5wwRNa/pgR0JxIALf11w5VscQVs ZmsIKn8h6En7dCZVVO+1F1H9+TXflkB3uWGG1Y/+tOJMEeNhZ44dcugHzUE+mQY+ kcx32/ppHQ8uFA5eXJjcYn9R4prhnElE/Bszju1sJVkIelS4NtOBHGIaxVg+U5EL CO+W0Oh5P38LaUGyu2BSCrdF/PaXtGpsfSYLCKaaE6hiHkBdBx0vl597jZIaewro 97kJDXfY0N2lfnrAwJUXGrVXiwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB0NxKxO 86WI/UknjbwgD4S1B+BXMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUJGREEvNjgxMjdFMjAwRjRCMTFFQUFEQTM3OTc3QzRGOUFFMDIvOTk4QjkxNzQy MURBMTFFQkFBNDQxRjc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5EmMA0GCSqGSIb3DQEBCwUAA4IBAQDsqiMgJnw/6jWgFg68oop4 hZ5MmtPelaP280euJ3CAF6tV9LxCC3MN3cAhpfpj1nMNPDcORA7O9rqLk95jULZv 48zGVK8gcGg7CvqmFwjziGUc+42l6mAc98Bs5fa3kcPnSC/8fdxuFzboJ6ZcI7Jn ahHQFki+yPPnDM2KdVd8qDwHC/nFS6G8ap2uZ88C4wQTsPvmuj0a6ZGXEpR03/Kt 16tdpwa7lWXmJ+79X3D63XB/Y2ZtGdMHuBRVq4vr024fHfC6426YPHrclC8Wi93w 0wS+FryKurlbZTqYlQqi7UvXJqKRw/0YMgF91yQGq+uPiLLXAQyWCTX53i1mB1nC -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:21 2026 by rpki-client