$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/288F0B4A67EE11F0BC703D32C4F9AE02.roa File: 288F0B4A67EE11F0BC703D32C4F9AE02.roa (raw, json) Hash identifier: g4yT/H0dXp9Wcb3fz+2j3wOgaN4tWJMhcXWM+AK5S0c= Subject key identifier: 36:F3:A4:6F:73:F8:35:D5:83:5F:AA:FA:C6:F2:9D:1C:EA:DF:14:17 Certificate issuer: /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED Certificate serial: 06E8 Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/288F0B4A67EE11F0BC703D32C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:48:32 +0000 ROA not before: Thu 04 Dec 2025 21:35:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 32135 IP address blocks: 103.197.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 21:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1768 (0x6e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B6D4, serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED Validity Not Before: Dec 4 21:35:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46de0-ab04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:a7:2f:1b:8c:2d:94:3c:61:f6:99:6e:be: 5b:b5:85:56:97:bf:f4:77:6c:c8:25:96:20:40:6b: 45:ed:5a:fe:b0:9e:ba:c5:bd:9d:87:46:aa:0b:72: 19:d8:9d:b8:12:5f:db:5a:62:d5:29:5f:51:7b:43: 4d:b9:06:b7:02:5d:fc:7c:12:40:92:e0:0f:1b:55: c3:13:c7:02:b9:ac:29:62:de:45:a4:2b:6b:62:2f: 68:84:03:a1:c0:a4:b1:29:dc:94:8b:0e:0c:24:7c: 4a:9d:6c:15:53:cf:e7:92:3e:41:5f:c4:49:27:89: f0:26:cb:d6:a2:0a:fb:ed:1a:ee:52:a3:fc:d3:e1: 11:f2:21:f0:f2:60:ba:14:f0:31:b2:96:39:b1:48: b2:f3:59:0e:a6:ef:a5:7a:95:22:5f:3f:df:8a:3d: 87:b2:62:2d:e7:17:0d:cf:8c:d1:a2:a0:57:75:50: 5e:a7:ca:be:f4:b7:bb:ff:fd:b9:c5:3b:2a:c3:1b: 31:04:49:98:f9:01:0d:63:f3:96:63:c7:a1:9a:31: f2:45:85:b2:53:e6:49:08:14:18:3c:c6:8b:1d:a5: d3:74:a0:14:92:c1:b0:68:7c:6c:fb:98:14:90:31: 06:c5:4c:06:b5:9c:8e:de:cd:de:57:f3:14:ea:aa: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F3:A4:6F:73:F8:35:D5:83:5F:AA:FA:C6:F2:9D:1C:EA:DF:14:17 X509v3 Authority Key Identifier: keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/288F0B4A67EE11F0BC703D32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.197.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:3c:db:e4:ca:35:ea:76:b0:4c:58:60:d7:b7:7f:e4:10:f5: 0c:a3:d5:5c:8a:78:5a:71:0e:22:89:8b:3b:7c:08:a0:ac:4b: dd:50:39:02:aa:e5:a5:88:e9:93:e9:2b:6f:4a:f5:b4:c2:e7: e9:2d:72:94:1c:b3:7e:67:d2:33:e4:9f:81:50:35:f0:f1:b4: 53:e0:26:e1:63:a9:a2:49:80:e8:ca:3a:98:0a:a8:34:6d:31: 9e:af:e4:af:14:2a:56:f0:cd:bd:91:fb:cc:da:15:79:dc:b8: 01:a8:3c:68:68:46:a4:c0:e5:34:3b:02:e4:db:8f:09:fc:73: 8d:f7:89:5e:24:ad:4b:11:a5:ae:c7:a2:bf:1d:cd:a8:2b:88: 9d:09:b5:14:6a:91:77:60:b9:c6:53:cb:c3:79:29:36:52:59: bd:0c:67:dd:21:40:be:fc:2b:f3:33:c8:20:ac:dd:5e:e2:11: ce:22:ee:14:88:e4:f9:83:5a:92:f0:a0:91:cd:30:17:1c:e9: f7:a6:33:4b:d3:59:3c:3d:b4:24:41:a8:76:ca:9b:a6:25:39: d8:ee:e2:85:3d:8b:5a:c8:02:b1:95:48:45:0b:f0:c4:4c:fe: cb:2d:1b:12:3e:b6:ac:03:b3:f9:56:d0:c4:e1:10:e2:51:27: c0:c1:a9:5e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I2RDQxMTAvBgNVBAUTKDBENTAyODk4NkEzNTZCNjlCNEFGN0QyRjY2NDlENkJC RENCRThCRUQwHhcNMjUxMjA0MjEzNTE3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRlMC1hYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3WnLxuMLZQ8YfaZbr5btYVWl7/0d2zIJZYgQGtF7Vr+sJ66xb2dh0aqC3IZ 2J24El/bWmLVKV9Re0NNuQa3Al38fBJAkuAPG1XDE8cCuawpYt5FpCtrYi9ohAOh wKSxKdyUiw4MJHxKnWwVU8/nkj5BX8RJJ4nwJsvWogr77RruUqP80+ER8iHw8mC6 FPAxspY5sUiy81kOpu+lepUiXz/fij2HsmIt5xcNz4zRoqBXdVBep8q+9Le7//25 xTsqwxsxBEmY+QENY/OWY8ehmjHyRYWyU+ZJCBQYPMaLHaXTdKAUksGwaHxs+5gU kDEGxUwGtZyO3s3eV/MU6qpcMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDbzpG9z +DXVg1+q+sbynRzq3xQXMB8GA1UdIwQYMBaAFA1QKJhqNWtptK99L2ZJ1rvcvovt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjZENC85NTcyNTM2ODlF NzkxMUVCOEY3QTQ0ODdDNEY5QUUwMi9EVkFvbUdvMWEybTByMzB2WmtuV3U5eS1p LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWQW9tR28xYTJtMHIzMHZaa25XdTl5LWktMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0I2RDQvOTU3MjUzNjg5RTc5MTFFQjhGN0E0NDg3QzRGOUFFMDIvMjg4RjBCNEE2 N0VFMTFGMEJDNzAzRDMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8VEMA0GCSqGSIb3DQEBCwUAA4IBAQBvPNvkyjXqdrBMWGDXt3/k EPUMo9VcinhacQ4iiYs7fAigrEvdUDkCquWliOmT6StvSvW0wufpLXKUHLN+Z9Iz 5J+BUDXw8bRT4CbhY6miSYDoyjqYCqg0bTGer+SvFCpW8M29kfvM2hV53LgBqDxo aEakwOU0OwLk248J/HON94leJK1LEaWux6K/Hc2oK4idCbUUapF3YLnGU8vDeSk2 Ulm9DGfdIUC+/CvzM8ggrN1e4hHOIu4UiOT5g1qS8KCRzTAXHOn3pjNL01k8PbQk Qah2ypumJTnY7uKFPYtayAKxlUhFC/DETP7LLRsSPrasA7P5VtDE4RDiUSfAwale -----END CERTIFICATE-----Generated at Tue Mar 10 20:31:58 2026 by rpki-client