$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa File: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (raw, json) Hash identifier: /a9vJxDdnPMf0i2jU8RPOLfmLWr4u/vqoKuKwHNpKWU= Subject key identifier: E8:12:80:A2:20:FB:4D:0F:4B:AF:F9:27:7C:FB:1F:EB:05:36:E3:F0 Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Certificate serial: 03AB Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:02:15 +0000 ROA not before: Thu 23 Oct 2025 02:44:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133884 IP address blocks: 103.44.222.0/24 maxlen: 24 103.115.234.0/23 maxlen: 23 103.115.234.0/24 maxlen: 24 103.115.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384 Validity Not Before: Oct 23 02:44:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a42ac7-d422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:cf:22:7e:50:72:21:c1:ae:94:80:24:6a: 9f:fa:6e:fc:7e:d7:26:a5:fa:5e:b5:9d:34:e9:e6: ea:44:79:44:b5:1a:d4:fd:fd:bb:a4:49:84:31:6f: ac:3d:81:29:74:8d:70:9a:c0:fe:71:e2:ea:66:b4: ba:ac:5d:5c:fc:46:51:9a:20:21:38:0a:ac:0f:8e: cb:81:6d:4f:af:20:46:e9:5a:06:70:0d:f2:48:aa: 5a:81:68:ed:30:c7:06:19:a6:b9:9a:49:2d:a4:43: 0c:2b:ea:3c:0b:98:c8:56:59:b7:f0:79:5e:4b:09: 58:2d:39:60:bc:58:72:a1:02:4a:2f:cd:b4:93:b6: 91:88:85:54:de:82:d4:92:6f:57:10:2f:70:f3:70: 78:5b:d9:ef:a4:b5:ff:ee:8e:e4:26:b6:a9:f3:25: 98:30:34:8e:ef:3b:fb:97:75:72:45:da:ab:b9:82: 6d:27:13:66:c0:61:4d:f1:06:ee:f5:ef:3e:d4:e0: 07:a1:49:6c:42:a9:bd:7e:e2:7f:38:04:77:54:5e: 07:95:de:69:22:1c:e9:12:ab:2f:f7:f1:ae:a6:ca: 89:1e:7b:37:17:ed:76:30:2b:41:7d:ca:26:5a:d4: 70:17:69:2d:f6:ff:5b:22:2b:c3:3e:43:70:d4:98: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:12:80:A2:20:FB:4D:0F:4B:AF:F9:27:7C:FB:1F:EB:05:36:E3:F0 X509v3 Authority Key Identifier: keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.44.222.0/24 103.115.234.0/23 Signature Algorithm: sha256WithRSAEncryption b0:77:46:73:8c:81:34:4b:1e:18:69:40:6d:0a:6f:0e:1c:d5: fc:1d:ad:91:41:11:16:c1:ff:e7:cc:c7:af:b2:5d:11:bb:9d: 60:f5:a6:9f:c1:77:c5:9c:79:f4:f5:09:e6:43:68:c6:5f:32: f3:97:af:d1:ae:a8:79:8e:31:9b:26:a7:b1:9c:7c:c8:80:72: bf:b7:33:32:89:76:0b:48:32:58:ce:30:09:71:a5:07:ec:8a: 3d:53:5c:92:93:cb:59:a8:7f:50:42:31:c4:3a:3d:90:c0:7b: 49:54:76:aa:41:37:7b:35:47:b3:25:b4:59:67:af:49:b0:5a: ca:cf:d1:4a:40:4f:b9:09:90:39:b7:fb:92:22:07:67:ef:c4: 8c:23:83:ae:e9:3b:7e:0e:03:c6:1a:e8:fd:eb:b5:e0:ca:37: 09:b7:76:e2:b1:b9:58:da:a8:db:63:55:e5:56:a7:71:04:2d: 1f:52:69:5c:dd:b4:b1:47:b1:e2:21:cd:6d:e0:c6:f7:8d:c7: 87:54:90:31:b0:c5:ed:c7:59:4c:4e:21:2a:9a:35:57:59:9a: 17:ca:eb:31:12:0f:31:6b:0e:53:c0:c6:7b:ee:c8:ba:1b:3e: 4d:12:12:17:63:16:12:13:52:b9:ac:64:05:87:60:c4:bd:9a: 9b:9f:8b:be -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0QzcxMTAvBgNVBAUTKDBENTU5NDg1NTMxMEQ5MTYwNjRCNzk5MTM3MENDOTY0 QzNEMkYzODQwHhcNMjUxMDIzMDI0NDU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmFjNy1kNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfvPIn5QciHBrpSAJGqf+m78ftcmpfpetZ006ebqRHlEtRrU/f27pEmEMW+s PYEpdI1wmsD+ceLqZrS6rF1c/EZRmiAhOAqsD47LgW1PryBG6VoGcA3ySKpagWjt MMcGGaa5mkktpEMMK+o8C5jIVlm38HleSwlYLTlgvFhyoQJKL820k7aRiIVU3oLU km9XEC9w83B4W9nvpLX/7o7kJrap8yWYMDSO7zv7l3VyRdqruYJtJxNmwGFN8Qbu 9e8+1OAHoUlsQqm9fuJ/OAR3VF4Hld5pIhzpEqsv9/GupsqJHns3F+12MCtBfcom WtRwF2kt9v9bIivDPkNw1Jhe9wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOgSgKIg +00PS6/5J3z7H+sFNuPwMB8GA1UdIwQYMBaAFA1VlIVTENkWBkt5kTcMyWTD0vOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRDNy9DRjZFQzA0NEQw MTcxMUVDOEUzNjEzNTdDNEY5QUUwMi9EVldVaFZNUTJSWUdTM21STnd6SlpNUFM4 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RWV1VoVk1RMlJZR1MzbVJOd3pKWk1QUzg0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0QzcvQ0Y2RUMwNDREMDE3MTFFQzhFMzYxMzU3QzRGOUFFMDIvQzBBRjRDMkVE MDFBMTFFQ0FFRUU5ODdFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZyzeAwQBZ3PqMA0GCSqGSIb3DQEBCwUAA4IBAQCwd0ZzjIE0Sx4Y aUBtCm8OHNX8Ha2RQREWwf/nzMevsl0Ru51g9aafwXfFnHn09QnmQ2jGXzLzl6/R rqh5jjGbJqexnHzIgHK/tzMyiXYLSDJYzjAJcaUH7Io9U1ySk8tZqH9QQjHEOj2Q wHtJVHaqQTd7NUezJbRZZ69JsFrKz9FKQE+5CZA5t/uSIgdn78SMI4Ou6Tt+DgPG Guj967XgyjcJt3bisblY2qjbY1XlVqdxBC0fUmlc3bSxR7HiIc1t4Mb3jceHVJAx sMXtx1lMTiEqmjVXWZoXyusxEg8xaw5TwMZ77si6Gz5NEhIXYxYSE1K5rGQFh2DE vZqbn4u+ -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:07 2026 by rpki-client