$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa File: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (raw, json) Hash identifier: 5JfyUZ+lxYPJe3xUS/Dx+r3pDRFbzVQOEdGRzrcqB5s= Subject key identifier: A3:4A:44:43:FA:C3:51:3B:5C:56:0E:9D:35:10:27:FF:D6:F3:52:2F Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Certificate serial: 016C Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:17:48 +0000 ROA not before: Sat 05 Apr 2025 05:40:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152661 IP address blocks: 203.28.104.0/23 maxlen: 23 203.28.104.0/24 maxlen: 24 203.28.105.0/24 maxlen: 24 2401:8d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Validity Not Before: Apr 5 05:40:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5aa1b-39db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:c0:4b:3f:0d:05:43:21:43:02:38:a5:5c: 17:1f:a8:a4:03:8c:4e:31:68:11:2c:78:12:45:78: 63:d3:9e:1f:dd:f8:c4:4b:c1:e4:ac:46:92:81:15: cc:c5:ee:e2:cf:3e:ad:5e:f0:37:e9:ed:83:8f:3d: b6:f8:f6:9a:a2:2e:92:4c:ab:d9:5b:36:57:96:53: c0:85:78:fe:f1:a5:92:42:e5:f5:7c:a3:cc:47:8b: 92:76:73:39:7d:9c:9e:cd:38:d6:5e:77:12:e6:06: 34:fa:b1:c5:98:6e:a7:f1:96:08:a5:6c:86:c7:7b: 4a:ce:71:b0:da:27:6c:60:ec:92:cc:e6:d4:0c:97: 38:c3:d9:2b:95:85:de:92:27:93:f8:e5:c8:93:1e: 93:8e:06:db:97:2f:6f:22:73:f6:e1:14:32:57:dd: c0:18:9b:8b:c1:4e:d5:9b:77:8a:ad:bc:ac:a1:c2: 82:79:c2:55:ea:a0:04:b0:75:fe:86:7f:22:9c:49: 3e:85:91:1c:55:38:62:67:9c:ee:a0:c7:46:d1:56: e8:0d:35:c8:06:99:05:01:64:14:b7:d2:da:77:30: 3d:66:09:43:73:2b:57:eb:18:7d:41:a7:15:33:a3: cb:8c:f5:8a:26:04:1e:cf:54:cd:ff:ff:6b:64:f8: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4A:44:43:FA:C3:51:3B:5C:56:0E:9D:35:10:27:FF:D6:F3:52:2F X509v3 Authority Key Identifier: keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.104.0/23 IPv6: 2401:8d60::/32 Signature Algorithm: sha256WithRSAEncryption 53:2c:16:b1:50:25:d3:85:4b:90:5a:5f:29:4a:3b:35:10:98: 8f:cd:3a:0f:63:76:52:e4:15:cd:d7:49:e9:96:92:a1:cf:20: 9a:06:45:ef:43:5d:0e:33:4c:08:96:7c:6f:e6:2a:55:5f:0f: 35:f2:81:4a:c8:04:cc:1c:d2:3d:97:e4:87:02:62:16:0e:a2: 4c:f2:b3:e9:c0:00:23:76:62:e1:a1:dc:af:12:18:f8:3d:92: 20:6b:5d:74:55:77:27:4a:28:3b:6c:d2:e6:4f:61:8b:7d:f7: 34:e5:5a:f8:e9:83:9e:49:8d:53:06:b5:fa:cd:51:5a:1d:c9: a3:cc:30:89:4c:41:7d:c9:8b:8e:6a:b0:30:99:79:af:e8:07: f4:8a:6d:9d:87:dd:e3:38:44:e1:9f:8c:36:70:56:2b:48:c2: ce:17:b8:41:72:7a:a6:d9:17:f6:e6:99:61:7d:cb:1d:db:b6: e3:da:52:05:b2:bb:d5:a4:59:f9:76:bd:38:dc:2c:f7:c1:27: 79:4e:7a:2d:d2:c5:f8:c4:b3:a2:e7:74:5c:18:ee:c7:0e:37: 31:60:e8:5c:8f:0f:07:fc:de:9f:cd:6b:f5:d1:16:61:6d:7b: fc:92:d8:66:ad:0f:e3:cc:0d:7f:c0:30:17:5d:80:ee:0d:ad: 2c:5c:11:ca -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2 MjNFRTNDOUUwHhcNMjUwNDA1MDU0MDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWExYi0zOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4fASz8NBUMhQwI4pVwXH6ikA4xOMWgRLHgSRXhj054f3fjES8HkrEaSgRXM xe7izz6tXvA36e2Djz22+Paaoi6STKvZWzZXllPAhXj+8aWSQuX1fKPMR4uSdnM5 fZyezTjWXncS5gY0+rHFmG6n8ZYIpWyGx3tKznGw2idsYOySzObUDJc4w9krlYXe kieT+OXIkx6Tjgbbly9vInP24RQyV93AGJuLwU7Vm3eKrbysocKCecJV6qAEsHX+ hn8inEk+hZEcVThiZ5zuoMdG0VboDTXIBpkFAWQUt9LadzA9ZglDcytX6xh9QacV M6PLjPWKJgQez1TN//9rZPgk1QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKNKREP6 w1E7XFYOnTUQJ//W81IvMB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VGMUQvQkE5Q0Q4QUNFQ0U2MTFFRUFBRTlFODFFQzRGOUFFMDIvMUFFN0VENDZF Q0U3MTFFRUIxMkY5QTFGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQByxxoMA0EAgACMAcDBQAkAY1gMA0GCSqGSIb3DQEBCwUAA4IBAQBT LBaxUCXThUuQWl8pSjs1EJiPzToPY3ZS5BXN10nplpKhzyCaBkXvQ10OM0wIlnxv 5ipVXw818oFKyATMHNI9l+SHAmIWDqJM8rPpwAAjdmLhodyvEhj4PZIga110VXcn Sig7bNLmT2GLffc05Vr46YOeSY1TBrX6zVFaHcmjzDCJTEF9yYuOarAwmXmv6Af0 im2dh93jOEThn4w2cFYrSMLOF7hBcnqm2Rf25plhfcsd27bj2lIFsrvVpFn5dr04 3Cz3wSd5Tnot0sX4xLOi53RcGO7HDjcxYOhcjw8H/N6fzWv10RZhbXv8kthmrQ/j zA1/wDAXXYDuDa0sXBHK -----END CERTIFICATE-----Generated at Thu Mar 26 13:19:59 2026 by rpki-client