$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa File: 47C98CE6860911EFBACC1172C4F9AE02.roa (raw, json) Hash identifier: rwHK5WFvubt4rnhmzStOlVHIrPiNYBkpDlY042VVRFA= Subject key identifier: A6:6F:27:D7:83:F5:63:1F:3A:CD:EE:8B:95:F5:39:49:0B:6B:0D:01 Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Certificate serial: 010B Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:22:20 +0000 ROA not before: Fri 16 May 2025 21:18:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140849 IP address blocks: 103.152.104.0/24 maxlen: 24 103.152.105.0/24 maxlen: 24 2001:df4:a80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Validity Not Before: May 16 21:18:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a58f0c-8867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:07:6d:21:c2:df:93:7a:64:31:dc:29:c5: a1:c5:08:c8:7b:64:82:84:9a:e0:9c:45:2b:fc:69: 6a:de:97:a1:f1:8e:14:a0:75:a2:08:32:56:ee:2e: 9c:80:da:b6:3b:a5:7c:e6:e7:d8:60:f2:27:5b:96: 8c:eb:0b:b7:57:e6:ba:05:f9:0d:e9:6d:ba:1c:83: 4b:26:21:68:39:74:53:cf:33:ad:aa:50:eb:ff:10: ee:64:4c:0a:06:37:70:e9:e2:cd:b1:67:13:c5:37: 28:9e:c5:8c:de:62:e6:46:8f:80:32:f2:20:e2:b7: 2c:9d:38:7a:63:06:41:1a:b1:61:df:e4:7c:1f:58: ea:d2:7a:ac:47:0f:fe:dc:5e:82:6c:92:9a:65:fd: f3:04:78:e3:44:e5:5f:a3:10:bd:04:31:55:dd:59: bb:3c:19:86:d0:6a:23:df:c6:b6:75:c8:b5:96:f7: 3d:32:17:69:78:99:fe:82:df:26:9a:d3:b0:c3:55: c4:59:79:e5:66:69:a9:d1:37:6c:c5:f8:32:98:9f: df:d4:84:cf:c4:64:5c:ab:f6:3a:9b:e0:79:88:e8: f8:4b:68:85:27:11:d8:12:7a:06:ea:89:81:37:e7: 3b:22:51:16:bb:6a:fa:4d:77:52:d7:fc:10:5b:11: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6F:27:D7:83:F5:63:1F:3A:CD:EE:8B:95:F5:39:49:0B:6B:0D:01 X509v3 Authority Key Identifier: keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.104.0/23 IPv6: 2001:df4:a80::/48 Signature Algorithm: sha256WithRSAEncryption 4e:b3:be:b0:60:2f:47:69:44:64:24:65:47:c1:bd:f1:98:89: c1:7a:f3:25:4b:6d:b2:f0:ea:4c:d3:d2:f4:d1:45:83:d4:6e: f8:d8:f9:1a:4e:81:de:3f:1d:df:56:77:2c:49:61:75:bb:d2: ce:21:4d:0e:05:74:fb:42:23:81:68:dc:e4:bd:a3:a3:bc:5e: 11:52:7c:2d:0a:44:32:35:af:04:96:06:90:ff:28:c3:95:6e: 01:d2:f3:40:5a:b1:ca:76:ea:5b:7b:16:f4:4f:01:fd:fb:4b: e0:36:d8:04:a5:a5:5d:0f:de:ae:fe:03:08:dc:ef:82:45:8a: 15:38:54:9d:39:a9:54:d4:6a:5b:a7:ae:28:f2:c7:a4:e3:7e: 0b:a7:16:6d:b2:fa:fb:99:ca:47:73:18:c7:0b:53:98:ce:fb: 4c:d1:42:8e:74:43:0d:7a:c4:e4:20:0f:4f:f0:6f:5a:e0:1b: 2a:84:f3:fe:f8:4c:38:09:e5:9a:a6:9f:47:18:23:9d:db:10: c7:ae:fc:44:5f:ed:88:48:56:c2:bb:a1:b6:a9:a3:5e:b2:5c: 9c:d6:43:f4:dd:a0:52:09:b9:65:38:5c:e1:73:70:d5:87:6f: 75:43:2a:b5:61:7c:18:20:a4:44:af:2b:1b:b2:1f:f4:ff:58: 23:9b:03:d3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKDdBOEFGMjRENzhENzc3MERDMzM5QzJGRjI4RkQ3QzE0 RDEzQzVGQjEwHhcNMjUwNTE2MjExODM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGYwYy04ODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPgHbSHC35N6ZDHcKcWhxQjIe2SChJrgnEUr/Glq3peh8Y4UoHWiCDJW7i6c gNq2O6V85ufYYPInW5aM6wu3V+a6BfkN6W26HINLJiFoOXRTzzOtqlDr/xDuZEwK Bjdw6eLNsWcTxTconsWM3mLmRo+AMvIg4rcsnTh6YwZBGrFh3+R8H1jq0nqsRw/+ 3F6CbJKaZf3zBHjjROVfoxC9BDFV3Vm7PBmG0Goj38a2dci1lvc9MhdpeJn+gt8m mtOww1XEWXnlZmmp0TdsxfgymJ/f1ITPxGRcq/Y6m+B5iOj4S2iFJxHYEnoG6omB N+c7IlEWu2r6TXdS1/wQWxFnCQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKZvJ9eD 9WMfOs3ui5X1OUkLaw0BMB8GA1UdIwQYMBaAFHqK8k1413cNwznC/yj9fBTRPF+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3M0RPY0xfS1AxOEZORThY N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvcnlUWGpYZHczRE9jTF9LUDE4Rk5FOFg3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVCMkQvNEE2Q0VEQUNCRUIzMTFFQTgyNjg3NjQzQzRGOUFFMDIvNDdDOThDRTY4 NjA5MTFFRkJBQ0MxMTcyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5hoMA8EAgACMAkDBwAgAQ30CoAwDQYJKoZIhvcNAQELBQADggEB AE6zvrBgL0dpRGQkZUfBvfGYicF68yVLbbLw6kzT0vTRRYPUbvjY+RpOgd4/Hd9W dyxJYXW70s4hTQ4FdPtCI4Fo3OS9o6O8XhFSfC0KRDI1rwSWBpD/KMOVbgHS80Ba scp26lt7FvRPAf37S+A22ASlpV0P3q7+Awjc74JFihU4VJ05qVTUalunrijyx6Tj fgunFm2y+vuZykdzGMcLU5jO+0zRQo50Qw16xOQgD0/wb1rgGyqE8/74TDgJ5Zqm n0cYI53bEMeu/ERf7YhIVsK7obapo16yXJzWQ/TdoFIJuWU4XOFzcNWHb3VDKrVh fBggpESvKxuyH/T/WCObA9M= -----END CERTIFICATE-----Generated at Fri Mar 27 01:02:10 2026 by rpki-client