$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4020FFBCF80111ECAC7ADB0CC4F9AE02.roa File: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (raw, json) Hash identifier: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E= Subject key identifier: 9C:D3:3E:B2:C1:9A:62:B1:CD:54:54:1B:BF:BF:17:75:52:64:98:C6 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0AFB Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4020FFBCF80111ECAC7ADB0CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:36:08 +0000 ROA not before: Sat 08 Nov 2025 19:40:21 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17907 IP address blocks: 103.28.160.0/24 maxlen: 24 2401:380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Nov 8 19:40:21 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48717-572c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:8f:bc:c5:60:d9:1e:98:81:84:62:37:a9: 85:a3:f9:24:be:90:92:41:58:94:6e:46:26:4f:ef: c5:af:ad:d8:14:8a:b7:04:1e:5a:16:19:d3:7c:3b: 91:b0:b5:ba:51:4e:75:23:53:4f:3c:30:bc:b4:4f: bd:fc:c6:6d:24:fc:ad:4a:be:2c:d7:72:3e:ef:7f: 79:b6:97:26:97:9b:26:d2:a9:13:1a:94:22:e8:f1: cc:82:a6:3e:94:a6:e8:bb:55:2f:75:d1:d8:31:87: 94:82:16:6b:f4:dc:79:d7:51:cb:20:f6:d7:21:e8: 56:28:ea:59:7f:af:47:d5:f7:de:aa:07:88:90:1a: 55:dd:db:1e:f0:11:73:cb:4d:7e:36:36:81:f1:ce: 50:eb:fa:32:30:3e:b1:1c:84:ae:15:fb:15:74:1a: 51:5c:65:c3:d0:48:6d:9d:24:0a:27:a2:d1:14:fb: c8:34:04:80:68:60:8e:b5:ac:55:48:68:22:86:09: 70:25:9a:49:51:d3:0f:d8:0f:2d:d7:ef:22:73:b4: 24:ba:5f:e9:6e:b7:66:e7:66:5a:c6:6e:52:97:83: 05:61:53:80:64:dc:35:56:3f:35:bb:75:f5:86:e9: 9d:71:bc:0f:bf:0f:7a:49:86:e9:64:d3:a0:df:d2: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:3E:B2:C1:9A:62:B1:CD:54:54:1B:BF:BF:17:75:52:64:98:C6 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4020FFBCF80111ECAC7ADB0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.160.0/24 IPv6: 2401:380::/32 Signature Algorithm: sha256WithRSAEncryption 96:d2:67:87:43:b7:4d:ed:e7:b9:72:2b:f4:a8:68:92:f4:d5: f4:42:3f:5d:fd:ea:80:07:18:91:63:47:f7:41:45:e0:cf:d0: e1:30:2e:f3:c4:eb:74:b6:b7:18:bb:27:a6:03:98:e9:62:f8: ae:3d:86:8c:52:b7:47:2c:b0:08:a3:2b:ad:fb:fa:27:b0:11: bd:1a:d3:2e:22:6c:64:2f:a7:94:e7:11:42:eb:d9:b4:dc:9a: c8:2b:2c:25:5f:1b:cb:b8:34:4e:fa:1b:56:62:3f:7f:5f:18: 93:d9:c6:42:71:6d:ff:4c:c9:d7:4c:98:0a:65:dd:66:8f:50: 39:ac:7d:26:3e:59:4a:65:bf:bc:80:a8:53:00:25:e0:a9:7f: 1f:e9:b2:44:92:61:f9:20:9a:34:bb:36:2a:d5:f5:1b:f1:a6: 22:cf:73:31:ae:74:79:07:49:ac:19:f5:80:7a:94:ff:be:d9: d4:bf:8a:f5:72:1f:f9:89:0e:72:bb:94:97:00:66:b6:09:ec: 0c:92:52:6f:bd:b6:09:33:87:ba:41:b9:d0:b2:77:53:7a:1f: 98:e6:e8:f8:59:04:db:be:d1:59:ef:0c:1a:37:21:db:3a:3c: ea:11:85:d3:50:49:62:85:95:d4:5f:f1:9d:ba:5d:fc:a8:59: 6b:9c:4d:f8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjUxMTA4MTk0MDIxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODcxNy01NzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNKPvMVg2R6YgYRiN6mFo/kkvpCSQViUbkYmT+/Fr63YFIq3BB5aFhnTfDuR sLW6UU51I1NPPDC8tE+9/MZtJPytSr4s13I+7395tpcml5sm0qkTGpQi6PHMgqY+ lKbou1UvddHYMYeUghZr9Nx511HLIPbXIehWKOpZf69H1ffeqgeIkBpV3dse8BFz y01+NjaB8c5Q6/oyMD6xHISuFfsVdBpRXGXD0EhtnSQKJ6LRFPvINASAaGCOtaxV SGgihglwJZpJUdMP2A8t1+8ic7Qkul/pbrdm52Zaxm5Sl4MFYVOAZNw1Vj81u3X1 humdcbwPvw96SYbpZNOg39K6UQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJzTPrLB mmKxzVRUG7+/F3VSZJjGMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvNDAyMEZGQkNG ODAxMTFFQ0FDN0FEQjBDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZxygMA0EAgACMAcDBQAkAQOAMA0GCSqGSIb3DQEBCwUAA4IBAQCW 0meHQ7dN7ee5civ0qGiS9NX0Qj9d/eqABxiRY0f3QUXgz9DhMC7zxOt0trcYuyem A5jpYviuPYaMUrdHLLAIoyut+/onsBG9GtMuImxkL6eU5xFC69m03JrIKywlXxvL uDRO+htWYj9/XxiT2cZCcW3/TMnXTJgKZd1mj1A5rH0mPllKZb+8gKhTACXgqX8f 6bJEkmH5IJo0uzYq1fUb8aYiz3MxrnR5B0msGfWAepT/vtnUv4r1ch/5iQ5yu5SX AGa2CewMklJvvbYJM4e6QbnQsndTeh+Y5uj4WQTbvtFZ7wwaNyHbOjzqEYXTUEli hZXUX/Gdul38qFlrnE34 -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:25 2026 by rpki-client