$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa File: A8EF2B58A89A11EFA52A9970C4F9AE02.roa (raw, json) Hash identifier: vA9B5GdBFDfGPEm9RBw1RWDBG86jPKap4rBE62FZXT0= Subject key identifier: FD:87:85:3A:7E:59:B4:57:DE:57:F3:EC:C3:83:87:8B:A1:42:75:1D Certificate issuer: /CN=A919EC2D/serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F Certificate serial: FA Authority key identifier: 30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:21:06 +0000 ROA not before: Mon 05 May 2025 02:39:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136969 IP address blocks: 103.188.92.0/23 maxlen: 23 103.188.92.0/24 maxlen: 24 103.188.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=304D64E3F1051297E4B62AC7DE3480F47A29AE0F Validity Not Before: May 5 02:39:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a491a1-d5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:06:31:91:d8:08:3d:2d:5a:04:88:a0:50: 88:cb:e9:38:a6:2d:1c:1c:53:13:fc:82:4f:3c:7c: 85:9f:f1:41:36:e3:21:f0:43:86:e3:71:b5:93:f2: d2:f8:40:60:93:ef:23:14:a1:9d:65:48:40:83:c6: 6f:3e:eb:e5:c2:e7:85:0a:2c:6d:7c:9e:0e:10:cd: 51:f1:92:ef:84:85:2c:04:b8:39:7f:18:d1:e7:7e: cf:3e:8f:73:49:db:5e:5c:1e:07:8a:45:9f:2d:17: 73:45:e1:a0:86:f0:50:d9:b6:0d:9b:59:79:63:80: 2a:e9:6b:15:d6:a6:d1:a4:06:85:e0:fa:0b:49:85: 9e:be:fa:4e:34:7b:ce:57:9b:d2:4e:99:9d:3b:30: f6:68:ce:09:fb:eb:b6:ae:b9:81:f4:30:a5:a6:a9: 4a:62:3f:6c:25:28:96:63:14:11:ff:7e:8b:4a:56: 8f:85:1d:82:a1:95:9f:47:b3:62:00:3c:eb:cf:c4: ff:d3:70:be:37:57:78:c0:f4:f6:89:82:fd:44:a3: 29:4f:3b:55:6d:91:4b:75:dc:78:4b:a8:2a:52:f3: 33:1c:d5:b6:4d:27:f4:36:2b:3d:4e:9c:3b:bd:80: 74:6b:aa:18:97:9e:58:35:5e:ed:63:28:3c:7c:50: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:87:85:3A:7E:59:B4:57:DE:57:F3:EC:C3:83:87:8B:A1:42:75:1D X509v3 Authority Key Identifier: keyid:30:4D:64:E3:F1:05:12:97:E4:B6:2A:C7:DE:34:80:F4:7A:29:AE:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/ME1k4_EFEpfktirH3jSA9Hoprg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ME1k4_EFEpfktirH3jSA9Hoprg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A8EF2B58A89A11EFA52A9970C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.188.92.0/23 Signature Algorithm: sha256WithRSAEncryption a4:33:70:f5:23:b4:9d:b9:d3:55:76:f7:4f:8e:0c:a8:ec:79: 20:fc:ca:10:e0:31:55:35:89:7b:a3:da:c7:05:00:64:c7:e4: 7a:0b:f0:31:d6:f4:1f:06:52:1a:25:82:8e:a3:5f:c4:18:0e: 65:5f:93:fa:3e:0f:98:0e:a0:2e:ba:4e:60:d1:ec:ef:e6:42: e8:f9:79:01:1b:ec:b3:8b:2f:50:d2:14:3c:88:09:22:0e:2c: 59:f5:f0:5d:6e:af:17:63:0c:1c:56:25:f0:1d:c2:83:8a:f1: af:45:8a:79:57:0f:f2:e6:1a:14:58:91:c3:de:f4:98:ae:f3: db:a2:41:fd:2b:3e:24:d1:1c:9d:c6:25:46:35:00:7d:d4:a7: a7:e6:fd:56:b4:c0:02:2b:e4:2c:e6:31:74:64:a4:bf:38:06: da:18:49:fd:ba:a7:0a:9a:67:54:50:fb:3d:90:02:55:3b:98: 3d:6d:c4:2b:36:4f:cf:49:24:bc:4d:d1:be:e3:50:38:4e:3b: a1:b5:64:a2:49:e8:3a:d2:49:08:8f:f4:9f:9f:1e:dc:ad:34: 80:7e:86:d2:9d:ce:88:d5:95:29:32:66:01:1d:1d:19:bd:40: 33:2a:0f:cc:38:0a:a8:ec:7f:ac:48:bc:98:82:df:fa:61:f1: 5b:23:92:af -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKDMwNEQ2NEUzRjEwNTEyOTdFNEI2MkFDN0RFMzQ4MEY0 N0EyOUFFMEYwHhcNMjUwNTA1MDIzOTE4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTFhMS1kNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfwGMZHYCD0tWgSIoFCIy+k4pi0cHFMT/IJPPHyFn/FBNuMh8EOG43G1k/LS +EBgk+8jFKGdZUhAg8ZvPuvlwueFCixtfJ4OEM1R8ZLvhIUsBLg5fxjR537PPo9z SdteXB4HikWfLRdzReGghvBQ2bYNm1l5Y4Aq6WsV1qbRpAaF4PoLSYWevvpONHvO V5vSTpmdOzD2aM4J++u2rrmB9DClpqlKYj9sJSiWYxQR/36LSlaPhR2CoZWfR7Ni ADzrz8T/03C+N1d4wPT2iYL9RKMpTztVbZFLddx4S6gqUvMzHNW2TSf0Nis9Tpw7 vYB0a6oYl55YNV7tYyg8fFAUowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP2HhTp+ WbRX3lfz7MODh4uhQnUdMB8GA1UdIwQYMBaAFDBNZOPxBRKX5LYqx940gPR6Ka4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9NRTFrNF9FRkVwZmt0aXJIM2pTQTlIb3By ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01FMWs0X0VGRXBma3RpckgzalNBOUhvcHJnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVDMkQvODJCNzI1RThCQ0UzMTFFRDg0OUY5MzMxQzRGOUFFMDIvQThFRjJCNThB ODlBMTFFRkE1MkE5OTcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ7xcMA0GCSqGSIb3DQEBCwUAA4IBAQCkM3D1I7SdudNVdvdPjgyo 7Hkg/MoQ4DFVNYl7o9rHBQBkx+R6C/Ax1vQfBlIaJYKOo1/EGA5lX5P6Pg+YDqAu uk5g0ezv5kLo+XkBG+yziy9Q0hQ8iAkiDixZ9fBdbq8XYwwcViXwHcKDivGvRYp5 Vw/y5hoUWJHD3vSYrvPbokH9Kz4k0RydxiVGNQB91Ken5v1WtMACK+Qs5jF0ZKS/ OAbaGEn9uqcKmmdUUPs9kAJVO5g9bcQrNk/PSSS8TdG+41A4TjuhtWSiSeg60kkI j/Sfnx7crTSAfobSnc6I1ZUpMmYBHR0ZvUAzKg/MOAqo7H+sSLyYgt/6YfFbI5Kv -----END CERTIFICATE-----Generated at Mon Mar 2 02:32:00 2026 by rpki-client