$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa File: B288EC9C870811F0A371DD81C4F9AE02.roa (raw, json) Hash identifier: 0BOrDnShuL/QhrZ0gDHGyMtGSNIca2cAczupvc+0+QU= Subject key identifier: 94:D4:C8:96:71:D3:01:02:DF:8F:03:BC:33:0A:3B:7D:01:F4:1B:87 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 02DB Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa Signing time: Mon 11 May 2026 13:24:12 +0000 ROA not before: Mon 11 May 2026 13:24:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138004 IP address blocks: 103.10.194.0/23 maxlen: 23 103.10.194.0/24 maxlen: 24 103.10.195.0/24 maxlen: 24 2001:df1:4dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 731 (0x2db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: May 11 13:24:12 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a01d87c-652d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:70:1b:5f:a5:e8:7c:03:de:71:50:e3:7b:b7: ef:1d:57:0d:9b:41:93:f2:01:1b:35:cb:56:66:c8: 1f:34:b6:64:40:0c:6f:3b:4f:7e:3f:bf:a4:5b:cf: 70:b8:8e:ce:a7:df:d9:b4:e1:e0:15:5b:5f:03:9a: e6:31:22:a7:95:f9:32:eb:84:ab:6c:2e:67:41:0a: 04:d1:73:6d:96:03:93:b3:3b:9a:08:52:ae:42:a9: d7:ab:6a:d3:30:09:92:89:b5:fe:21:81:1a:22:ff: 82:c9:04:1a:85:21:36:b3:d1:e6:72:94:1b:19:a7: 11:5c:ff:43:e8:5c:4b:ce:97:41:38:3e:ec:34:8b: 29:d8:74:e7:a9:0e:1c:65:bd:5b:77:7e:02:0e:4e: e3:61:e5:82:d7:dc:e6:34:00:b7:b6:96:1f:c2:4a: fb:15:93:b5:cb:d3:3f:8e:f6:8e:4d:2d:0f:7f:c2: 5f:b5:91:83:13:ab:2f:52:f2:d6:7d:67:22:8e:31: 39:10:16:b4:73:38:73:eb:f6:1d:56:69:79:a0:0d: c0:63:e7:40:13:39:68:00:97:74:0f:7d:6c:e8:f1: b3:24:9b:0b:0b:bf:f8:27:b8:7d:e8:2d:83:bc:47: aa:30:99:0d:a3:cf:76:5a:31:26:40:c3:79:af:fb: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D4:C8:96:71:D3:01:02:DF:8F:03:BC:33:0A:3B:7D:01:F4:1B:87 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.10.194.0/23 IPv6: 2001:df1:4dc0::/48 Signature Algorithm: sha256WithRSAEncryption 19:16:49:3e:4b:6e:7f:01:ac:c8:d3:1d:04:e8:1a:df:0b:b4: fe:30:5e:49:4f:0c:ce:f6:36:e9:07:23:9e:50:ab:0e:bc:94: 4f:ec:0b:95:1d:9f:9c:ec:f3:56:2c:ac:07:b5:a9:ed:cb:1e: b0:83:30:69:26:a1:ac:94:e8:ba:43:9d:0a:b4:ea:88:3c:6a: 6c:ff:69:36:86:f4:f5:e8:e4:96:c0:25:72:50:04:9f:7a:ab: 5c:c3:37:eb:46:1a:7e:ba:46:c4:ae:28:9f:fd:b1:69:12:bd: 18:e6:9d:83:f8:82:6f:b0:0c:9e:9a:ba:5f:c1:62:64:ad:ef: 60:41:d2:ce:4e:43:ca:37:cd:99:82:9f:e3:88:5a:58:3b:3a: e3:1d:ef:1c:05:da:2b:99:b1:98:a4:00:19:aa:b3:19:f2:70: 45:6f:84:bd:1f:ff:d1:fd:6f:e6:5b:0a:f8:e9:86:35:d5:ef: 09:89:1c:1f:81:0f:1d:fa:3a:b5:1f:17:55:8c:8b:e0:6b:1c: 6c:50:3a:03:d8:5c:34:67:c2:c6:13:13:52:79:8e:cd:80:2e: b3:7e:c0:cd:58:24:bf:91:3b:fa:96:54:3d:c9:81:0f:10:92: b7:8c:16:23:45:9f:c0:fe:5e:7b:6c:80:29:ba:fe:94:1b:cf: 4d:ae:bc:ce -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjYwNTExMTMyNDEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAxZDg3Yy02NTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnAbX6XofAPecVDje7fvHVcNm0GT8gEbNctWZsgfNLZkQAxvO09+P7+kW89w uI7Op9/ZtOHgFVtfA5rmMSKnlfky64SrbC5nQQoE0XNtlgOTszuaCFKuQqnXq2rT MAmSibX+IYEaIv+CyQQahSE2s9HmcpQbGacRXP9D6FxLzpdBOD7sNIsp2HTnqQ4c Zb1bd34CDk7jYeWC19zmNAC3tpYfwkr7FZO1y9M/jvaOTS0Pf8JftZGDE6svUvLW fWcijjE5EBa0czhz6/YdVml5oA3AY+dAEzloAJd0D31s6PGzJJsLC7/4J7h96C2D vEeqMJkNo892WjEmQMN5r/vZ8wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJTUyJZx 0wEC348DvDMKO30B9BuHMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJBRDYvRDY0RjRFOUMzQUYyMTFFREE4NDJDNTc2QzRGOUFFMDIvQjI4OEVDOUM4 NzA4MTFGMEEzNzFERDgxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZwrCMA8EAgACMAkDBwAgAQ3xTcAwDQYJKoZIhvcNAQELBQADggEB ABkWST5Lbn8BrMjTHQToGt8LtP4wXklPDM72NukHI55Qqw68lE/sC5Udn5zs81Ys rAe1qe3LHrCDMGkmoayU6LpDnQq06og8amz/aTaG9PXo5JbAJXJQBJ96q1zDN+tG Gn66RsSuKJ/9sWkSvRjmnYP4gm+wDJ6aul/BYmSt72BB0s5OQ8o3zZmCn+OIWlg7 OuMd7xwF2iuZsZikABmqsxnycEVvhL0f/9H9b+ZbCvjphjXV7wmJHB+BDx36OrUf F1WMi+BrHGxQOgPYXDRnwsYTE1J5js2ALrN+wM1YJL+RO/qWVD3JgQ8QkreMFiNF n8D+XntsgCm6/pQbz02uvM4= -----END CERTIFICATE-----Generated at Wed May 13 07:11:53 2026 by rpki-client