$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/B6EB7E8ED14511EC89527642C4F9AE02.roa File: B6EB7E8ED14511EC89527642C4F9AE02.roa (raw, json) Hash identifier: 4C5vaV8XTy4jKNN6jrtdqFgnURjoJYHwa1sm4fkGiqY= Subject key identifier: C1:A5:4B:A3:8B:92:9C:B2:9F:DB:52:17:16:38:44:10:5A:33:96:4D Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 03A6 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/B6EB7E8ED14511EC89527642C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:58:52 +0000 ROA not before: Tue 01 Jul 2025 02:07:41 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149825 IP address blocks: 103.187.28.0/23 maxlen: 23 103.187.28.0/24 maxlen: 24 103.187.29.0/24 maxlen: 24 2001:df0:b740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 934 (0x3a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Jul 1 02:07:41 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ffcc-3363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:c5:9c:29:46:3a:cb:8a:72:98:b2:a8:b2: f7:8d:c2:a0:78:cd:ac:de:d2:62:44:0e:9a:94:b8: f4:da:35:e3:11:26:4e:2c:aa:ec:4d:ad:e9:0c:22: 8d:77:b4:95:ad:3b:ca:d4:b7:f7:d0:9b:87:b7:24: a2:c7:8f:d1:3b:4e:21:90:e8:79:0c:c3:00:dc:1d: 53:05:0f:b7:99:1b:5c:56:0a:96:b4:2b:97:3b:a4: c0:fa:b9:af:0c:17:00:b6:87:7d:e0:01:19:de:4d: d3:9b:9f:ef:92:45:f8:2e:50:db:94:20:b8:a4:fe: 9c:33:ed:98:1b:72:9c:92:cc:96:e6:8e:09:37:5b: 98:e1:89:50:58:98:76:ae:54:99:2b:f3:d3:aa:9d: ae:aa:da:9f:4d:16:47:b0:31:14:a2:da:54:b4:c6: da:97:0e:a5:78:60:64:8d:a3:08:c3:ef:8e:ce:22: d7:10:0d:aa:0b:ca:1f:15:91:28:4d:e1:53:f1:ec: 0c:68:42:8b:5b:cc:71:01:c6:44:a0:8e:13:49:c6: 4c:21:32:7e:a4:d2:b7:2a:77:dd:e4:bf:cf:ee:90: 5c:f3:ec:98:0d:3e:84:d8:35:3d:6f:60:db:da:bd: 48:92:18:b5:68:81:02:be:94:7d:2e:13:92:be:0f: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A5:4B:A3:8B:92:9C:B2:9F:DB:52:17:16:38:44:10:5A:33:96:4D X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/B6EB7E8ED14511EC89527642C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.187.28.0/23 IPv6: 2001:df0:b740::/48 Signature Algorithm: sha256WithRSAEncryption 8e:ba:bc:24:e2:7f:f7:0f:b3:74:81:84:d2:5e:41:ac:2f:21: a0:07:92:c9:f7:4e:be:cd:79:b5:54:f4:9d:f6:23:d6:f8:99: d9:57:bd:1c:73:eb:26:4a:54:de:10:97:87:04:d9:73:f7:f1: 54:23:bb:b5:83:fa:db:00:95:e4:a3:64:f8:28:a8:4b:24:ba: 4b:55:ae:92:9b:58:4d:53:5b:2e:bc:f9:12:0e:cd:2c:25:1e: d2:47:44:e4:3a:a4:8b:2e:69:e1:4a:b1:13:52:aa:17:ae:80: d8:7f:eb:0b:47:9b:50:f6:65:2e:5f:30:17:b3:70:f7:ac:15: 28:24:57:3e:62:66:03:e4:16:5a:dc:53:26:c7:66:00:30:90: 22:6a:53:99:b0:9b:82:82:29:fa:16:3a:f1:4f:53:63:e3:08: 48:82:99:85:4f:51:0e:82:0d:e6:ef:df:81:ca:67:cb:dd:03: 94:5b:96:de:52:1d:bd:6a:f1:5a:72:73:62:6b:bc:34:26:16: cb:c1:ac:63:a7:f7:bf:7d:3b:f2:bd:cd:7e:15:42:8a:72:99: d2:7a:13:09:09:b1:b0:ee:7b:ba:aa:58:2b:39:52:d2:a2:29: 3b:9c:aa:c8:d2:be:f5:6b:18:3d:44:e4:f6:22:6b:8e:4e:d3: e5:a9:6a:0e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjUwNzAxMDIwNzQxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmZjYy0zMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xzFnClGOsuKcpiyqLL3jcKgeM2s3tJiRA6alLj02jXjESZOLKrsTa3pDCKN d7SVrTvK1Lf30JuHtySix4/RO04hkOh5DMMA3B1TBQ+3mRtcVgqWtCuXO6TA+rmv DBcAtod94AEZ3k3Tm5/vkkX4LlDblCC4pP6cM+2YG3KcksyW5o4JN1uY4YlQWJh2 rlSZK/PTqp2uqtqfTRZHsDEUotpUtMbalw6leGBkjaMIw++OziLXEA2qC8ofFZEo TeFT8ewMaEKLW8xxAcZEoI4TScZMITJ+pNK3Knfd5L/P7pBc8+yYDT6E2DU9b2Db 2r1Ikhi1aIECvpR9LhOSvg8XpwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMGlS6OL kpyyn9tSFxY4RBBaM5ZNMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlERjUvQzI0MEI3OTREMTQxMTFFQ0E1NTM4NDNBQzRGOUFFMDIvQjZFQjdFOEVE MTQ1MTFFQzg5NTI3NjQyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7scMA8EAgACMAkDBwAgAQ3wt0AwDQYJKoZIhvcNAQELBQADggEB AI66vCTif/cPs3SBhNJeQawvIaAHksn3Tr7NebVU9J32I9b4mdlXvRxz6yZKVN4Q l4cE2XP38VQju7WD+tsAleSjZPgoqEskuktVrpKbWE1TWy68+RIOzSwlHtJHROQ6 pIsuaeFKsRNSqheugNh/6wtHm1D2ZS5fMBezcPesFSgkVz5iZgPkFlrcUybHZgAw kCJqU5mwm4KCKfoWOvFPU2PjCEiCmYVPUQ6CDebv34HKZ8vdA5Rblt5SHb1q8Vpy c2JrvDQmFsvBrGOn9799O/K9zX4VQopymdJ6EwkJsbDue7qqWCs5UtKiKTucqsjS vvVrGD1E5PYia45O0+Wpag4= -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:32 2026 by rpki-client