$ rpki-client -vvf rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa File: F1C686AA1D5811EFA8D26E3EC4F9AE02.roa (raw, json) Hash identifier: rM4d8J/DjsZtQJsJxCjf7aAA6oS2HwAdCGUvnOly1qE= Subject key identifier: 21:66:4C:25:AB:65:35:42:2F:62:16:3C:EB:87:77:37:41:10:BA:FB Certificate issuer: /CN=A917AF13/serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Certificate serial: 07EC Authority key identifier: 3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:09:37 +0000 ROA not before: Mon 02 Feb 2026 21:18:03 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58507 IP address blocks: 103.81.124.0/22 maxlen: 24 2400:70c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AF13, serialNumber=3DF69CA98CB131E965B5BC4A33FCE71B9D35E7A8 Validity Not Before: Feb 2 21:18:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a448a1-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:b7:28:cf:64:0d:51:df:11:41:71:91:2b: 40:07:36:4f:59:1a:ea:8c:b5:96:4c:6a:f7:06:f8: 09:75:f3:b8:e3:ab:7b:a7:63:a3:98:e7:3e:8c:19: 96:00:a7:2a:b3:46:e0:e4:bf:a0:72:aa:65:b9:6c: 0f:67:4f:c8:23:e3:25:9d:42:89:23:1d:82:ae:64: 92:00:39:21:b8:29:9d:5f:93:4f:cf:1b:ff:44:0b: ae:60:b5:4b:df:16:13:79:1c:0f:3d:85:3b:b8:1d: bb:7f:ae:82:09:f4:ef:76:fd:7d:ab:b1:66:28:2d: 29:e7:05:8b:b5:b8:02:be:6a:4f:af:6a:ad:aa:be: 70:6a:c0:dc:0a:d0:ee:0b:a5:24:08:9b:dd:9c:ae: bd:4b:a8:ca:b3:bc:c2:31:06:b7:15:9f:33:17:7b: 6e:bf:fc:7f:29:26:a6:95:95:8e:b2:59:5b:b7:bf: df:46:c4:83:1e:6f:78:90:91:92:ce:09:40:83:13: 63:e0:72:d8:bd:2a:33:5e:15:63:c5:83:f8:21:89: 79:77:11:65:e4:ca:91:7b:31:41:1d:95:57:17:bd: af:3e:27:83:69:38:7b:d0:a3:ef:3d:03:21:72:06: 2e:a5:86:be:2d:a3:a7:3f:7c:3f:83:10:19:c0:85: 0d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:66:4C:25:AB:65:35:42:2F:62:16:3C:EB:87:77:37:41:10:BA:FB X509v3 Authority Key Identifier: keyid:3D:F6:9C:A9:8C:B1:31:E9:65:B5:BC:4A:33:FC:E7:1B:9D:35:E7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/PfacqYyxMelltbxKM_znG50156g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfacqYyxMelltbxKM_znG50156g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AF13/538732FE294C11EBA6BF6D31C4F9AE02/F1C686AA1D5811EFA8D26E3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.81.124.0/22 IPv6: 2400:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 8d:7d:d1:56:40:66:4c:60:2b:74:3a:92:2a:63:fa:6c:53:28: 3b:0e:c4:f3:7a:e0:9a:9e:24:45:df:77:6c:52:a0:0e:d8:dc: 85:ba:90:04:d9:06:26:9b:56:c2:e0:3f:81:51:ad:dc:28:b0: 89:e1:cb:bf:8f:5b:b6:2a:c3:3c:8e:b7:87:84:1f:fa:46:31: e4:20:69:df:07:77:38:95:f0:2d:a1:39:e7:53:83:47:91:69: 49:18:f4:71:e0:b9:19:0a:96:6c:95:15:92:95:d2:b5:3e:73: 9c:f6:33:86:d5:93:ff:58:34:56:be:28:c0:c1:5c:89:b2:cc: db:7d:e1:bf:53:4e:4b:cd:1f:6d:5b:bd:ac:06:0b:01:ee:44: 72:40:51:71:82:59:b9:03:11:6b:c0:9b:93:04:08:f9:36:ea: 62:38:25:0b:ed:cd:15:2b:d3:d0:24:dd:8b:4b:db:ca:f6:46: 3f:4f:4d:7f:3e:d5:e0:22:a4:e6:8b:6c:b1:fd:dc:35:65:a6: a8:c2:f6:56:eb:21:f7:ea:d8:aa:4f:c6:e6:1d:42:6f:5b:6c: b4:37:a6:3b:d0:0c:d1:05:db:89:ea:4c:a7:47:dd:72:49:76: 89:0f:15:64:f6:e1:78:14:4f:fb:bd:f9:f1:b4:c7:ad:6f:df: fa:a7:29:ee -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FGMTMxMTAvBgNVBAUTKDNERjY5Q0E5OENCMTMxRTk2NUI1QkM0QTMzRkNFNzFC OUQzNUU3QTgwHhcNMjYwMjAyMjExODAzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDhhMS03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8S3KM9kDVHfEUFxkStABzZPWRrqjLWWTGr3BvgJdfO446t7p2OjmOc+jBmW AKcqs0bg5L+gcqpluWwPZ0/II+MlnUKJIx2CrmSSADkhuCmdX5NPzxv/RAuuYLVL 3xYTeRwPPYU7uB27f66CCfTvdv19q7FmKC0p5wWLtbgCvmpPr2qtqr5wasDcCtDu C6UkCJvdnK69S6jKs7zCMQa3FZ8zF3tuv/x/KSamlZWOsllbt7/fRsSDHm94kJGS zglAgxNj4HLYvSozXhVjxYP4IYl5dxFl5MqRezFBHZVXF72vPieDaTh70KPvPQMh cgYupYa+LaOnP3w/gxAZwIUN2QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCFmTCWr ZTVCL2IWPOuHdzdBELr7MB8GA1UdIwQYMBaAFD32nKmMsTHpZbW8SjP85xudNeeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUYxMy81Mzg3MzJGRTI5 NEMxMUVCQTZCRjZEMzFDNEY5QUUwMi9QZmFjcVl5eE1lbGx0YnhLTV96bkc1MDE1 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmYWNxWXl4TWVsbHRieEtNX3puRzUwMTU2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FGMTMvNTM4NzMyRkUyOTRDMTFFQkE2QkY2RDMxQzRGOUFFMDIvRjFDNjg2QUEx RDU4MTFFRkE4RDI2RTNFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1F8MA0EAgACMAcDBQAkAHDAMA0GCSqGSIb3DQEBCwUAA4IBAQCN fdFWQGZMYCt0OpIqY/psUyg7DsTzeuCaniRF33dsUqAO2NyFupAE2QYmm1bC4D+B Ua3cKLCJ4cu/j1u2KsM8jreHhB/6RjHkIGnfB3c4lfAtoTnnU4NHkWlJGPRx4LkZ CpZslRWSldK1PnOc9jOG1ZP/WDRWvijAwVyJsszbfeG/U05LzR9tW72sBgsB7kRy QFFxglm5AxFrwJuTBAj5NupiOCUL7c0VK9PQJN2LS9vK9kY/T01/PtXgIqTmi2yx /dw1ZaaowvZW6yH36tiqT8bmHUJvW2y0N6Y70AzRBduJ6kynR91ySXaJDxVk9uF4 FE/7vfnxtMetb9/6pynu -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:42 2026 by rpki-client