$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa File: 8F3586B40DF511F18DE23E02043D8C67.roa (raw, json) Hash identifier: BDMfjMKJmoPKXCf6wF6zp+LdHvOUVMSlt3LPtRBabEg= Subject key identifier: 02:C4:1C:CF:E5:83:2A:BE:64:6A:D9:84:99:B2:32:42:FA:7F:4A:06 Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 70 Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa Signing time: Sun 01 Mar 2026 19:10:29 +0000 ROA not before: Fri 20 Feb 2026 00:48:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.111.80.0/24 maxlen: 24 103.111.81.0/24 maxlen: 24 103.111.82.0/24 maxlen: 24 103.111.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: Feb 20 00:48:50 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48f25-ee0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:36:ea:d1:09:c4:68:b3:98:4e:95:f5:22: a3:ea:63:88:5d:1e:55:22:7e:5a:49:37:91:dd:f5: b0:2d:bc:7d:09:51:f5:d7:a5:7b:1d:d6:89:41:1e: 09:15:2c:23:37:fb:e7:04:71:24:bd:62:7c:c6:ea: e2:87:57:5a:e1:62:ef:85:e9:66:5e:de:8c:f3:b1: 34:f9:4c:ca:e4:92:cd:df:c6:c8:d9:9d:7a:ac:7e: 56:6e:a1:e1:0a:f2:bf:56:87:d7:8d:d3:9f:cc:9f: b9:50:15:dd:c3:4d:6e:df:c0:06:44:92:a2:5d:36: 67:99:da:16:c9:ec:5a:a1:97:a3:80:58:93:12:c3: 28:66:79:5c:b6:b4:54:61:50:22:0b:c4:bf:d6:81: 61:54:5e:9a:a9:be:f7:78:9d:b7:c3:60:95:3c:30: cb:ad:ad:01:2c:97:e5:f9:7a:bc:37:8d:63:13:60: 5d:a5:d7:7d:31:d5:bb:83:da:28:d9:f3:d7:cf:b7: 88:ad:06:e9:5f:ec:78:ab:93:38:f6:34:08:92:d8: 6c:98:99:aa:c3:7e:6c:e3:76:e8:88:6e:7c:f7:67: d1:c9:fb:72:42:73:9c:9a:0a:e0:08:37:5e:e7:f8: 75:49:51:75:f2:f9:02:fa:93:d0:bf:f6:fa:fc:6a: 40:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C4:1C:CF:E5:83:2A:BE:64:6A:D9:84:99:B2:32:42:FA:7F:4A:06 X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/8F3586B40DF511F18DE23E02043D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.111.80.0/22 Signature Algorithm: sha256WithRSAEncryption 51:f9:a4:e9:51:a4:83:19:bc:a0:c4:ed:a8:c0:69:71:0a:49: 77:8d:bb:68:ff:fa:40:d0:08:51:25:5a:a4:8c:2e:72:9a:11: 56:83:4c:b3:70:9d:58:82:43:b1:b6:fb:7e:44:9e:57:9a:5a: 89:01:7f:3d:a3:43:23:d0:64:d5:36:29:3d:07:cf:a1:7c:5c: 0e:20:e2:02:11:98:f3:cd:6a:ff:9a:5d:3e:70:2f:2e:c6:8d: 4a:33:13:46:25:2e:ae:4c:c7:8e:a1:aa:c8:e5:5f:06:96:af: f0:f3:32:0e:c6:00:b2:c6:4e:70:03:24:a1:e1:7e:7a:88:2c: 8e:cb:f7:d5:a6:22:3a:40:98:02:cd:ae:bc:f7:fa:ce:99:0c: 8c:6b:e0:fb:35:7d:6a:c5:09:cc:aa:2f:6d:12:0c:d6:8a:d0: 9c:b1:c8:14:d6:94:a5:a3:c5:fd:af:74:27:bf:8d:c5:a5:5b: c9:81:12:54:6d:eb:bc:c5:a9:19:07:a9:be:a9:61:ef:bc:5d: 07:e4:16:aa:e5:8c:93:e3:83:83:c6:d8:62:d7:7f:6e:eb:48: b8:f4:42:00:e6:97:f5:e2:8c:5b:c8:f6:e2:36:a2:7e:b5:b4: 3b:6f:64:68:da:aa:30:53:2c:e2:1b:9c:26:72:fd:66:bd:27: ca:d2:eb:05 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTBBRjExMC8GA1UEBRMoNjhFRTg1RjRDMjdENEJBOTNFMEQ2QjZBM0U5MjY1OUUx MEQ2ODk1RTAeFw0yNjAyMjAwMDQ4NTBaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ4ZjI1LWVlMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDScDbq0QnEaLOYTpX1IqPqY4hdHlUiflpJN5Hd9bAtvH0JUfXXpXsd1olBHgkV LCM3++cEcSS9YnzG6uKHV1rhYu+F6WZe3ozzsTT5TMrkks3fxsjZnXqsflZuoeEK 8r9Wh9eN05/Mn7lQFd3DTW7fwAZEkqJdNmeZ2hbJ7Fqhl6OAWJMSwyhmeVy2tFRh UCILxL/WgWFUXpqpvvd4nbfDYJU8MMutrQEsl+X5erw3jWMTYF2l130x1buD2ijZ 89fPt4itBulf7Hirkzj2NAiS2GyYmarDfmzjduiIbnz3Z9HJ+3JCc5yaCuAIN17n +HVJUXXy+QL6k9C/9vr8akBpAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUAsQcz+WD Kr5katmEmbIyQvp/SgYwHwYDVR0jBBgwFoAUaO6F9MJ9S6k+DWtqPpJlnhDWiV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMEFGL0ZENjVCNEQ4RTRB NjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU82RjlNSjlTNmstRFd0cVBwSmxuaERXaVY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi84RjM1ODZCNDBE RjUxMUYxOERFMjNFMDIwNDNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnb1AwDQYJKoZIhvcNAQELBQADggEBAFH5pOlRpIMZvKDE7ajAaXEK SXeNu2j/+kDQCFElWqSMLnKaEVaDTLNwnViCQ7G2+35EnleaWokBfz2jQyPQZNU2 KT0Hz6F8XA4g4gIRmPPNav+aXT5wLy7GjUozE0YlLq5Mx46hqsjlXwaWr/DzMg7G ALLGTnADJKHhfnqILI7L99WmIjpAmALNrrz3+s6ZDIxr4Ps1fWrFCcyqL20SDNaK 0JyxyBTWlKWjxf2vdCe/jcWlW8mBElRt67zFqRkHqb6pYe+8XQfkFqrljJPjg4PG 2GLXf27rSLj0QgDml/XijFvI9uI2on61tDtvZGjaqjBTLOIbnCZy/Wa9J8rS6wU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:41:40 2026 by rpki-client