$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6535FEC0345C11F0B4126F3CC4F9AE02.roa File: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (raw, json) Hash identifier: RI3k7jd5Py+4n5PpztOSlnf146C3FanWcnH9vVZTti4= Subject key identifier: E4:0F:7E:C9:ED:DC:60:0B:16:3D:27:D7:A4:62:7B:F4:5F:BA:F6:8D Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Certificate serial: 08B9 Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6535FEC0345C11F0B4126F3CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:58:04 +0000 ROA not before: Sat 24 May 2025 18:43:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59332 IP address blocks: 103.228.0.0/23 maxlen: 23 103.228.0.0/24 maxlen: 24 103.228.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2233 (0x8b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42 Validity Not Before: May 24 18:43:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48c3b-f220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:18:91:1b:b6:a9:a9:42:a9:07:0a:6c:81:fb: d2:66:8a:ac:a8:79:e1:be:90:51:8b:8e:0e:bf:aa: dc:1b:01:1a:27:60:28:50:e6:f2:1e:07:6f:9e:7d: 6c:89:a6:eb:57:f4:19:53:83:6b:3b:db:8e:ef:08: 2a:28:8f:11:fb:63:e2:5c:7b:d1:13:74:57:0f:d7: ca:ec:9f:0f:ac:f3:9a:4a:20:66:30:2e:64:44:e8: 7b:8b:fe:ff:fd:74:45:e0:02:28:85:fd:6f:d3:64: 75:9d:75:8a:c4:cf:79:1d:4a:74:86:a4:41:ac:3e: 6e:85:c9:67:9a:3d:76:ea:15:da:19:b4:1f:0d:32: 14:84:7e:04:8b:cb:cb:f5:fd:7a:94:79:d0:f4:21: fa:85:20:dc:d2:74:39:a4:16:aa:2c:1c:a9:10:fa: 1e:9c:80:70:e2:41:51:9a:0e:bf:6b:49:f7:db:59: 66:1d:8d:53:c8:b5:a5:f3:56:35:90:ba:57:92:19: bd:e9:f1:3d:a2:ce:2c:11:c1:66:aa:21:2e:5f:97: 89:e9:d2:bb:b2:14:4c:60:47:ea:ad:70:de:ab:43: f2:d9:40:f4:21:65:96:93:1c:ac:07:68:0c:cb:a8: 18:b3:f9:88:5d:93:e7:f6:2a:fe:d4:35:dd:59:41: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:7E:C9:ED:DC:60:0B:16:3D:27:D7:A4:62:7B:F4:5F:BA:F6:8D X509v3 Authority Key Identifier: keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/6535FEC0345C11F0B4126F3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.0.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:20:93:be:c1:97:d9:d1:a7:33:6b:b2:f2:35:75:6e:61:95: 54:1d:7c:60:17:48:b1:40:78:8a:05:34:c4:de:bd:76:a4:82: e2:fe:87:bd:d9:28:2e:cb:77:11:49:73:4e:44:88:da:37:9c: df:43:b9:f8:86:42:68:9b:9e:c5:51:60:dd:23:4c:4e:4c:86: 35:14:51:22:c4:eb:31:ef:c6:ab:30:b7:98:2f:9e:b0:7c:5d: e7:f0:bd:b9:ed:cc:35:4a:99:61:13:da:fb:89:44:21:a7:3f: c8:e8:af:de:c7:5a:58:cb:27:20:ab:45:af:68:f0:f9:a3:e0: 6a:b3:70:b9:1a:87:5c:3d:e4:71:36:ed:c8:46:1e:7b:e9:b5: 08:0d:a3:49:f5:3f:87:ac:5e:81:6c:76:c0:5c:22:00:db:c2: 84:84:4b:a4:07:b2:5e:df:d6:5d:e1:dc:fa:2e:20:fc:49:0a: 6a:35:fd:d8:d6:67:50:14:cb:d2:16:f9:3f:a6:20:a1:0a:ac: 2d:e6:a5:4f:48:e9:30:75:50:63:98:4a:bf:d9:9a:4d:48:9e: d0:fb:34:49:83:e3:46:7b:62:cd:69:8b:20:2c:f3:7b:54:a1: 3b:dd:55:ff:8f:8a:ed:92:35:e8:5d:86:87:ec:e6:3a:a7:ca: d1:66:84:ad -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5 OUJFMDBENDIwHhcNMjUwNTI0MTg0MzA0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGMzYi1mMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRiRG7apqUKpBwpsgfvSZoqsqHnhvpBRi44Ov6rcGwEaJ2AoUObyHgdvnn1s iabrV/QZU4NrO9uO7wgqKI8R+2PiXHvRE3RXD9fK7J8PrPOaSiBmMC5kROh7i/7/ /XRF4AIohf1v02R1nXWKxM95HUp0hqRBrD5uhclnmj126hXaGbQfDTIUhH4Ei8vL 9f16lHnQ9CH6hSDc0nQ5pBaqLBypEPoenIBw4kFRmg6/a0n321lmHY1TyLWl81Y1 kLpXkhm96fE9os4sEcFmqiEuX5eJ6dK7shRMYEfqrXDeq0Py2UD0IWWWkxysB2gM y6gYs/mIXZPn9ir+1DXdWUHOswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOQPfsnt 3GALFj0n16Rie/RfuvaNMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIwRUEvNEQ4RTQ5QjAwQjc0MTFFQUE1ODQwMDFDQzRGOUFFMDIvNjUzNUZFQzAz NDVDMTFGMEI0MTI2RjNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+QAMA0GCSqGSIb3DQEBCwUAA4IBAQCLIJO+wZfZ0acza7LyNXVu YZVUHXxgF0ixQHiKBTTE3r12pILi/oe92Sguy3cRSXNORIjaN5zfQ7n4hkJom57F UWDdI0xOTIY1FFEixOsx78arMLeYL56wfF3n8L257cw1SplhE9r7iUQhpz/I6K/e x1pYyycgq0WvaPD5o+Bqs3C5GodcPeRxNu3IRh576bUIDaNJ9T+HrF6BbHbAXCIA 28KEhEukB7Je39Zd4dz6LiD8SQpqNf3Y1mdQFMvSFvk/piChCqwt5qVPSOkwdVBj mEq/2ZpNSJ7Q+zRJg+NGe2LNaYsgLPN7VKE73VX/j4rtkjXoXYaH7OY6p8rRZoSt -----END CERTIFICATE-----Generated at Mon Mar 2 19:49:56 2026 by rpki-client