$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa File: A89C497E6D1911ED9C34360FC4F9AE02.roa (raw, json) Hash identifier: RWETAB21IRHh3qToMX9EIcRwUfuGmkU7UTUOdmPRLBA= Subject key identifier: B4:1D:39:16:99:F3:2F:0C:5E:B8:82:97:D3:90:F3:21:4C:13:A9:7A Certificate issuer: /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Certificate serial: 02F0 Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa Signing time: Mon 12 Oct 2026 03:12:47 +0000 ROA not before: Mon 12 Oct 2026 03:12:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150447 IP address blocks: 103.17.148.0/23 maxlen: 23 103.17.148.0/24 maxlen: 24 103.17.149.0/24 maxlen: 24 125.253.128.0/23 maxlen: 23 125.253.128.0/24 maxlen: 24 125.253.129.0/24 maxlen: 24 125.253.130.0/23 maxlen: 23 125.253.130.0/24 maxlen: 24 125.253.131.0/24 maxlen: 24 2001:df1:5bc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 01:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 752 (0x2f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44 Validity Not Before: Oct 12 03:12:47 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6acc502f-8c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:56:b9:94:17:c4:da:cb:1e:80:47:de:03: 9a:f0:56:d8:87:a4:62:78:ee:cf:9a:93:2e:b3:fe: 78:98:e7:5e:ab:3a:59:d6:71:10:f2:6a:47:92:25: 88:7a:4e:4b:ac:9e:d7:a0:49:a9:9d:31:21:05:0c: 9d:4a:48:f6:85:7c:31:a3:01:f0:45:ea:b0:ed:95: f5:39:8f:19:d9:7c:ae:73:82:4d:b6:40:98:70:39: 95:0e:55:4a:51:2b:80:a9:33:22:b9:25:6c:26:3f: 61:4a:2e:bd:f7:c0:05:e1:22:c6:6e:fd:1c:b6:ad: 32:7b:1f:a6:56:12:53:c5:53:99:43:f5:f8:68:8c: a3:aa:2d:a2:ec:2b:72:db:2d:c0:d7:16:8a:0c:55: 9b:32:01:cc:94:71:19:6f:a4:9d:62:45:42:d3:d8: f4:09:b0:aa:e4:64:0f:cf:46:d1:00:be:03:03:f8: d8:a1:1e:26:4e:b0:75:b9:fa:dd:9e:85:a3:1f:1a: 59:70:eb:0e:d8:ab:9a:4d:58:0b:14:b5:c8:0a:5f: 99:fc:25:4c:8d:d2:a0:d7:9b:0d:a0:91:a5:fc:aa: 9d:54:9a:e8:d3:90:36:15:88:54:1b:c9:81:43:53: f5:7d:1e:dd:4b:87:84:32:20:4d:29:f4:cf:6c:1a: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1D:39:16:99:F3:2F:0C:5E:B8:82:97:D3:90:F3:21:4C:13:A9:7A X509v3 Authority Key Identifier: keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.17.148.0/23 125.253.128.0/22 IPv6: 2001:df1:5bc0::/48 Signature Algorithm: sha256WithRSAEncryption 39:43:98:bb:f3:cf:c0:4b:10:26:4a:f1:d6:4d:5a:e8:93:ba: 97:ca:e1:3e:2c:20:29:c5:47:11:5f:06:8e:21:83:e8:67:41: 51:c2:a1:2f:58:6e:cc:19:71:98:ee:59:e0:9c:61:e9:c6:e2: d5:3c:95:55:ac:32:09:a1:6f:36:3a:a4:4c:c9:b2:f7:1f:dc: a3:a7:c4:ab:bf:c5:44:05:ef:f5:2f:59:1d:8f:de:c8:40:c1: d0:fd:88:52:47:3c:9c:f8:23:d9:a9:d9:5a:ad:4b:f7:a1:01: b8:94:4d:1c:a1:2b:85:30:37:12:cb:29:1e:5c:9d:f1:10:11: bc:67:3b:94:c9:02:54:8f:97:bb:0b:28:25:b2:a0:bb:a8:b0: d1:79:71:74:6b:34:a8:26:98:de:dc:ea:5a:54:9a:91:1f:46: 0f:b4:4e:4b:02:ca:09:94:b6:30:bd:28:4f:f4:cd:44:18:5d: 24:2e:69:97:2d:eb:49:5d:74:86:a9:be:bd:9d:7e:90:bc:4d: ee:ef:3b:fc:18:47:d8:25:a2:62:3c:47:80:0d:86:79:e7:84: ec:f1:8c:48:0a:c7:71:88:05:af:45:bb:4b:bf:47:bb:e8:4a: 8d:16:42:5d:d3:9c:30:2a:da:4b:09:ba:8a:c7:64:ac:8a:47: 34:63:24:7e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0NzgxMTAvBgNVBAUTKDU2OEY3NjVDQ0FCNDJDNTIzMDc5OEU2OEZCQzM3QzhB QTQ5RjVGNDQwHhcNMjYxMDEyMDMxMjQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNjNTAyZi04YzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnytWuZQXxNrLHoBH3gOa8FbYh6RieO7PmpMus/54mOdeqzpZ1nEQ8mpHkiWI ek5LrJ7XoEmpnTEhBQydSkj2hXwxowHwReqw7ZX1OY8Z2Xyuc4JNtkCYcDmVDlVK USuAqTMiuSVsJj9hSi6998AF4SLGbv0ctq0yex+mVhJTxVOZQ/X4aIyjqi2i7Cty 2y3A1xaKDFWbMgHMlHEZb6SdYkVC09j0CbCq5GQPz0bRAL4DA/jYoR4mTrB1ufrd noWjHxpZcOsO2KuaTVgLFLXICl+Z/CVMjdKg15sNoJGl/KqdVJro05A2FYhUG8mB Q1P1fR7dS4eEMiBNKfTPbBrRzQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLQdORaZ 8y8MXriCl9OQ8yFME6l6MB8GA1UdIwQYMBaAFFaPdlzKtCxSMHmOaPvDfIqkn19E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjQ3OC80OTlBOTE1RTZE MTYxMUVEQkUxMjA1MENDNEY5QUUwMi9WbzkyWE1xMExGSXdlWTVvLThOOGlxU2ZY MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZvOTJYTXEwTEZJd2VZNW8tOE44aXFTZlgwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y0NzgvNDk5QTkxNUU2RDE2MTFFREJFMTIwNTBDQzRGOUFFMDIvQTg5QzQ5N0U2 RDE5MTFFRDlDMzQzNjBGQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZxGUAwQCff2AMA8EAgACMAkDBwAgAQ3xW8AwDQYJKoZIhvcNAQEL BQADggEBADlDmLvzz8BLECZK8dZNWuiTupfK4T4sICnFRxFfBo4hg+hnQVHCoS9Y bswZcZjuWeCcYenG4tU8lVWsMgmhbzY6pEzJsvcf3KOnxKu/xUQF7/UvWR2P3shA wdD9iFJHPJz4I9mp2VqtS/ehAbiUTRyhK4UwNxLLKR5cnfEQEbxnO5TJAlSPl7sL KCWyoLuosNF5cXRrNKgmmN7c6lpUmpEfRg+0TksCygmUtjC9KE/0zUQYXSQuaZct 60lddIapvr2dfpC8Te7vO/wYR9glomI8R4ANhnnnhOzxjEgKx3GIBa9Fu0u/R7vo So0WQl3TnDAq2ksJuorHZKyKRzRjJH4= -----END CERTIFICATE-----Generated at Wed Oct 28 18:27:07 2026 by rpki-client