$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa File: B688C61E2A7411F09C50DF45C4F9AE02.roa (raw, json) Hash identifier: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY= Subject key identifier: C0:83:F8:A3:D8:C6:AD:D8:9C:5B:85:92:F9:8E:7F:02:7B:82:C2:67 Certificate issuer: /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Certificate serial: 0CE0 Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:10:08 +0000 ROA not before: Wed 24 Dec 2025 18:16:03 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137453 IP address blocks: 103.126.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707 Validity Not Before: Dec 24 18:16:03 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a472f0-5596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:19:57:f5:31:17:db:25:70:61:f4:b4:19:2b: 49:cf:ae:41:ae:d6:6b:96:83:11:5c:ed:cc:ed:bb: fd:a0:34:50:71:a2:46:5c:2b:b0:53:e2:87:67:de: 8e:88:51:99:c1:68:e2:85:a7:39:3a:d4:e4:b4:e6: f0:fe:8a:2f:57:6a:3e:5a:a6:04:90:e1:2b:39:93: 51:8d:c3:18:52:0e:3f:a9:12:81:1a:9b:13:b0:66: 87:e4:4c:13:78:77:4b:fe:4d:e7:1c:10:5d:d1:c7: 61:f3:07:e0:b1:23:42:92:47:73:05:db:0e:4a:bb: 20:e0:5d:ca:14:38:3c:a6:fd:ad:f6:5c:2e:d2:6c: 4f:77:e4:34:42:eb:74:05:f7:b7:78:fe:d8:84:23: ff:fe:2b:a8:9d:24:7f:0d:a2:a7:12:7c:3f:16:1b: 92:13:bd:d1:f0:95:bf:38:b5:47:1f:3e:79:0c:11: d6:7b:74:a6:11:af:4c:04:db:51:02:8d:4d:d0:6a: de:4f:2a:52:96:2b:73:40:ec:2f:64:80:d2:2a:97: da:09:0d:01:2e:62:c6:f0:06:06:b3:6f:39:30:17: 00:d5:56:62:84:28:b5:66:2a:b1:fe:fe:5e:14:5b: a7:44:e7:94:47:f9:4a:e7:81:4c:c8:3e:4d:2b:1f: 02:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:83:F8:A3:D8:C6:AD:D8:9C:5B:85:92:F9:8E:7F:02:7B:82:C2:67 X509v3 Authority Key Identifier: keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/B688C61E2A7411F09C50DF45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.126.20.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7e:81:5c:23:68:19:9f:98:60:0d:d4:e6:1e:3a:1a:c4:38: 8c:b6:71:8f:29:4a:32:af:55:1e:d4:b4:fc:49:49:a4:62:9c: aa:05:66:c6:13:68:9c:ca:e3:a6:51:e8:04:ed:29:4f:29:3e: 69:2a:64:da:f1:b2:14:f1:e4:e7:34:f3:99:14:92:49:bc:d6: 90:2f:40:b8:c5:61:e2:2c:4c:d4:07:69:96:31:d1:8d:18:2e: 94:6d:24:b3:d1:85:76:42:49:17:2f:9a:b5:f8:97:f6:0d:7e: 50:11:e6:ff:27:67:1b:86:05:bf:03:53:db:10:3f:4c:a2:1e: 28:76:dd:be:4e:c9:28:9d:cf:a9:a5:77:66:1d:cb:83:3f:98: bb:46:d8:f4:0f:b2:74:2d:a0:3f:c7:d3:3f:04:20:5e:6d:70: 88:f8:72:1c:0e:52:ab:4d:2f:b1:c9:f6:a6:d4:c3:f9:6f:0a: 28:05:10:a0:05:66:ee:ff:a3:be:4a:d9:a5:88:80:2e:ad:e5: d7:83:66:fb:99:e5:a7:85:a4:58:03:91:4c:3b:e3:65:72:dd: 8b:0a:53:84:49:f9:c4:ae:a1:7d:a2:a2:64:e0:84:9c:7f:de: 4f:69:de:35:c1:b6:b8:52:58:71:5e:48:89:4b:21:f6:f9:bd: d5:44:48:10 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCRjMxMTAvBgNVBAUTKEUyNDQ5RTMxMjIyMDEzMUUyRTc2QzQyQzdDQ0M2REQx OTM1MTA3MDcwHhcNMjUxMjI0MTgxNjAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzJmMC01NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxlX9TEX2yVwYfS0GStJz65BrtZrloMRXO3M7bv9oDRQcaJGXCuwU+KHZ96O iFGZwWjihac5OtTktObw/oovV2o+WqYEkOErOZNRjcMYUg4/qRKBGpsTsGaH5EwT eHdL/k3nHBBd0cdh8wfgsSNCkkdzBdsOSrsg4F3KFDg8pv2t9lwu0mxPd+Q0Qut0 Bfe3eP7YhCP//iuonSR/DaKnEnw/FhuSE73R8JW/OLVHHz55DBHWe3SmEa9MBNtR Ao1N0GreTypSlitzQOwvZIDSKpfaCQ0BLmLG8AYGs285MBcA1VZihCi1Ziqx/v5e FFunROeUR/lK54FMyD5NKx8CHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMCD+KPY xq3YnFuFkvmOfwJ7gsJnMB8GA1UdIwQYMBaAFOJEnjEiIBMeLnbELHzMbdGTUQcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0JGMy8xQkM2RUIyMDEx RTcxMUVBQjkwM0FBNzlDNEY5QUUwMi80a1NlTVNJZ0V4NHVkc1FzZk14dDBaTlJC d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRrU2VNU0lnRXg0dWRzUXNmTXh0MFpOUkJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENCRjMvMUJDNkVCMjAxMUU3MTFFQUI5MDNBQTc5QzRGOUFFMDIvQjY4OEM2MUUy QTc0MTFGMDlDNTBERjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ34UMA0GCSqGSIb3DQEBCwUAA4IBAQAifoFcI2gZn5hgDdTmHjoa xDiMtnGPKUoyr1Ue1LT8SUmkYpyqBWbGE2icyuOmUegE7SlPKT5pKmTa8bIU8eTn NPOZFJJJvNaQL0C4xWHiLEzUB2mWMdGNGC6UbSSz0YV2QkkXL5q1+Jf2DX5QEeb/ J2cbhgW/A1PbED9Moh4odt2+Tskonc+ppXdmHcuDP5i7Rtj0D7J0LaA/x9M/BCBe bXCI+HIcDlKrTS+xyfam1MP5bwooBRCgBWbu/6O+StmliIAureXXg2b7meWnhaRY A5FMO+Nlct2LClOESfnErqF9oqJk4IScf95Pad41wba4UlhxXkiJSyH2+b3VREgQ -----END CERTIFICATE-----Generated at Sat Mar 14 01:24:33 2026 by rpki-client