$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/83595478B65E11EF8DB85B32C4F9AE02.roa File: 83595478B65E11EF8DB85B32C4F9AE02.roa (raw, json) Hash identifier: et9HDrh+GN5yOnO0QC3PHWe6pVv8xUnM/31aeD6iTS8= Subject key identifier: 69:DE:7E:1E:AB:7C:40:22:BD:43:BD:85:29:C6:F8:3B:37:94:44:26 Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 0557 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/83595478B65E11EF8DB85B32C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:00:58 +0000 ROA not before: Thu 30 Oct 2025 23:44:38 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150683 IP address blocks: 103.174.4.0/24 maxlen: 24 103.174.5.0/24 maxlen: 24 2400:7360::/32 maxlen: 32 2400:7360::/40 maxlen: 48 2400:7360:100::/40 maxlen: 48 2400:7360:200::/40 maxlen: 48 2400:7360:300::/40 maxlen: 48 2400:7360:400::/40 maxlen: 48 2400:7360:500::/40 maxlen: 48 2400:7360:600::/40 maxlen: 48 2400:7360:700::/40 maxlen: 48 2400:7360:800::/40 maxlen: 48 2400:7360:900::/40 maxlen: 48 2400:7360:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Oct 30 23:44:38 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a454aa-224f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:a9:5f:89:74:63:ba:4a:aa:38:b6:88:93: 3c:43:a3:47:c1:18:64:63:08:2c:2f:c0:95:8f:15: 7c:a6:bf:37:2f:95:9e:ed:7e:2b:5c:62:b3:74:60: 99:a7:3b:24:5f:a2:dd:39:f5:bc:e9:c2:9a:db:41: ca:a4:25:10:a9:60:cc:b3:1f:2c:63:f8:e9:d7:4c: 7b:9c:8a:ff:34:13:34:5b:2a:1d:0e:f8:aa:ef:7d: 8e:97:67:17:5d:ce:fe:aa:b8:fb:54:6a:54:ef:66: 2c:a3:62:ca:ce:16:e9:ea:22:45:bb:b1:13:65:0b: 21:83:c5:a7:40:28:53:ae:91:01:d7:11:cb:56:b8: c7:08:f1:11:23:7b:43:00:78:45:93:ca:08:e1:20: 88:ca:10:02:63:8c:96:36:fd:21:0c:bd:74:c4:0b: b9:df:3e:c8:fe:63:f0:07:b6:7c:9a:6a:bc:0a:c6: 08:dc:1e:85:21:44:3a:64:ad:9e:dc:03:fe:23:39: 2f:b4:11:8e:e0:a1:6a:16:52:09:72:d1:ac:c9:6d: 88:5b:36:56:60:b7:ea:0f:37:0a:3c:a1:8e:cf:bb: 84:fa:1f:b5:34:02:15:e3:8f:a2:e7:b4:17:f1:80: 07:e9:76:cc:e0:7b:47:ff:c5:f5:34:48:28:8b:de: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DE:7E:1E:AB:7C:40:22:BD:43:BD:85:29:C6:F8:3B:37:94:44:26 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/83595478B65E11EF8DB85B32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.4.0/23 IPv6: 2400:7360::/32 Signature Algorithm: sha256WithRSAEncryption 36:2e:7e:2b:88:22:a3:a2:de:d8:12:d4:8f:64:8c:99:09:bd: e4:8b:8d:50:d6:e2:5c:1a:06:34:d7:79:02:76:d9:dc:fc:bb: 21:24:f2:f3:0d:5f:47:db:d2:35:93:fb:e9:46:f4:a4:68:0e: 62:2e:a3:8a:36:85:dd:e1:d4:9c:33:7d:82:d1:5a:a4:6d:b7: 14:60:42:bb:92:ba:33:3f:25:dd:90:db:41:ec:e4:ee:c7:5b: 46:b0:65:da:ed:53:56:4b:51:94:89:ee:7f:a4:a3:b0:54:06: fd:22:14:d7:23:1a:98:2b:0c:3f:8c:24:61:b2:6a:0d:e3:b8: d3:2d:c9:2c:69:68:9c:b4:7f:46:b9:70:aa:7a:67:a1:5a:56: 2c:1f:3a:6c:c7:7a:f0:42:5b:02:9c:eb:b3:10:1a:65:30:ee: e3:e9:a0:1b:9a:da:df:85:b4:80:59:74:b3:da:14:64:26:0c: a6:c9:ff:eb:0d:68:82:07:4a:56:4d:1f:d4:84:23:31:e1:57: d5:cc:52:3c:5b:64:92:cb:8f:a2:07:1b:6e:00:60:6b:54:3a: af:a4:d7:cb:7e:9a:79:47:7f:10:e4:d4:bf:da:eb:63:fb:9b: 75:ab:01:88:79:f5:69:6d:8e:8f:b1:20:dd:c2:19:f3:28:af: 2f:9b:be:e8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjUxMDMwMjM0NDM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTRhYS0yMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs2pX4l0Y7pKqji2iJM8Q6NHwRhkYwgsL8CVjxV8pr83L5We7X4rXGKzdGCZ pzskX6LdOfW86cKa20HKpCUQqWDMsx8sY/jp10x7nIr/NBM0WyodDviq732Ol2cX Xc7+qrj7VGpU72Yso2LKzhbp6iJFu7ETZQshg8WnQChTrpEB1xHLVrjHCPERI3tD AHhFk8oI4SCIyhACY4yWNv0hDL10xAu53z7I/mPwB7Z8mmq8CsYI3B6FIUQ6ZK2e 3AP+IzkvtBGO4KFqFlIJctGsyW2IWzZWYLfqDzcKPKGOz7uE+h+1NAIV44+i57QX 8YAH6XbM4HtH/8X1NEgoi95KuwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGnefh6r fEAivUO9hSnG+Ds3lEQmMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU3OTEvMTlDNjhEMDYzQTA1MTFFQ0E5NDQwNTFCQzRGOUFFMDIvODM1OTU0NzhC NjVFMTFFRjhEQjg1QjMyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ64EMA0EAgACMAcDBQAkAHNgMA0GCSqGSIb3DQEBCwUAA4IBAQA2 Ln4riCKjot7YEtSPZIyZCb3ki41Q1uJcGgY013kCdtnc/LshJPLzDV9H29I1k/vp RvSkaA5iLqOKNoXd4dScM32C0VqkbbcUYEK7krozPyXdkNtB7OTux1tGsGXa7VNW S1GUie5/pKOwVAb9IhTXIxqYKww/jCRhsmoN47jTLcksaWictH9GuXCqemehWlYs Hzpsx3rwQlsCnOuzEBplMO7j6aAbmtrfhbSAWXSz2hRkJgymyf/rDWiCB0pWTR/U hCMx4VfVzFI8W2SSy4+iBxtuAGBrVDqvpNfLfpp5R38Q5NS/2utj+5t1qwGIefVp bY6PsSDdwhnzKK8vm77o -----END CERTIFICATE-----Generated at Thu Mar 26 10:38:01 2026 by rpki-client