$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa File: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (raw, json) Hash identifier: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ= Subject key identifier: A6:60:E1:F9:66:4A:21:18:C8:18:10:C3:45:9F:95:3C:06:14:F9:81 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 04BE Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:29:33 +0000 ROA not before: Sun 21 Dec 2025 00:21:10 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 21859 IP address blocks: 43.255.116.0/24 maxlen: 24 103.103.246.0/24 maxlen: 24 103.103.247.0/24 maxlen: 24 103.239.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 00:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Validity Not Before: Dec 21 00:21:10 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4858c-41ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:80:9e:ea:b1:7e:cd:40:b4:a1:e7:d3:80: f2:1d:8f:aa:54:17:85:7c:39:67:cd:0d:df:07:cf: 2c:58:bc:7e:88:9c:a3:5f:40:e1:b3:bc:5e:4e:ee: be:85:71:96:ab:df:1d:29:58:44:11:ef:2c:3a:09: 82:11:84:da:f2:ed:93:43:f4:04:f5:b7:78:6d:86: fd:2f:c1:2b:63:af:61:0b:fe:9f:f3:9b:33:6c:40: d2:8b:9c:17:c0:48:0e:af:e6:83:a6:8e:f2:fc:fb: 8a:9f:7e:91:a9:61:14:06:d0:ac:01:97:42:ca:af: 89:cd:8d:3c:27:da:60:2b:1d:65:05:6f:bf:a5:ea: 60:6a:57:45:35:f2:0c:94:85:86:aa:45:13:47:14: ce:08:f0:93:f5:86:de:dd:74:11:cf:0a:6c:0e:00: 7c:68:75:06:3d:ad:28:38:9e:ef:29:d7:aa:4d:40: 40:13:7a:e6:db:62:48:97:b7:9c:2b:fc:b5:9f:33: 70:ea:7e:b7:5e:ee:2d:cd:72:a0:fd:83:fa:1f:91: e6:b9:b4:98:a7:b1:41:cf:c6:37:68:4d:3b:d5:f4: b4:70:e9:c1:f9:eb:3c:b5:76:5f:29:86:d6:d0:56: cb:35:71:7a:6d:46:6c:ca:9d:4a:f8:25:2b:70:dc: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:60:E1:F9:66:4A:21:18:C8:18:10:C3:45:9F:95:3C:06:14:F9:81 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/1DBF3F2E69BF11EF9B52775AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.255.116.0/24 103.103.246.0/23 103.239.103.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:39:e8:c1:51:2c:51:18:2c:61:1d:c4:52:3a:67:28:42:f0: 04:f9:bb:fa:ea:40:fe:34:31:66:64:70:59:6b:e8:52:8e:ab: 22:bd:94:32:5b:64:8f:bb:6c:d6:b3:a7:c5:14:23:38:5f:01: 92:e3:79:f2:7c:d1:ca:85:c4:7b:0f:75:e4:93:f9:40:8a:35: f4:a7:19:25:2a:da:de:c9:1a:53:b7:f1:cd:c1:e4:59:32:a9: fa:d9:dd:64:d4:b9:5b:00:31:6b:29:0c:93:dc:5e:d3:da:8b: f2:42:cb:5a:0d:51:56:0a:36:47:71:53:1a:6f:96:8e:78:d9: ee:d3:0e:89:70:7e:35:4c:d2:e1:18:7b:b0:f3:d1:58:b9:a3: a0:1b:c6:90:4c:ab:f6:21:20:f3:b7:64:4c:e8:03:3f:af:3a: e3:8f:83:2b:5e:54:48:50:24:1f:a9:e3:ae:3c:51:ff:1b:0d: 1e:1b:85:ca:41:63:d2:21:a0:aa:a0:61:b5:e3:1c:f2:17:14: 58:29:d9:bf:da:55:5e:66:a8:f5:4e:4f:43:2a:96:e3:fb:05: 45:65:63:59:9b:51:b8:bc:e5:0b:4e:cf:f5:c6:f2:bd:49:69: 02:0d:23:fd:9a:23:83:04:1d:4e:df:47:21:e6:d2:a5:cf:a2: a9:71:27:7f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjUxMjIxMDAyMTEwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU4Yy00MWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKCAnuqxfs1AtKHn04DyHY+qVBeFfDlnzQ3fB88sWLx+iJyjX0Dhs7xeTu6+ hXGWq98dKVhEEe8sOgmCEYTa8u2TQ/QE9bd4bYb9L8ErY69hC/6f85szbEDSi5wX wEgOr+aDpo7y/PuKn36RqWEUBtCsAZdCyq+JzY08J9pgKx1lBW+/pepgaldFNfIM lIWGqkUTRxTOCPCT9Ybe3XQRzwpsDgB8aHUGPa0oOJ7vKdeqTUBAE3rm22JIl7ec K/y1nzNw6n63Xu4tzXKg/YP6H5HmubSYp7FBz8Y3aE071fS0cOnB+es8tXZfKYbW 0FbLNXF6bUZsyp1K+CUrcNyKCQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKZg4flm SiEYyBgQw0WflTwGFPmBMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvMURCRjNGMkU2 OUJGMTFFRjlCNTI3NzVBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK/90AwQBZ2f2AwQAZ+9nMA0GCSqGSIb3DQEBCwUAA4IBAQAbOejB USxRGCxhHcRSOmcoQvAE+bv66kD+NDFmZHBZa+hSjqsivZQyW2SPu2zWs6fFFCM4 XwGS43nyfNHKhcR7D3Xkk/lAijX0pxklKtreyRpTt/HNweRZMqn62d1k1LlbADFr KQyT3F7T2ovyQstaDVFWCjZHcVMab5aOeNnu0w6JcH41TNLhGHuw89FYuaOgG8aQ TKv2ISDzt2RM6AM/rzrjj4MrXlRIUCQfqeOuPFH/Gw0eG4XKQWPSIaCqoGG14xzy FxRYKdm/2lVeZqj1Tk9DKpbj+wVFZWNZm1G4vOULTs/1xvK9SWkCDSP9miODBB1O 30ch5tKlz6KpcSd/ -----END CERTIFICATE-----Generated at Wed Mar 11 12:48:39 2026 by rpki-client