$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/694F9F9CBE2811EBBB48FF52C4F9AE02.roa File: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (raw, json) Hash identifier: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws= Subject key identifier: 0E:17:C9:DD:4F:3D:FE:56:B2:3E:B9:76:68:11:5E:19:F0:2B:97:A2 Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Certificate serial: 0671 Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/694F9F9CBE2811EBBB48FF52C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:17:18 +0000 ROA not before: Thu 23 Oct 2025 00:13:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138178 IP address blocks: 103.129.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Validity Not Before: Oct 23 00:13:33 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4668e-8298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:c7:3a:a2:d7:06:c7:69:a0:94:95:a9:13: db:8f:cb:07:f1:33:af:03:2d:6f:bc:ca:c9:4d:1a: 69:17:f1:07:25:4c:0a:ab:56:4c:cb:f9:91:41:a9: d8:f4:9a:da:71:51:d6:32:8a:c7:0e:22:3b:12:ad: 4e:8c:54:ba:6f:a4:5f:da:68:88:87:b2:8f:d4:b9: 54:6f:38:53:43:08:15:fe:af:4d:dd:06:3b:42:8d: c2:67:3d:3d:75:c2:d6:7e:6e:1d:f5:47:3f:0c:7a: 99:e6:75:78:40:bd:0e:e8:7b:39:5f:d2:54:71:f1: a7:ef:89:46:1c:3c:7b:63:04:5d:77:c8:f1:9a:63: ca:2d:34:93:7b:8d:91:85:98:42:fc:49:31:bc:eb: 20:33:f5:80:d7:55:7e:5a:b3:d7:09:91:ef:19:7a: 4d:f6:17:4e:89:43:79:0f:20:b2:28:72:69:26:32: 3b:49:5d:d2:13:17:a3:ef:2c:61:19:d0:d7:27:d4: 77:67:41:e0:13:fe:9f:21:3a:8a:92:fe:49:e5:83: 95:8e:6e:4f:b7:d0:8e:05:4f:54:a1:8e:95:61:5b: 70:90:36:c0:e2:4f:e0:45:29:2a:64:fd:2d:2a:f0: 68:14:bb:da:f9:d3:7f:15:5d:bd:44:77:e9:ec:e4: 60:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:C9:DD:4F:3D:FE:56:B2:3E:B9:76:68:11:5E:19:F0:2B:97:A2 X509v3 Authority Key Identifier: keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/694F9F9CBE2811EBBB48FF52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.129.36.0/22 Signature Algorithm: sha256WithRSAEncryption 93:48:10:f7:1b:ee:e7:76:d8:72:33:3d:8e:d1:fe:14:f2:46: cf:bc:32:a9:50:c9:af:d0:f4:aa:33:89:92:15:34:59:19:97: 5e:54:e6:83:4c:26:f5:8a:79:ee:22:0b:33:df:00:84:98:ac: 00:36:8d:d3:b9:1b:4a:0d:4c:f1:3b:9c:ed:c3:82:51:81:44: 18:0d:68:06:11:0b:db:94:5c:e2:56:54:71:6c:73:29:73:70: 39:d6:83:c3:3f:43:cf:cb:0e:91:93:77:7e:d7:7a:f9:05:ad: 11:90:dd:c5:0f:b5:d6:c6:b9:97:33:bc:e0:60:6b:92:58:81: cf:1c:5c:59:fe:94:de:f2:40:b3:99:af:b8:d6:17:3d:51:f2: 33:fe:b2:8a:74:ca:a5:bc:27:ce:c5:e1:87:1e:8a:06:3b:b4: 5b:e4:df:3d:12:7a:0a:f4:82:f9:c1:35:c2:41:6c:b0:8a:95: f3:64:e9:a4:f9:7e:80:78:73:54:f9:81:aa:08:e3:74:10:41: 0f:2e:3d:52:c0:e6:0a:df:59:da:0f:a2:11:f5:5a:4d:37:fb: 74:74:47:e4:19:fa:88:7c:4a:83:fc:0f:d1:1a:be:7b:5a:97: 3c:8c:d5:ee:dd:d4:6a:8b:63:40:5f:5f:d1:75:d1:b7:35:8b: 2c:aa:7b:7a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4 MTRFNUZBNTMwHhcNMjUxMDIzMDAxMzMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjY4ZS04Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVnHOqLXBsdpoJSVqRPbj8sH8TOvAy1vvMrJTRppF/EHJUwKq1ZMy/mRQanY 9JracVHWMorHDiI7Eq1OjFS6b6Rf2miIh7KP1LlUbzhTQwgV/q9N3QY7Qo3CZz09 dcLWfm4d9Uc/DHqZ5nV4QL0O6Hs5X9JUcfGn74lGHDx7YwRdd8jxmmPKLTSTe42R hZhC/EkxvOsgM/WA11V+WrPXCZHvGXpN9hdOiUN5DyCyKHJpJjI7SV3SExej7yxh GdDXJ9R3Z0HgE/6fITqKkv5J5YOVjm5Pt9COBU9UoY6VYVtwkDbA4k/gRSkqZP0t KvBoFLva+dN/FV29RHfp7ORgZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA4Xyd1P Pf5Wsj65dmgRXhnwK5eiMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEMwRjUvREYwMTNBMzJCRTI1MTFFQjk0NTY4MTUxQzRGOUFFMDIvNjk0RjlGOUNC RTI4MTFFQkJCNDhGRjUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4EkMA0GCSqGSIb3DQEBCwUAA4IBAQCTSBD3G+7ndthyMz2O0f4U 8kbPvDKpUMmv0PSqM4mSFTRZGZdeVOaDTCb1innuIgsz3wCEmKwANo3TuRtKDUzx O5ztw4JRgUQYDWgGEQvblFziVlRxbHMpc3A51oPDP0PPyw6Rk3d+13r5Ba0RkN3F D7XWxrmXM7zgYGuSWIHPHFxZ/pTe8kCzma+41hc9UfIz/rKKdMqlvCfOxeGHHooG O7Rb5N89EnoK9IL5wTXCQWywipXzZOmk+X6AeHNU+YGqCON0EEEPLj1SwOYK31na D6IR9VpNN/t0dEfkGfqIfEqD/A/RGr57Wpc8jNXu3dRqi2NAX1/RddG3NYssqnt6 -----END CERTIFICATE-----Generated at Sat Mar 28 13:34:55 2026 by rpki-client