$ rpki-client -vvf rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/F5BBEA5AF6A611E7B40C7427C4F9AE02.roa File: F5BBEA5AF6A611E7B40C7427C4F9AE02.roa (raw, json) Hash identifier: jX+faSi98u6rI1llUGpD7X8uVE2k5e81nnO0sXDJRio= Subject key identifier: 17:6E:DF:77:24:3A:61:88:34:80:D7:73:A1:D9:6C:C4:6E:F1:AD:13 Certificate issuer: /CN=A9189311/serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB Certificate serial: 2828 Authority key identifier: 7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/F5BBEA5AF6A611E7B40C7427C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:33:06 +0000 ROA not before: Tue 30 Dec 2025 16:12:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 23991 IP address blocks: 103.35.108.0/22 maxlen: 24 103.111.88.0/23 maxlen: 23 103.111.88.0/24 maxlen: 24 103.111.89.0/24 maxlen: 24 202.40.176.0/20 maxlen: 24 2401:e900::/32 maxlen: 32 2401:e900::/48 maxlen: 48 2401:e900:1::/48 maxlen: 48 2401:e900:2::/48 maxlen: 48 2401:e900:3::/48 maxlen: 48 2401:e900:4::/48 maxlen: 48 2401:e900:5::/48 maxlen: 48 2401:e900:6::/48 maxlen: 48 2401:e900:7::/48 maxlen: 48 2401:e900:8::/48 maxlen: 48 2401:e900:9::/48 maxlen: 48 2401:e900:a::/48 maxlen: 48 2401:e900:b::/48 maxlen: 48 2401:e900:c::/48 maxlen: 48 2401:e900:d::/48 maxlen: 48 2401:e900:e::/48 maxlen: 48 2401:e900:f::/48 maxlen: 48 2401:e900:10::/48 maxlen: 48 2401:e900:11::/48 maxlen: 48 2401:e900:12::/48 maxlen: 48 2401:e900:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10280 (0x2828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189311, serialNumber=7B7754A82DD063A47E8EC35D163EF6B2448D12DB Validity Not Before: Dec 30 16:12:47 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47852-6e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:6d:73:25:4b:ce:8a:f9:3f:f1:b4:41:2a: 06:94:1c:e8:82:33:a0:bf:84:26:7b:10:fd:c6:2a: ae:aa:fc:fb:04:9f:d2:89:57:ad:18:b4:64:51:da: da:06:fe:f0:ca:d6:b7:92:58:df:cd:f1:c8:c4:75: 22:51:7b:1b:f2:db:f7:6c:28:f3:30:23:f2:ea:c3: d7:6e:18:0d:f4:ed:b9:f6:58:81:a5:5c:4b:c7:ab: c7:be:67:7e:0a:4a:37:b0:ca:b4:99:ac:03:f1:9b: d6:ac:aa:40:80:af:b1:ab:d6:3f:ab:86:a2:53:45: 5f:e3:dc:4e:76:51:58:f2:f3:06:a0:1d:71:b3:7d: 7d:f5:58:6a:54:7a:d0:67:d5:e6:f6:cd:69:b1:01: fd:84:4d:7d:71:0d:20:50:31:77:4e:a8:32:77:0d: 8c:b1:af:2e:e0:55:1b:ab:57:bd:27:3d:a6:62:74: d1:15:53:f2:05:e9:68:40:cd:5c:de:77:33:11:8f: fe:cc:8e:c6:f1:20:70:d5:c1:55:92:69:f8:17:54: a4:94:dd:6b:47:5a:da:89:4d:4b:24:2d:23:ba:07: 2d:48:e9:69:17:22:13:65:d3:ba:3c:86:e6:ec:a5: 8a:63:e2:b5:af:83:7f:77:a2:65:a2:a7:a9:87:4e: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6E:DF:77:24:3A:61:88:34:80:D7:73:A1:D9:6C:C4:6E:F1:AD:13 X509v3 Authority Key Identifier: keyid:7B:77:54:A8:2D:D0:63:A4:7E:8E:C3:5D:16:3E:F6:B2:44:8D:12:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/e3dUqC3QY6R-jsNdFj72skSNEts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3dUqC3QY6R-jsNdFj72skSNEts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189311/13AFF6F6B24D11E4B67F185FC4F9AE02/F5BBEA5AF6A611E7B40C7427C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.35.108.0/22 103.111.88.0/23 202.40.176.0/20 IPv6: 2401:e900::/32 Signature Algorithm: sha256WithRSAEncryption 76:46:db:29:16:82:97:fe:3f:da:20:37:fd:50:8c:3b:8c:18: 7a:d5:6f:3c:3f:bc:ef:22:2f:2a:ae:c8:8a:5b:0c:ba:3e:c9: 1c:79:73:b4:e5:96:4b:0b:04:39:70:c0:9b:78:5d:59:b0:34: b6:e2:86:78:2c:4d:c0:db:ea:d6:df:2f:ab:c1:6f:04:a7:f6: a1:b9:da:dd:45:2b:14:ea:92:7e:be:ca:9d:6f:e0:50:8e:c2: 02:97:b3:62:ca:04:38:4a:da:2d:33:28:ac:9a:f9:d6:81:8e: 49:19:98:f5:5a:3b:b3:67:ae:80:16:4f:db:d7:60:30:a9:82: c2:07:13:4e:b6:06:72:0e:21:22:81:31:48:09:a3:56:3e:a7: 41:f2:51:73:28:ab:ec:5f:16:7d:95:c7:b5:4a:47:0e:1a:87: 4b:d3:7a:80:ee:63:47:38:a2:a9:4c:d6:36:12:fa:fe:7e:17: 7b:9a:e4:39:a0:f3:b3:63:b2:09:d3:df:de:a6:87:23:d1:38: a7:19:fd:96:d4:3e:43:6b:72:c5:a9:e2:72:bc:34:f3:e1:5d: cc:a8:59:78:cd:0a:a6:c7:ae:4d:ca:96:69:1d:18:11:da:02: 3d:4c:36:aa:66:68:53:9e:f6:3e:8c:ec:45:1b:63:62:30:dc: a2:a6:da:7c -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICKCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzMTExMTAvBgNVBAUTKDdCNzc1NEE4MkREMDYzQTQ3RThFQzM1RDE2M0VGNkIy NDQ4RDEyREIwHhcNMjUxMjMwMTYxMjQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg1Mi02ZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpFtcyVLzor5P/G0QSoGlBzogjOgv4QmexD9xiquqvz7BJ/SiVetGLRkUdra Bv7wyta3kljfzfHIxHUiUXsb8tv3bCjzMCPy6sPXbhgN9O259liBpVxLx6vHvmd+ Cko3sMq0mawD8ZvWrKpAgK+xq9Y/q4aiU0Vf49xOdlFY8vMGoB1xs3199VhqVHrQ Z9Xm9s1psQH9hE19cQ0gUDF3Tqgydw2Msa8u4FUbq1e9Jz2mYnTRFVPyBeloQM1c 3nczEY/+zI7G8SBw1cFVkmn4F1SklN1rR1raiU1LJC0jugctSOlpFyITZdO6PIbm 7KWKY+K1r4N/d6Jloqeph04T0wIDAQABo4ICezCCAncwHQYDVR0OBBYEFBdu33ck OmGINIDXc6HZbMRu8a0TMB8GA1UdIwQYMBaAFHt3VKgt0GOkfo7DXRY+9rJEjRLb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTMxMS8xM0FGRjZGNkIy NEQxMUU0QjY3RjE4NUZDNEY5QUUwMi9lM2RVcUMzUVk2Ui1qc05kRmo3MnNrU05F dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzZFVxQzNRWTZSLWpzTmRGajcyc2tTTkV0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkzMTEvMTNBRkY2RjZCMjREMTFFNEI2N0YxODVGQzRGOUFFMDIvRjVCQkVBNUFG NkE2MTFFN0I0MEM3NDI3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZyNsAwQBZ29YAwQEyiiwMA0EAgACMAcDBQAkAekAMA0GCSqGSIb3 DQEBCwUAA4IBAQB2RtspFoKX/j/aIDf9UIw7jBh61W88P7zvIi8qrsiKWwy6Pskc eXO05ZZLCwQ5cMCbeF1ZsDS24oZ4LE3A2+rW3y+rwW8Ep/ahudrdRSsU6pJ+vsqd b+BQjsICl7NiygQ4StotMyismvnWgY5JGZj1WjuzZ66AFk/b12AwqYLCBxNOtgZy DiEigTFICaNWPqdB8lFzKKvsXxZ9lce1SkcOGodL03qA7mNHOKKpTNY2Evr+fhd7 muQ5oPOzY7IJ09/epocj0TinGf2W1D5Da3LFqeJyvDTz4V3MqFl4zQqmx65NypZp HRgR2gI9TDaqZmhTnvY+jOxFG2NiMNyiptp8 -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:45 2026 by rpki-client