$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/1BFF84B0131611E991379440C4F9AE02.roa File: 1BFF84B0131611E991379440C4F9AE02.roa (raw, json) Hash identifier: pP9sfTlQFZwgEZOIynMioM1x60lYpa7dMZDxjqtV5Ts= Subject key identifier: 45:5F:51:E7:7E:F5:BA:ED:B3:7A:4B:D5:0D:72:F0:B6:71:C4:BB:84 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 11AF Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/1BFF84B0131611E991379440C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:15:31 +0000 ROA not before: Wed 04 Feb 2026 17:14:45 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138540 IP address blocks: 103.132.125.0/24 maxlen: 24 103.138.95.0/24 maxlen: 24 2001:df7:7d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4527 (0x11af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Feb 4 17:14:45 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a59b83-764d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ce:4e:86:36:46:f5:44:6e:52:0e:aa:70:3f: df:f1:fc:f7:f8:a7:2d:48:3c:38:1e:92:80:72:83: 7e:80:64:68:9b:04:fe:88:88:6a:16:13:a9:64:1f: df:fc:32:62:06:10:28:43:ea:32:8b:e2:33:1c:ef: 70:81:be:dd:71:6f:f3:3d:52:28:aa:52:13:41:9c: 72:ac:ed:21:6f:50:16:eb:22:0a:55:b0:82:85:fc: 6d:34:0d:1f:c8:85:a9:1d:23:1e:6b:28:3e:12:ca: 79:4a:ab:ac:32:97:67:c1:59:01:b1:27:b5:c5:f7: 64:08:72:38:e9:3d:ee:ec:57:be:5c:7c:72:90:20: 64:49:33:2e:a1:44:ab:1e:d6:1f:dd:a8:77:a0:65: d0:49:30:3a:36:15:4f:dc:37:9c:49:dc:81:3a:44: 9c:c0:1f:9d:34:5f:55:e0:09:a7:64:7d:d6:1d:04: a3:53:83:f3:e2:72:f2:ad:3d:58:a9:e4:ff:10:fd: 19:a9:b8:94:4c:3f:94:16:fa:ed:23:2a:e0:4c:b3: ac:02:44:6e:ba:5d:87:6d:db:c7:92:3d:ab:ca:91: 62:1e:f7:d1:e6:4c:dd:52:59:fa:cf:31:4d:62:d8: 7d:4d:c6:60:a3:7d:6c:2c:89:ed:cd:c1:f8:9f:52: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5F:51:E7:7E:F5:BA:ED:B3:7A:4B:D5:0D:72:F0:B6:71:C4:BB:84 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/1BFF84B0131611E991379440C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.125.0/24 103.138.95.0/24 IPv6: 2001:df7:7d00::/48 Signature Algorithm: sha256WithRSAEncryption 04:2c:f6:7e:ad:46:bf:c3:bf:79:31:d3:ec:f3:02:59:08:39: 7d:99:77:02:59:0b:4b:d7:9f:25:7d:c0:cf:e3:e3:c9:89:96: 49:be:a0:f6:e9:f7:fe:8d:29:47:88:90:8c:eb:5a:d8:bd:fb: 73:88:fd:78:25:8d:31:49:58:8e:86:b9:5c:56:af:ee:7f:56: 1b:34:81:cd:0f:41:3a:75:b9:ee:4f:7c:be:9e:d6:9a:55:25: 49:9e:60:cd:d4:74:09:6d:cf:29:31:f4:9a:82:a7:68:40:bf: 34:ee:42:3d:65:5f:cf:28:0e:d7:6f:3b:d2:a3:55:15:be:e0: 09:00:2e:ef:2a:f0:30:44:f8:7f:ba:1d:1e:8d:f2:6e:b0:d6: c4:ac:72:bd:b5:5b:e3:96:af:d1:4f:4b:77:76:6e:ea:67:da: fc:45:4f:72:8f:0b:fb:8c:fb:c3:14:df:e3:b5:a9:11:be:31: 76:07:bb:bb:cb:47:ad:e0:8b:3c:e0:c0:26:dc:d6:46:25:41: a6:fc:9e:1d:4e:cb:93:c2:05:be:49:db:21:17:22:e1:98:a6: 7e:60:33:a9:0f:8a:ee:40:c6:18:b0:83:da:cb:a6:4c:52:c6: cb:6b:71:73:ad:9c:79:91:7e:de:72:d6:a8:8f:2b:50:f3:fd: ea:cf:80:6a -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjYwMjA0MTcxNDQ1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWI4My03NjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s5OhjZG9URuUg6qcD/f8fz3+KctSDw4HpKAcoN+gGRomwT+iIhqFhOpZB/f /DJiBhAoQ+oyi+IzHO9wgb7dcW/zPVIoqlITQZxyrO0hb1AW6yIKVbCChfxtNA0f yIWpHSMeayg+Esp5SqusMpdnwVkBsSe1xfdkCHI46T3u7Fe+XHxykCBkSTMuoUSr HtYf3ah3oGXQSTA6NhVP3DecSdyBOkScwB+dNF9V4AmnZH3WHQSjU4Pz4nLyrT1Y qeT/EP0ZqbiUTD+UFvrtIyrgTLOsAkRuul2HbdvHkj2rypFiHvfR5kzdUln6zzFN Yth9TcZgo31sLIntzcH4n1J6twIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFEVfUed+ 9brts3pL1Q1y8LZxxLuEMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY3RDAvNjZBMjk5ODIxMzE0MTFFOTgzNEY3NzNCQzRGOUFFMDIvMUJGRjg0QjAx MzE2MTFFOTkxMzc5NDQwQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4R9AwQAZ4pfMA8EAgACMAkDBwAgAQ33fQAwDQYJKoZIhvcNAQEL BQADggEBAAQs9n6tRr/Dv3kx0+zzAlkIOX2ZdwJZC0vXnyV9wM/j48mJlkm+oPbp 9/6NKUeIkIzrWti9+3OI/XgljTFJWI6GuVxWr+5/Vhs0gc0PQTp1ue5PfL6e1ppV JUmeYM3UdAltzykx9JqCp2hAvzTuQj1lX88oDtdvO9KjVRW+4AkALu8q8DBE+H+6 HR6N8m6w1sSscr21W+OWr9FPS3d2bupn2vxFT3KPC/uM+8MU3+O1qRG+MXYHu7vL R63gizzgwCbc1kYlQab8nh1Oy5PCBb5J2yEXIuGYpn5gM6kPiu5Axhiwg9rLpkxS xstrcXOtnHmRft5y1qiPK1Dz/erPgGo= -----END CERTIFICATE-----Generated at Thu Mar 26 20:00:25 2026 by rpki-client