$ rpki-client -vvf rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/9F13CA9AC60C11F0BE755750C4F9AE02.roa File: 9F13CA9AC60C11F0BE755750C4F9AE02.roa (raw, json) Hash identifier: +iG+b+thtV5lQCfHtb1cEYm1xLzmmZw7C/WWExiNckM= Subject key identifier: 86:88:E3:A4:11:0F:CA:59:F5:80:62:22:5C:97:A9:84:72:8A:17:73 Certificate issuer: /CN=A916EC8B/serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE Certificate serial: 028F Authority key identifier: 11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/9F13CA9AC60C11F0BE755750C4F9AE02.roa Signing time: Wed 15 Apr 2026 02:33:26 +0000 ROA not before: Wed 15 Apr 2026 02:33:26 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138004 IP address blocks: 103.52.140.0/24 maxlen: 24 103.52.141.0/24 maxlen: 24 103.52.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EC8B, serialNumber=1104CE2C6D91EF9D9A33956F0731D9E23F13AFBE Validity Not Before: Apr 15 02:33:26 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69def8f6-b89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:33:60:c3:09:69:c2:e7:89:55:fa:43:3f: 90:5d:c0:58:96:eb:d8:8c:14:ec:c3:db:38:bd:a8: 1d:dc:b4:92:27:f2:ea:6d:29:c7:2f:77:ba:ca:39: e9:fa:73:cb:89:cc:52:c6:91:3b:df:78:e5:0c:e6: 0a:57:68:2f:24:ae:1e:4e:d8:4d:c6:33:b4:84:ec: 7d:b0:78:ed:25:e5:f5:2f:8e:c0:28:3d:f1:72:3b: 1e:3a:77:0f:7d:ed:eb:f4:66:3a:e8:19:d2:6e:ec: 86:d3:7a:8f:3f:a0:1b:09:22:16:fa:8e:57:51:90: b6:30:64:b0:aa:c9:fa:8b:fe:44:95:8f:e3:ad:27: f8:62:59:ec:14:03:99:9e:88:da:1c:dd:85:19:8b: d9:82:b1:0d:ed:36:24:a0:af:a9:38:ac:2c:4c:e0: 06:02:c7:cc:94:eb:7d:94:20:94:10:6d:c2:23:b3: b2:30:c6:2f:58:91:50:6c:f1:38:35:31:b9:ac:c6: cd:a0:3c:16:3d:b2:da:53:b8:d4:8a:f7:63:c8:0a: 9a:73:e8:f0:8e:51:e7:8a:04:a8:9e:85:9e:44:8b: 99:6b:04:15:87:8c:ad:b1:31:90:32:13:c1:06:a0: f6:d3:f6:22:bf:78:ae:45:1c:f4:33:2c:28:b6:d6: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:88:E3:A4:11:0F:CA:59:F5:80:62:22:5C:97:A9:84:72:8A:17:73 X509v3 Authority Key Identifier: keyid:11:04:CE:2C:6D:91:EF:9D:9A:33:95:6F:07:31:D9:E2:3F:13:AF:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/EQTOLG2R752aM5VvBzHZ4j8Tr74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EQTOLG2R752aM5VvBzHZ4j8Tr74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EC8B/D81D53706FCE11EDBC02945DC4F9AE02/9F13CA9AC60C11F0BE755750C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.52.140.0/23 103.52.143.0/24 Signature Algorithm: sha256WithRSAEncryption 85:fd:d1:38:d8:d8:49:6c:cb:21:43:bd:db:ad:a6:1c:28:5d: 76:3b:0d:2a:eb:b3:76:08:51:dc:3c:86:92:fa:c4:6a:78:7c: 46:e9:50:d5:c0:d9:5f:de:02:42:40:e8:a5:5a:43:c3:27:99: 4b:25:98:1c:d4:29:1b:a0:1e:f9:93:b2:c8:9e:af:c5:a7:75: cb:c8:db:33:51:1a:48:d5:cd:06:91:8a:e0:a6:cf:cf:e2:55: bc:30:e4:cf:45:92:9d:2c:28:7d:a8:1c:15:b3:c6:d0:f4:e9: 1e:10:30:4b:d2:0b:27:02:91:78:83:c8:80:a9:0f:94:72:8b: 2f:2f:ca:58:4f:ef:75:7b:11:6b:ac:d7:0a:f2:3d:2d:e9:4c: 1f:23:b1:83:86:38:95:f4:79:15:4b:f6:2f:03:0b:4a:8c:6b: 12:83:fa:7a:49:b5:36:95:90:8b:3b:3b:d8:4b:ee:20:c4:c5: 66:e6:4f:e9:3d:e9:dc:ce:82:fb:43:48:72:5a:e0:66:bc:70: ed:ce:cd:55:44:2b:68:68:e5:7d:3e:01:03:c2:9b:9a:1f:48: 30:a1:b6:78:4b:f3:80:d7:9f:8b:2a:cf:96:ec:11:87:e5:d7: 85:13:de:5b:f1:85:8a:00:5c:82:b7:75:3e:cd:00:a2:f5:fc: 5d:b6:3b:31 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVDOEIxMTAvBgNVBAUTKDExMDRDRTJDNkQ5MUVGOUQ5QTMzOTU2RjA3MzFEOUUy M0YxM0FGQkUwHhcNMjYwNDE1MDIzMzI2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWRlZjhmNi1iODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhszYMMJacLniVX6Qz+QXcBYluvYjBTsw9s4vagd3LSSJ/LqbSnHL3e6yjnp +nPLicxSxpE733jlDOYKV2gvJK4eTthNxjO0hOx9sHjtJeX1L47AKD3xcjseOncP fe3r9GY66BnSbuyG03qPP6AbCSIW+o5XUZC2MGSwqsn6i/5ElY/jrSf4YlnsFAOZ nojaHN2FGYvZgrEN7TYkoK+pOKwsTOAGAsfMlOt9lCCUEG3CI7OyMMYvWJFQbPE4 NTG5rMbNoDwWPbLaU7jUivdjyAqac+jwjlHnigSonoWeRIuZawQVh4ytsTGQMhPB BqD20/Yiv3iuRRz0MywottYNewIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIaI46QR D8pZ9YBiIlyXqYRyihdzMB8GA1UdIwQYMBaAFBEEzixtke+dmjOVbwcx2eI/E6++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUM4Qi9EODFENTM3MDZG Q0UxMUVEQkMwMjk0NURDNEY5QUUwMi9FUVRPTEcyUjc1MmFNNVZ2QnpIWjRqOFRy NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VRVE9MRzJSNzUyYU01VnZCekhaNGo4VHI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVDOEIvRDgxRDUzNzA2RkNFMTFFREJDMDI5NDVEQzRGOUFFMDIvOUYxM0NBOUFD NjBDMTFGMEJFNzU1NzUwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZzSMAwQAZzSPMA0GCSqGSIb3DQEBCwUAA4IBAQCF/dE42NhJbMsh Q73braYcKF12Ow0q67N2CFHcPIaS+sRqeHxG6VDVwNlf3gJCQOilWkPDJ5lLJZgc 1CkboB75k7LInq/Fp3XLyNszURpI1c0GkYrgps/P4lW8MOTPRZKdLCh9qBwVs8bQ 9OkeEDBL0gsnApF4g8iAqQ+UcosvL8pYT+91exFrrNcK8j0t6UwfI7GDhjiV9HkV S/YvAwtKjGsSg/p6SbU2lZCLOzvYS+4gxMVm5k/pPenczoL7Q0hyWuBmvHDtzs1V RCtoaOV9PgEDwpuaH0gwobZ4S/OA15+LKs+W7BGH5deFE95b8YWKAFyCt3U+zQCi 9fxdtjsx -----END CERTIFICATE-----Generated at Fri Apr 17 14:25:09 2026 by rpki-client