$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/BB252FD40EF111F195D6D4120A3D8C67.roa File: BB252FD40EF111F195D6D4120A3D8C67.roa (raw, json) Hash identifier: /hTiZWSYK2Vv4i6AxRoBfgNn6QuWyN3II6fBK7L3F/8= Subject key identifier: 5D:C4:47:F8:F8:72:41:EB:7D:34:9A:46:F3:D2:E4:C4:B5:E3:C3:58 Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2337 Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/BB252FD40EF111F195D6D4120A3D8C67.roa Signing time: Sun 01 Mar 2026 18:43:35 +0000 ROA not before: Sat 21 Feb 2026 06:51:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.54.150.0/24 maxlen: 24 103.54.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9015 (0x2337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Feb 21 06:51:21 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a488d7-e7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:bd:a5:15:8b:d6:e0:8b:9e:be:5e:2f:75: a2:48:c8:29:04:28:32:a3:75:51:9c:31:e0:bd:8a: 6d:28:f6:3a:b9:4e:dd:7c:93:b0:41:a4:21:6f:12: 4d:25:08:cb:17:cb:e8:bf:de:68:14:e1:0a:c6:76: ff:f6:b7:0c:9f:4f:84:79:57:99:72:52:ef:51:ef: 00:d7:71:82:33:c9:ce:5f:d4:1d:c6:7f:c5:03:11: 5f:46:a2:11:0d:26:76:64:0b:46:02:9c:24:a8:60: 65:2e:66:cc:15:21:e8:52:ee:64:29:1c:1a:b3:6b: b4:ad:9a:40:e2:c5:ca:cc:66:f0:2b:37:5d:e9:07: 0d:67:50:ce:d2:60:94:ee:30:ca:f3:98:83:69:24: da:70:d0:88:30:21:53:5c:66:33:b0:12:7b:01:f3: 42:c4:63:b6:22:e8:81:2a:a2:32:5a:85:13:29:7b: 7e:39:d2:26:69:ba:7c:35:b1:76:0c:79:8f:b4:00: 9c:41:46:af:d4:19:69:cc:ef:21:cf:ac:fe:36:0d: 14:3f:69:c4:be:1e:48:21:95:97:ed:e9:3f:af:25: 45:f4:4e:02:a9:de:b5:c7:7c:2b:ef:7d:02:b4:87: 14:6a:16:98:33:52:58:4a:d1:43:62:37:1c:cd:c8: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C4:47:F8:F8:72:41:EB:7D:34:9A:46:F3:D2:E4:C4:B5:E3:C3:58 X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/BB252FD40EF111F195D6D4120A3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.54.150.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f3:b1:57:a1:b2:30:b1:72:24:55:db:ac:83:33:93:f1:1b: 24:f9:14:94:a0:4e:2b:74:20:f6:6f:89:e0:1f:3a:99:34:e3: 2e:ab:5e:e8:de:cf:b3:0b:1d:aa:d9:07:db:78:0d:9c:49:46: 90:ae:7e:d7:6a:a2:20:4e:50:56:38:6e:cf:b2:10:7f:56:79: f7:91:dc:70:29:62:b6:ee:81:55:e7:5a:cf:80:cb:24:1a:44: 4f:09:9e:fe:1e:ee:1b:3e:ee:ec:e0:95:c2:d4:32:47:02:ea: 77:b5:3e:39:b2:2e:e0:b2:28:e3:ba:10:ce:aa:c7:0a:26:6b: cf:bb:96:3c:58:37:b7:02:08:ed:e2:f3:77:0c:34:da:1c:ed: 5f:0d:3c:d6:36:e1:04:63:4a:c2:c5:28:11:45:cd:f0:32:13: 8d:5a:5f:cb:5f:c6:bd:d7:eb:74:75:ae:4a:c0:dd:7d:84:cb: f2:32:a5:17:9c:e5:7f:88:85:bc:45:13:5b:41:ba:d4:6f:b8: 8c:e2:a9:3a:91:58:57:5d:2b:39:ad:31:a9:25:7a:e5:cf:02: 56:2e:72:25:1a:6b:28:70:5f:8f:b7:e7:e1:8d:39:81:7b:1e: 72:0c:e3:53:e5:7b:95:5d:77:f4:5d:0f:dc:7c:d0:b4:3c:cb: da:8c:56:bc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjYwMjIxMDY1MTIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhkNy1lN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAirG9pRWL1uCLnr5eL3WiSMgpBCgyo3VRnDHgvYptKPY6uU7dfJOwQaQhbxJN JQjLF8vov95oFOEKxnb/9rcMn0+EeVeZclLvUe8A13GCM8nOX9Qdxn/FAxFfRqIR DSZ2ZAtGApwkqGBlLmbMFSHoUu5kKRwas2u0rZpA4sXKzGbwKzdd6QcNZ1DO0mCU 7jDK85iDaSTacNCIMCFTXGYzsBJ7AfNCxGO2IuiBKqIyWoUTKXt+OdImabp8NbF2 DHmPtACcQUav1BlpzO8hz6z+Ng0UP2nEvh5IIZWX7ek/ryVF9E4Cqd61x3wr730C tIcUahaYM1JYStFDYjcczchxQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF3ER/j4 ckHrfTSaRvPS5MS148NYMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvQkIyNTJGRDQw RUYxMTFGMTk1RDZENDEyMEEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZzaWMA0GCSqGSIb3DQEBCwUAA4IBAQCB87FXobIwsXIkVdusgzOT 8Rsk+RSUoE4rdCD2b4ngHzqZNOMuq17o3s+zCx2q2QfbeA2cSUaQrn7XaqIgTlBW OG7PshB/Vnn3kdxwKWK27oFV51rPgMskGkRPCZ7+Hu4bPu7s4JXC1DJHAup3tT45 si7gsijjuhDOqscKJmvPu5Y8WDe3Agjt4vN3DDTaHO1fDTzWNuEEY0rCxSgRRc3w MhONWl/LX8a91+t0da5KwN19hMvyMqUXnOV/iIW8RRNbQbrUb7iM4qk6kVhXXSs5 rTGpJXrlzwJWLnIlGmsocF+Pt+fhjTmBex5yDONT5XuVXXf0XQ/cfNC0PMvajFa8 -----END CERTIFICATE-----Generated at Thu Mar 26 09:33:48 2026 by rpki-client