$ rpki-client -vvf rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/CD4CD0B654F311E7AC64ED3AC4F9AE02.roa File: CD4CD0B654F311E7AC64ED3AC4F9AE02.roa (raw, json) Hash identifier: VKFgeV6Rmc+Rc92uXlIsfsO0P5v537kl0ZBvVM5G0V8= Subject key identifier: C1:69:AD:AE:14:15:F8:D4:54:2C:F4:93:FF:42:C0:FE:B1:0F:95:AC Certificate issuer: /CN=A915E005/serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484 Certificate serial: 2295 Authority key identifier: E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/CD4CD0B654F311E7AC64ED3AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:32:53 +0000 ROA not before: Tue 20 Jan 2026 16:13:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133923 IP address blocks: 103.48.88.0/24 maxlen: 24 103.212.64.0/23 maxlen: 24 2001:df2:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8853 (0x2295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E005, serialNumber=E02BEEE88D835BD0E4254CA08D7C03BC57197484 Validity Not Before: Jan 20 16:13:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44e15-04aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:0e:b7:f2:cc:00:30:4b:2d:47:f9:27:2a: e4:53:5a:0c:a7:a3:d4:b7:ad:56:07:69:48:f9:10: cb:d3:c6:1d:d9:20:33:6d:12:e9:46:90:52:87:77: f4:af:e7:4d:ca:b6:66:78:10:0e:bb:d8:97:64:d2: b2:b1:e7:9a:18:9d:b7:ae:14:61:61:fa:a5:d5:86: 35:06:63:4f:94:9c:9f:6f:73:36:bb:46:9c:30:1b: 1b:53:62:ce:ba:18:3a:72:c0:9b:34:1e:3e:a5:44: 53:a4:49:2b:ea:b2:04:24:45:8a:b1:12:9e:bb:65: 8c:ec:fc:ed:ca:56:ea:25:92:54:cf:55:ce:76:05: 4b:f9:4e:c1:19:ca:87:1a:3c:57:54:16:56:3c:72: ae:83:13:4d:c1:08:cd:a6:24:1f:cf:78:2a:b6:37: 6c:d8:d7:8d:8c:a8:1b:27:96:eb:aa:9f:28:42:d6: 92:01:bf:f4:1f:99:95:69:7a:bd:2a:77:96:f9:2e: 38:22:6e:78:d1:ea:09:53:35:d6:50:96:0a:5e:7c: 1e:be:15:37:63:aa:56:c8:d2:94:98:bf:cd:e1:85: 87:99:a3:8b:cf:1e:96:d8:d6:ce:4b:9b:48:8e:79: 2b:7f:26:6a:c1:42:2a:0a:ea:9a:4f:90:63:13:9e: 2b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:69:AD:AE:14:15:F8:D4:54:2C:F4:93:FF:42:C0:FE:B1:0F:95:AC X509v3 Authority Key Identifier: keyid:E0:2B:EE:E8:8D:83:5B:D0:E4:25:4C:A0:8D:7C:03:BC:57:19:74:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Cvu6I2DW9DkJUygjXwDvFcZdIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E005/9BE781FEC69911E5B0AFE54EC4F9AE02/CD4CD0B654F311E7AC64ED3AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.88.0/24 103.212.64.0/23 IPv6: 2001:df2:1400::/48 Signature Algorithm: sha256WithRSAEncryption 42:e4:e7:14:3d:71:d6:f6:0e:8e:02:00:26:37:e8:bf:64:82: a0:bb:21:4b:b2:5f:5e:29:e9:e4:a9:e0:73:83:77:b6:e1:6f: 8e:0a:ad:7e:6b:4f:a5:d2:b5:01:bd:17:c6:b9:72:dd:45:8e: ae:6c:3d:56:ab:50:2c:40:46:75:92:d5:79:33:0d:b7:b3:d9: 53:a6:81:5e:d5:de:1d:79:05:f5:ad:22:fa:50:52:b8:27:42: 02:40:da:26:67:ce:9d:81:e5:ce:a1:d0:ef:8d:6a:96:61:e3: 01:c7:50:19:96:56:2b:59:8d:ba:93:84:85:58:78:b0:25:37: 1b:43:de:1a:2f:e1:af:ec:76:7f:cd:5c:cd:15:50:44:5a:dc: b9:2c:c9:e5:b9:5c:f6:21:f3:b2:77:c8:b7:bc:b3:12:32:b4: 17:0e:f9:ed:7c:ba:e6:ea:40:c9:f2:eb:34:fa:6c:53:e6:0f: bc:fe:f5:c1:0c:f4:5a:ec:51:4f:ff:85:73:d3:3a:f0:aa:74: 03:9d:5e:ab:81:03:d0:87:65:59:32:1c:14:a6:2d:7b:ca:36: 5b:00:f6:4f:5b:52:bf:a7:1d:20:10:de:5b:c6:e6:c2:71:f0: 80:dc:61:73:ac:d3:3a:0b:26:9a:01:00:7f:d6:bf:8c:03:76: 30:e9:44:ad -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICIpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUwMDUxMTAvBgNVBAUTKEUwMkJFRUU4OEQ4MzVCRDBFNDI1NENBMDhEN0MwM0JD NTcxOTc0ODQwHhcNMjYwMTIwMTYxMzE0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGUxNS0wNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuakOt/LMADBLLUf5JyrkU1oMp6PUt61WB2lI+RDL08Yd2SAzbRLpRpBSh3f0 r+dNyrZmeBAOu9iXZNKyseeaGJ23rhRhYfql1YY1BmNPlJyfb3M2u0acMBsbU2LO uhg6csCbNB4+pURTpEkr6rIEJEWKsRKeu2WM7PztylbqJZJUz1XOdgVL+U7BGcqH GjxXVBZWPHKugxNNwQjNpiQfz3gqtjds2NeNjKgbJ5brqp8oQtaSAb/0H5mVaXq9 KneW+S44Im540eoJUzXWUJYKXnwevhU3Y6pWyNKUmL/N4YWHmaOLzx6W2NbOS5tI jnkrfyZqwUIqCuqaT5BjE54rKQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMFpra4U FfjUVCz0k/9CwP6xD5WsMB8GA1UdIwQYMBaAFOAr7uiNg1vQ5CVMoI18A7xXGXSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTAwNS85QkU3ODFGRUM2 OTkxMUU1QjBBRkU1NEVDNEY5QUUwMi80Q3Z1NkkyRFc5RGtKVXlnalh3RHZGY1pk SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDdnU2STJEVzlEa0pVeWdqWHdEdkZjWmRJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUwMDUvOUJFNzgxRkVDNjk5MTFFNUIwQUZFNTRFQzRGOUFFMDIvQ0Q0Q0QwQjY1 NEYzMTFFN0FDNjRFRDNBQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZzBYAwQBZ9RAMA8EAgACMAkDBwAgAQ3yFAAwDQYJKoZIhvcNAQEL BQADggEBAELk5xQ9cdb2Do4CACY36L9kgqC7IUuyX14p6eSp4HODd7bhb44KrX5r T6XStQG9F8a5ct1Fjq5sPVarUCxARnWS1XkzDbez2VOmgV7V3h15BfWtIvpQUrgn QgJA2iZnzp2B5c6h0O+NapZh4wHHUBmWVitZjbqThIVYeLAlNxtD3hov4a/sdn/N XM0VUERa3LksyeW5XPYh87J3yLe8sxIytBcO+e18uubqQMny6zT6bFPmD7z+9cEM 9FrsUU//hXPTOvCqdAOdXquBA9CHZVkyHBSmLXvKNlsA9k9bUr+nHSAQ3lvG5sJx 8IDcYXOs0zoLJpoBAH/Wv4wDdjDpRK0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:34:57 2026 by rpki-client