$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/15C562A2B1CD11EA9A31DA7DC4F9AE02.roa File: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (raw, json) Hash identifier: fyHNkv9f2hnc4oL2iAjpY/S8D1FHrVyHf6dS3M+0gbQ= Subject key identifier: 89:F4:30:22:B9:0F:91:30:F5:49:03:6E:CD:AF:08:88:ED:66:F3:37 Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Certificate serial: 0970 Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/15C562A2B1CD11EA9A31DA7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:20:44 +0000 ROA not before: Fri 04 Apr 2025 21:02:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55707 IP address blocks: 103.5.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A Validity Not Before: Apr 4 21:02:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42f1c-76eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:af:51:5f:bb:22:7b:6b:4b:8c:8e:ae:11:02: fc:b8:7c:96:8c:b9:49:26:73:da:14:ca:ca:15:99: af:c0:32:d7:ea:79:4a:97:b5:97:42:a7:2d:38:dc: 15:be:24:d4:f2:01:e2:c4:87:4c:4f:82:4f:47:c6: f1:19:62:62:3a:d7:08:84:83:3e:67:84:89:2d:57: c6:d1:e3:1b:e5:1b:88:ef:4f:1b:98:e7:3d:14:ba: 65:76:9e:91:03:c5:a6:f4:0a:bf:c6:db:0c:6b:c7: df:1f:fc:54:90:da:a9:d9:60:aa:c0:29:6a:70:29: c1:1d:ba:8c:4c:0e:b8:5e:d7:30:5c:2d:a4:fa:7b: 49:d3:10:c2:ca:59:1b:03:14:94:cd:5a:29:5e:2a: 61:fa:ac:bf:f0:e4:bb:55:e9:fa:b7:62:5d:90:78: 0e:93:d0:60:52:71:da:63:de:5c:16:8d:ca:7e:50: 23:de:05:d5:3a:6b:5b:b7:02:84:22:a3:2c:d8:aa: cf:bd:cb:63:b8:7e:16:95:67:ca:49:85:33:91:39: 3b:48:76:90:97:35:01:7a:10:43:5d:8a:c1:dc:a8: 99:75:d4:62:12:a0:46:e8:49:3b:08:41:7a:52:6d: ca:5d:9d:d2:ec:5e:88:6b:1b:45:d7:ef:7a:d1:28: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F4:30:22:B9:0F:91:30:F5:49:03:6E:CD:AF:08:88:ED:66:F3:37 X509v3 Authority Key Identifier: keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/15C562A2B1CD11EA9A31DA7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.88.0/24 Signature Algorithm: sha256WithRSAEncryption b1:6f:93:4d:50:4c:32:ba:0a:e8:b4:98:92:ad:d3:e7:2e:25: e8:d1:a0:23:1b:c9:56:a6:9f:8c:1c:4b:16:46:3c:f4:eb:0f: be:61:2c:40:18:51:7e:2c:64:50:28:f4:4f:2f:81:56:bd:c8: 16:6a:3b:cb:3c:8a:e6:75:46:41:4e:63:cd:94:69:27:75:e2: 5b:9e:b5:17:3a:f6:1f:5f:8b:3d:96:71:27:91:10:27:c0:d4: db:17:82:a6:65:96:bc:a2:f8:f6:3d:fc:c9:81:3c:92:02:e1: ac:30:4d:a4:19:c4:37:62:8b:05:11:e0:2a:1e:a3:63:4a:48: 9e:a9:f6:59:ea:40:0a:d0:7d:64:89:e8:7d:d1:cf:04:21:db: 2b:e9:9a:8e:ef:b6:04:56:e8:d8:bf:d5:c9:c5:b2:82:10:c6: 94:42:6c:cd:60:ee:12:72:33:90:73:6f:92:a9:bb:ff:ab:44: 6d:4d:81:5d:d8:96:d6:df:58:56:e4:d1:bb:99:98:be:49:b5: 91:51:68:69:5f:ee:c0:a4:43:68:a4:d0:e8:f6:e0:5e:6e:20: 27:77:48:f6:a3:33:7d:73:13:68:db:cb:74:d0:30:14:c5:c1: cd:a0:aa:c1:05:23:63:15:42:9e:99:82:66:b5:9a:3e:bf:6a: 58:bb:e3:01 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE MDIwRkNBOEEwHhcNMjUwNDA0MjEwMjQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmYxYy03NmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq9RX7sie2tLjI6uEQL8uHyWjLlJJnPaFMrKFZmvwDLX6nlKl7WXQqctONwV viTU8gHixIdMT4JPR8bxGWJiOtcIhIM+Z4SJLVfG0eMb5RuI708bmOc9FLpldp6R A8Wm9Aq/xtsMa8ffH/xUkNqp2WCqwClqcCnBHbqMTA64XtcwXC2k+ntJ0xDCylkb AxSUzVopXiph+qy/8OS7Ven6t2JdkHgOk9BgUnHaY95cFo3KflAj3gXVOmtbtwKE IqMs2KrPvctjuH4WlWfKSYUzkTk7SHaQlzUBehBDXYrB3KiZddRiEqBG6Ek7CEF6 Um3KXZ3S7F6IaxtF1+960SgrqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIn0MCK5 D5Ew9UkDbs2vCIjtZvM3MB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5 b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU4MEUvMDBFOTI1MDRCMUNDMTFFQUE2QTNDRDdDQzRGOUFFMDIvMTVDNTYyQTJC MUNEMTFFQTlBMzFEQTdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZwVYMA0GCSqGSIb3DQEBCwUAA4IBAQCxb5NNUEwyugrotJiSrdPn LiXo0aAjG8lWpp+MHEsWRjz06w++YSxAGFF+LGRQKPRPL4FWvcgWajvLPIrmdUZB TmPNlGkndeJbnrUXOvYfX4s9lnEnkRAnwNTbF4KmZZa8ovj2PfzJgTySAuGsME2k GcQ3YosFEeAqHqNjSkieqfZZ6kAK0H1kieh90c8EIdsr6ZqO77YEVujYv9XJxbKC EMaUQmzNYO4ScjOQc2+Sqbv/q0RtTYFd2JbW31hW5NG7mZi+SbWRUWhpX+7ApENo pNDo9uBebiAnd0j2ozN9cxNo28t00DAUxcHNoKrBBSNjFUKemYJmtZo+v2pYu+MB -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:55 2026 by rpki-client