$ rpki-client -vvf rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/4BE78CE0ED2A11F08C16C3A8456F56BC.roa File: 4BE78CE0ED2A11F08C16C3A8456F56BC.roa (raw, json) Hash identifier: DxS8qtWv9pkNq2b6VRn4H0f6+eH9NnF6qbsTrQl88zk= Subject key identifier: 1E:0D:A2:9D:5A:22:6B:F8:98:0D:93:11:64:80:7C:9E:9C:AD:34:AC Certificate issuer: /CN=A919B460/serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Certificate serial: 21 Authority key identifier: 94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/4BE78CE0ED2A11F08C16C3A8456F56BC.roa Signing time: Sun 01 Mar 2026 05:47:25 +0000 ROA not before: Fri 09 Jan 2026 07:12:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 32043 IP address blocks: 103.100.108.0/24 maxlen: 24 103.100.109.0/24 maxlen: 24 103.100.110.0/24 maxlen: 24 103.100.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B460, serialNumber=940D27AE144AADCA9E3452CB38C3236ACBF7025B Validity Not Before: Jan 9 07:12:05 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d2ec-07c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:26:e6:85:7c:6d:92:f5:aa:6e:11:cb:d4: 13:78:71:dd:b5:55:ee:5b:c2:e3:00:1f:73:d8:d2: cf:3b:9f:4a:d8:7a:8e:ed:03:e6:71:a8:c9:af:01: 0d:38:69:15:8b:4c:0b:6f:88:b7:69:4e:bd:1c:85: cf:86:39:22:d3:d9:76:9b:68:e3:05:f2:8b:f6:d5: 79:3c:03:c0:15:e2:07:ec:b5:e1:e1:37:4b:c5:6f: c4:ca:64:22:d0:59:01:5b:37:23:e6:35:0b:7a:1c: 3b:0b:bd:2d:be:64:a2:4b:53:4e:73:d7:34:c3:74: a7:86:f9:da:2f:7c:dc:b4:75:bf:6e:f1:5a:67:09: 14:a0:83:ac:d4:a0:d7:e3:c2:8f:40:8d:8c:da:f6: 5b:53:5c:c2:66:f9:b3:ff:b1:5c:c9:8f:1c:44:37: a7:1b:01:42:d0:9b:93:e8:5f:27:85:a1:37:0d:9f: 00:59:6a:ac:56:74:d6:59:a3:93:fe:87:7b:b7:cf: ca:a9:a9:16:3a:cc:9c:ab:5d:fc:e3:cd:4b:fc:19: d7:1f:56:8c:47:28:f6:3b:41:c9:5e:cf:f8:d1:63: a8:05:a7:94:32:3a:18:0d:31:08:3c:d4:99:b7:94: 18:f6:3e:51:ef:ec:c8:6c:82:7f:94:c5:f3:7f:b9: 4f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0D:A2:9D:5A:22:6B:F8:98:0D:93:11:64:80:7C:9E:9C:AD:34:AC X509v3 Authority Key Identifier: keyid:94:0D:27:AE:14:4A:AD:CA:9E:34:52:CB:38:C3:23:6A:CB:F7:02:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/lA0nrhRKrcqeNFLLOMMjasv3Als.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lA0nrhRKrcqeNFLLOMMjasv3Als.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B460/02AE4672ED2A11F098C63121456F56BC/4BE78CE0ED2A11F08C16C3A8456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.100.108.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:28:79:7f:b6:0b:29:1c:e7:ac:eb:77:61:ec:ac:36:a2:7e: 94:6a:aa:bd:97:52:34:87:f7:d9:f2:99:88:b3:ba:76:df:b2: 80:92:9a:76:78:1b:b2:86:f6:12:a5:2a:09:cc:ff:b9:42:55: 3e:55:cf:00:5b:79:cb:f2:32:8d:c9:de:81:1c:44:69:82:1a: ab:aa:74:4f:65:f0:12:54:51:19:12:78:6e:bc:20:05:e3:e1: f8:6d:3b:c3:7d:eb:ac:f0:70:6a:f2:18:92:5e:8d:b2:05:cb: a3:8b:e1:5b:36:23:b8:84:fc:6e:9c:f8:46:2d:21:58:6f:ba: cb:91:75:d3:79:35:4d:1d:f9:dd:e4:21:76:50:43:24:6e:85: 9f:6d:37:eb:2d:a9:79:89:02:a9:11:8c:39:cf:fb:49:79:25: 17:9f:a4:0c:18:1d:07:07:9c:d0:a2:10:d1:9b:2f:d1:15:2c: d6:e0:f2:0c:f2:79:71:46:79:ba:49:81:06:cd:e4:3b:6b:fb: 06:ac:38:da:09:98:66:c0:79:8b:7f:a9:55:a9:43:a9:57:90: 35:50:91:6e:ad:a3:92:3b:44:a1:88:92:15:42:3f:55:a0:d5: 2a:40:48:d6:ad:c7:6e:d0:2f:c6:0f:65:94:48:99:b1:69:e7: b4:ce:50:a8 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QjQ2MDExMC8GA1UEBRMoOTQwRDI3QUUxNDRBQURDQTlFMzQ1MkNCMzhDMzIzNkFD QkY3MDI1QjAeFw0yNjAxMDkwNzEyMDVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmVjLTA3YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+cybmhXxtkvWqbhHL1BN4cd21Ve5bwuMAH3PY0s87n0rYeo7tA+ZxqMmvAQ04 aRWLTAtviLdpTr0chc+GOSLT2XabaOMF8ov21Xk8A8AV4gfsteHhN0vFb8TKZCLQ WQFbNyPmNQt6HDsLvS2+ZKJLU05z1zTDdKeG+dovfNy0db9u8VpnCRSgg6zUoNfj wo9AjYza9ltTXMJm+bP/sVzJjxxEN6cbAULQm5PoXyeFoTcNnwBZaqxWdNZZo5P+ h3u3z8qpqRY6zJyrXfzjzUv8GdcfVoxHKPY7Qclez/jRY6gFp5QyOhgNMQg81Jm3 lBj2PlHv7Mhsgn+UxfN/uU97AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUHg2inVoi a/iYDZMRZIB8npytNKwwHwYDVR0jBBgwFoAUlA0nrhRKrcqeNFLLOMMjasv3Alsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCNDYwLzAyQUU0NjcyRUQy QTExRjA5OEM2MzEyMTQ1NkY1NkJDL2xBMG5yaFJLcmNxZU5GTExPTU1qYXN2M0Fs cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEEwbnJoUktyY3FlTkZMTE9NTWphc3YzQWxzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjQ2MC8wMkFFNDY3MkVEMkExMUYwOThDNjMxMjE0NTZGNTZCQy80QkU3OENFMEVE MkExMUYwOEMxNkMzQTg0NTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnZGwwDQYJKoZIhvcNAQELBQADggEBAHooeX+2Cykc56zrd2HsrDai fpRqqr2XUjSH99nymYizunbfsoCSmnZ4G7KG9hKlKgnM/7lCVT5VzwBbecvyMo3J 3oEcRGmCGquqdE9l8BJUURkSeG68IAXj4fhtO8N966zwcGryGJJejbIFy6OL4Vs2 I7iE/G6c+EYtIVhvusuRddN5NU0d+d3kIXZQQyRuhZ9tN+stqXmJAqkRjDnP+0l5 JRefpAwYHQcHnNCiENGbL9EVLNbg8gzyeXFGebpJgQbN5Dtr+wasONoJmGbAeYt/ qVWpQ6lXkDVQkW6to5I7RKGIkhVCP1Wg1SpASNatx27QL8YPZZRImbFp57TOUKg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:53:24 2026 by rpki-client