$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa File: F86B8216BFED11EABE972E5AC4F9AE02.roa (raw, json) Hash identifier: gfpq5Vgb/YI4qo4hAIBsJzMcZgPK7w4lTbQ0JqnYdL0= Subject key identifier: D6:6A:E3:34:74:BA:B3:A1:3C:4F:D9:07:68:00:FB:34:C3:DD:3F:45 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 0924 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:02:38 +0000 ROA not before: Mon 02 Feb 2026 20:17:20 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132827 IP address blocks: 103.28.168.0/24 maxlen: 24 103.28.169.0/24 maxlen: 24 103.28.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Feb 2 20:17:20 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a4631e-f2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:c6:d3:e4:eb:3f:6d:f0:67:08:bf:ac:47: 4e:d7:d4:19:04:d8:6c:60:75:77:21:13:23:9b:63: af:ee:c3:85:42:bf:86:a3:87:ee:b1:07:fa:a1:8d: a1:d2:c1:36:2f:ee:dd:76:da:4c:47:44:d5:06:d0: b6:72:11:43:41:e5:86:4c:2d:62:62:e8:c2:32:ff: 85:73:d5:79:3c:f6:44:f8:e0:07:4e:63:8a:27:34: cb:28:ea:76:51:27:11:e2:f8:d9:69:fa:b1:d7:13: 47:e2:3b:88:ff:d8:4e:b5:1a:bd:27:0b:00:02:58: d8:55:1d:f2:86:a7:77:2d:62:d7:13:b5:5c:2a:70: 56:8c:10:3c:1a:cd:47:52:aa:75:6b:8a:f9:93:fe: 79:af:21:55:e8:57:22:fa:37:b6:01:60:32:53:bb: 4b:02:68:f8:c9:8e:80:39:58:fe:ca:10:56:4f:1f: a1:d1:89:80:b6:f5:ff:5a:d2:c5:b9:a8:37:33:e0: cd:f8:a7:76:25:d5:cb:8b:a5:a8:9c:62:4f:c8:f8: 10:be:78:70:5c:df:49:20:07:f6:f0:c4:6e:f5:d2: 2e:7d:f8:64:9a:f8:dc:bd:56:31:1e:f6:21:67:19: 01:2e:05:66:a3:dd:01:5e:7c:6a:6c:e5:8d:f4:91: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6A:E3:34:74:BA:B3:A1:3C:4F:D9:07:68:00:FB:34:C3:DD:3F:45 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/F86B8216BFED11EABE972E5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.28.168.0-103.28.170.255 Signature Algorithm: sha256WithRSAEncryption be:d8:f3:ff:36:0b:35:e2:87:68:bb:b9:e8:32:ac:d8:f8:40: 7a:d9:e2:71:76:ec:1a:7f:10:4e:db:1d:3e:2b:f2:ba:33:9e: a8:79:6a:dc:f0:f9:9c:35:94:a3:ea:7b:95:cd:cd:0d:c0:79: 15:e8:dd:95:c7:12:5d:46:ac:86:01:3b:35:41:ff:31:cd:3c: 5c:33:e6:ae:62:f4:29:75:f3:59:bd:ca:03:97:28:10:da:db: 8c:2f:10:eb:b2:c1:88:be:a6:f8:2c:e6:1e:cc:db:97:15:46: c2:f3:8b:2f:72:36:33:6a:e1:44:e3:9f:9c:92:91:80:05:67: e7:35:b1:78:bd:85:82:89:e9:68:34:65:c9:b9:6a:f7:93:92: 7a:b9:bd:04:b8:41:f4:b0:f8:f7:e5:14:08:92:c0:74:9e:03: 10:73:b2:80:0e:01:c0:7d:d1:5e:7c:54:eb:97:5e:8d:18:70: 37:a6:8f:7e:89:bc:ea:73:c9:e4:a1:b8:0f:09:46:8c:24:0d: 01:44:86:7a:48:2f:e6:3a:5c:55:c0:76:55:94:05:5e:cf:3e: b1:18:39:ab:88:3b:be:bf:15:5b:dc:7f:06:65:bc:36:16:57: d3:d2:47:ca:09:43:cf:ae:d8:d2:23:74:48:c7:63:da:8e:30: a3:07:d1:82 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjYwMjAyMjAxNzIwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjMxZS1mMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhLG0+TrP23wZwi/rEdO19QZBNhsYHV3IRMjm2Ov7sOFQr+Go4fusQf6oY2h 0sE2L+7ddtpMR0TVBtC2chFDQeWGTC1iYujCMv+Fc9V5PPZE+OAHTmOKJzTLKOp2 UScR4vjZafqx1xNH4juI/9hOtRq9JwsAAljYVR3yhqd3LWLXE7VcKnBWjBA8Gs1H Uqp1a4r5k/55ryFV6Fci+je2AWAyU7tLAmj4yY6AOVj+yhBWTx+h0YmAtvX/WtLF uag3M+DN+Kd2JdXLi6WonGJPyPgQvnhwXN9JIAf28MRu9dIuffhkmvjcvVYxHvYh ZxkBLgVmo90BXnxqbOWN9JFCIwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFNZq4zR0 urOhPE/ZB2gA+zTD3T9FMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0ZBMUQvOUVFQTRENjhCRkVDMTFFQTg5OTI5QTU4QzRGOUFFMDIvRjg2QjgyMTZC RkVEMTFFQUJFOTcyRTVBQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBANnHKgDBABnHKowDQYJKoZIhvcNAQELBQADggEBAL7Y8/82CzXi h2i7uegyrNj4QHrZ4nF27Bp/EE7bHT4r8roznqh5atzw+Zw1lKPqe5XNzQ3AeRXo 3ZXHEl1GrIYBOzVB/zHNPFwz5q5i9Cl181m9ygOXKBDa24wvEOuywYi+pvgs5h7M 25cVRsLziy9yNjNq4UTjn5ySkYAFZ+c1sXi9hYKJ6Wg0Zcm5aveTknq5vQS4QfSw +PflFAiSwHSeAxBzsoAOAcB90V58VOuXXo0YcDemj36JvOpzyeShuA8JRowkDQFE hnpIL+Y6XFXAdlWUBV7PPrEYOauIO76/FVvcfwZlvDYWV9PSR8oJQ8+u2NIjdEjH Y9qOMKMH0YI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:20 2026 by rpki-client