$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/CA455C5CE0B311ECBC9BEA63C4F9AE02.roa File: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (raw, json) Hash identifier: sOH/2aZPjUSz0+vCYyAKkajRj0VfjNfhE/C/qw+lG4w= Subject key identifier: 86:EF:DF:46:83:CF:47:2A:F5:45:54:B4:10:60:37:2D:FB:10:CA:A6 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 037A Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/CA455C5CE0B311ECBC9BEA63C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:19:12 +0000 ROA not before: Tue 13 May 2025 01:28:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136471 IP address blocks: 103.89.73.0/24 maxlen: 24 103.179.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 890 (0x37a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: May 13 01:28:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a58e4f-6286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:2a:6f:63:0d:0f:da:77:9c:65:23:fa:13: 8b:8b:85:e6:90:17:2a:b6:3c:80:0d:47:a2:60:a7: 70:d5:7b:05:c4:68:13:dc:02:e6:2e:86:37:42:2b: cb:22:01:11:40:79:f7:87:b1:0e:7f:b1:9d:fa:8a: 79:53:6d:21:db:1a:d5:4d:00:2c:7d:ca:e4:fe:3d: 4d:55:4c:e7:4b:18:0f:7d:7f:6f:43:ef:f0:a9:e0: 48:9a:fa:40:73:e9:11:63:8a:52:49:b0:e8:dd:0b: e0:be:32:47:52:63:f6:fc:5b:33:f4:d1:00:f4:3d: 3b:fc:1c:78:5a:4e:88:4b:41:49:99:44:19:e9:e1: 82:ee:5f:f3:d8:b8:c2:f4:6f:78:40:7d:22:d4:be: 47:d5:2f:86:14:a6:e3:4b:22:48:fd:8d:bd:bf:ad: d1:48:09:89:63:db:82:cb:ab:a5:84:83:ed:8d:4a: 63:e7:38:0f:0f:f5:a5:65:71:2d:46:19:87:21:f9: d0:bd:a6:83:39:c7:7e:9e:1e:39:95:4a:3b:69:29: f3:e5:6f:1c:4a:e6:6d:36:29:f4:d3:eb:42:07:8e: fc:a0:ec:a3:f0:e3:78:fa:eb:9d:b4:73:df:46:60: 6c:c8:93:0a:29:32:ae:9e:d6:10:3e:8f:a9:0b:39: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EF:DF:46:83:CF:47:2A:F5:45:54:B4:10:60:37:2D:FB:10:CA:A6 X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/CA455C5CE0B311ECBC9BEA63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.89.73.0/24 103.179.116.0/24 Signature Algorithm: sha256WithRSAEncryption 28:09:68:35:94:4d:a0:c6:2c:68:dc:ad:3a:4b:fa:67:ac:cd: e0:1b:6b:7e:2d:75:f1:48:75:a5:2c:ca:ef:49:5b:20:d4:ae: f0:ad:d8:10:9e:36:1b:1a:0d:02:1b:bb:72:f2:55:2c:e3:74: 44:ec:8d:69:af:b3:fd:4b:00:17:1d:64:37:60:f2:6b:38:76: 6d:cb:9f:77:e8:fd:73:42:9e:78:4f:ed:7b:71:78:af:e1:7d: 16:d5:d9:05:d1:af:bd:17:0b:da:8a:fe:0f:d9:29:ef:b8:6f: 4a:93:24:b8:b3:ae:f5:d5:68:54:fc:70:22:96:f1:db:07:c2: 88:ad:3d:fe:3a:2d:5c:32:38:cd:03:f1:46:ae:78:74:33:43: 98:29:21:9d:99:b3:8a:ee:72:b3:70:46:f5:cb:b0:45:a6:14: 75:b4:7c:40:d1:c2:a7:54:3e:5e:4f:95:c2:95:d7:3a:35:42: 27:e7:c6:b4:98:13:34:b9:86:28:8f:45:5c:9e:ec:d6:91:be: 84:07:89:9d:83:ca:55:34:74:f9:06:d5:64:8b:9e:ea:80:19: 23:23:86:02:91:8b:9e:ea:a3:24:e4:41:a7:88:f8:5c:95:ff: 00:25:38:87:dc:45:ad:5c:b0:0f:94:c4:23:1e:e1:ce:dc:b9: de:52:84:2d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjUwNTEzMDEyODUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGU0Zi02Mjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyD4qb2MND9p3nGUj+hOLi4XmkBcqtjyADUeiYKdw1XsFxGgT3ALmLoY3QivL IgERQHn3h7EOf7Gd+op5U20h2xrVTQAsfcrk/j1NVUznSxgPfX9vQ+/wqeBImvpA c+kRY4pSSbDo3QvgvjJHUmP2/Fsz9NEA9D07/Bx4Wk6IS0FJmUQZ6eGC7l/z2LjC 9G94QH0i1L5H1S+GFKbjSyJI/Y29v63RSAmJY9uCy6ulhIPtjUpj5zgPD/WlZXEt RhmHIfnQvaaDOcd+nh45lUo7aSnz5W8cSuZtNin00+tCB478oOyj8ON4+uudtHPf RmBsyJMKKTKuntYQPo+pCzlOxwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIbv30aD z0cq9UVUtBBgNy37EMqmMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y0RjIvMzRENTU0MzJFMEFGMTFFQzgyOTAyRjZEQzRGOUFFMDIvQ0E0NTVDNUNF MEIzMTFFQ0JDOUJFQTYzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ1lJAwQAZ7N0MA0GCSqGSIb3DQEBCwUAA4IBAQAoCWg1lE2gxixo 3K06S/pnrM3gG2t+LXXxSHWlLMrvSVsg1K7wrdgQnjYbGg0CG7ty8lUs43RE7I1p r7P9SwAXHWQ3YPJrOHZty5936P1zQp54T+17cXiv4X0W1dkF0a+9Fwvaiv4P2Snv uG9KkyS4s6711WhU/HAilvHbB8KIrT3+Oi1cMjjNA/FGrnh0M0OYKSGdmbOK7nKz cEb1y7BFphR1tHxA0cKnVD5eT5XCldc6NUIn58a0mBM0uYYoj0VcnuzWkb6EB4md g8pVNHT5BtVki57qgBkjI4YCkYue6qMk5EGniPhclf8AJTiH3EWtXLAPlMQjHuHO 3LneUoQt -----END CERTIFICATE-----Generated at Thu Mar 26 11:23:49 2026 by rpki-client