$ rpki-client -vvf rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/498B6EFE942411EA816FC855C4F9AE02.roa File: 498B6EFE942411EA816FC855C4F9AE02.roa (raw, json) Hash identifier: ShVKBDsZHucxua11jITqEB/zC8bAit+Mc5m8VG1vvj4= Subject key identifier: DA:AB:13:F5:76:34:19:21:67:0E:C9:22:5C:30:B3:F5:DE:F7:1D:64 Certificate issuer: /CN=A917B413/serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Certificate serial: 0B59 Authority key identifier: 21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/498B6EFE942411EA816FC855C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:27:52 +0000 ROA not before: Sat 31 Jan 2026 19:16:13 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136217 IP address blocks: 103.83.240.0/24 maxlen: 24 103.83.241.0/24 maxlen: 24 103.83.242.0/24 maxlen: 24 103.83.243.0/24 maxlen: 24 2400:9840::/32 maxlen: 32 2400:9840::/48 maxlen: 48 2400:9840:1::/48 maxlen: 48 2400:9840:2::/48 maxlen: 48 2400:9840:3::/48 maxlen: 48 2400:9840:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B413, serialNumber=21CFE1499BA36E9416B7FEBC813C3C2EA916BC46 Validity Not Before: Jan 31 19:16:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a57438-c5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:4b:62:d6:b9:d0:4e:c1:2e:38:4e:58:ed: e9:ee:ab:d0:e7:c2:d1:28:93:d9:bc:bb:04:5b:5f: 1d:a4:43:7a:e5:ae:18:7b:cb:c2:5e:0c:b3:c6:36: f0:6e:12:a8:87:5d:8a:f6:15:03:cb:5f:6e:39:74: 04:e6:3b:21:d3:3c:2b:91:72:03:ba:f8:5e:4a:ed: df:cf:6c:b7:d1:23:9a:c6:65:e7:84:e4:21:ae:51: b6:aa:2f:c6:09:72:d1:6a:f6:76:df:60:38:0b:0b: d3:87:84:54:f3:04:50:44:f4:86:0c:96:42:08:12: a4:98:50:a1:19:88:22:5e:9e:d0:ea:42:7d:fd:03: 79:b6:3e:60:37:27:88:0e:ef:2e:67:bb:03:40:2b: 5e:f0:4b:19:de:89:5c:ea:4c:0e:ae:d1:bb:17:17: 5a:1a:24:91:ee:09:ae:f0:59:42:9d:45:32:66:df: f2:80:a0:b2:3d:d6:58:db:29:0d:9c:0d:0f:c1:03: 25:99:8d:67:fc:e4:70:18:e3:e2:4e:58:84:64:e3: df:9c:0e:2e:3f:19:56:7b:29:96:0c:4e:9a:c4:23: 85:02:6d:04:72:af:47:e6:8e:d8:f3:9a:b6:60:b3: 2f:66:dc:e7:26:d3:22:74:99:cc:b9:64:24:37:98: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AB:13:F5:76:34:19:21:67:0E:C9:22:5C:30:B3:F5:DE:F7:1D:64 X509v3 Authority Key Identifier: keyid:21:CF:E1:49:9B:A3:6E:94:16:B7:FE:BC:81:3C:3C:2E:A9:16:BC:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/Ic_hSZujbpQWt_68gTw8LqkWvEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ic_hSZujbpQWt_68gTw8LqkWvEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B413/B8FCA7BA516E11EA980A287EC4F9AE02/498B6EFE942411EA816FC855C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.83.240.0/22 IPv6: 2400:9840::/32 Signature Algorithm: sha256WithRSAEncryption b1:bd:1c:53:9a:8a:0b:ff:2f:42:08:5c:7f:0a:81:4a:6d:c2: 6a:ee:d1:92:19:9d:22:27:4d:8e:bb:a0:ab:65:c0:99:a4:4b: 6b:3e:fe:a2:fa:06:a5:df:10:ac:8e:3e:d5:49:24:d7:de:d9: 64:86:80:89:14:d1:74:97:77:36:9a:2b:50:ef:b1:09:d8:96: 5a:f5:cb:e7:33:fc:c2:04:0c:69:89:d1:40:59:3d:d1:12:cd: 51:ea:4c:a9:90:9a:68:27:7e:94:f0:fa:b5:ba:27:06:55:9d: be:08:bf:b8:4a:57:23:4b:bf:97:3a:77:38:37:a6:60:12:9a: 62:a0:de:45:26:a3:b4:cc:a6:07:14:20:60:b9:76:52:5c:da: ac:97:e7:4c:28:93:97:3a:94:e2:6c:07:79:a0:25:7a:02:c3: fb:a7:33:c0:11:36:54:6a:58:96:35:03:01:6b:bb:f7:3c:eb: 45:ae:31:f9:b4:66:21:24:5a:89:91:60:70:44:0d:3d:d4:09: 93:f5:f5:16:63:c9:05:af:98:ff:04:1e:74:ce:90:50:14:d5: b2:56:26:6a:d0:f1:dd:d5:cf:d4:5c:1d:17:db:ce:99:c5:2a: aa:50:e6:c5:0e:0b:08:d3:fa:8e:43:92:97:97:9c:d8:bf:87: 42:93:6d:ac -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0MTMxMTAvBgNVBAUTKDIxQ0ZFMTQ5OUJBMzZFOTQxNkI3RkVCQzgxM0MzQzJF QTkxNkJDNDYwHhcNMjYwMTMxMTkxNjEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzQzOC1jNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4pLYta50E7BLjhOWO3p7qvQ58LRKJPZvLsEW18dpEN65a4Ye8vCXgyzxjbw bhKoh12K9hUDy19uOXQE5jsh0zwrkXIDuvheSu3fz2y30SOaxmXnhOQhrlG2qi/G CXLRavZ232A4CwvTh4RU8wRQRPSGDJZCCBKkmFChGYgiXp7Q6kJ9/QN5tj5gNyeI Du8uZ7sDQCte8EsZ3olc6kwOrtG7FxdaGiSR7gmu8FlCnUUyZt/ygKCyPdZY2ykN nA0PwQMlmY1n/ORwGOPiTliEZOPfnA4uPxlWeymWDE6axCOFAm0Ecq9H5o7Y85q2 YLMvZtznJtMidJnMuWQkN5hl2QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNqrE/V2 NBkhZw7JIlwws/Xe9x1kMB8GA1UdIwQYMBaAFCHP4Umbo26UFrf+vIE8PC6pFrxG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjQxMy9COEZDQTdCQTUx NkUxMUVBOTgwQTI4N0VDNEY5QUUwMi9JY19oU1p1amJwUVd0XzY4Z1R3OExxa1d2 RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljX2hTWnVqYnBRV3RfNjhnVHc4THFrV3ZFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I0MTMvQjhGQ0E3QkE1MTZFMTFFQTk4MEEyODdFQzRGOUFFMDIvNDk4QjZFRkU5 NDI0MTFFQTgxNkZDODU1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1PwMA0EAgACMAcDBQAkAJhAMA0GCSqGSIb3DQEBCwUAA4IBAQCx vRxTmooL/y9CCFx/CoFKbcJq7tGSGZ0iJ02Ou6CrZcCZpEtrPv6i+gal3xCsjj7V SSTX3tlkhoCJFNF0l3c2mitQ77EJ2JZa9cvnM/zCBAxpidFAWT3REs1R6kypkJpo J36U8Pq1uicGVZ2+CL+4SlcjS7+XOnc4N6ZgEppioN5FJqO0zKYHFCBguXZSXNqs l+dMKJOXOpTibAd5oCV6AsP7pzPAETZUaliWNQMBa7v3POtFrjH5tGYhJFqJkWBw RA091AmT9fUWY8kFr5j/BB50zpBQFNWyViZq0PHd1c/UXB0X286ZxSqqUObFDgsI 0/qOQ5KXl5zYv4dCk22s -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:09 2026 by rpki-client