$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa File: 594A0BF2152E11EC94BCB264C4F9AE02.roa (raw, json) Hash identifier: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0= Subject key identifier: 9A:F2:56:ED:78:C2:E3:B6:D9:A8:0B:24:81:D8:62:1B:0F:B8:CA:57 Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 0594 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:59:54 +0000 ROA not before: Thu 04 Dec 2025 22:06:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133493 IP address blocks: 103.60.22.0/24 maxlen: 24 103.60.23.0/24 maxlen: 24 103.60.96.0/24 maxlen: 24 103.238.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Dec 4 22:06:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4546a-6c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:30:fa:bf:f5:40:ae:35:15:f2:eb:f8:57: 8e:a0:7a:9d:20:d4:f3:db:22:a5:2f:c2:d1:d5:b2: 1b:69:15:d7:ae:4a:0a:c6:0d:6e:cf:21:53:2a:1b: 25:9a:d8:cf:04:cd:da:64:5f:b3:02:57:c5:3c:39: 51:1b:14:bc:be:ed:d2:17:47:e0:d2:1f:e8:d3:00: ea:5f:f6:64:86:16:31:3c:6e:e4:da:1e:4b:0e:2b: 5e:59:2d:41:9c:2d:20:38:aa:32:99:37:3f:c0:15: fa:19:2a:4f:ab:e1:1b:33:24:67:3c:ef:d3:71:14: 1b:24:75:67:b7:89:bc:e3:80:fd:61:06:65:67:ea: 24:ec:70:1f:1d:30:c0:ec:83:bf:a3:8c:65:80:e2: 59:e7:bc:53:d5:0a:f4:74:a2:5c:26:71:65:62:2c: 63:e3:cf:0e:52:30:cc:48:97:bf:65:ce:58:4d:00: 7d:9f:01:b8:ed:41:f4:42:57:82:8f:24:89:4b:cc: 2f:be:d7:ff:ed:b9:b9:ae:60:9d:0e:1c:3c:cf:6f: 89:50:5f:18:49:3a:e9:bc:33:61:92:dd:e7:29:72: fd:69:15:04:10:b4:a0:cf:07:6b:4f:a5:cc:37:40: b0:8d:3c:fb:43:c7:fe:75:95:5f:3f:b9:2f:c9:17: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:56:ED:78:C2:E3:B6:D9:A8:0B:24:81:D8:62:1B:0F:B8:CA:57 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/594A0BF2152E11EC94BCB264C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.60.22.0/23 103.60.96.0/24 103.238.62.0/24 Signature Algorithm: sha256WithRSAEncryption 89:f6:c4:02:d1:f1:73:0d:80:54:b5:7e:6a:d4:56:cf:5a:54: 01:0f:89:22:26:08:5b:94:28:7c:a8:75:31:20:43:be:12:c6: 66:67:77:48:66:73:9a:35:93:5b:5e:55:a9:16:55:97:5b:a5: ed:68:eb:82:68:92:e1:3a:75:7f:a9:6b:f9:70:95:17:87:4e: 7d:15:1f:42:62:85:fc:a2:4b:43:26:e6:c7:c2:42:25:7a:0e: 0a:cf:7e:f9:42:ad:41:fb:3a:2b:74:30:b7:3c:ca:ef:9c:f5: 18:71:71:4c:10:be:a4:bd:f9:f7:ac:e3:da:44:aa:6e:91:38: dc:51:05:28:03:6d:81:0f:0a:8a:50:27:e7:80:28:3a:d2:be: d3:16:95:f1:23:35:31:ce:d4:c4:c6:10:8a:9d:68:b8:f2:a8: 52:e1:c3:fb:9c:ec:6f:a6:f3:98:77:2d:ab:26:76:ad:cd:ad: 7c:91:f5:30:10:a3:87:ec:cd:62:7c:74:11:5f:0c:ab:6f:c3: 3e:d2:02:52:c1:f2:4b:62:a0:d8:a0:29:f7:f2:74:89:52:ac: 6b:14:4a:08:a0:93:b7:56:fb:58:8a:dc:09:09:24:e0:44:2b: 3a:2c:23:b0:67:7c:82:d4:88:6c:ac:90:59:4b:c6:ad:af:bf: ba:4c:b4:5b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjUxMjA0MjIwNjEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTQ2YS02YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyww+r/1QK41FfLr+FeOoHqdINTz2yKlL8LR1bIbaRXXrkoKxg1uzyFTKhsl mtjPBM3aZF+zAlfFPDlRGxS8vu3SF0fg0h/o0wDqX/ZkhhYxPG7k2h5LDiteWS1B nC0gOKoymTc/wBX6GSpPq+EbMyRnPO/TcRQbJHVnt4m844D9YQZlZ+ok7HAfHTDA 7IO/o4xlgOJZ57xT1Qr0dKJcJnFlYixj488OUjDMSJe/Zc5YTQB9nwG47UH0QleC jySJS8wvvtf/7bm5rmCdDhw8z2+JUF8YSTrpvDNhkt3nKXL9aRUEELSgzwdrT6XM N0CwjTz7Q8f+dZVfP7kvyRc/WQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJryVu14 wuO22agLJIHYYhsPuMpXMB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM2NDMvQTVEODg0QzQxNTJCMTFFQ0E1M0U0QzYzQzRGOUFFMDIvNTk0QTBCRjIx NTJFMTFFQzk0QkNCMjY0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBZzwWAwQAZzxgAwQAZ+4+MA0GCSqGSIb3DQEBCwUAA4IBAQCJ9sQC 0fFzDYBUtX5q1FbPWlQBD4kiJghblCh8qHUxIEO+EsZmZ3dIZnOaNZNbXlWpFlWX W6XtaOuCaJLhOnV/qWv5cJUXh059FR9CYoX8oktDJubHwkIleg4Kz375Qq1B+zor dDC3PMrvnPUYcXFMEL6kvfn3rOPaRKpukTjcUQUoA22BDwqKUCfngCg60r7TFpXx IzUxztTExhCKnWi48qhS4cP7nOxvpvOYdy2rJnatza18kfUwEKOH7M1ifHQRXwyr b8M+0gJSwfJLYqDYoCn38nSJUqxrFEoIoJO3VvtYitwJCSTgRCs6LCOwZ3yC1Ihs rJBZS8atr7+6TLRb -----END CERTIFICATE-----Generated at Thu Mar 26 09:07:55 2026 by rpki-client