$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/DDDE13B8FAE811E7A715F157C4F9AE02.roa File: DDDE13B8FAE811E7A715F157C4F9AE02.roa (raw, json) Hash identifier: bWzOQvxadVIRVJggE+JLhWTu+F27vX2SLKSXFN99hpg= Subject key identifier: 60:25:16:F6:48:F7:78:6E:4A:BF:BF:94:E1:C0:4A:10:A8:CA:D2:EA Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Certificate serial: 174A Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/DDDE13B8FAE811E7A715F157C4F9AE02.roa Signing time: Wed 04 Mar 2026 17:20:53 +0000 ROA not before: Wed 04 Mar 2026 17:20:53 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135330 IP address blocks: 103.107.104.0/22 maxlen: 24 103.119.44.0/22 maxlen: 22 103.119.44.0/24 maxlen: 24 103.119.45.0/24 maxlen: 24 103.119.46.0/24 maxlen: 24 103.119.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5962 (0x174a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96 Validity Not Before: Mar 4 17:20:53 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a869f5-8b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:1d:ca:90:ef:a5:0d:bb:a6:1f:e4:52:ba: 7c:1b:8e:88:a4:25:a1:b8:0d:f3:27:a7:93:d6:e1: 6f:39:d1:40:f4:f3:00:d6:b3:5e:da:44:d1:d2:f4: 93:20:9e:3c:50:53:be:6c:cd:92:a3:34:54:83:f3: 87:45:d4:d8:ec:5c:53:71:e6:44:ef:60:7f:f5:57: 20:a1:54:56:aa:95:4b:4e:29:70:e4:50:c3:04:14: 62:81:10:2d:8d:7f:86:6d:c5:2b:c1:6b:44:4c:01: 37:f0:c6:4a:6f:71:89:fc:2a:bf:3f:29:ae:4b:40: 7d:bc:21:5b:22:5d:6f:fe:82:8e:bd:7f:98:02:db: f2:5c:e3:1e:e6:4b:f7:c8:e5:2e:27:77:09:1b:79: 07:01:1f:db:42:d2:44:ab:68:91:19:ab:54:b9:da: c8:ff:38:be:0a:e2:6f:cd:12:1a:68:a7:56:98:1e: 69:84:dc:70:3e:56:29:19:dd:47:33:88:c5:55:46: 38:fa:5f:f5:06:78:19:e1:96:17:7a:bd:8d:b1:a6: ef:e6:32:eb:29:57:51:b7:bb:a2:af:83:36:5a:12: 14:7f:68:1f:e5:fc:a9:6c:c9:98:b5:bf:0c:1c:44: 98:23:0e:c0:81:86:99:12:60:2c:47:da:0a:25:8b: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:25:16:F6:48:F7:78:6E:4A:BF:BF:94:E1:C0:4A:10:A8:CA:D2:EA X509v3 Authority Key Identifier: keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/DDDE13B8FAE811E7A715F157C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.107.104.0/22 103.119.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:e8:08:14:ca:89:e6:28:7a:b9:c4:19:3c:59:e1:84:c7:5f: 16:c5:c7:38:e4:c6:4e:91:70:32:c2:57:b9:b7:4c:bc:63:e4: 19:ca:41:db:9a:be:0b:6d:b8:4e:16:7a:8b:17:0e:76:7f:2a: 98:a2:f6:7a:4e:67:60:e4:57:7b:1b:2b:dc:0e:40:2b:d5:7b: 86:47:ae:a9:49:88:e5:42:48:31:1c:b6:0e:17:a3:dc:32:1d: b9:78:89:16:c5:a8:f6:b8:75:2f:d2:d0:09:fc:32:d6:43:3e: 3c:86:a6:d3:67:d1:1d:c9:99:1a:b6:8a:e5:56:4a:38:c9:e6: b9:40:c8:03:1e:13:f1:0e:91:3e:30:7e:bf:9a:e7:1b:8e:78: 01:22:82:56:6c:2b:4a:a5:a0:1d:5c:97:2e:8b:b6:a6:b7:7f: 02:6b:06:87:b5:70:d8:b5:15:df:2a:73:35:23:8b:e8:4d:29: 38:9b:41:ab:27:ec:47:87:49:81:4a:a1:7f:c4:f1:38:77:dc: b2:69:d6:1a:a4:90:8b:03:96:97:c0:e1:dc:ed:77:9f:97:7c: 48:18:1f:27:d0:cc:30:1f:71:5f:97:53:e0:8a:2d:ec:bf:9a: c2:48:f7:c7:fc:39:71:f5:0f:df:b2:1a:5c:cf:26:ee:c6:83: 21:d0:04:85 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICF0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2 MDlCMDVEOTYwHhcNMjYwMzA0MTcyMDUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NjlmNS04YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeIdypDvpQ27ph/kUrp8G46IpCWhuA3zJ6eT1uFvOdFA9PMA1rNe2kTR0vST IJ48UFO+bM2SozRUg/OHRdTY7FxTceZE72B/9VcgoVRWqpVLTilw5FDDBBRigRAt jX+GbcUrwWtETAE38MZKb3GJ/Cq/PymuS0B9vCFbIl1v/oKOvX+YAtvyXOMe5kv3 yOUuJ3cJG3kHAR/bQtJEq2iRGatUudrI/zi+CuJvzRIaaKdWmB5phNxwPlYpGd1H M4jFVUY4+l/1BngZ4ZYXer2Nsabv5jLrKVdRt7uir4M2WhIUf2gf5fypbMmYtb8M HESYIw7AgYaZEmAsR9oKJYs2nwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGAlFvZI 93huSr+/lOHAShCoytLqMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NBREUvRjAyQUIxN0NGQUU2MTFFNzkyM0VBMTUwQzRGOUFFMDIvRERERTEzQjhG QUU4MTFFN0E3MTVGMTU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ2toAwQCZ3csMA0GCSqGSIb3DQEBCwUAA4IBAQBt6AgUyonmKHq5 xBk8WeGEx18Wxcc45MZOkXAywle5t0y8Y+QZykHbmr4LbbhOFnqLFw52fyqYovZ6 Tmdg5Fd7GyvcDkAr1XuGR66pSYjlQkgxHLYOF6PcMh25eIkWxaj2uHUv0tAJ/DLW Qz48hqbTZ9EdyZkatorlVko4yea5QMgDHhPxDpE+MH6/mucbjngBIoJWbCtKpaAd XJcui7amt38CawaHtXDYtRXfKnM1I4voTSk4m0GrJ+xHh0mBSqF/xPE4d9yyadYa pJCLA5aXwOHc7Xefl3xIGB8n0MwwH3Ffl1Pgii3sv5rCSPfH/Dlx9Q/fshpczybu xoMh0ASF -----END CERTIFICATE-----Generated at Fri Mar 13 10:40:03 2026 by rpki-client