$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/4B2AAC20660211EA83A76342C4F9AE02.roa File: 4B2AAC20660211EA83A76342C4F9AE02.roa (raw, json) Hash identifier: KxRpdArRrMXT5a/ygMl7xsumFZrHOH0ms8Z2g2Uoc3w= Subject key identifier: BF:20:41:AA:7D:D4:7C:26:E1:5D:5D:75:48:B6:FC:ED:CA:4F:88:41 Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Certificate serial: 0AE4 Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/4B2AAC20660211EA83A76342C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:28:23 +0000 ROA not before: Wed 12 Mar 2025 19:49:02 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140085 IP address blocks: 103.148.94.0/23 maxlen: 24 2001:df2:cc80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2788 (0xae4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9 Validity Not Before: Mar 12 19:49:02 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a406b6-5ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:71:09:4c:f9:a8:92:2c:d3:24:08:ee:fa:62: 5a:88:8a:4c:9e:bb:f8:d3:03:0a:e0:60:6c:17:64: 72:21:12:21:b5:ac:ca:e9:9f:b8:de:0f:bd:a6:6e: 29:97:fc:9e:a0:0b:52:f7:1c:f4:a1:d0:47:08:f4: 3c:8a:db:7b:e8:8a:70:02:e6:87:9b:fe:72:44:51: 80:3d:80:80:3a:36:37:c0:f8:c0:a9:a2:fa:91:c3: d1:8d:ff:93:1e:76:f3:8d:08:ea:07:58:fa:32:70: 7e:71:5a:17:5c:be:9d:b5:27:7b:1a:51:b0:4d:f2: b5:01:5c:72:66:75:3e:19:0d:c6:10:29:c7:19:8c: 82:c1:ee:2b:37:21:03:d4:9a:85:20:c4:4c:b1:d0: 8c:3a:dd:be:78:a1:1b:b2:17:c0:1b:94:1d:74:10: 4d:e9:83:74:2d:fa:4d:59:6d:37:70:10:f3:92:3a: aa:6f:fa:e0:1a:2f:83:0a:36:25:7d:a8:50:9c:b4: 78:2c:c8:f5:59:62:cd:b7:2c:ec:2e:1f:4f:3c:0b: 11:d7:7e:ab:23:25:32:16:7e:e1:83:48:4f:ce:29: cf:57:2d:38:9a:59:57:0c:88:5b:e1:db:f6:ba:76: 8a:fc:de:c3:b6:3f:53:9e:6d:d3:1e:05:1f:3e:bd: 91:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:41:AA:7D:D4:7C:26:E1:5D:5D:75:48:B6:FC:ED:CA:4F:88:41 X509v3 Authority Key Identifier: keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/4B2AAC20660211EA83A76342C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.94.0/23 IPv6: 2001:df2:cc80::/48 Signature Algorithm: sha256WithRSAEncryption 46:12:fc:de:fb:3a:4b:ea:45:0d:4c:42:1a:c4:2c:60:7c:b4: d3:ce:94:3b:14:fe:e8:3a:7d:4e:3f:58:91:23:bc:12:26:51: 43:e9:5a:91:c7:61:44:dc:ec:00:3c:49:8a:c7:b1:dc:f6:8d: bd:b7:70:eb:68:4f:96:19:ec:44:b5:b4:cd:22:0a:76:fa:43: e9:e6:fc:be:ef:fa:f8:09:44:d0:eb:48:03:48:6f:06:44:c0: 0c:5d:cf:4d:e3:48:c4:31:5a:67:51:e3:a1:c1:f1:ac:64:80: 07:5e:51:0e:26:c9:4e:e8:a9:94:5a:a9:9a:7c:c3:f0:d7:eb: 6c:b7:27:c5:c7:4d:a6:39:b5:4b:48:a9:2e:c7:57:28:3e:d3: 3d:82:65:91:48:2c:2c:40:f8:df:00:35:0b:cf:28:ed:d4:a7: 61:e8:10:6d:d8:2f:2a:ba:b0:98:cb:4b:88:6f:1f:b9:58:b4: e1:ea:29:74:6a:b2:32:4f:66:1c:20:b2:b8:99:e6:a4:9b:de: f1:98:f1:f7:b4:ad:bc:64:79:24:61:75:51:27:63:29:36:25: b7:72:db:fc:88:f1:8b:6c:13:05:ed:21:25:64:ed:e6:17:d8: 6f:0c:1c:36:48:8b:65:33:c0:e6:27:c9:db:fb:90:5e:9b:e5: a9:81:75:d6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MjExMTAvBgNVBAUTKDc3QTEzNERGQTdBMjM5NEVEMjQ0NzUzOUYxM0ZFNEE4 RDFFMDU2QzkwHhcNMjUwMzEyMTk0OTAyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDZiNi01ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HEJTPmokizTJAju+mJaiIpMnrv40wMK4GBsF2RyIRIhtazK6Z+43g+9pm4p l/yeoAtS9xz0odBHCPQ8itt76IpwAuaHm/5yRFGAPYCAOjY3wPjAqaL6kcPRjf+T HnbzjQjqB1j6MnB+cVoXXL6dtSd7GlGwTfK1AVxyZnU+GQ3GECnHGYyCwe4rNyED 1JqFIMRMsdCMOt2+eKEbshfAG5QddBBN6YN0LfpNWW03cBDzkjqqb/rgGi+DCjYl fahQnLR4LMj1WWLNtyzsLh9PPAsR136rIyUyFn7hg0hPzinPVy04mllXDIhb4dv2 unaK/N7Dtj9Tnm3THgUfPr2RUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL8gQap9 1Hwm4V1ddUi2/O3KT4hBMB8GA1UdIwQYMBaAFHehNN+nojlO0kR1OfE/5KjR4FbJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgyMS8yMzlCRkM2NDY2 MDExMUVBQkVFQTA3NDFDNEY5QUUwMi9kNkUwMzZlaU9VN1NSSFU1OFRfa3FOSGdW c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2RTAzNmVpT1U3U1JIVTU4VF9rcU5IZ1Zzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUE4MjEvMjM5QkZDNjQ2NjAxMTFFQUJFRUEwNzQxQzRGOUFFMDIvNEIyQUFDMjA2 NjAyMTFFQTgzQTc2MzQyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5ReMA8EAgACMAkDBwAgAQ3yzIAwDQYJKoZIhvcNAQELBQADggEB AEYS/N77OkvqRQ1MQhrELGB8tNPOlDsU/ug6fU4/WJEjvBImUUPpWpHHYUTc7AA8 SYrHsdz2jb23cOtoT5YZ7ES1tM0iCnb6Q+nm/L7v+vgJRNDrSANIbwZEwAxdz03j SMQxWmdR46HB8axkgAdeUQ4myU7oqZRaqZp8w/DX62y3J8XHTaY5tUtIqS7HVyg+ 0z2CZZFILCxA+N8ANQvPKO3Up2HoEG3YLyq6sJjLS4hvH7lYtOHqKXRqsjJPZhwg sriZ5qSb3vGY8fe0rbxkeSRhdVEnYyk2Jbdy2/yI8YtsEwXtISVk7eYX2G8MHDZI i2UzwOYnydv7kF6b5amBddY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:00 2026 by rpki-client