$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/28DA447C289B11EAA1EA9B53C4F9AE02.roa File: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (raw, json) Hash identifier: +QsBublCSi/Ra5CJk1uOnK17kaA8DRCpH5g6/7+9Qrg= Subject key identifier: 32:00:14:AB:A5:20:C1:C2:0C:61:1E:F2:98:B1:15:2C:79:1D:F2:B3 Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Certificate serial: 1027 Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/28DA447C289B11EAA1EA9B53C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:32:41 +0000 ROA not before: Tue 02 Sep 2025 18:07:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138324 IP address blocks: 103.123.75.0/24 maxlen: 24 103.138.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4135 (0x1027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Validity Not Before: Sep 2 18:07:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a45c19-7520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:6e:95:36:f4:6b:9e:d4:be:f2:97:70:1a: c2:64:1c:f2:a6:27:61:7a:b9:e4:2a:9f:15:a6:34: 88:cd:61:dc:78:47:bb:1c:59:ea:26:61:61:3b:7f: ac:40:2b:60:ae:bf:d3:d2:26:15:37:50:46:69:07: 82:ba:be:f6:52:12:d1:a0:8d:bd:b9:d3:f5:57:92: 33:05:46:e5:49:14:85:b4:70:4f:eb:7d:5a:47:ce: 5d:17:52:67:8f:00:e5:6a:92:c4:13:d3:18:e9:2b: b9:d0:70:5b:7c:ad:0c:a8:b2:65:03:43:8f:5d:33: 96:5e:f7:bd:52:2e:f8:73:e5:47:86:f7:3d:8d:60: 87:f4:5d:53:78:98:e7:ca:13:b5:4d:57:3e:6b:b3: 59:25:67:ba:19:2d:f8:00:33:58:92:6b:bc:60:2d: d7:57:0c:48:2b:e5:57:f2:3d:95:cf:c1:64:cf:d3: 5e:d7:b1:94:ca:52:06:ee:54:6d:f4:e5:c4:78:20: a6:94:38:d5:2b:62:ed:b4:05:72:72:d4:f6:0c:53: 27:e7:10:fc:eb:f4:b7:31:4d:92:bf:b1:01:e2:43: 72:0b:f3:aa:58:7b:ab:a7:d7:5a:9d:5f:e2:a6:75: c0:61:7a:bc:09:a7:5b:be:05:3b:a7:ed:3a:10:06: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:14:AB:A5:20:C1:C2:0C:61:1E:F2:98:B1:15:2C:79:1D:F2:B3 X509v3 Authority Key Identifier: keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/28DA447C289B11EAA1EA9B53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.75.0/24 103.138.11.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:c3:c8:da:af:7a:f9:33:8d:e5:4d:cb:28:62:c7:4a:7f:c0: b4:66:4c:23:e2:09:b3:82:5b:8b:eb:d1:c7:a1:b2:f2:2e:2f: f2:a2:71:52:f6:49:5e:34:a4:9b:5a:e6:ae:0f:62:c1:b9:90: a2:ab:1e:33:6b:a7:66:21:bb:9c:ba:ef:fb:bb:89:b5:db:4b: b4:f4:b2:8f:31:97:21:bd:38:6d:6a:08:fa:57:54:50:7a:c0: f0:98:49:3a:8c:7b:0e:c8:1d:4a:3a:e9:b1:d9:fb:86:25:d7: 44:a7:3c:13:e3:86:44:df:bf:59:b7:04:b4:c6:e0:2d:f8:21: 9e:8a:16:c6:a1:f0:04:10:0f:4c:a5:0e:bc:d2:d5:1b:8c:64: 37:9c:08:27:80:10:a8:58:b1:3b:16:49:0d:5a:6a:a0:04:7d: 36:15:a4:99:e3:05:25:d9:a8:3f:53:44:f3:b0:8b:27:ac:46: f8:7e:8a:4a:12:e1:b2:df:74:6a:33:74:b1:c3:6c:33:f1:7b: 16:d2:b7:46:9a:e4:48:16:9b:ae:49:9a:e1:f4:49:c6:01:5e: 44:50:9a:a8:37:d0:59:4e:cb:2b:59:8d:17:ee:09:f8:10:6a: 59:f4:91:f9:89:98:48:cf:aa:61:ec:f6:a8:60:e0:12:4e:28: 1b:54:d0:00 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICECcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1 OEQ1NDg1NjUwHhcNMjUwOTAyMTgwNzQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWMxOS03NTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fdulTb0a57UvvKXcBrCZBzypidhernkKp8VpjSIzWHceEe7HFnqJmFhO3+s QCtgrr/T0iYVN1BGaQeCur72UhLRoI29udP1V5IzBUblSRSFtHBP631aR85dF1Jn jwDlapLEE9MY6Su50HBbfK0MqLJlA0OPXTOWXve9Ui74c+VHhvc9jWCH9F1TeJjn yhO1TVc+a7NZJWe6GS34ADNYkmu8YC3XVwxIK+VX8j2Vz8Fkz9Ne17GUylIG7lRt 9OXEeCCmlDjVK2LttAVyctT2DFMn5xD86/S3MU2Sv7EB4kNyC/OqWHurp9danV/i pnXAYXq8CadbvgU7p+06EAYjJwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDIAFKul IMHCDGEe8pixFSx5HfKzMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0 MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE4QkUvOTAxOUQxMjA2NDAxMTFFOThFRjZEQzZGQzRGOUFFMDIvMjhEQTQ0N0My ODlCMTFFQUExRUE5QjUzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ3tLAwQAZ4oLMA0GCSqGSIb3DQEBCwUAA4IBAQBcw8jar3r5M43l TcsoYsdKf8C0Zkwj4gmzgluL69HHobLyLi/yonFS9kleNKSbWuauD2LBuZCiqx4z a6dmIbucuu/7u4m120u09LKPMZchvThtagj6V1RQesDwmEk6jHsOyB1KOumx2fuG JddEpzwT44ZE379ZtwS0xuAt+CGeihbGofAEEA9MpQ680tUbjGQ3nAgngBCoWLE7 FkkNWmqgBH02FaSZ4wUl2ag/U0TzsIsnrEb4fopKEuGy33RqM3Sxw2wz8XsW0rdG muRIFpuuSZrh9EnGAV5EUJqoN9BZTssrWY0X7gn4EGpZ9JH5iZhIz6ph7PaoYOAS TigbVNAA -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:26 2026 by rpki-client