$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa File: F9F53948599011EEB54F7158C4F9AE02.roa (raw, json) Hash identifier: GXFMT6PzwPtBUSZwV4Os9TF+cE8bPf2hVfP0jiPGj7s= Subject key identifier: 14:D0:9E:7E:D4:6A:3C:03:D7:C7:F0:5A:D2:87:51:D0:09:5D:2C:64 Certificate issuer: /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Certificate serial: 01F7 Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:02:27 +0000 ROA not before: Sun 03 Aug 2025 04:41:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 967 IP address blocks: 103.247.28.0/23 maxlen: 24 2401:1fe0::/48 maxlen: 48 2401:1fe0:1::/48 maxlen: 48 2401:1fe0:2::/48 maxlen: 48 2401:1fe0:3::/48 maxlen: 48 2401:1fe0:4::/48 maxlen: 48 2401:1fe0:5::/48 maxlen: 48 2401:1fe0:6::/48 maxlen: 48 2401:1fe0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070 Validity Not Before: Aug 3 04:41:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a438e2-25fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:a2:a9:1e:a0:23:0e:61:c6:36:bf:74:71: e6:cb:fd:be:d3:72:d5:30:bc:82:ec:49:36:fa:6f: ee:4b:a0:ba:46:51:b1:1e:27:07:6b:32:f5:f9:9c: b8:f5:f3:09:6d:83:af:c3:f0:ff:ce:62:ce:52:75: c5:de:69:83:55:77:9c:41:6e:50:d9:2b:59:d1:87: 48:b1:3b:c3:23:ec:7f:7d:04:f0:e0:55:fb:7d:7e: 89:5f:0d:59:ea:56:8a:8e:1c:67:4d:06:4c:96:78: bc:0f:84:31:ac:be:cf:75:ce:f7:f8:d3:f6:78:52: 90:a0:d5:fe:a5:03:ca:dd:cf:0d:36:95:99:5e:d5: ff:20:bc:60:9d:9b:20:8b:54:3e:75:f9:d5:3f:1a: 18:73:16:aa:06:06:3a:18:58:f8:7d:84:3b:39:02: af:6a:5f:2b:88:6f:b5:00:e9:0e:21:a9:da:85:f6: 02:ca:d9:8b:d0:3d:88:16:ee:65:b3:58:85:85:32: 37:87:f9:30:14:d1:20:bd:5c:d6:4e:5c:b4:ec:76: 45:c8:03:37:bb:af:11:6c:16:eb:0b:8e:b3:7a:09: 64:41:d9:9e:2a:c3:e7:c7:b7:c1:13:63:2f:93:1c: 60:e4:d6:21:95:5d:65:60:63:c4:dd:a8:53:fb:03: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:9E:7E:D4:6A:3C:03:D7:C7:F0:5A:D2:87:51:D0:09:5D:2C:64 X509v3 Authority Key Identifier: keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F9F53948599011EEB54F7158C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.247.28.0/23 IPv6: 2401:1fe0::/45 Signature Algorithm: sha256WithRSAEncryption 0a:89:e3:4f:26:04:4c:c9:85:69:57:55:2b:2a:50:93:00:e1: d1:45:d7:d0:3a:8a:30:a8:09:5b:3f:e2:ad:98:f9:ca:16:c0: 89:c4:6a:03:d1:38:93:25:8c:f8:a8:d0:70:59:1b:a5:9d:64: dd:19:d7:41:ad:4f:38:8f:b0:4f:03:74:a1:e8:e9:57:fe:4b: 47:23:d9:30:ee:71:89:81:30:00:de:ad:42:c4:25:1f:b1:5c: 12:33:1b:56:36:02:a1:bf:47:d7:d3:55:9f:60:84:c3:ba:df: ed:88:f4:20:62:a7:77:e2:3e:70:02:be:58:f8:c8:12:95:1a: ae:e6:e0:4f:ce:8f:ab:8e:7c:2f:85:3d:6a:8a:0e:6c:39:6b: 9e:dc:dc:5b:9f:5f:c2:44:1b:12:8c:af:94:10:7f:5c:36:08: 6e:d9:ff:40:16:80:70:45:c5:3b:81:da:d5:be:d6:2f:cb:fd: 15:06:0d:27:f5:e3:40:a5:3b:66:28:5f:be:3a:2e:3b:f3:9e: 23:c7:79:c4:a6:02:9e:bc:2d:07:90:8a:b6:0d:c7:22:02:61: 95:7d:7d:a9:b5:ee:f4:97:b5:97:58:a2:b8:cc:9d:0b:87:71: dc:32:c2:3f:f0:8e:a2:2e:5b:a4:3f:92:9f:a7:30:29:dc:5f: 5b:f0:65:e8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNBMzExMTAvBgNVBAUTKDFFRjMwQzRDNTYwNEE1NkVDQjNFQUVFN0YyQ0E5N0VC NzgxMDUwNzAwHhcNMjUwODAzMDQ0MTM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzhlMi0yNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv+iqR6gIw5hxja/dHHmy/2+03LVMLyC7Ek2+m/uS6C6RlGxHicHazL1+Zy4 9fMJbYOvw/D/zmLOUnXF3mmDVXecQW5Q2StZ0YdIsTvDI+x/fQTw4FX7fX6JXw1Z 6laKjhxnTQZMlni8D4QxrL7Pdc73+NP2eFKQoNX+pQPK3c8NNpWZXtX/ILxgnZsg i1Q+dfnVPxoYcxaqBgY6GFj4fYQ7OQKval8riG+1AOkOIanahfYCytmL0D2IFu5l s1iFhTI3h/kwFNEgvVzWTly07HZFyAM3u68RbBbrC46zeglkQdmeKsPnx7fBE2Mv kxxg5NYhlV1lYGPE3ahT+wMj3wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBTQnn7U ajwD18fwWtKHUdAJXSxkMB8GA1UdIwQYMBaAFB7zDExWBKVuyz6u5/LKl+t4EFBw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0EzMS8wOTBGMTRGQTUw MEMxMUVFODJCMjY4NjNDNEY5QUUwMi9Idk1NVEZZRXBXN0xQcTduOHNxWDYzZ1FV SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNBMzEvMDkwRjE0RkE1MDBDMTFFRTgyQjI2ODYzQzRGOUFFMDIvRjlGNTM5NDg1 OTkwMTFFRUI1NEY3MTU4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ/ccMA8EAgACMAkDBwMkAR/gAAAwDQYJKoZIhvcNAQELBQADggEB AAqJ408mBEzJhWlXVSsqUJMA4dFF19A6ijCoCVs/4q2Y+coWwInEagPROJMljPio 0HBZG6WdZN0Z10GtTziPsE8DdKHo6Vf+S0cj2TDucYmBMADerULEJR+xXBIzG1Y2 AqG/R9fTVZ9ghMO63+2I9CBip3fiPnACvlj4yBKVGq7m4E/Oj6uOfC+FPWqKDmw5 a57c3FufX8JEGxKMr5QQf1w2CG7Z/0AWgHBFxTuB2tW+1i/L/RUGDSf140ClO2Yo X746LjvzniPHecSmAp68LQeQirYNxyICYZV9fam17vSXtZdYorjMnQuHcdwywj/w jqIuW6Q/kp+nMCncX1vwZeg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:02 2026 by rpki-client