$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa File: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (raw, json) Hash identifier: By7/GJ4vrsW+p6nlCrl+Q0fqyxwGg35EjwhrqyWk25M= Subject key identifier: 88:2B:98:37:B1:AF:3C:6E:ED:F1:6B:CC:2B:54:66:0B:3B:45:7F:0D Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Certificate serial: 079B Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa Signing time: Mon 02 Mar 2026 21:28:04 +0000 ROA not before: Mon 02 Mar 2026 21:28:04 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137426 IP address blocks: 103.108.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4 Validity Not Before: Mar 2 21:28:04 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a600e4-d58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:b0:db:a8:67:bd:4d:d0:a4:c5:59:41:1f: ca:1f:62:51:3d:66:59:07:df:57:e1:80:9f:e7:63: 12:d1:aa:e8:5e:86:99:22:8c:55:b4:41:99:b0:e3: 16:7d:3c:e6:50:94:ef:59:36:77:8d:79:12:98:48: 2f:a0:08:3c:8a:bf:6f:5d:3e:47:21:69:85:64:9f: 6b:a3:3c:67:4d:4f:57:18:c9:8a:62:c7:3b:58:17: 3d:9c:59:7a:1a:90:fb:40:28:af:13:e6:be:5f:19: b5:24:54:99:9c:e9:50:5f:26:aa:27:bf:86:52:39: 61:46:dd:c9:22:e1:a9:9b:cb:38:cb:4d:d2:4c:cc: 03:85:8d:e7:8b:cb:49:bc:54:e0:78:7d:e9:a6:19: 64:ce:b9:71:dd:63:3d:a2:22:bf:43:02:3f:cd:23: 65:9f:07:28:63:4b:e0:5d:fb:d0:23:6f:5e:80:6b: f4:b5:1e:f5:1d:94:82:aa:18:a5:08:8d:4b:46:c8: 62:9e:2e:a1:27:be:e2:db:88:5d:cf:05:d2:40:a1: d6:0a:01:e6:64:e7:77:d8:c3:f1:8b:91:23:af:f8: 5e:61:73:b0:78:c1:89:a9:97:38:18:03:1f:59:a6: 2d:08:e0:4d:66:40:cb:47:80:50:43:19:e6:a7:a4: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2B:98:37:B1:AF:3C:6E:ED:F1:6B:CC:2B:54:66:0B:3B:45:7F:0D X509v3 Authority Key Identifier: keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.68.0/22 Signature Algorithm: sha256WithRSAEncryption 81:e5:a5:f6:a6:f1:f2:0f:8d:41:95:63:45:f8:6f:be:7b:40: 94:5e:02:ae:6b:39:de:60:3f:74:0e:b3:22:d5:b6:bb:a6:4c: 79:a0:fb:21:2d:5c:7b:29:6c:21:ab:d1:f8:f0:fb:85:9e:de: 37:fb:80:19:90:82:69:99:59:c3:7b:9c:40:db:fc:81:9a:1b: 9f:6f:df:ea:e8:e3:3d:d5:f8:11:e4:f0:cf:fa:60:1b:a0:ad: 40:17:79:5d:0d:57:46:aa:c1:f3:4b:f8:ae:bf:13:5f:a8:d0: 26:b1:27:24:5b:65:2e:56:d0:35:b5:52:68:ce:02:50:55:37: 89:42:f5:93:6b:94:82:73:f8:cc:5c:d2:09:a2:a2:ac:db:b0: c8:da:0c:c0:da:70:0e:a1:ef:70:df:5f:92:15:ad:2d:cd:3a: 09:c8:15:75:71:f5:b4:ec:2d:0d:e9:16:ef:aa:8c:57:df:9a: 0f:cc:c7:a6:c2:e4:d9:63:00:a2:3b:bd:bc:d8:83:3c:48:93: 9b:05:92:5d:b0:18:6d:5e:31:7f:2b:67:74:33:f5:05:a7:c5: dd:b1:20:fc:b4:8d:4b:5b:e8:8d:8e:a9:a4:d1:66:b5:4e:7e: 22:d3:36:f0:a2:87:99:16:a6:ec:86:7e:dc:ad:cf:60:c6:ce: 36:b7:04:d3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk4MEYxMTAvBgNVBAUTKDNCQzZCMzIxRkQ3QjYwQzU2MEYxNUQ3RDI0Q0FDNUEz Mzc0NDBGQjQwHhcNMjYwMzAyMjEyODA0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MDBlNC1kNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiPaw26hnvU3QpMVZQR/KH2JRPWZZB99X4YCf52MS0aroXoaZIoxVtEGZsOMW fTzmUJTvWTZ3jXkSmEgvoAg8ir9vXT5HIWmFZJ9rozxnTU9XGMmKYsc7WBc9nFl6 GpD7QCivE+a+Xxm1JFSZnOlQXyaqJ7+GUjlhRt3JIuGpm8s4y03STMwDhY3ni8tJ vFTgeH3pphlkzrlx3WM9oiK/QwI/zSNlnwcoY0vgXfvQI29egGv0tR71HZSCqhil CI1LRshini6hJ77i24hdzwXSQKHWCgHmZOd32MPxi5Ejr/heYXOweMGJqZc4GAMf WaYtCOBNZkDLR4BQQxnmp6RtXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIgrmDex rzxu7fFrzCtUZgs7RX8NMB8GA1UdIwQYMBaAFDvGsyH9e2DFYPFdfSTKxaM3RA+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTgwRi8xNjYxN0Q2QzQ4 MzIxMUVCODc1NDMxMUFDNEY5QUUwMi9POGF6SWYxN1lNVmc4VjE5Sk1yRm96ZEVE N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL084YXpJZjE3WU1WZzhWMTlKTXJGb3pkRUQ3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk4MEYvMTY2MTdENkM0ODMyMTFFQjg3NTQzMTFBQzRGOUFFMDIvOUZBQjFBREM2 NUMxMTFFRjg3NjlEQzE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2xEMA0GCSqGSIb3DQEBCwUAA4IBAQCB5aX2pvHyD41BlWNF+G++ e0CUXgKuazneYD90DrMi1ba7pkx5oPshLVx7KWwhq9H48PuFnt43+4AZkIJpmVnD e5xA2/yBmhufb9/q6OM91fgR5PDP+mAboK1AF3ldDVdGqsHzS/iuvxNfqNAmsSck W2UuVtA1tVJozgJQVTeJQvWTa5SCc/jMXNIJoqKs27DI2gzA2nAOoe9w31+SFa0t zToJyBV1cfW07C0N6RbvqoxX35oPzMemwuTZYwCiO7282IM8SJObBZJdsBhtXjF/ K2d0M/UFp8XdsSD8tI1LW+iNjqmk0Wa1Tn4i0zbwooeZFqbshn7crc9gxs42twTT -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:33 2026 by rpki-client