$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/8AA59866C55511EBA7DB557EC4F9AE02.roa File: 8AA59866C55511EBA7DB557EC4F9AE02.roa (raw, json) Hash identifier: O7fGHxjN+FQFGsWlRiNdIknWpbcrH7a7kZFkM8vfbFU= Subject key identifier: DB:D5:22:24:31:8B:8F:60:A6:5C:AA:AB:17:7E:E1:76:E5:53:8C:D3 Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Certificate serial: 064F Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/8AA59866C55511EBA7DB557EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:58:27 +0000 ROA not before: Fri 04 Jul 2025 23:35:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140072 IP address blocks: 103.167.228.0/23 maxlen: 24 2001:df6:c280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Validity Not Before: Jul 4 23:35:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a429e3-61da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:30:0b:57:23:85:f1:c0:ac:fb:40:10:84: 2e:12:c6:f4:43:38:35:b2:ac:c6:6a:2c:2e:5f:bd: 27:90:e1:1a:a1:81:bf:46:b5:49:3a:38:46:01:0c: f5:69:eb:4d:06:66:4d:ff:90:fb:5a:39:de:be:b3: 1a:4f:d2:74:db:55:e3:df:be:f6:d2:5c:06:5f:86: 0d:9f:9f:ae:9c:13:ff:e5:48:6c:58:b8:4f:ac:1d: 01:65:31:be:52:9b:92:c5:7e:9b:62:09:b5:f7:29: 5f:4f:c1:64:97:33:85:f8:29:ab:2a:e8:7c:04:c0: 9e:d9:a2:5e:7c:b0:f3:77:76:16:f1:5c:42:51:7a: 62:d6:dc:8e:4d:08:20:79:00:64:cd:d8:79:ea:ba: fb:d7:9b:6d:20:71:1e:66:16:b6:82:22:8a:19:26: 8c:18:b4:76:07:55:89:bd:ef:1b:83:b7:70:bd:dd: 90:cd:e8:bd:d5:09:f3:47:8b:da:c1:81:ca:4e:ab: 95:42:66:4b:84:ae:6e:f1:4a:00:77:93:f4:5e:df: 94:38:52:b9:73:4e:51:3a:e9:e1:32:6a:8b:84:e4: 1c:40:e6:eb:3b:2b:bf:a4:b4:52:13:c0:b9:d7:0d: ba:16:71:f0:e6:fa:32:7b:81:8b:62:3c:2b:8d:e5: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:22:24:31:8B:8F:60:A6:5C:AA:AB:17:7E:E1:76:E5:53:8C:D3 X509v3 Authority Key Identifier: keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/8AA59866C55511EBA7DB557EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.228.0/23 IPv6: 2001:df6:c280::/48 Signature Algorithm: sha256WithRSAEncryption 43:85:da:7a:fd:b2:4f:2b:6f:a9:fe:fb:4f:25:db:c1:01:27: f4:9a:e2:1d:e0:3a:e7:6e:55:c3:58:26:aa:c9:44:8b:b6:d7: ba:43:d3:2c:ac:91:30:13:a0:31:47:09:62:96:b8:f5:d8:de: 38:58:f0:6a:30:47:80:8b:ee:ae:b0:fd:b1:c7:9d:78:7f:92: 7a:b5:a9:c3:07:64:39:b1:2c:f8:eb:73:20:9f:8f:c4:85:3d: 0c:be:44:7a:1b:09:cd:6b:20:bf:a4:a3:25:ef:ef:8f:c8:61: c0:00:f0:11:a1:ce:d6:2b:ec:f2:01:b6:da:bc:97:d1:ed:63: a3:a2:be:b5:e0:97:7e:e5:cf:8c:ec:47:df:fd:bc:a5:3d:b5: 94:a0:47:67:de:22:21:f2:c3:c8:da:f9:e8:44:18:4b:f5:b3: b9:08:7a:cf:48:7e:53:42:09:1b:57:1a:a2:8a:3e:3d:05:f6: 3e:ed:c1:03:7f:7b:4c:9e:8d:e2:ad:c8:34:ba:bd:1a:41:8e: 50:aa:03:dc:53:1b:a0:13:3f:a8:5d:55:b9:bf:34:64:f7:ea: 8b:ab:29:3c:c0:aa:55:f9:ba:77:78:f7:93:96:5e:0f:28:59: 4e:a1:37:d2:b8:bd:e2:48:05:61:a8:09:e0:fc:0e:98:a3:4e: 25:43:db:8f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5 MDk1QzVGRkIwHhcNMjUwNzA0MjMzNTUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjllMy02MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiucwC1cjhfHArPtAEIQuEsb0Qzg1sqzGaiwuX70nkOEaoYG/RrVJOjhGAQz1 aetNBmZN/5D7WjnevrMaT9J021Xj37720lwGX4YNn5+unBP/5UhsWLhPrB0BZTG+ UpuSxX6bYgm19ylfT8FklzOF+CmrKuh8BMCe2aJefLDzd3YW8VxCUXpi1tyOTQgg eQBkzdh56rr715ttIHEeZha2giKKGSaMGLR2B1WJve8bg7dwvd2Qzei91QnzR4va wYHKTquVQmZLhK5u8UoAd5P0Xt+UOFK5c05ROunhMmqLhOQcQObrOyu/pLRSE8C5 1w26FnHw5voye4GLYjwrjeWNvwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNvVIiQx i49gplyqqxd+4XblU4zTMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1 NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcwOEMvMTY4MDM0RkVDNTUxMTFFQkEwMThCQzc1QzRGOUFFMDIvOEFBNTk4NjZD NTU1MTFFQkE3REI1NTdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6fkMA8EAgACMAkDBwAgAQ32woAwDQYJKoZIhvcNAQELBQADggEB AEOF2nr9sk8rb6n++08l28EBJ/Sa4h3gOuduVcNYJqrJRIu217pD0yyskTAToDFH CWKWuPXY3jhY8GowR4CL7q6w/bHHnXh/knq1qcMHZDmxLPjrcyCfj8SFPQy+RHob Cc1rIL+koyXv74/IYcAA8BGhztYr7PIBttq8l9HtY6OivrXgl37lz4zsR9/9vKU9 tZSgR2feIiHyw8ja+ehEGEv1s7kIes9IflNCCRtXGqKKPj0F9j7twQN/e0yejeKt yDS6vRpBjlCqA9xTG6ATP6hdVbm/NGT36ourKTzAqlX5und495OWXg8oWU6hN9K4 veJIBWGoCeD8DpijTiVD248= -----END CERTIFICATE-----Generated at Fri Mar 27 04:09:10 2026 by rpki-client