$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F3E543B4CBB611EB94FE6E68C4F9AE02.roa File: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (raw, json) Hash identifier: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI= Subject key identifier: B4:6B:8E:FF:CC:12:54:A6:05:AA:E8:8A:0A:E1:44:A8:B2:AA:94:D9 Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Certificate serial: 0D16 Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F3E543B4CBB611EB94FE6E68C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:34:53 +0000 ROA not before: Sun 30 Nov 2025 17:47:52 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139728 IP address blocks: 103.144.48.0/23 maxlen: 23 103.144.48.0/24 maxlen: 24 2405:bd40::/32 maxlen: 32 2405:bd40::/48 maxlen: 48 2405:bd40:1::/48 maxlen: 48 2405:bd40:2::/48 maxlen: 48 2405:bd40:3::/48 maxlen: 48 2405:bd40:4::/48 maxlen: 48 2405:bd40:5::/48 maxlen: 48 2405:bd40:6::/48 maxlen: 48 2405:bd40:7::/48 maxlen: 48 2405:bd40:8::/48 maxlen: 48 2405:bd40:9::/48 maxlen: 48 2405:bd40:a::/48 maxlen: 48 2405:bd40:10::/48 maxlen: 48 2405:bd40:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3350 (0xd16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81 Validity Not Before: Nov 30 17:47:52 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45c9c-3ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:7c:a6:eb:11:5c:bd:c8:e2:7b:06:e2:81: 38:97:a6:b1:17:3d:66:cc:32:32:67:44:d7:4a:25: 82:19:7f:20:e4:ad:c3:34:cc:07:13:5f:25:f2:3a: e6:9c:7a:23:d0:60:90:19:ba:1e:1e:3d:9e:7e:81: 73:71:0e:0b:c7:09:92:25:6b:a8:26:cb:55:0a:a5: 03:2e:00:49:2c:1e:4c:87:87:63:67:f0:2a:23:3a: 01:5b:4b:4f:a6:b2:1b:09:d0:fd:bc:85:d4:cd:f7: f0:38:0e:2d:77:27:f1:f1:f3:72:b9:8a:98:1c:07: b4:88:c1:58:9c:3e:49:20:b0:b5:a4:cd:4c:e6:e9: 18:54:c5:f1:79:d3:f7:38:bc:b5:fa:18:c6:22:53: f6:17:57:c0:d4:f8:02:49:25:76:6b:c5:d1:b7:a4: c6:65:b2:d6:a2:17:0a:a2:05:23:20:13:5d:76:39: 54:71:10:51:4c:72:dd:9b:60:47:ef:40:50:42:11: 44:47:46:4a:48:be:7c:30:a3:47:18:8c:90:95:dc: b2:ae:12:fa:35:7c:33:24:16:0c:90:88:2d:d5:5b: 86:b7:71:39:f6:e7:c4:e3:5b:7e:d8:2d:d0:f6:2c: be:14:de:2e:84:11:72:88:1e:6e:92:45:38:28:66: eb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6B:8E:FF:CC:12:54:A6:05:AA:E8:8A:0A:E1:44:A8:B2:AA:94:D9 X509v3 Authority Key Identifier: keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/F3E543B4CBB611EB94FE6E68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.144.48.0/23 IPv6: 2405:bd40::/32 Signature Algorithm: sha256WithRSAEncryption 17:ab:5d:e3:8e:da:13:fa:f6:7d:af:4c:c3:9c:24:67:f3:05: ce:6c:6f:ce:28:86:ef:da:38:a7:e2:b6:0f:de:d1:cb:e6:06: fd:4f:10:ca:7c:45:16:02:b7:20:b0:c3:f4:f7:10:df:87:4c: 0c:cf:33:1a:74:8a:7b:19:d8:71:6e:db:be:1e:42:6c:fb:48: b2:d0:60:30:93:47:16:6b:95:52:8d:7d:33:ba:78:96:e4:0b: ad:cb:a9:24:40:f5:cf:e1:43:d9:98:d8:74:5d:25:c2:3a:c4: 86:5f:0b:fe:cc:20:5b:da:a1:57:5a:b7:df:58:17:97:09:38: 54:7b:5f:da:5a:4b:c7:c1:00:ce:5c:1d:5d:1e:11:bb:72:14: e3:ef:1a:b7:48:6e:c9:c2:5d:cb:ed:f6:42:00:cd:a4:27:3d: f5:af:35:90:65:75:a4:8b:85:15:0d:e5:45:a3:1d:4e:7d:cf: 29:e7:5d:9d:94:f6:25:28:c8:13:d9:de:4a:07:61:ae:26:13: 56:76:b4:34:92:04:67:19:12:60:ad:23:4a:ae:2d:4b:3c:8c: 3e:7c:24:6e:8b:59:b2:f8:bb:9e:34:4a:0f:c2:f2:ea:86:1d: 51:82:63:9c:54:6e:58:55:8b:92:a1:b8:e4:33:f2:ee:cc:a9: 65:be:7f:ba -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx NTlGMTRBODEwHhcNMjUxMTMwMTc0NzUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWM5Yy0zY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OR8pusRXL3I4nsG4oE4l6axFz1mzDIyZ0TXSiWCGX8g5K3DNMwHE18l8jrm nHoj0GCQGboeHj2efoFzcQ4LxwmSJWuoJstVCqUDLgBJLB5Mh4djZ/AqIzoBW0tP prIbCdD9vIXUzffwOA4tdyfx8fNyuYqYHAe0iMFYnD5JILC1pM1M5ukYVMXxedP3 OLy1+hjGIlP2F1fA1PgCSSV2a8XRt6TGZbLWohcKogUjIBNddjlUcRBRTHLdm2BH 70BQQhFER0ZKSL58MKNHGIyQldyyrhL6NXwzJBYMkIgt1VuGt3E59ufE41t+2C3Q 9iy+FN4uhBFyiB5ukkU4KGbrXwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLRrjv/M ElSmBaroigrhRKiyqpTZMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTIyNDgvQzc5OEEwRkFGRjAwMTFFOTk1ODZBQjIxQzRGOUFFMDIvRjNFNTQzQjRD QkI2MTFFQjk0RkU2RTY4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5AwMA0EAgACMAcDBQAkBb1AMA0GCSqGSIb3DQEBCwUAA4IBAQAX q13jjtoT+vZ9r0zDnCRn8wXObG/OKIbv2jin4rYP3tHL5gb9TxDKfEUWArcgsMP0 9xDfh0wMzzMadIp7Gdhxbtu+HkJs+0iy0GAwk0cWa5VSjX0zuniW5Auty6kkQPXP 4UPZmNh0XSXCOsSGXwv+zCBb2qFXWrffWBeXCThUe1/aWkvHwQDOXB1dHhG7chTj 7xq3SG7Jwl3L7fZCAM2kJz31rzWQZXWki4UVDeVFox1Ofc8p512dlPYlKMgT2d5K B2GuJhNWdrQ0kgRnGRJgrSNKri1LPIw+fCRui1my+LueNEoPwvLqhh1RgmOcVG5Y VYuSobjkM/LuzKllvn+6 -----END CERTIFICATE-----Generated at Mon Mar 2 13:31:07 2026 by rpki-client