$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/FAD3BBFCDA3311F08928C2DC8AD3641D.roa File: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (raw, json) Hash identifier: aSuiDoqVGUo9FqPyHFG/YLpJ9f8pam3kOcqDIBOTLpk= Subject key identifier: D5:27:7E:F3:D1:80:8F:45:27:85:B4:D2:3A:88:A1:C9:EA:47:EF:97 Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 059D Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/FAD3BBFCDA3311F08928C2DC8AD3641D.roa Signing time: Sun 01 Mar 2026 17:05:54 +0000 ROA not before: Tue 16 Dec 2025 04:02:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 64098 IP address blocks: 43.227.108.0/23 maxlen: 23 43.227.108.0/24 maxlen: 24 43.227.109.0/24 maxlen: 24 43.227.110.0/24 maxlen: 24 43.227.111.0/24 maxlen: 24 103.46.220.0/24 maxlen: 24 103.46.221.0/24 maxlen: 24 103.46.222.0/24 maxlen: 24 103.46.223.0/24 maxlen: 24 203.23.68.0/24 maxlen: 24 203.23.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Dec 16 04:02:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a471f2-f3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:81:93:cb:94:e8:82:b9:a3:45:7f:ff:40:f0: eb:d0:29:2f:d7:45:82:48:32:03:89:14:cf:06:57: 72:cc:5b:d6:25:cf:26:1b:17:18:c3:af:99:b9:4d: 6f:c1:7a:2e:d4:ae:15:7e:40:b6:ec:eb:3d:43:dc: 8d:a7:35:6f:27:73:12:e9:a4:4c:3c:21:c1:5d:d2: aa:cb:97:11:c9:28:15:b8:ab:ce:77:b7:ce:53:a5: f7:a3:44:52:00:16:fb:76:39:41:a9:cb:db:c8:ba: 60:c1:89:bb:93:c7:a5:f6:63:fe:0c:f1:5d:04:e6: 70:ae:dd:77:68:dd:45:31:8e:ee:6b:be:f2:79:9c: 71:8c:f1:a7:a2:12:31:25:8a:4f:8a:40:8e:5e:69: 81:c6:93:93:68:53:0e:d9:ac:8b:ff:85:55:db:1b: 31:36:08:d8:af:92:7d:72:80:f2:b8:07:3e:d1:20: b2:bf:9c:12:d2:fd:ce:07:9d:5e:ee:9b:fd:37:55: b2:7e:b3:be:3f:cc:5f:53:0b:76:00:97:c7:cd:e4: ec:58:7f:b1:d7:d0:fe:85:62:ce:38:85:44:03:ed: 8d:b8:15:6b:f3:e3:6c:ea:44:24:3d:63:ad:ad:bc: fa:35:e2:5d:3d:fb:99:5f:4f:0b:f7:3c:f7:85:10: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:27:7E:F3:D1:80:8F:45:27:85:B4:D2:3A:88:A1:C9:EA:47:EF:97 X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/FAD3BBFCDA3311F08928C2DC8AD3641D.roa sbgp-ipAddrBlock: critical IPv4: 43.227.108.0/22 103.46.220.0/22 203.23.68.0/23 Signature Algorithm: sha256WithRSAEncryption 68:2f:80:ae:2e:1a:9c:0c:ce:45:2a:6f:41:dd:92:e3:2e:ce: c9:d2:72:c7:c8:37:7d:11:21:bc:a6:f3:3e:ef:1c:f3:05:2c: 8d:2b:3d:c7:0c:ee:16:d5:39:e3:19:b2:64:95:8d:54:ad:7a: 24:64:ad:92:de:80:12:5e:14:1d:35:49:df:79:40:2a:b6:b5: 2a:f4:ef:96:4f:40:a3:7f:4e:82:0c:80:10:5e:f7:31:2c:79: f0:09:3d:b7:04:5c:09:53:c8:d3:06:43:24:95:07:6f:02:1d: 21:99:66:a7:43:34:2f:e4:62:92:a8:7c:b9:47:51:61:42:c3: 38:bc:4b:2e:d1:58:f9:ad:b5:00:57:00:2c:bd:b1:1e:25:9d: 58:ee:8d:57:23:28:d3:e9:5e:6f:85:21:57:ad:aa:81:92:c8: 20:e0:af:e8:0d:1a:f4:08:c3:51:77:f0:79:40:f0:9f:14:ed: c1:41:fd:b7:0f:f0:21:36:6d:3d:2a:5c:ae:24:90:4c:04:e2: 47:7a:14:47:ac:a0:5f:e6:3a:8e:aa:ef:15:d7:ae:94:cb:8e: 77:e4:dd:0b:35:3d:60:d7:b5:77:1c:36:36:16:f9:73:e1:13: d0:e4:c0:53:8c:c4:2a:0c:19:ae:63:3e:b8:74:36:35:cd:f8: ae:f0:0a:46 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUxMjE2MDQwMjAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzFmMi1mM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYGTy5TogrmjRX//QPDr0Ckv10WCSDIDiRTPBldyzFvWJc8mGxcYw6+ZuU1v wXou1K4VfkC27Os9Q9yNpzVvJ3MS6aRMPCHBXdKqy5cRySgVuKvOd7fOU6X3o0RS ABb7djlBqcvbyLpgwYm7k8el9mP+DPFdBOZwrt13aN1FMY7ua77yeZxxjPGnohIx JYpPikCOXmmBxpOTaFMO2ayL/4VV2xsxNgjYr5J9coDyuAc+0SCyv5wS0v3OB51e 7pv9N1WyfrO+P8xfUwt2AJfHzeTsWH+x19D+hWLOOIVEA+2NuBVr8+Ns6kQkPWOt rbz6NeJdPfuZX08L9zz3hRBuCwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNUnfvPR gI9FJ4W00jqIocnqR++XMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMTMvODkzNjM1NzgyNkZCMTFFQ0E3MTM1RDczQzRGOUFFMDIvRkFEM0JCRkNE QTMzMTFGMDg5MjhDMkRDOEFEMzY0MUQucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCK+NsAwQCZy7cAwQByxdEMA0GCSqGSIb3DQEBCwUAA4IBAQBoL4Cu LhqcDM5FKm9B3ZLjLs7J0nLHyDd9ESG8pvM+7xzzBSyNKz3HDO4W1TnjGbJklY1U rXokZK2S3oASXhQdNUnfeUAqtrUq9O+WT0Cjf06CDIAQXvcxLHnwCT23BFwJU8jT BkMklQdvAh0hmWanQzQv5GKSqHy5R1FhQsM4vEsu0Vj5rbUAVwAsvbEeJZ1Y7o1X IyjT6V5vhSFXraqBksgg4K/oDRr0CMNRd/B5QPCfFO3BQf23D/AhNm09KlyuJJBM BOJHehRHrKBf5jqOqu8V166Uy4535N0LNT1g17V3HDY2Fvlz4RPQ5MBTjMQqDBmu Yz64dDY1zfiu8ApG -----END CERTIFICATE-----Generated at Sun Mar 15 01:16:52 2026 by rpki-client