$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/C148AF5C9B4811EBB3FAE847C4F9AE02.roa File: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (raw, json) Hash identifier: ksPTB2q+EJHPCM8026XYBOFqkqdppkIc1rYFuupIenY= Subject key identifier: D9:1D:88:D3:2B:2B:43:25:6C:68:91:15:A0:AB:1A:2F:D6:43:2C:38 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 0723 Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/C148AF5C9B4811EBB3FAE847C4F9AE02.roa Signing time: Mon 30 Mar 2026 22:28:47 +0000 ROA not before: Mon 30 Mar 2026 22:28:47 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138408 IP address blocks: 103.163.72.0/23 maxlen: 24 2001:df6:7880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Mar 30 22:28:47 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69caf91f-d0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:e7:47:79:32:9a:27:47:a7:0a:8c:ac:bf: 10:dc:b7:b1:c5:29:99:af:f9:73:8b:4f:0b:53:f6: 11:f5:4f:02:85:21:05:47:65:28:6e:a4:84:a9:2b: 37:ff:85:65:dd:2d:8b:8b:e1:da:b6:3d:0d:ac:ae: 9b:46:c8:23:40:77:b3:b1:b0:a0:60:cc:21:51:f0: 90:83:88:50:b8:62:f4:3c:07:4e:f5:c8:02:cf:39: d3:3d:fa:3c:30:76:40:a7:1e:d7:8b:ce:9f:83:a0: b8:4b:14:aa:b9:38:ad:d4:78:b3:fc:0a:fb:42:09: b3:51:2d:3c:e9:c1:70:d8:24:22:b7:c8:a0:db:0c: c3:25:69:aa:96:cb:78:eb:66:54:a5:b1:4a:d3:00: b2:98:66:a9:76:10:65:8c:e2:3c:ae:3c:6a:a3:92: 57:11:90:4f:81:7d:1a:4d:18:ab:05:7f:53:2a:4f: ca:39:ed:f2:9a:8a:d9:6f:67:11:c1:47:65:0c:48: 25:dd:58:54:cb:84:94:93:59:76:e1:23:29:3e:a3: 5a:17:af:c3:f7:76:57:c7:ec:5d:52:30:ee:25:cc: b9:74:53:2a:79:e7:1d:4d:ac:b3:83:f1:01:e6:e0: 37:13:18:5c:2f:85:89:80:5d:31:d3:c9:62:31:5f: 83:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1D:88:D3:2B:2B:43:25:6C:68:91:15:A0:AB:1A:2F:D6:43:2C:38 X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/C148AF5C9B4811EBB3FAE847C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.163.72.0/23 IPv6: 2001:df6:7880::/48 Signature Algorithm: sha256WithRSAEncryption 31:50:e6:57:45:e4:71:fc:de:66:13:67:3c:a8:9d:f9:bc:d6: dd:10:eb:eb:fa:94:3a:93:6a:ba:fb:21:f5:a2:d9:8d:8e:c7: 20:7d:53:0b:0c:25:ea:7a:29:fb:6e:74:9c:79:3b:57:13:a8: 25:7c:6e:0b:51:15:40:02:53:81:de:92:83:e5:17:12:49:3b: e8:00:62:48:c0:77:e9:2b:07:90:73:9e:10:aa:c2:6b:49:e5: 78:14:03:06:5e:55:7c:19:68:4a:e4:cd:29:b1:3b:28:8c:a9: 1b:62:1d:7e:93:fb:3e:92:43:06:5a:a3:b8:a2:96:26:cf:65: ad:48:fd:c5:54:7a:33:09:30:f0:59:88:e6:2b:28:17:00:fc: 6c:2c:56:a2:18:64:b5:ee:18:49:b3:93:03:96:ec:f6:15:3d: f7:8f:2a:ed:98:25:36:b1:b4:0e:37:13:76:da:b7:c1:c4:0f: 66:3c:b8:8c:0e:05:fd:9e:62:9c:8b:02:96:08:dd:5c:5f:c7: 22:bb:29:f3:77:17:03:e8:c9:7b:75:1b:b3:b3:d3:58:62:49: c0:2e:bb:c6:de:07:b3:f4:c3:a4:dd:8a:0e:87:ad:58:74:4b: dc:44:85:cf:fe:fe:b5:1f:2a:f4:c1:fa:d1:20:62:6d:db:62: 35:90:4d:a5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjYwMzMwMjIyODQ3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhZjkxZi1kMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jDnR3kymidHpwqMrL8Q3LexxSmZr/lzi08LU/YR9U8ChSEFR2UobqSEqSs3 /4Vl3S2Li+Hatj0NrK6bRsgjQHezsbCgYMwhUfCQg4hQuGL0PAdO9cgCzznTPfo8 MHZApx7Xi86fg6C4SxSquTit1Hiz/Ar7QgmzUS086cFw2CQit8ig2wzDJWmqlst4 62ZUpbFK0wCymGapdhBljOI8rjxqo5JXEZBPgX0aTRirBX9TKk/KOe3ymorZb2cR wUdlDEgl3VhUy4SUk1l24SMpPqNaF6/D93ZXx+xdUjDuJcy5dFMqeecdTayzg/EB 5uA3ExhcL4WJgF0x08liMV+DxwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNkdiNMr K0MlbGiRFaCrGi/WQyw4MB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Q0QjIvQjRCMjBDQUU3ODQxMTFFQkIzNDgwOTYxQzRGOUFFMDIvQzE0OEFGNUM5 QjQ4MTFFQkIzRkFFODQ3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6NIMA8EAgACMAkDBwAgAQ32eIAwDQYJKoZIhvcNAQELBQADggEB ADFQ5ldF5HH83mYTZzyonfm81t0Q6+v6lDqTarr7IfWi2Y2OxyB9UwsMJep6Kftu dJx5O1cTqCV8bgtRFUACU4HekoPlFxJJO+gAYkjAd+krB5BznhCqwmtJ5XgUAwZe VXwZaErkzSmxOyiMqRtiHX6T+z6SQwZao7iilibPZa1I/cVUejMJMPBZiOYrKBcA /GwsVqIYZLXuGEmzkwOW7PYVPfePKu2YJTaxtA43E3bat8HED2Y8uIwOBf2eYpyL ApYI3VxfxyK7KfN3FwPoyXt1G7Oz01hiScAuu8beB7P0w6Tdig6HrVh0S9xEhc/+ /rUfKvTB+tEgYm3bYjWQTaU= -----END CERTIFICATE-----Generated at Mon Apr 6 12:45:56 2026 by rpki-client