$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/50998080BCE911EAA0114B70C4F9AE02.roa File: 50998080BCE911EAA0114B70C4F9AE02.roa (raw, json) Hash identifier: BqSvuHBJnIFo2nza0v/IBlEcyJ06tW+FBomYs647wGg= Subject key identifier: 82:3C:57:35:83:24:24:63:B0:88:F7:52:6B:83:43:A5:99:FE:E7:6C Certificate issuer: /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E Certificate serial: 0943 Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/50998080BCE911EAA0114B70C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:03:09 +0000 ROA not before: Sun 02 Nov 2025 20:39:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132827 IP address blocks: 43.229.240.0/22 maxlen: 22 103.5.249.0/24 maxlen: 24 103.13.45.0/24 maxlen: 24 103.13.46.0/24 maxlen: 24 103.30.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2371 (0x943) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E Validity Not Before: Nov 2 20:39:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4714d-cfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:27:40:50:7f:6e:90:42:5f:b0:45:3f:89: 36:26:ce:c7:1c:fc:d3:79:27:06:2f:be:bf:b7:db: 03:61:89:d2:a7:52:64:60:27:f0:7b:c8:98:a2:f8: a8:f2:28:84:cc:d5:a5:5f:7f:5a:b7:d7:05:61:ba: 6e:83:45:32:f1:f7:a6:42:62:d5:58:9f:0f:2a:d1: 19:1a:d7:ce:dd:7b:fc:60:a9:bd:2b:03:c0:9b:ee: fa:a0:e1:4e:19:ae:c7:89:be:2b:95:39:af:09:1f: 4b:cb:b4:36:e9:40:76:af:40:73:f6:24:fe:f5:76: 46:89:52:ad:af:62:96:15:1a:6b:c2:86:b3:da:10: a9:55:0e:66:6c:df:5e:94:a0:e5:33:80:14:5b:f6: 47:9c:e1:76:0e:d1:28:92:d0:61:50:75:3d:a2:3b: 54:e6:f1:c7:6b:0c:da:87:f7:7c:10:05:ef:d6:ec: 3b:3c:15:47:9d:e5:5f:93:3d:72:69:b1:4a:48:cf: 3a:e2:f4:15:37:84:88:cb:a8:40:f7:14:39:98:79: 50:8e:8c:21:02:fd:3f:07:02:88:04:92:60:6a:d8: 47:19:f3:90:c4:19:a2:52:1f:ed:43:f4:45:54:ba: 94:2d:61:cc:ad:d0:c7:ca:fa:58:fa:88:57:05:9c: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:3C:57:35:83:24:24:63:B0:88:F7:52:6B:83:43:A5:99:FE:E7:6C X509v3 Authority Key Identifier: keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/50998080BCE911EAA0114B70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.229.240.0/22 103.5.249.0/24 103.13.45.0-103.13.46.255 103.30.52.0/22 Signature Algorithm: sha256WithRSAEncryption d8:d7:59:19:ee:de:01:bd:82:05:ef:0f:5f:79:25:e4:96:fb: 65:a3:f7:87:31:5e:14:e9:24:52:89:c1:22:28:72:60:c6:fd: f9:fb:c4:07:f0:f7:0b:72:8a:c9:b0:f0:21:33:bf:71:3d:24: 2a:72:41:61:32:b7:29:82:c2:4d:62:dc:2b:ea:c6:6f:05:ee: 4a:82:9e:49:b0:13:d7:3a:fa:1a:2c:64:1c:60:1e:ff:3e:09: a8:db:c5:f1:06:e6:de:dd:59:61:81:16:e2:03:cb:a7:70:b8: 39:23:be:f4:57:79:34:1d:c9:02:cd:22:69:3b:4c:e8:95:88: ec:2e:cb:f3:e2:4e:6e:78:35:a0:35:ab:fe:ad:13:31:ea:60: 5c:e6:af:28:7e:b5:ea:48:3f:54:3d:86:63:77:eb:a6:30:69: cd:43:95:17:72:84:48:08:f7:2c:c4:24:fd:2a:16:66:4a:6a: e1:9c:d1:04:d2:a9:89:1e:3f:b0:1a:62:fe:2d:5a:00:a5:33: 55:cf:86:ba:1b:7c:17:e1:80:85:a7:03:38:90:73:a4:57:d6: 54:cf:86:1f:1c:86:93:1a:34:6c:b9:00:40:85:2b:29:41:0f: d3:c8:24:ca:b2:de:e1:18:4b:53:dd:87:f2:4a:c0:80:d8:6f: 91:d8:4f:6b -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICCUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDOTcxMTAvBgNVBAUTKDgxOEI4MTIyOTU0NkY2NEE5ODBDM0Q4NkVDNTJGMzEx OTRGMkZEOEUwHhcNMjUxMTAyMjAzOTUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzE0ZC1jZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjuQnQFB/bpBCX7BFP4k2Js7HHPzTeScGL76/t9sDYYnSp1JkYCfwe8iYovio 8iiEzNWlX39at9cFYbpug0Uy8femQmLVWJ8PKtEZGtfO3Xv8YKm9KwPAm+76oOFO Ga7Hib4rlTmvCR9Ly7Q26UB2r0Bz9iT+9XZGiVKtr2KWFRprwoaz2hCpVQ5mbN9e lKDlM4AUW/ZHnOF2DtEoktBhUHU9ojtU5vHHawzah/d8EAXv1uw7PBVHneVfkz1y abFKSM864vQVN4SIy6hA9xQ5mHlQjowhAv0/BwKIBJJgathHGfOQxBmiUh/tQ/RF VLqULWHMrdDHyvpY+ohXBZxrcwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFII8VzWD JCRjsIj3UmuDQ6WZ/udsMB8GA1UdIwQYMBaAFIGLgSKVRvZKmAw9huxS8xGU8v2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkM5Ny9BMEIxRTQ0Q0JD RTcxMUVBOUVERjNFNkRDNEY5QUUwMi9nWXVCSXBWRzlrcVlERDJHN0ZMekVaVHlf WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZdUJJcFZHOWtxWUREMkc3Rkx6RVpUeV9ZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkJDOTcvQTBCMUU0NENCQ0U3MTFFQTlFREYzRTZEQzRGOUFFMDIvNTA5OTgwODBC Q0U5MTFFQUEwMTE0QjcwQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCK+XwAwQAZwX5MAwDBABnDS0DBABnDS4DBAJnHjQwDQYJKoZIhvcN AQELBQADggEBANjXWRnu3gG9ggXvD195JeSW+2Wj94cxXhTpJFKJwSIocmDG/fn7 xAfw9wtyismw8CEzv3E9JCpyQWEytymCwk1i3Cvqxm8F7kqCnkmwE9c6+hosZBxg Hv8+CajbxfEG5t7dWWGBFuIDy6dwuDkjvvRXeTQdyQLNImk7TOiViOwuy/PiTm54 NaA1q/6tEzHqYFzmryh+tepIP1Q9hmN366Ywac1DlRdyhEgI9yzEJP0qFmZKauGc 0QTSqYkeP7AaYv4tWgClM1XPhrobfBfhgIWnAziQc6RX1lTPhh8chpMaNGy5AECF KylBD9PIJMqy3uEYS1Pdh/JKwIDYb5HYT2s= -----END CERTIFICATE-----Generated at Mon Mar 2 12:20:15 2026 by rpki-client