$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa File: D11C8B12DB7111E981104A54C4F9AE02.roa (raw, json) Hash identifier: iRh85DKNgJv3AbDIde7UD24KtZKvMF6kuxGkkUfsSeE= Subject key identifier: 09:39:18:5B:26:B6:77:EB:8E:E9:5B:F7:58:B1:92:87:96:5E:21:39 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0DAB Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:22:04 +0000 ROA not before: Fri 02 May 2025 18:26:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139011 IP address blocks: 103.138.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3499 (0xdab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: May 2 18:26:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4053c-af39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:79:d6:96:72:95:53:b0:13:d5:0c:88:94: 4e:70:24:f1:ce:81:82:71:70:f5:02:88:60:c2:30: c4:e6:16:cb:c4:84:a4:bf:59:c2:83:b1:b7:df:07: 75:70:d8:10:5b:83:c4:c6:b9:a7:65:c4:ab:93:1c: 0b:a8:b8:bb:9d:a5:51:da:2f:ee:21:e8:4e:43:f0: b6:d7:16:90:15:ab:30:d3:cb:0a:a7:f3:5c:aa:34: 5b:45:6a:88:fa:b4:24:3b:b2:6f:5a:d2:1e:f6:55: fc:c7:41:67:1e:ab:92:54:8a:17:7a:33:08:95:ff: e7:0d:1d:f2:63:a3:7b:27:69:76:77:90:f0:8b:6c: ee:87:d6:33:60:b4:8e:93:6e:f6:0d:f9:ae:13:47: ce:81:d9:20:95:7e:fb:20:c1:8c:93:f6:9f:d1:fc: 8a:ca:a6:7b:73:91:1e:cc:b8:d9:ba:8b:04:09:50: 9a:ec:aa:fd:4e:8a:74:03:d6:2f:1f:e8:ae:b4:e9: 20:36:53:e6:c1:da:98:b5:dd:a1:d0:1a:6d:09:ab: d4:72:66:8b:d1:66:d4:18:8a:cd:e6:7b:7f:81:cb: 44:b3:9a:e1:90:73:26:11:63:55:da:76:2a:4a:d6: aa:47:08:01:72:e9:ef:74:ee:56:85:f2:99:df:4f: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:39:18:5B:26:B6:77:EB:8E:E9:5B:F7:58:B1:92:87:96:5E:21:39 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/D11C8B12DB7111E981104A54C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.142.0/24 Signature Algorithm: sha256WithRSAEncryption cf:10:e1:46:a6:dc:ad:56:23:59:73:72:04:13:81:6c:a0:a2: 75:44:0c:72:49:22:e7:09:ad:0c:04:fe:69:e6:90:d3:fa:4f: ac:53:5d:dc:01:23:f9:7f:57:34:d9:91:6d:22:ef:ae:2a:03: e1:f2:8f:81:78:82:6b:4e:13:36:9a:3d:e8:c1:31:97:16:43: e3:e5:5a:d1:6f:07:5e:e2:9f:5c:83:8b:ea:86:35:8b:bd:9c: 3d:53:5e:a3:52:2e:a5:60:dc:56:ed:18:6d:0c:24:30:83:f3: c6:5c:29:f0:d6:c5:36:4a:44:9e:d1:f9:ea:66:a3:36:b4:83: 8b:95:4e:45:eb:9f:35:9a:09:6f:fb:cc:31:73:c5:dc:e7:f5: e9:8c:c6:d2:17:53:d6:51:ad:71:9b:12:cf:12:3a:9a:6b:ff: 34:43:6c:51:14:26:80:0b:e7:f1:46:75:53:0c:a1:85:91:a1: 10:32:f9:27:b1:9f:7b:2e:24:b1:3e:5b:d9:a3:aa:81:70:07: 1e:1d:fa:58:29:0e:4f:29:22:fa:8e:fc:19:52:a6:bc:d7:e0: 3c:81:07:af:fd:2e:03:1c:84:9b:60:ff:25:99:93:95:d1:ce: cc:a3:f8:55:be:84:dc:b6:eb:93:7e:c9:3b:8a:2c:34:c9:15: 57:25:1a:68 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUwNTAyMTgyNjIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDUzYy1hZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCN51pZylVOwE9UMiJROcCTxzoGCcXD1AohgwjDE5hbLxISkv1nCg7G33wd1 cNgQW4PExrmnZcSrkxwLqLi7naVR2i/uIehOQ/C21xaQFasw08sKp/NcqjRbRWqI +rQkO7JvWtIe9lX8x0FnHquSVIoXejMIlf/nDR3yY6N7J2l2d5Dwi2zuh9YzYLSO k272DfmuE0fOgdkglX77IMGMk/af0fyKyqZ7c5EezLjZuosECVCa7Kr9Top0A9Yv H+iutOkgNlPmwdqYtd2h0BptCavUcmaL0WbUGIrN5nt/gctEs5rhkHMmEWNV2nYq StaqRwgBcunvdO5WhfKZ308lNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAk5GFsm tnfrjulb91ixkoeWXiE5MB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MwRjUvMUVDNEUwOUFEQjcxMTFFOUI2MTA1MzUzQzRGOUFFMDIvRDExQzhCMTJE QjcxMTFFOTgxMTA0QTU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4qOMA0GCSqGSIb3DQEBCwUAA4IBAQDPEOFGptytViNZc3IEE4Fs oKJ1RAxySSLnCa0MBP5p5pDT+k+sU13cASP5f1c02ZFtIu+uKgPh8o+BeIJrThM2 mj3owTGXFkPj5VrRbwde4p9cg4vqhjWLvZw9U16jUi6lYNxW7RhtDCQwg/PGXCnw 1sU2SkSe0fnqZqM2tIOLlU5F6581mglv+8wxc8Xc5/XpjMbSF1PWUa1xmxLPEjqa a/80Q2xRFCaAC+fxRnVTDKGFkaEQMvknsZ97LiSxPlvZo6qBcAceHfpYKQ5PKSL6 jvwZUqa81+A8gQev/S4DHISbYP8lmZOV0c7Mo/hVvoTctuuTfsk7iiw0yRVXJRpo -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:57 2026 by rpki-client