$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa File: F47B2136202611F08C91C683C4F9AE02.roa (raw, json) Hash identifier: u4GuHwAezc6KE0fGQP8BLzDldZ8LKXnseXM3w897bPc= Subject key identifier: 68:F0:1E:3A:EB:AF:70:75:B9:4C:B0:A6:1A:1F:DB:73:71:84:FE:B2 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2961 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:09:58 +0000 ROA not before: Sat 26 Jul 2025 15:54:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152918 IP address blocks: 27.100.39.0/24 maxlen: 24 103.196.21.0/24 maxlen: 24 103.196.23.0/24 maxlen: 24 103.217.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10593 (0x2961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Jul 26 15:54:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a48f06-fb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f6:89:28:ce:59:d7:e3:e3:5e:55:41:b2:a0: 0a:4e:75:44:4f:22:dc:c3:d7:fd:04:49:33:0e:df: 8c:34:05:2f:98:b2:ce:05:4e:19:de:33:1c:47:7c: 9e:68:d9:a1:bc:1a:c6:4b:51:29:99:1e:91:b2:11: 43:72:35:bf:e5:6a:f3:06:26:01:12:c9:a5:fb:f0: 4b:42:52:4d:a1:3b:86:a7:18:52:af:a5:b3:e3:ae: 5b:a7:e2:23:87:78:f5:46:f1:c8:7e:fb:22:8e:8e: 69:67:8a:48:d2:c3:3e:f1:00:87:50:9a:46:10:c8: 42:26:d2:b7:d7:d5:14:9f:b6:ab:5c:f0:d0:69:da: 26:8f:e1:6a:cb:3c:e2:90:4a:59:d7:22:81:5c:b3: 69:f1:c1:40:3f:3a:f6:23:59:27:ed:09:98:42:33: 32:8e:ac:9f:df:88:13:bb:3a:2a:27:01:98:67:fe: 07:7e:b5:eb:35:17:13:88:91:06:2c:1f:02:9d:eb: e5:af:3f:b6:4f:da:86:2c:96:06:4c:c2:ae:96:87: 98:0b:35:10:84:d3:eb:98:ae:cf:16:47:97:8c:e4: 0a:99:61:05:79:a5:d3:55:2a:69:a3:a3:8d:62:1d: 8e:ef:91:1b:8e:e1:ae:ad:1d:39:81:bf:0d:5f:0e: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:1E:3A:EB:AF:70:75:B9:4C:B0:A6:1A:1F:DB:73:71:84:FE:B2 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/F47B2136202611F08C91C683C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.100.39.0/24 103.196.21.0/24 103.196.23.0/24 103.217.255.0/24 Signature Algorithm: sha256WithRSAEncryption ab:15:08:a6:08:d9:fb:4e:97:ef:20:54:31:9d:e8:2a:a1:f2: ec:29:ef:f2:a7:4b:d6:eb:63:36:82:12:ca:f5:50:0c:d5:a7: f3:b8:96:b8:2e:2f:87:9b:a2:dc:16:70:7e:22:13:76:17:c4: 9d:8d:bd:a1:33:4d:ca:1f:0f:6d:24:72:5c:31:44:4f:08:bd: 88:2c:23:9e:aa:27:5e:62:c8:8a:76:8d:01:ff:7a:d7:b9:01: a4:b1:7f:c9:9b:d8:c0:5c:26:40:65:cf:87:58:b1:8f:bc:0d: d1:85:e6:4c:63:de:13:ec:4c:15:eb:ae:d7:16:97:8f:6a:f8: a1:6a:01:a5:14:d5:bd:2f:7a:8e:ae:44:59:67:74:3d:33:76: 51:ce:51:b4:69:dd:b2:28:60:29:a6:49:5c:7d:64:f8:09:0e: 5d:8c:21:ca:83:d5:39:3e:ac:5f:b7:e2:28:7e:14:d5:0f:b6: 1a:c3:b4:38:ad:3e:db:68:eb:40:da:28:57:23:90:e3:ff:86: ab:8b:fc:56:24:c3:be:37:b6:88:e8:87:fe:51:9b:bb:95:8f: a7:ee:c7:99:48:2d:6a:fd:4a:a2:82:b7:4f:e9:e9:97:ba:34: 22:80:54:1d:74:39:31:d4:72:2f:4c:7d:4c:5a:f1:df:67:61: f7:4c:3f:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICKWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDA4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGYwNi1mYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfaJKM5Z1+PjXlVBsqAKTnVETyLcw9f9BEkzDt+MNAUvmLLOBU4Z3jMcR3ye aNmhvBrGS1EpmR6RshFDcjW/5WrzBiYBEsml+/BLQlJNoTuGpxhSr6Wz465bp+Ij h3j1RvHIfvsijo5pZ4pI0sM+8QCHUJpGEMhCJtK319UUn7arXPDQadomj+Fqyzzi kEpZ1yKBXLNp8cFAPzr2I1kn7QmYQjMyjqyf34gTuzoqJwGYZ/4HfrXrNRcTiJEG LB8Cnevlrz+2T9qGLJYGTMKuloeYCzUQhNPrmK7PFkeXjOQKmWEFeaXTVSppo6ON Yh2O75EbjuGurR05gb8NXw5AbQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGjwHjrr r3B1uUywphof23NxhP6yMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvRjQ3QjIxMzYy MDI2MTFGMDhDOTFDNjgzQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAG2QnAwQAZ8QVAwQAZ8QXAwQAZ9n/MA0GCSqGSIb3DQEBCwUAA4IB AQCrFQimCNn7TpfvIFQxnegqofLsKe/yp0vW62M2ghLK9VAM1afzuJa4Li+Hm6Lc FnB+IhN2F8Sdjb2hM03KHw9tJHJcMURPCL2ILCOeqideYsiKdo0B/3rXuQGksX/J m9jAXCZAZc+HWLGPvA3RheZMY94T7EwV667XFpePavihagGlFNW9L3qOrkRZZ3Q9 M3ZRzlG0ad2yKGAppklcfWT4CQ5djCHKg9U5Pqxft+IofhTVD7Yaw7Q4rT7baOtA 2ihXI5Dj/4ari/xWJMO+N7aI6If+UZu7lY+n7seZSC1q/UqigrdP6emXujQigFQd dDkx1HIvTH1MWvHfZ2H3TD/V -----END CERTIFICATE-----Generated at Sat Mar 7 17:08:04 2026 by rpki-client