$ rpki-client -vvf rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/CFC4BC00EB2911ED882B8A32C4F9AE02.roa File: CFC4BC00EB2911ED882B8A32C4F9AE02.roa (raw, json) Hash identifier: 1qv+Y4Kd1SuwcWW5nSTbql7n0CDsusRmzUBuj3QR9BA= Subject key identifier: 47:89:02:21:46:02:56:91:9C:5B:F4:0F:98:44:21:5B:88:65:B9:49 Certificate issuer: /CN=A919794D/serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Certificate serial: 0219 Authority key identifier: 20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/CFC4BC00EB2911ED882B8A32C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:34:46 +0000 ROA not before: Sat 19 Apr 2025 03:28:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 151196 IP address blocks: 103.162.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919794D, serialNumber=20C01B052C1583E3687CDECBFC13E994101AD42F Validity Not Before: Apr 19 03:28:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3de06-914c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:e2:85:02:44:94:25:18:bb:1b:c1:f7:01: 80:1f:a8:e4:9c:b2:9f:c0:81:eb:e4:f0:c1:fb:10: 03:4f:a7:74:fc:43:df:f6:5b:58:46:b4:05:7e:ce: ba:fa:80:78:3f:85:9d:46:5e:57:cf:d5:19:3e:a4: 64:99:16:c5:fa:13:2d:55:45:f7:4c:8d:5d:df:23: 16:b7:f4:f7:e7:17:7e:9b:86:3e:cf:f4:58:c8:df: 37:59:d1:7e:43:9d:ec:30:2e:4e:b6:da:d5:05:17: f4:19:43:2a:60:44:37:cb:5e:bb:a8:81:fb:3a:be: cd:9c:d4:77:b5:fa:04:0f:60:37:8d:a7:66:c4:e6: 16:38:e6:fc:28:e9:f7:52:96:fd:a8:cd:c0:3b:01: 3e:bf:31:66:ad:dc:54:cc:40:52:ff:44:4f:8c:88: 61:0c:90:a6:27:95:64:22:23:93:40:93:46:a7:b6: a8:c0:63:3c:15:19:2c:f5:b2:d3:a5:6c:69:f8:be: 99:42:a7:d5:6e:65:c6:f3:7a:5c:2b:5f:6e:10:7b: 1b:57:ba:39:2d:bd:bf:bb:4a:62:04:51:0e:39:9c: ad:fc:4b:75:97:f8:f8:72:02:92:c6:2e:f6:fc:6e: c8:e1:d0:d7:1b:28:5f:eb:82:9c:96:e2:9d:f6:db: f6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:89:02:21:46:02:56:91:9C:5B:F4:0F:98:44:21:5B:88:65:B9:49 X509v3 Authority Key Identifier: keyid:20:C0:1B:05:2C:15:83:E3:68:7C:DE:CB:FC:13:E9:94:10:1A:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/IMAbBSwVg-NofN7L_BPplBAa1C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMAbBSwVg-NofN7L_BPplBAa1C8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919794D/C2CCE1DCE42411ED9AD5935FC4F9AE02/CFC4BC00EB2911ED882B8A32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.162.38.0/23 Signature Algorithm: sha256WithRSAEncryption 42:43:f7:97:7e:76:07:97:06:41:ce:a1:f0:63:f6:1c:3e:9e: 2e:b5:ef:38:66:84:ba:fc:c6:f9:4e:be:bd:cf:fd:98:02:79: 1e:9b:4d:5e:8f:e9:f4:62:a7:14:42:75:d4:78:a9:55:54:66: 57:81:da:72:be:2a:b8:54:59:1b:74:1e:29:4a:ce:5c:0c:51: 7e:54:a3:3f:42:7d:38:6d:88:c1:30:41:6b:73:10:de:9b:fb: 4b:f7:3d:0c:e9:07:1c:51:ab:46:b5:47:25:3f:1e:81:f7:98: c1:6f:30:4a:46:e2:fa:82:a2:24:2d:cf:ea:30:df:62:a9:7f: b4:2c:cd:3d:1d:5b:fb:34:a4:09:81:84:69:65:e9:92:46:d7: 22:1a:c5:22:ec:a0:3b:d6:26:a2:51:90:b8:cd:1a:e3:b3:4b: e3:9a:43:06:23:ee:e0:b7:ab:2d:23:fc:7d:75:f0:25:d7:9b: 97:64:02:29:f1:5c:ec:c0:ed:ca:19:c8:e2:7b:b8:5d:12:6d: 70:d4:d4:f6:68:77:1a:a2:e9:5c:b4:ec:58:c9:fd:b9:a7:03: 43:e4:3f:ad:75:c9:ef:a2:c6:f5:85:d9:d1:ae:6a:0f:89:ec: 96:a5:42:f0:68:53:ab:e0:97:62:ff:4a:3a:2b:07:16:64:a2: 7e:fa:26:40 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc5NEQxMTAvBgNVBAUTKDIwQzAxQjA1MkMxNTgzRTM2ODdDREVDQkZDMTNFOTk0 MTAxQUQ0MkYwHhcNMjUwNDE5MDMyODQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGUwNi05MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLzihQJElCUYuxvB9wGAH6jknLKfwIHr5PDB+xADT6d0/EPf9ltYRrQFfs66 +oB4P4WdRl5Xz9UZPqRkmRbF+hMtVUX3TI1d3yMWt/T35xd+m4Y+z/RYyN83WdF+ Q53sMC5OttrVBRf0GUMqYEQ3y167qIH7Or7NnNR3tfoED2A3jadmxOYWOOb8KOn3 Upb9qM3AOwE+vzFmrdxUzEBS/0RPjIhhDJCmJ5VkIiOTQJNGp7aowGM8FRks9bLT pWxp+L6ZQqfVbmXG83pcK19uEHsbV7o5Lb2/u0piBFEOOZyt/Et1l/j4cgKSxi72 /G7I4dDXGyhf64KcluKd9tv25QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEeJAiFG AlaRnFv0D5hEIVuIZblJMB8GA1UdIwQYMBaAFCDAGwUsFYPjaHzey/wT6ZQQGtQv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Nzk0RC9DMkNDRTFEQ0U0 MjQxMUVEOUFENTkzNUZDNEY5QUUwMi9JTUFiQlN3VmctTm9mTjdMX0JQcGxCQWEx QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNQWJCU3dWZy1Ob2ZON0xfQlBwbEJBYTFDOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc5NEQvQzJDQ0UxRENFNDI0MTFFRDlBRDU5MzVGQzRGOUFFMDIvQ0ZDNEJDMDBF QjI5MTFFRDg4MkI4QTMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6ImMA0GCSqGSIb3DQEBCwUAA4IBAQBCQ/eXfnYHlwZBzqHwY/Yc Pp4ute84ZoS6/Mb5Tr69z/2YAnkem01ej+n0YqcUQnXUeKlVVGZXgdpyviq4VFkb dB4pSs5cDFF+VKM/Qn04bYjBMEFrcxDem/tL9z0M6QccUatGtUclPx6B95jBbzBK RuL6gqIkLc/qMN9iqX+0LM09HVv7NKQJgYRpZemSRtciGsUi7KA71iaiUZC4zRrj s0vjmkMGI+7gt6stI/x9dfAl15uXZAIp8VzswO3KGcjie7hdEm1w1NT2aHcaoulc tOxYyf25pwND5D+tdcnvosb1hdnRrmoPieyWpULwaFOr4Jdi/0o6KwcWZKJ++iZA -----END CERTIFICATE-----Generated at Thu Mar 26 11:09:19 2026 by rpki-client