$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa File: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (raw, json) Hash identifier: lJGHvnwAoZvsRMcf7CzU0QiHaTva+fYPV5s+oeNnyCY= Subject key identifier: 2D:82:2D:98:0C:1C:DF:40:8E:54:42:73:DA:2C:C6:F7:A5:09:C6:7E Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E11 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa Signing time: Wed 04 Mar 2026 16:18:19 +0000 ROA not before: Wed 04 Mar 2026 16:18:19 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132588 IP address blocks: 58.84.48.0/22 maxlen: 22 58.84.48.0/24 maxlen: 24 58.84.49.0/24 maxlen: 24 58.84.50.0/24 maxlen: 24 58.84.51.0/24 maxlen: 24 103.240.152.0/22 maxlen: 22 103.240.152.0/24 maxlen: 24 103.240.153.0/24 maxlen: 24 103.240.154.0/24 maxlen: 24 103.240.155.0/24 maxlen: 24 103.254.0.0/24 maxlen: 24 103.254.1.0/24 maxlen: 24 103.254.2.0/24 maxlen: 24 103.254.3.0/24 maxlen: 24 116.204.136.0/22 maxlen: 22 116.204.136.0/24 maxlen: 24 116.204.137.0/24 maxlen: 24 116.204.138.0/24 maxlen: 24 116.204.139.0/24 maxlen: 24 2406:2300::/32 maxlen: 32 2407:c100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11793 (0x2e11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Mar 4 16:18:19 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a85b4b-3c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:81:a6:a5:83:01:6f:4d:b0:32:4a:1b:b6: f7:28:71:df:e1:7c:89:ae:ea:75:53:d2:00:0a:dc: 97:af:90:13:72:72:07:08:e9:9b:ad:32:d3:50:e7: 2a:66:5a:86:75:5c:34:e6:c2:71:fd:b0:d8:59:fe: 24:a0:97:32:15:cc:c7:bc:40:82:bd:d1:6d:c8:41: ce:66:8b:7a:96:07:a8:bf:e4:e3:96:84:8e:d4:8b: 3a:18:54:fc:bf:11:59:e5:d1:2c:7e:47:e6:f8:12: a2:6c:05:e8:88:b1:f5:0c:ae:7f:b6:b7:db:08:5d: 2f:c3:5b:ee:b2:c8:7e:58:8b:4f:eb:30:d9:05:2a: 89:0c:95:5f:24:a7:f2:36:8d:56:8c:44:af:99:07: a7:78:de:a6:66:d7:cb:e9:79:f8:0a:b6:b1:c1:5f: e4:01:99:58:39:bb:b4:98:4f:e6:73:d9:ce:a8:97: c9:6e:c2:35:ac:f4:60:d0:16:8b:3d:23:65:49:1a: e9:8c:9d:c6:03:63:c6:d3:e5:74:1d:14:e0:22:cd: 96:c5:63:15:6a:7b:48:c9:71:23:75:bd:fb:89:d4: 83:f1:36:a5:2c:e0:e6:e8:cf:63:e4:07:1b:32:32: 7e:79:42:12:a1:f9:23:9d:49:43:43:ba:74:1f:cf: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:82:2D:98:0C:1C:DF:40:8E:54:42:73:DA:2C:C6:F7:A5:09:C6:7E X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/7C48D49CFFBE11EBB443B639C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.84.48.0/22 103.240.152.0/22 103.254.0.0/22 116.204.136.0/22 IPv6: 2406:2300::/32 2407:c100::/32 Signature Algorithm: sha256WithRSAEncryption 1a:5d:7e:ab:4a:d0:71:d5:40:e3:ac:3e:41:14:15:52:f4:c8: 7c:2c:f1:08:c7:59:a7:8c:44:66:5d:98:d5:8f:e9:eb:c3:d0: 78:68:fe:7f:52:f0:25:6a:ef:37:e3:40:99:92:4f:a9:35:4c: 7b:ae:56:f0:de:ad:f6:d9:98:5f:47:69:1b:71:d6:8c:ba:2a: 7f:57:1d:73:01:88:ef:de:76:d1:cf:43:82:df:71:24:50:65: 84:fc:1c:2f:72:9c:4b:08:ad:33:b4:d2:90:f8:f3:e6:f4:27: 74:30:1a:c3:ef:14:b6:2a:96:a5:ab:4a:a4:28:51:33:0d:5a: 2e:ac:f6:c9:7a:a4:81:db:b5:b3:f5:3c:94:34:c0:0b:55:e5: c1:42:d9:f3:05:a3:b2:e6:2b:df:33:cc:7f:0d:b9:5e:9f:8b: af:cc:a0:06:d0:97:45:aa:f2:4d:bc:e0:cf:3f:8b:b0:16:68: 36:d5:c8:e7:3d:e0:c6:7d:eb:65:b3:3a:08:75:79:3c:c3:ec: f8:94:00:86:0c:65:e2:84:f3:b2:eb:9c:3b:be:96:e3:e3:91: dd:14:ba:ed:0c:dc:8d:2a:5d:5f:48:2b:6b:79:f5:c5:cc:32: bb:89:34:d0:ee:7d:28:61:99:4e:e7:a9:b3:d9:d6:c5:2f:47: d8:69:20:94 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICLhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwMzA0MTYxODE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NWI0Yi0zYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNaBpqWDAW9NsDJKG7b3KHHf4XyJrup1U9IACtyXr5ATcnIHCOmbrTLTUOcq ZlqGdVw05sJx/bDYWf4koJcyFczHvECCvdFtyEHOZot6lgeov+TjloSO1Is6GFT8 vxFZ5dEsfkfm+BKibAXoiLH1DK5/trfbCF0vw1vussh+WItP6zDZBSqJDJVfJKfy No1WjESvmQeneN6mZtfL6Xn4CraxwV/kAZlYObu0mE/mc9nOqJfJbsI1rPRg0BaL PSNlSRrpjJ3GA2PG0+V0HRTgIs2WxWMVantIyXEjdb37idSD8TalLODm6M9j5Acb MjJ+eUISofkjnUlDQ7p0H8+5qQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFC2CLZgM HN9AjlRCc9osxvelCcZ+MB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0NjgvQ0U0OTQzNzY4QzNBMTFFM0JBMEVBRDJDNTkxMUVBMzIvN0M0OEQ0OUNG RkJFMTFFQkI0NDNCNjM5QzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjAe BAIAATAYAwQCOlQwAwQCZ/CYAwQCZ/4AAwQCdMyIMBQEAgACMA4DBQAkBiMAAwUA JAfBADANBgkqhkiG9w0BAQsFAAOCAQEAGl1+q0rQcdVA46w+QRQVUvTIfCzxCMdZ p4xEZl2Y1Y/p68PQeGj+f1LwJWrvN+NAmZJPqTVMe65W8N6t9tmYX0dpG3HWjLoq f1cdcwGI79520c9Dgt9xJFBlhPwcL3KcSwitM7TSkPjz5vQndDAaw+8UtiqWpatK pChRMw1aLqz2yXqkgdu1s/U8lDTAC1XlwULZ8wWjsuYr3zPMfw25Xp+Lr8ygBtCX RaryTbzgzz+LsBZoNtXI5z3gxn3rZbM6CHV5PMPs+JQAhgxl4oTzsuucO76W4+OR 3RS67QzcjSpdX0gra3n1xcwyu4k00O59KGGZTueps9nWxS9H2GkglA== -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:00 2026 by rpki-client