$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa File: 286C872684B011F08D2ED42CC4F9AE02.roa (raw, json) Hash identifier: WVobOagpEAd84RigRT5lqEkEZLi28lRSUvzP7/VjaVk= Subject key identifier: 6A:F5:55:D1:E0:B3:9E:77:33:8B:96:0A:F2:61:25:C3:EF:91:39:0F Certificate issuer: /CN=A9149ACD/serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Certificate serial: 67 Authority key identifier: 53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa Signing time: Tue 03 Mar 2026 07:45:29 +0000 ROA not before: Tue 03 Mar 2026 07:45:28 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 153995 IP address blocks: 103.147.18.0/23 maxlen: 23 103.147.18.0/24 maxlen: 24 103.147.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149ACD, serialNumber=532E7054C471BFF2ED7A6A188ED3736365E4608A Validity Not Before: Mar 3 07:45:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a69198-f679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:6f:56:06:f2:23:29:1c:b0:e0:ba:84:19: 57:22:a2:3f:cb:d6:c3:86:a4:bc:c9:0a:21:f5:c3: ba:d0:2c:18:2f:a5:b8:73:9d:4e:98:ea:f0:76:da: b1:1e:a1:80:93:23:4b:f0:de:e5:f8:e0:da:7e:e8: 0a:9d:b5:be:ad:1b:7d:5b:48:be:7e:00:c7:d0:ec: 50:4a:67:a3:51:b1:be:2f:45:80:b8:d8:f5:f7:78: 07:8f:2e:59:fa:3d:3d:77:c5:e7:ff:92:4b:03:7e: 2b:54:d3:65:6b:00:11:bc:de:96:f8:1c:2c:70:3a: f0:80:19:79:d6:40:d4:b1:f1:85:be:58:1c:14:6f: 2a:c5:69:6a:f8:58:5a:33:fd:6c:e5:80:3c:39:78: e6:50:fd:2b:09:50:7b:ab:77:38:e3:7f:d2:da:cb: c5:12:64:d3:82:56:27:f8:c7:57:c6:7e:5f:38:46: 18:80:4a:26:03:8f:3f:3b:49:63:07:c9:16:e1:72: 11:5e:10:27:31:1f:42:a0:72:f2:d9:08:65:a8:5c: 0b:3b:af:4a:71:23:f8:c9:20:ec:68:08:07:10:2a: 3a:2e:ae:66:95:dc:d0:18:17:04:83:65:e9:9d:7a: 76:a0:02:a3:b9:a1:de:96:2e:ce:a9:4f:50:c7:dd: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F5:55:D1:E0:B3:9E:77:33:8B:96:0A:F2:61:25:C3:EF:91:39:0F X509v3 Authority Key Identifier: keyid:53:2E:70:54:C4:71:BF:F2:ED:7A:6A:18:8E:D3:73:63:65:E4:60:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/Uy5wVMRxv_LtemoYjtNzY2XkYIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uy5wVMRxv_LtemoYjtNzY2XkYIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ACD/D835A90E84AF11F0AD7CDE2BC4F9AE02/286C872684B011F08D2ED42CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.18.0/23 Signature Algorithm: sha256WithRSAEncryption 27:f0:df:39:4d:e7:c9:a2:d0:31:1a:40:bb:a0:b8:ca:ee:09: 1f:a6:c9:62:75:e9:e6:8c:e1:20:0e:7a:d6:8c:71:95:30:97: 8a:67:81:c7:ad:bf:6b:7c:62:14:5c:43:c6:32:04:b5:fd:d3: d5:9f:12:99:8a:bc:33:96:b1:c8:38:57:5b:99:0a:79:2e:3e: e9:6c:d9:9c:ae:29:fd:42:49:55:29:9a:bf:ef:d7:f0:6c:6f: 14:20:bd:5b:fd:82:1b:94:0c:c6:31:88:6e:77:19:83:3f:9d: ad:60:40:35:32:ed:0a:3a:2b:ac:63:34:77:1c:12:22:ff:d7: d4:62:28:f9:0d:a6:42:d5:18:91:ae:97:2f:ae:d9:62:76:76: 49:b7:e7:06:45:4c:b9:94:47:05:a3:7e:b3:71:21:1a:a4:c9: 54:7d:dc:8c:82:51:37:b0:d5:c4:f7:40:b2:87:b1:5b:d5:0f: 16:20:fe:ae:1e:41:8b:92:68:2a:0d:16:10:92:64:bb:24:f6: e9:ad:ab:83:a3:0b:e0:bf:ff:f4:48:a0:7a:80:d8:9d:5b:95: 02:3e:be:13:e4:51:b0:c2:ef:36:b0:b2:87:d3:f7:46:da:55: b9:fb:b2:c4:d7:e8:03:d1:28:18:e4:9c:2c:5e:c6:4f:2b:f7: 25:e1:c4:46 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUFDRDExMC8GA1UEBRMoNTMyRTcwNTRDNDcxQkZGMkVEN0E2QTE4OEVEMzczNjM2 NUU0NjA4QTAeFw0yNjAzMDMwNzQ1MjhaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTY5MTk4LWY2NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4em9WBvIjKRyw4LqEGVcioj/L1sOGpLzJCiH1w7rQLBgvpbhznU6Y6vB22rEe oYCTI0vw3uX44Np+6Aqdtb6tG31bSL5+AMfQ7FBKZ6NRsb4vRYC42PX3eAePLln6 PT13xef/kksDfitU02VrABG83pb4HCxwOvCAGXnWQNSx8YW+WBwUbyrFaWr4WFoz /WzlgDw5eOZQ/SsJUHurdzjjf9Lay8USZNOCVif4x1fGfl84RhiASiYDjz87SWMH yRbhchFeECcxH0KgcvLZCGWoXAs7r0pxI/jJIOxoCAcQKjourmaV3NAYFwSDZemd enagAqO5od6WLs6pT1DH3a/lAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUavVV0eCz nnczi5YK8mElw++ROQ8wHwYDVR0jBBgwFoAUUy5wVMRxv/LtemoYjtNzY2XkYIow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QUNEL0Q4MzVBOTBFODRB RjExRjBBRDdDREUyQkM0RjlBRTAyL1V5NXdWTVJ4dl9MdGVtb1lqdE56WTJYa1lJ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVXk1d1ZNUnh2X0x0ZW1vWWp0TnpZMlhrWUlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUFDRC9EODM1QTkwRTg0QUYxMUYwQUQ3Q0RFMkJDNEY5QUUwMi8yODZDODcyNjg0 QjAxMUYwOEQyRUQ0MkNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnkxIwDQYJKoZIhvcNAQELBQADggEBACfw3zlN58mi0DEaQLuguMru CR+myWJ16eaM4SAOetaMcZUwl4pngcetv2t8YhRcQ8YyBLX909WfEpmKvDOWscg4 V1uZCnkuPuls2ZyuKf1CSVUpmr/v1/BsbxQgvVv9ghuUDMYxiG53GYM/na1gQDUy 7Qo6K6xjNHccEiL/19RiKPkNpkLVGJGuly+u2WJ2dkm35wZFTLmURwWjfrNxIRqk yVR93IyCUTew1cT3QLKHsVvVDxYg/q4eQYuSaCoNFhCSZLsk9umtq4OjC+C///RI oHqA2J1blQI+vhPkUbDC7zawsofT90baVbn7ssTX6APRKBjknCxexk8r9yXhxEY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:02 2026 by rpki-client