$ rpki-client -vvf rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/D41F53D48DC011EEB2B3600BC4F9AE02.roa File: D41F53D48DC011EEB2B3600BC4F9AE02.roa (raw, json) Hash identifier: +o/nFF9YcRFxpnVGXo6IbySuNz1oT8+gBrDzhbaViHc= Subject key identifier: B4:75:77:F5:32:B8:66:C4:9F:FA:75:99:4E:32:99:8D:06:31:BE:E0 Certificate issuer: /CN=A917429C/serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Certificate serial: 01ED Authority key identifier: 3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/D41F53D48DC011EEB2B3600BC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:36:06 +0000 ROA not before: Wed 13 Aug 2025 04:12:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138164 IP address blocks: 103.88.176.0/22 maxlen: 22 103.240.56.0/23 maxlen: 23 2401:20e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917429C, serialNumber=3F999FB8C11A7B867F1BF9F99CA1C26A09552B7E Validity Not Before: Aug 13 04:12:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3ec66-dce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:39:58:37:db:c7:6d:ed:d4:3e:ab:69:86: fa:6c:f7:77:81:49:a6:83:6e:ec:b5:82:16:7d:42: b8:3b:ec:ca:08:46:74:22:06:a3:1e:35:2a:1a:bc: 6e:77:36:87:e3:1a:5d:78:f1:32:51:f3:0b:a4:a7: 94:87:d3:5d:84:46:f2:85:67:cf:b9:f1:0a:3d:b5: ba:85:34:c1:5d:de:d1:3d:60:58:ae:17:23:15:8c: a9:8e:f7:c4:05:03:d3:99:2b:fb:90:ee:82:34:69: 1e:85:ef:d1:d2:09:0a:27:cc:67:2a:55:24:23:2b: 99:9a:98:bf:a2:93:62:19:79:a5:34:ab:53:c2:14: 33:2b:e3:97:a0:68:ac:81:29:82:e4:be:b7:d5:59: 4f:13:92:cc:9e:c0:d7:c1:34:47:87:75:de:ef:4e: dc:b8:7d:9f:4a:a3:7b:97:71:94:8c:40:3e:21:28: 6d:8f:c5:17:3f:df:91:d4:51:9a:2c:34:fa:f0:51: ad:65:4e:08:42:02:7c:7c:bf:1c:68:2c:d5:dc:99: 7a:f7:52:3b:36:91:44:bb:93:48:ea:e8:4d:67:13: c0:d0:6d:b3:67:20:aa:a6:91:58:a0:64:39:5a:b1: b6:e0:69:7b:04:e0:56:f0:73:d6:19:95:1c:f3:80: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:77:F5:32:B8:66:C4:9F:FA:75:99:4E:32:99:8D:06:31:BE:E0 X509v3 Authority Key Identifier: keyid:3F:99:9F:B8:C1:1A:7B:86:7F:1B:F9:F9:9C:A1:C2:6A:09:55:2B:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/P5mfuMEae4Z_G_n5nKHCaglVK34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5mfuMEae4Z_G_n5nKHCaglVK34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917429C/0F172DD2302811EE934A8D0CC4F9AE02/D41F53D48DC011EEB2B3600BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.176.0/22 103.240.56.0/23 IPv6: 2401:20e0::/32 Signature Algorithm: sha256WithRSAEncryption 7a:1b:46:cf:f0:b9:c4:9c:c5:c8:fd:fa:bd:9c:9f:c0:34:ec: 87:b1:3d:97:d0:7d:2c:00:da:99:bb:9c:f1:a3:0d:c3:cc:fd: fb:de:2d:06:ee:d7:3d:69:db:f9:b6:b1:48:da:76:b1:71:3f: cf:9e:73:63:f5:df:5c:15:7c:ab:b7:d4:b3:f6:26:81:99:89: d0:5c:d6:c9:45:50:88:b1:07:39:35:2c:c9:1f:1f:ca:12:bc: 1f:65:e0:62:e6:5f:dd:e3:08:9a:13:79:24:5b:a5:e6:03:65: f3:fc:ce:08:fa:78:b1:b4:6a:23:58:8c:86:9a:c3:2c:ce:73: b4:8f:e9:d0:80:dc:22:3b:4d:3d:10:3c:f1:b4:d7:8c:44:bd: 98:4e:c7:63:37:b8:5a:8b:9f:d2:1e:bd:eb:ff:d6:09:77:bb: e6:21:a0:38:d9:a3:35:3d:49:ba:0e:bb:b0:20:d0:92:05:5e: bc:61:57:b0:e4:30:a8:80:f1:cc:ea:b6:3d:6d:79:2d:f3:14: dd:60:6c:f5:9b:cb:72:ab:dc:c1:66:9d:1d:b4:69:7b:ff:73: 30:3a:a8:e7:74:db:6a:57:89:41:15:60:3b:44:7d:0d:e3:e8: 80:f0:7f:38:cf:45:9b:38:ab:3e:65:cb:32:fd:5c:ff:97:7b: 55:56:a4:f5 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQyOUMxMTAvBgNVBAUTKDNGOTk5RkI4QzExQTdCODY3RjFCRjlGOTlDQTFDMjZB MDk1NTJCN0UwHhcNMjUwODEzMDQxMjI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWM2Ni1kY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzE5WDfbx23t1D6raYb6bPd3gUmmg27stYIWfUK4O+zKCEZ0IgajHjUqGrxu dzaH4xpdePEyUfMLpKeUh9NdhEbyhWfPufEKPbW6hTTBXd7RPWBYrhcjFYypjvfE BQPTmSv7kO6CNGkehe/R0gkKJ8xnKlUkIyuZmpi/opNiGXmlNKtTwhQzK+OXoGis gSmC5L631VlPE5LMnsDXwTRHh3Xe707cuH2fSqN7l3GUjEA+IShtj8UXP9+R1FGa LDT68FGtZU4IQgJ8fL8caCzV3Jl691I7NpFEu5NI6uhNZxPA0G2zZyCqppFYoGQ5 WrG24Gl7BOBW8HPWGZUc84CZYQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLR1d/Uy uGbEn/p1mU4ymY0GMb7gMB8GA1UdIwQYMBaAFD+Zn7jBGnuGfxv5+ZyhwmoJVSt+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDI5Qy8wRjE3MkREMjMw MjgxMUVFOTM0QThEMENDNEY5QUUwMi9QNW1mdU1FYWU0Wl9HX241bktIQ2FnbFZL MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bWZ1TUVhZTRaX0dfbjVuS0hDYWdsVkszNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQyOUMvMEYxNzJERDIzMDI4MTFFRTkzNEE4RDBDQzRGOUFFMDIvRDQxRjUzRDQ4 REMwMTFFRUIyQjM2MDBCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1iwAwQBZ/A4MA0EAgACMAcDBQAkASDgMA0GCSqGSIb3DQEBCwUA A4IBAQB6G0bP8LnEnMXI/fq9nJ/ANOyHsT2X0H0sANqZu5zxow3DzP373i0G7tc9 adv5trFI2naxcT/PnnNj9d9cFXyrt9Sz9iaBmYnQXNbJRVCIsQc5NSzJHx/KErwf ZeBi5l/d4wiaE3kkW6XmA2Xz/M4I+nixtGojWIyGmsMsznO0j+nQgNwiO009EDzx tNeMRL2YTsdjN7hai5/SHr3r/9YJd7vmIaA42aM1PUm6DruwINCSBV68YVew5DCo gPHM6rY9bXkt8xTdYGz1m8tyq9zBZp0dtGl7/3MwOqjndNtqV4lBFWA7RH0N4+iA 8H84z0WbOKs+Zcsy/Vz/l3tVVqT1 -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:02 2026 by rpki-client