$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa File: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (raw, json) Hash identifier: 7Al+yfLSKooclnPH611e6vIQogFEba2oPZ6Wjejoi9c= Subject key identifier: BB:A5:F2:03:C1:19:37:F0:BD:3D:38:32:01:86:82:B1:E8:56:5E:A8 Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Certificate serial: 01B6 Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:30:05 +0000 ROA not before: Mon 02 Mar 2026 23:30:05 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152320 IP address blocks: 103.85.72.0/22 maxlen: 23 103.85.72.0/24 maxlen: 24 103.85.73.0/24 maxlen: 24 103.85.74.0/24 maxlen: 24 103.85.75.0/24 maxlen: 24 203.175.12.0/22 maxlen: 24 2001:df0:a640::/48 maxlen: 48 2001:df0:a641::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Validity Not Before: Mar 2 23:30:05 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a61d7d-7b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:23:c6:11:d8:ba:01:8f:a3:cb:42:03:6f: d5:3b:ca:b2:03:7f:8a:d7:bc:b2:56:d9:1e:d5:4f: e4:bd:24:e6:7c:ab:a1:a5:41:9f:75:05:ca:e3:63: 79:f9:6d:8f:77:e5:93:db:66:19:e4:85:09:ad:28: 68:4b:02:81:03:8f:82:ae:3d:b5:89:be:29:ca:97: f0:d6:71:65:41:ad:bf:e7:b3:78:ed:43:42:a1:37: 9c:14:01:27:98:2b:f9:ac:22:b4:9b:3a:0f:8e:a9: e8:44:1b:ca:1b:e7:73:5e:02:77:6c:21:3f:e5:91: 25:05:89:d0:c6:b4:0c:b2:b5:ba:13:63:da:dd:ab: 8e:2d:ff:bd:d2:4e:de:ea:1e:f4:58:99:79:9e:9a: 9f:72:90:86:5d:7f:56:cc:f2:56:c8:25:8b:80:74: c0:ec:22:dc:fd:52:4c:21:96:06:77:85:68:1b:18: 93:0a:59:f9:03:ad:fb:a6:58:11:5a:44:91:91:13: e6:6d:11:4c:dd:3f:2f:39:ba:68:9d:d6:1e:b7:78: 2e:a7:4b:f0:fc:0f:97:dd:bd:d4:72:45:b3:a9:2d: 8a:45:7f:50:10:28:e7:3c:94:3e:de:61:67:ea:bc: 09:e7:6c:a8:02:00:fe:35:65:96:c8:3d:df:bd:94: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:F2:03:C1:19:37:F0:BD:3D:38:32:01:86:82:B1:E8:56:5E:A8 X509v3 Authority Key Identifier: keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.72.0/22 203.175.12.0/22 IPv6: 2001:df0:a640::/47 Signature Algorithm: sha256WithRSAEncryption 47:f5:f9:96:cd:8f:3d:c4:c6:27:44:89:47:bd:5d:6a:82:f2: 40:5c:50:72:d3:86:e2:88:dc:58:d2:cb:b5:a1:d1:71:e1:b5: 03:60:c2:fb:f0:09:b6:45:0a:3a:bb:6a:f9:a3:be:ba:ee:ff: 6e:e9:95:18:15:24:84:e8:66:e7:d9:88:01:a4:6d:8b:34:22: d6:69:07:0c:01:23:bc:84:61:ba:ca:20:a0:4d:80:ca:fc:f6: 59:6f:68:82:66:af:4d:ee:43:e2:48:94:24:30:6b:e0:08:ab: 9e:b5:b8:cf:c4:0c:41:01:89:4a:b7:10:8c:0f:06:b1:90:c8: bf:85:35:7f:0a:1b:83:6d:61:b4:42:e0:eb:53:ef:42:ad:6d: 74:0f:9b:53:d5:69:51:5e:38:c9:f6:7f:4b:46:96:8f:ad:a0: be:5d:7e:73:55:83:79:62:1a:ee:77:ad:14:73:06:ec:51:b1: c9:e9:ee:19:c3:58:28:7f:79:c4:01:a0:69:a9:cf:10:f1:04: 79:90:bc:49:13:8f:56:50:06:c4:5f:fb:69:18:79:ae:f5:9d: ff:ce:4a:3b:fb:38:9c:7a:3c:89:04:e3:f2:20:69:5c:2b:1d: 36:50:be:62:46:24:a6:2b:5e:7c:d5:50:41:ab:99:4d:e1:f7: 7f:b4:5e:3d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1QkExMTAvBgNVBAUTKEVBNjExMzdDMDkwMDkwNkU0NzQ4RDFFMDdDQzU1NUU2 QTdDQ0UxMDAwHhcNMjYwMzAyMjMzMDA1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWQ3ZC03YjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGsjxhHYugGPo8tCA2/VO8qyA3+K17yyVtke1U/kvSTmfKuhpUGfdQXK42N5 +W2Pd+WT22YZ5IUJrShoSwKBA4+Crj21ib4pypfw1nFlQa2/57N47UNCoTecFAEn mCv5rCK0mzoPjqnoRBvKG+dzXgJ3bCE/5ZElBYnQxrQMsrW6E2Pa3auOLf+90k7e 6h70WJl5npqfcpCGXX9WzPJWyCWLgHTA7CLc/VJMIZYGd4VoGxiTCln5A637plgR WkSRkRPmbRFM3T8vObpondYet3gup0vw/A+X3b3UckWzqS2KRX9QECjnPJQ+3mFn 6rwJ52yoAgD+NWWWyD3fvZTIAwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLul8gPB GTfwvT04MgGGgrHoVl6oMB8GA1UdIwQYMBaAFOphE3wJAJBuR0jR4HzFVeanzOEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4 NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtHNUhTTkhnZk1WVjVxZk00 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZtRVRmQWtBa0c1SFNOSGdmTVZWNXFmTTRRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc1QkEvMTZDNEQyQjhDODREMTFFQjk5MTNEMzJEQzRGOUFFMDIvMUY3RUNDODgy QUZBMTFGMEJDQkZCRDcxQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCZ1VIAwQCy68MMA8EAgACMAkDBwEgAQ3wpkAwDQYJKoZIhvcNAQEL BQADggEBAEf1+ZbNjz3ExidEiUe9XWqC8kBcUHLThuKI3FjSy7Wh0XHhtQNgwvvw CbZFCjq7avmjvrru/27plRgVJIToZufZiAGkbYs0ItZpBwwBI7yEYbrKIKBNgMr8 9llvaIJmr03uQ+JIlCQwa+AIq561uM/EDEEBiUq3EIwPBrGQyL+FNX8KG4NtYbRC 4OtT70KtbXQPm1PVaVFeOMn2f0tGlo+toL5dfnNVg3liGu53rRRzBuxRscnp7hnD WCh/ecQBoGmpzxDxBHmQvEkTj1ZQBsRf+2kYea71nf/OSjv7OJx6PIkE4/IgaVwr HTZQvmJGJKYrXnzVUEGrmU3h93+0Xj0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:19 2026 by rpki-client