$ rpki-client -vvf rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/BA33C4CC638A11F090002541C4F9AE02.roa File: BA33C4CC638A11F090002541C4F9AE02.roa (raw, json) Hash identifier: rgcQn0IdN1G4X2mCbx+TQwSEQO4ecdv1pRq56PdhirY= Subject key identifier: AF:B0:79:C3:0B:6E:C6:F0:5A:14:B9:D2:38:DD:E7:B6:88:DD:24:AE Certificate issuer: /CN=A913D9CB/serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Certificate serial: 08EF Authority key identifier: 8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/BA33C4CC638A11F090002541C4F9AE02.roa Signing time: Fri 06 Mar 2026 20:27:27 +0000 ROA not before: Fri 06 Mar 2026 20:27:27 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45638 IP address blocks: 103.207.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D9CB, serialNumber=8F8450EA18ED663DD763135AC8F9C1A2B99BD96D Validity Not Before: Mar 6 20:27:27 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ab38af-6835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9b:84:9a:73:64:28:86:0f:89:71:d9:74:66: 77:f0:77:4d:cc:86:c2:9c:a0:25:d4:be:f0:9f:a3: ea:6c:39:11:76:1a:77:85:45:57:d2:6c:19:65:99: c0:0c:59:72:c1:67:af:7b:a2:6c:26:db:e3:02:81: a8:24:fa:b4:5b:9b:4e:b3:b3:28:8b:b3:ab:fb:59: 91:6f:50:ff:9b:f7:2b:72:9e:83:18:7b:b6:0e:ac: 9e:fd:d4:6e:61:93:bb:57:7f:6c:51:ec:60:df:f3: 09:53:68:3d:4b:0a:87:fb:21:b0:4d:b1:31:5b:3b: ae:f6:bc:ad:71:50:8c:32:42:3a:83:a9:98:0a:f9: 19:f3:3e:41:49:d9:a0:19:b5:32:27:a3:31:7a:ff: e6:d4:c8:ff:c1:d9:ae:a5:7d:50:b8:92:fa:f1:58: 86:d7:7f:cc:5a:5f:0b:08:d8:56:c6:bd:a5:c0:f0: e4:26:2d:53:f9:5b:2f:1e:ee:8f:94:4d:54:fb:32: e1:1a:53:dc:d5:65:72:73:ed:ed:63:d6:d0:ba:cb: 27:94:28:90:0b:a4:07:e0:ca:4f:eb:04:8a:ed:8b: 92:1b:5b:d6:eb:be:75:ba:eb:f3:d1:3c:71:cf:c1: 69:51:50:45:3d:8f:5c:97:4a:38:b6:8c:9c:02:78: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:79:C3:0B:6E:C6:F0:5A:14:B9:D2:38:DD:E7:B6:88:DD:24:AE X509v3 Authority Key Identifier: keyid:8F:84:50:EA:18:ED:66:3D:D7:63:13:5A:C8:F9:C1:A2:B9:9B:D9:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/j4RQ6hjtZj3XYxNayPnBormb2W0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4RQ6hjtZj3XYxNayPnBormb2W0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D9CB/3FD2D9C4CA2A11EA95EA887FC4F9AE02/BA33C4CC638A11F090002541C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.207.28.0/24 Signature Algorithm: sha256WithRSAEncryption 19:27:f6:3c:94:9d:0e:84:7f:5e:e9:b9:83:bd:b0:7c:d0:40: 6f:d3:3c:c8:44:bb:97:9c:f8:7d:15:c0:e8:00:28:a1:0c:66: 5d:1c:e8:48:76:2a:10:01:67:8d:e4:ce:58:20:52:7d:d6:bc: 05:4e:e5:11:34:39:16:a7:a5:5d:93:36:a2:3f:f2:a1:75:72: d1:0c:96:c8:36:74:6c:dd:40:63:8a:9a:82:dd:80:e4:91:97: db:f9:24:b4:91:a5:07:15:51:9d:ed:50:f5:4a:04:82:2f:fc: f8:25:60:12:d5:cc:44:b3:15:3e:48:32:43:a7:1a:c6:7a:9e: 5c:09:62:8b:9c:9b:72:f0:ae:c1:c2:dd:ac:10:69:f2:e9:b7: 47:22:25:e9:19:a3:68:8e:36:eb:07:cc:b7:e1:f3:38:f8:be: bf:d9:ea:df:63:a9:0e:fb:62:69:db:10:97:5f:e1:44:85:c1: c2:61:30:9c:8c:ce:5f:27:90:4a:aa:99:41:c9:0a:86:a1:75: 16:bd:19:a3:6d:92:2e:b9:70:b8:69:ab:69:2e:ca:d8:af:6a: c5:a3:c8:74:66:c0:24:9d:71:e4:f7:20:29:89:d7:8a:a8:be: e9:57:b8:35:e9:21:d5:ae:dc:9c:ed:7d:d9:03:72:8a:71:ce: 7c:a6:52:ae -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q5Q0IxMTAvBgNVBAUTKDhGODQ1MEVBMThFRDY2M0RENzYzMTM1QUM4RjlDMUEy Qjk5QkQ5NkQwHhcNMjYwMzA2MjAyNzI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMzhhZi02ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JuEmnNkKIYPiXHZdGZ38HdNzIbCnKAl1L7wn6PqbDkRdhp3hUVX0mwZZZnA DFlywWeve6JsJtvjAoGoJPq0W5tOs7Moi7Or+1mRb1D/m/crcp6DGHu2Dqye/dRu YZO7V39sUexg3/MJU2g9SwqH+yGwTbExWzuu9rytcVCMMkI6g6mYCvkZ8z5BSdmg GbUyJ6Mxev/m1Mj/wdmupX1QuJL68ViG13/MWl8LCNhWxr2lwPDkJi1T+VsvHu6P lE1U+zLhGlPc1WVyc+3tY9bQussnlCiQC6QH4MpP6wSK7YuSG1vW6751uuvz0Txx z8FpUVBFPY9cl0o4toycAnjt2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK+wecML bsbwWhS50jjd57aI3SSuMB8GA1UdIwQYMBaAFI+EUOoY7WY912MTWsj5waK5m9lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDlDQi8zRkQyRDlDNENB MkExMUVBOTVFQTg4N0ZDNEY5QUUwMi9qNFJRNmhqdFpqM1hZeE5heVBuQm9ybWIy VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o0UlE2aGp0WmozWFl4TmF5UG5Cb3JtYjJXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Q5Q0IvM0ZEMkQ5QzRDQTJBMTFFQTk1RUE4ODdGQzRGOUFFMDIvQkEzM0M0Q0M2 MzhBMTFGMDkwMDAyNTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ88cMA0GCSqGSIb3DQEBCwUAA4IBAQAZJ/Y8lJ0OhH9e6bmDvbB8 0EBv0zzIRLuXnPh9FcDoACihDGZdHOhIdioQAWeN5M5YIFJ91rwFTuURNDkWp6Vd kzaiP/KhdXLRDJbINnRs3UBjipqC3YDkkZfb+SS0kaUHFVGd7VD1SgSCL/z4JWAS 1cxEsxU+SDJDpxrGep5cCWKLnJty8K7Bwt2sEGny6bdHIiXpGaNojjbrB8y34fM4 +L6/2erfY6kO+2Jp2xCXX+FEhcHCYTCcjM5fJ5BKqplByQqGoXUWvRmjbZIuuXC4 aatpLsrYr2rFo8h0ZsAknXHk9yApideKqL7pV7g16SHVrtyc7X3ZA3KKcc58plKu -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:53 2026 by rpki-client