$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa File: 61EE7C6C281211EA881CC32DC4F9AE02.roa (raw, json) Hash identifier: 4bnWRv5wJBsyx0TFBETKt2oLFJp/Xiza93KwZfpHk70= Subject key identifier: 7F:B4:62:DF:A2:14:5C:79:08:28:69:55:5F:08:4D:66:7F:59:A3:1A Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0C78 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:55:11 +0000 ROA not before: Tue 20 May 2025 19:14:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.229.8.0/24 maxlen: 24 103.229.9.0/24 maxlen: 24 103.229.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: May 20 19:14:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4453f-0d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:e0:fe:bd:37:e0:cd:ce:b0:97:f9:e2:a5: a8:50:5a:7f:f5:c9:91:ae:12:ae:fc:b2:a0:cd:89: de:74:50:7f:41:45:b0:7b:64:ed:89:d2:a9:fa:8e: 91:a4:88:e7:be:5c:ab:83:bc:93:c7:c7:ba:0f:39: 8b:e6:fd:c1:73:a6:67:e7:d7:b5:28:a2:92:09:3a: 5a:24:9d:d2:cf:79:49:7e:f0:25:da:5d:08:f8:10: 6f:b1:b0:e2:fe:a0:22:c9:2d:90:5d:f4:c1:3e:19: c4:e6:ff:53:6f:fe:79:c6:21:69:3c:5e:5e:d4:0d: 1b:0b:18:cb:2c:40:ed:61:c6:95:bf:23:f2:79:a6: 2d:7a:79:96:39:42:03:26:b3:4e:73:a0:34:d6:5d: 35:6e:99:c6:9d:76:19:17:25:0f:3e:61:78:86:e5: 4a:51:f9:73:30:e0:24:75:9b:e2:81:46:a9:d8:e5: 49:9c:2b:44:e2:74:37:22:7f:e2:bb:1d:67:28:9f: 65:d7:30:b2:2e:f8:5f:ca:4a:8a:2a:e6:59:e1:a8: eb:67:1b:56:bb:e1:2d:3e:d7:0c:25:c6:53:fe:a4: 73:ef:b7:5e:e0:9f:e5:62:af:0f:a0:04:a7:af:9a: 66:fd:b2:f7:ee:9c:59:17:b4:6e:3d:8c:e7:b6:f4: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B4:62:DF:A2:14:5C:79:08:28:69:55:5F:08:4D:66:7F:59:A3:1A X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/61EE7C6C281211EA881CC32DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.8.0-103.229.10.255 Signature Algorithm: sha256WithRSAEncryption 05:e3:55:2c:aa:ce:da:f1:23:24:f5:b9:5c:b5:76:24:6c:c6: ec:1d:2c:f8:7a:2e:3b:a7:79:f4:36:ac:6f:e9:24:9e:7b:7a: e9:f5:40:3b:27:0f:5d:ad:9c:bf:a4:c1:5c:d8:22:c9:df:6a: 15:3b:e5:40:27:ca:5f:77:7b:d0:f4:20:8a:3f:bd:15:0e:18: b5:07:17:48:65:ed:4f:17:8c:cf:fe:11:31:39:89:c3:a6:a2: 35:fc:5f:5e:14:46:11:23:20:de:6d:b4:8d:f9:88:ba:7b:8f: 51:2f:f5:18:dc:81:71:c0:18:99:33:23:27:fd:35:cd:8b:12: 37:0b:39:57:ca:fe:5a:e6:62:be:21:4d:c1:ea:d1:05:38:b2: c9:67:01:b4:04:0a:49:fb:e2:92:49:8d:2c:2f:b9:11:af:57: a4:97:76:e3:ce:8f:8c:15:fb:7b:b1:90:f1:11:25:9f:ad:68: 23:88:0a:14:30:08:d5:b8:06:8f:44:bd:95:fd:b0:cc:ff:bc: e2:ca:27:e0:1b:de:f0:44:7a:75:1c:67:1b:ac:2d:97:a9:bc: cd:fd:05:7d:7c:c1:f7:fb:20:f3:45:f1:05:55:6b:2d:23:03: c9:62:84:30:b7:25:62:20:49:7f:29:d9:e4:09:a5:a5:c5:bd: a1:cd:58:5a -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUwNTIwMTkxNDI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDUzZi0wZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZTg/r034M3OsJf54qWoUFp/9cmRrhKu/LKgzYnedFB/QUWwe2TtidKp+o6R pIjnvlyrg7yTx8e6DzmL5v3Bc6Zn59e1KKKSCTpaJJ3Sz3lJfvAl2l0I+BBvsbDi /qAiyS2QXfTBPhnE5v9Tb/55xiFpPF5e1A0bCxjLLEDtYcaVvyPyeaYtenmWOUID JrNOc6A01l01bpnGnXYZFyUPPmF4huVKUflzMOAkdZvigUap2OVJnCtE4nQ3In/i ux1nKJ9l1zCyLvhfykqKKuZZ4ajrZxtWu+EtPtcMJcZT/qRz77de4J/lYq8PoASn r5pm/bL37pxZF7RuPYzntvRUVQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFH+0Yt+i FFx5CChpVV8ITWZ/WaMaMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQ3MEEvNDFBQkQyOUUxQjg2MTFFQTlDOUFGMjQzQzRGOUFFMDIvNjFFRTdDNkMy ODEyMTFFQTg4MUNDMzJEQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBANn5QgDBABn5QowDQYJKoZIhvcNAQELBQADggEBAAXjVSyqztrx IyT1uVy1diRsxuwdLPh6LjunefQ2rG/pJJ57eun1QDsnD12tnL+kwVzYIsnfahU7 5UAnyl93e9D0IIo/vRUOGLUHF0hl7U8XjM/+ETE5icOmojX8X14URhEjIN5ttI35 iLp7j1Ev9RjcgXHAGJkzIyf9Nc2LEjcLOVfK/lrmYr4hTcHq0QU4sslnAbQECkn7 4pJJjSwvuRGvV6SXduPOj4wV+3uxkPERJZ+taCOIChQwCNW4Bo9EvZX9sMz/vOLK J+Ab3vBEenUcZxusLZepvM39BX18wff7IPNF8QVVay0jA8lihDC3JWIgSX8p2eQJ paXFvaHNWFo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:37 2026 by rpki-client