$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/4720EB9ED60F11EFA2510540C4F9AE02.roa File: 4720EB9ED60F11EFA2510540C4F9AE02.roa (raw, json) Hash identifier: X5o4ErE3QQgVkIVQBrSsijB4A+S0bRzh86+XXBSLAYI= Subject key identifier: B0:2D:FC:10:36:EC:0D:1D:3E:FA:46:E0:4A:FA:F1:03:2C:CD:9B:2B Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: D4 Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/4720EB9ED60F11EFA2510540C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:17:03 +0000 ROA not before: Thu 03 Apr 2025 07:03:54 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133394 IP address blocks: 103.226.53.0/24 maxlen: 24 103.239.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: Apr 3 07:03:54 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a9ef-0e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:52:45:9d:8a:c0:f7:dc:09:4a:22:98:ea: b6:94:ec:a2:21:92:39:78:c1:5c:33:55:a6:eb:8a: 48:ee:d4:dd:2e:04:cb:9e:98:cc:39:f7:e1:d1:ec: a8:73:88:c8:25:9c:66:f3:d2:ae:d1:de:53:cb:2e: d1:f0:b5:ba:bf:95:35:38:37:6d:6d:a5:61:51:78: 76:78:ff:ac:89:26:48:10:fa:bb:5d:5b:04:1a:26: 58:2e:ef:92:94:eb:9a:ac:a3:78:45:2b:88:76:64: 33:4e:98:74:35:79:a5:43:c6:ba:37:0c:53:75:15: 85:cc:6f:a7:0f:0f:bc:07:ac:56:3a:43:d8:cd:47: 20:34:88:54:c0:6a:91:cd:d4:35:96:25:aa:e4:8c: e6:32:b2:b9:1c:76:c4:5e:b5:05:5e:72:6c:0d:20: e4:05:34:28:40:2c:3b:40:48:ab:30:11:50:12:40: cc:f2:33:da:57:db:15:1d:90:68:ce:cb:c8:ab:e2: 99:c0:19:6a:6a:a3:3a:e7:eb:c9:72:32:2c:70:45: 22:19:33:f6:29:fe:f9:cd:d0:dd:3b:b3:8b:40:a2: a0:b3:32:a3:26:a2:be:6f:78:4c:ba:28:22:fd:60: c1:9c:8d:b7:cf:81:88:63:e2:af:de:04:2b:35:47: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2D:FC:10:36:EC:0D:1D:3E:FA:46:E0:4A:FA:F1:03:2C:CD:9B:2B X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/4720EB9ED60F11EFA2510540C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.226.53.0/24 103.239.76.0/23 Signature Algorithm: sha256WithRSAEncryption 45:ca:27:0e:4b:29:b9:dc:d8:b2:52:44:b1:fb:20:88:51:2d: 86:7f:52:68:eb:50:48:fb:ba:19:95:df:f1:62:dd:35:48:de: 84:2f:6a:6d:d3:68:e3:da:ee:ab:a9:8a:fc:b5:de:ee:9d:66: f0:e4:b0:43:50:fe:bf:09:88:06:56:47:34:00:ab:57:da:54: f1:cb:ea:4c:f2:79:d6:32:c1:ee:08:3e:c8:7a:cf:ae:82:c2: e7:4c:26:bd:e1:33:4f:f1:19:77:fe:df:a3:91:f0:56:d7:d2: cf:d9:60:b1:30:5b:74:d2:9b:d8:2d:31:34:d9:e7:86:c2:ed: 8a:95:8c:51:53:e8:4b:10:89:fd:1a:0e:86:78:4c:71:f4:b0: 39:ed:18:e1:33:d7:60:f5:ff:78:00:0c:e3:83:af:da:1d:15: b7:8d:62:ac:f0:18:09:0e:7b:9a:e4:dd:71:ef:f6:87:4f:13: cc:f1:17:ad:de:2a:75:24:43:29:47:c1:eb:a6:1e:55:f0:62: c2:ea:77:f0:ca:1c:ca:8b:c1:50:3a:44:64:e3:80:c2:eb:4a: 41:e7:c7:ac:d3:b7:09:be:55:fc:df:5e:2f:f7:c7:19:4e:c8: 46:0a:a0:db:c5:17:43:e8:21:9a:bd:67:06:1a:38:d2:5c:c4: a4:97:66:30 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1OUQxMTAvBgNVBAUTKEZCNDg4NTY4RTc1MjBCQzc4MkExMTk4OTc2MjkwMzBF RDA2OTVDREIwHhcNMjUwNDAzMDcwMzU0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTllZi0wZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wtSRZ2KwPfcCUoimOq2lOyiIZI5eMFcM1Wm64pI7tTdLgTLnpjMOffh0eyo c4jIJZxm89Ku0d5Tyy7R8LW6v5U1ODdtbaVhUXh2eP+siSZIEPq7XVsEGiZYLu+S lOuarKN4RSuIdmQzTph0NXmlQ8a6NwxTdRWFzG+nDw+8B6xWOkPYzUcgNIhUwGqR zdQ1liWq5IzmMrK5HHbEXrUFXnJsDSDkBTQoQCw7QEirMBFQEkDM8jPaV9sVHZBo zsvIq+KZwBlqaqM65+vJcjIscEUiGTP2Kf75zdDdO7OLQKKgszKjJqK+b3hMuigi /WDBnI23z4GIY+Kv3gQrNUdgawIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLAt/BA2 7A0dPvpG4Er68QMszZsrMB8GA1UdIwQYMBaAFPtIhWjnUgvHgqEZiXYpAw7QaVzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU5RC8wQjNGNjY1QUQ2 MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4ZUNvUm1KZGlrRER0QnBY TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQ1OUQvMEIzRjY2NUFENjBGMTFFRkIwRkE1MzNGQzRGOUFFMDIvNDcyMEVCOUVE NjBGMTFFRkEyNTEwNTQwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ+I1AwQBZ+9MMA0GCSqGSIb3DQEBCwUAA4IBAQBFyicOSym53Niy UkSx+yCIUS2Gf1Jo61BI+7oZld/xYt01SN6EL2pt02jj2u6rqYr8td7unWbw5LBD UP6/CYgGVkc0AKtX2lTxy+pM8nnWMsHuCD7Ies+ugsLnTCa94TNP8Rl3/t+jkfBW 19LP2WCxMFt00pvYLTE02eeGwu2KlYxRU+hLEIn9Gg6GeExx9LA57RjhM9dg9f94 AAzjg6/aHRW3jWKs8BgJDnua5N1x7/aHTxPM8Ret3ip1JEMpR8Hrph5V8GLC6nfw yhzKi8FQOkRk44DC60pB58es07cJvlX8314v98cZTshGCqDbxRdD6CGavWcGGjjS XMSkl2Yw -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:03 2026 by rpki-client