$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa File: 6DAE125C54F611E79DF7E643C4F9AE02.roa (raw, json) Hash identifier: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY= Subject key identifier: EC:19:52:27:D0:15:6D:B6:9C:A3:7E:59:D6:09:53:52:0D:0A:E4:0D Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 2852 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa Signing time: Thu 12 Mar 2026 16:19:35 +0000 ROA not before: Thu 12 Mar 2026 16:19:35 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133920 IP address blocks: 103.48.8.0/22 maxlen: 24 2401:ec80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10322 (0x2852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Mar 12 16:19:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69b2e797-e946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:79:35:fa:1d:36:a7:26:21:1b:b1:c5:03: 9d:39:f9:d7:82:7e:cc:48:4e:cd:07:6f:3f:51:8c: 45:ce:a2:da:e4:d7:74:d4:35:b8:f7:46:b2:f9:c5: 35:2f:64:c2:24:44:4c:4e:20:3e:cb:59:e3:cc:c1: 4b:f1:e6:79:9f:2f:c5:0c:5b:5a:2f:5a:9b:ff:70: 20:8a:2c:37:2f:be:a1:89:2b:57:6a:5c:9c:49:08: be:65:ae:97:03:eb:33:6b:e1:dd:2e:74:c6:33:14: fe:80:c9:0e:7c:15:8f:ae:31:33:34:38:3c:66:ac: 34:e9:39:7a:eb:d6:c8:3b:9c:86:2b:50:b3:c0:7a: ed:27:15:fb:16:7e:3a:d1:b2:ab:56:a1:56:2e:37: 35:09:ac:0f:df:b3:70:b9:c0:cb:8a:5b:06:18:8b: b1:93:da:2c:46:ea:2b:f4:03:50:01:17:51:16:bc: c9:10:e0:43:60:c0:c9:24:2d:28:8f:bc:f9:fb:b0: 5e:15:c0:6b:e8:df:3a:b2:2b:79:44:87:bf:da:73: 41:b7:d2:57:2a:ad:87:5b:ca:85:26:1c:52:e1:9d: 8e:2f:f0:52:83:67:fd:80:96:c5:8e:d5:b4:94:af: cf:93:cb:08:1e:e7:71:b7:a6:83:b0:10:6e:04:bb: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:19:52:27:D0:15:6D:B6:9C:A3:7E:59:D6:09:53:52:0D:0A:E4:0D X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.8.0/22 IPv6: 2401:ec80::/32 Signature Algorithm: sha256WithRSAEncryption bd:99:ab:30:83:df:56:13:9f:fd:97:db:1d:f1:84:9a:ee:0a: 1d:f6:bf:20:19:29:60:2a:40:d1:82:16:1f:a9:43:40:30:a6: 9b:f1:37:73:bb:0c:c7:2e:22:9d:c0:05:7e:be:61:1e:a0:7b: 4e:37:a3:d9:a0:e1:ff:84:f5:bd:c7:69:ce:12:68:43:8e:14: 7a:e2:fe:d8:31:c1:77:3c:fc:8a:04:0f:69:50:d0:4d:b2:7f: e5:13:83:b8:f9:8e:26:4b:73:d1:4e:31:67:d9:13:6a:91:0b: 7a:6a:fc:8c:2f:ca:ec:9e:93:b3:db:cb:c7:1a:da:b5:2a:b7: 66:30:75:fe:b1:17:6a:34:1d:44:8b:0a:d1:c6:2b:90:40:eb: 5b:3d:4d:68:ad:ae:c2:44:3b:28:19:eb:15:c4:5b:0d:a7:ac: d3:47:63:c7:e1:3a:8e:62:1f:e1:49:ed:2a:4a:28:75:7f:ac: e6:ea:2d:3e:06:d8:d4:d1:69:6d:d1:3f:46:e0:0f:f1:44:27: 85:b8:b5:f1:a3:ac:3d:39:a1:79:97:36:5b:c1:57:c7:2a:58: a0:b8:ff:f4:50:07:74:40:c8:9d:21:cd:23:75:81:ac:86:43: d7:2f:78:d1:7b:4e:f0:8e:8f:97:3b:d5:42:4b:12:b9:46:86: a3:b2:35:1f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICKFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjYwMzEyMTYxOTM1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyZTc5Ny1lOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxl5NfodNqcmIRuxxQOdOfnXgn7MSE7NB28/UYxFzqLa5Nd01DW490ay+cU1 L2TCJERMTiA+y1njzMFL8eZ5ny/FDFtaL1qb/3Agiiw3L76hiStXalycSQi+Za6X A+sza+HdLnTGMxT+gMkOfBWPrjEzNDg8Zqw06Tl669bIO5yGK1CzwHrtJxX7Fn46 0bKrVqFWLjc1CawP37NwucDLilsGGIuxk9osRuor9ANQARdRFrzJEOBDYMDJJC0o j7z5+7BeFcBr6N86sit5RIe/2nNBt9JXKq2HW8qFJhxS4Z2OL/BSg2f9gJbFjtW0 lK/Pk8sIHudxt6aDsBBuBLtpnwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOwZUifQ FW22nKN+WdYJU1INCuQNMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEEyQ0YvRDYxRkVBOUVBNzY2MTFFNEIxMTAzRDMwQzRGOUFFMDIvNkRBRTEyNUM1 NEY2MTFFNzlERjdFNjQzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZzAIMA0EAgACMAcDBQAkAeyAMA0GCSqGSIb3DQEBCwUAA4IBAQC9 maswg99WE5/9l9sd8YSa7god9r8gGSlgKkDRghYfqUNAMKab8TdzuwzHLiKdwAV+ vmEeoHtON6PZoOH/hPW9x2nOEmhDjhR64v7YMcF3PPyKBA9pUNBNsn/lE4O4+Y4m S3PRTjFn2RNqkQt6avyML8rsnpOz28vHGtq1KrdmMHX+sRdqNB1EiwrRxiuQQOtb PU1ora7CRDsoGesVxFsNp6zTR2PH4TqOYh/hSe0qSih1f6zm6i0+BtjU0Wlt0T9G 4A/xRCeFuLXxo6w9OaF5lzZbwVfHKliguP/0UAd0QMidIc0jdYGshkPXL3jRe07w jo+XO9VCSxK5RoajsjUf -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:55 2026 by rpki-client