$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/BF77D1785DCB11EA880A7643C4F9AE02.roa File: BF77D1785DCB11EA880A7643C4F9AE02.roa (raw, json) Hash identifier: A0fYtG6N2BexE9W0qntrNVFN6Gcpgpfkbf4hLPy3YFQ= Subject key identifier: FF:E8:2D:6B:82:72:00:C4:6C:72:96:03:B3:4D:DB:7A:D7:84:9E:11 Certificate issuer: /CN=A918EC78/serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Certificate serial: 0B17 Authority key identifier: 84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/BF77D1785DCB11EA880A7643C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:46:03 +0000 ROA not before: Wed 18 Feb 2026 19:16:54 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58713 IP address blocks: 103.48.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC78, serialNumber=848A79AB5041E71CE62250B57FC1E0F54978C93A Validity Not Before: Feb 18 19:16:54 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a4512b-0641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:11:88:7f:e4:74:40:ff:0a:57:b2:30:cb: ea:36:6d:98:2b:09:f7:1d:3a:63:21:c0:76:02:cf: f5:1a:41:99:97:10:16:27:bc:61:e0:ba:48:c3:75: a4:05:7c:d7:a3:47:76:96:f2:33:6d:73:64:fa:c8: 4e:6b:0c:1c:2c:5e:a1:e6:e6:73:b3:01:4a:bc:d6: 21:a8:5a:95:f7:a0:d4:1f:ab:08:ea:57:09:d1:ab: 95:c0:d8:6c:38:97:63:4a:2d:44:ff:37:06:d7:37: 07:50:e5:38:b1:a7:c2:37:ff:86:f1:43:0c:4e:52: 56:d8:bb:e4:97:3a:8f:82:5f:2c:5c:ce:13:1b:e2: 6e:c0:4d:37:fb:df:d9:be:27:21:fd:03:70:6f:f7: 2a:6f:4d:2b:fe:cb:e1:e4:93:60:04:c8:5f:f4:92: 16:04:f3:50:da:6e:36:be:ae:b2:c1:4f:18:7b:da: 5f:b6:73:51:f0:12:e6:32:8a:d1:da:25:70:2c:45: b1:a0:bf:36:4c:ca:31:fe:fc:90:df:71:dd:d2:4c: de:34:aa:f7:a6:e8:a1:d1:88:05:d7:d8:ef:cc:b0: e5:01:dc:d4:65:2d:ab:a0:95:6f:fd:0b:cc:fd:82: 17:9f:18:f7:27:29:30:3c:01:5d:c5:cb:d3:28:e1: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E8:2D:6B:82:72:00:C4:6C:72:96:03:B3:4D:DB:7A:D7:84:9E:11 X509v3 Authority Key Identifier: keyid:84:8A:79:AB:50:41:E7:1C:E6:22:50:B5:7F:C1:E0:F5:49:78:C9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIp5q1BB5xzmIlC1f8Hg9Ul4yTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC78/192EFF085DCB11EA84E02943C4F9AE02/BF77D1785DCB11EA880A7643C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.89.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2a:25:75:bd:42:20:c6:0d:0c:c1:5c:86:12:f5:b5:56:a4: f6:36:28:26:3d:e5:84:26:5b:47:4b:e8:17:df:dd:f7:47:43: 57:fe:25:fc:e2:8e:72:61:86:40:df:87:1b:50:d8:c8:ba:f2: 8d:8c:aa:3d:64:d0:0d:07:f7:a3:2a:e5:76:1f:44:6a:7d:b8: fe:0c:67:af:4a:46:83:72:3e:f7:6b:7b:9b:36:b9:26:3d:1c: 67:f7:50:9a:ed:37:76:29:a6:ac:06:77:17:34:8d:76:7a:03: 43:d2:e6:63:b5:3a:15:08:14:66:ad:29:92:0a:a6:2a:20:04: 5e:0e:6c:c1:dd:53:14:7a:63:4a:cc:c3:60:a0:b5:bf:c1:a4: a1:18:d0:61:7e:72:b6:c5:1e:ad:85:7a:4a:11:85:a6:32:2d: 45:62:93:5a:88:10:ad:7b:d2:80:93:4b:c2:cd:48:d4:03:6e: dc:d9:53:a0:3b:f7:5e:58:a9:06:0a:01:76:6f:48:47:b2:e9: d3:ab:e7:03:71:97:eb:70:d6:92:50:65:38:8a:f1:04:80:ac: 14:b9:6d:e3:aa:a1:cf:e3:31:9c:81:08:05:1a:6c:bf:5c:02: 71:cf:f7:9d:99:11:ad:ec:a0:08:2e:78:45:79:76:7b:e0:25: fb:48:dd:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDNzgxMTAvBgNVBAUTKDg0OEE3OUFCNTA0MUU3MUNFNjIyNTBCNTdGQzFFMEY1 NDk3OEM5M0EwHhcNMjYwMjE4MTkxNjU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTEyYi0wNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq28RiH/kdED/CleyMMvqNm2YKwn3HTpjIcB2As/1GkGZlxAWJ7xh4LpIw3Wk BXzXo0d2lvIzbXNk+shOawwcLF6h5uZzswFKvNYhqFqV96DUH6sI6lcJ0auVwNhs OJdjSi1E/zcG1zcHUOU4safCN/+G8UMMTlJW2LvklzqPgl8sXM4TG+JuwE03+9/Z vich/QNwb/cqb00r/svh5JNgBMhf9JIWBPNQ2m42vq6ywU8Ye9pftnNR8BLmMorR 2iVwLEWxoL82TMox/vyQ33Hd0kzeNKr3puih0YgF19jvzLDlAdzUZS2roJVv/QvM /YIXnxj3JykwPAFdxcvTKOEvDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP/oLWuC cgDEbHKWA7NN23rXhJ4RMB8GA1UdIwQYMBaAFISKeatQQecc5iJQtX/B4PVJeMk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM3OC8xOTJFRkYwODVE Q0IxMUVBODRFMDI5NDNDNEY5QUUwMi9oSXA1cTFCQjV4em1JbEMxZjhIZzlVbDR5 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJcDVxMUJCNXh6bUlsQzFmOEhnOVVsNHlUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVDNzgvMTkyRUZGMDg1RENCMTFFQTg0RTAyOTQzQzRGOUFFMDIvQkY3N0QxNzg1 RENCMTFFQTg4MEE3NjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZzBZMA0GCSqGSIb3DQEBCwUAA4IBAQBlKiV1vUIgxg0MwVyGEvW1 VqT2NigmPeWEJltHS+gX3933R0NX/iX84o5yYYZA34cbUNjIuvKNjKo9ZNANB/ej KuV2H0Rqfbj+DGevSkaDcj73a3ubNrkmPRxn91Ca7Td2KaasBncXNI12egND0uZj tToVCBRmrSmSCqYqIAReDmzB3VMUemNKzMNgoLW/waShGNBhfnK2xR6thXpKEYWm Mi1FYpNaiBCte9KAk0vCzUjUA27c2VOgO/deWKkGCgF2b0hHsunTq+cDcZfrcNaS UGU4ivEEgKwUuW3jqqHP4zGcgQgFGmy/XAJxz/edmRGt7KAILnhFeXZ74CX7SN3M -----END CERTIFICATE-----Generated at Thu Mar 26 14:58:22 2026 by rpki-client