$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/41733D483DAC11EE8D884D6AC4F9AE02.roa File: 41733D483DAC11EE8D884D6AC4F9AE02.roa (raw, json) Hash identifier: gIJDeDXsBAdTnzpKBgTObqoJlW46Zst5h0OM2UbypNE= Subject key identifier: 4B:10:B7:9A:B6:E2:49:FE:02:BD:65:23:E7:9B:01:EF:BC:FB:36:8D Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Certificate serial: 1FE5 Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/41733D483DAC11EE8D884D6AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:28:32 +0000 ROA not before: Sat 12 Apr 2025 16:24:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.247.139.0/24 maxlen: 24 2001:df0:296::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8165 (0x1fe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F Validity Not Before: Apr 12 16:24:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a422e0-16c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:b7:37:9e:bd:b4:32:f3:dc:39:d1:af:e8: 11:48:e6:71:bc:fe:e1:32:f0:a7:f0:95:26:14:4b: 05:eb:26:b2:5f:e3:5a:3b:97:be:4c:2c:16:3d:dc: 07:bf:03:f8:3a:c6:80:f8:b2:e9:ca:01:54:a7:1e: 06:f6:19:18:0f:7a:01:c7:8d:ef:b3:d5:10:e3:92: 34:ed:69:3e:68:b4:97:72:b4:a3:ff:8a:3a:64:d8: 1c:83:df:75:47:09:8c:52:50:6a:08:52:36:e3:28: f2:f3:f6:c5:50:37:c5:33:9f:c4:ab:8d:9b:46:31: f7:41:1e:f0:55:e1:bb:98:f3:1e:3d:fc:f9:d2:34: 7a:86:64:01:f3:73:f2:67:e4:30:23:61:cb:2c:fc: 30:4c:41:33:59:7a:be:45:b2:4c:76:45:48:e7:f9: 2f:06:2e:40:7f:02:f7:01:e6:fa:e0:e1:c0:c6:d6: 45:be:b1:bb:a5:02:2c:ae:84:28:68:81:e3:5e:72: cf:a6:61:81:82:10:91:49:46:87:79:b2:ce:1b:ae: 3f:e3:44:7d:8c:2e:c7:70:b7:85:00:47:c2:67:f9: 8f:59:27:81:06:04:40:3e:b0:46:fb:cd:f1:49:76: 9e:06:62:31:99:fb:dc:2b:6b:ab:bc:55:db:7d:24: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:10:B7:9A:B6:E2:49:FE:02:BD:65:23:E7:9B:01:EF:BC:FB:36:8D X509v3 Authority Key Identifier: keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/41733D483DAC11EE8D884D6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.247.139.0/24 IPv6: 2001:df0:296::/48 Signature Algorithm: sha256WithRSAEncryption 3e:13:c3:80:0b:1d:36:bd:18:5c:1b:e9:c5:4d:5a:5b:94:e0: c2:81:d9:f1:10:c8:2c:37:31:32:55:fc:20:0a:bf:15:3b:7c: d7:74:66:19:81:dd:41:11:27:17:ac:cc:20:19:a8:a2:60:31: ae:45:f5:c8:3f:28:3f:a3:70:d4:b4:a6:a5:97:74:ef:3f:e5: 7e:a6:da:e7:c2:99:7c:87:28:39:58:c5:20:24:38:ec:36:b7: 82:4a:1e:1c:94:8d:3d:7a:9a:0b:26:45:69:b4:7c:d9:de:92: 64:53:5c:1d:e6:af:36:64:57:7e:4a:9c:3c:4f:e4:07:59:b1: 80:d1:f3:37:aa:fc:16:33:be:3f:b4:da:08:c8:07:83:0c:d1: aa:0f:b9:45:0a:44:56:47:d2:dc:7b:5b:77:b9:45:8d:c6:11: e9:83:b3:39:d0:af:e8:06:3e:46:d8:17:e3:d2:c5:75:2b:a9: 28:f7:aa:72:40:e6:39:74:9d:0f:c5:8e:8a:ec:df:91:34:28: 30:d9:f3:07:7f:3a:19:f8:46:43:71:35:70:ce:9a:5b:85:eb: c6:ed:08:56:2a:60:9b:e0:7e:e1:27:20:8b:6e:d8:45:fa:96: 30:f8:fa:7e:0f:65:db:09:8f:09:ec:1b:e0:bb:38:60:29:d5: f1:d2:21:56 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICH+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0 NEU2RDMyOUYwHhcNMjUwNDEyMTYyNDA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjJlMC0xNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/+3N569tDLz3DnRr+gRSOZxvP7hMvCn8JUmFEsF6yayX+NaO5e+TCwWPdwH vwP4OsaA+LLpygFUpx4G9hkYD3oBx43vs9UQ45I07Wk+aLSXcrSj/4o6ZNgcg991 RwmMUlBqCFI24yjy8/bFUDfFM5/Eq42bRjH3QR7wVeG7mPMePfz50jR6hmQB83Py Z+QwI2HLLPwwTEEzWXq+RbJMdkVI5/kvBi5AfwL3Aeb64OHAxtZFvrG7pQIsroQo aIHjXnLPpmGBghCRSUaHebLOG64/40R9jC7HcLeFAEfCZ/mPWSeBBgRAPrBG+83x SXaeBmIxmfvcK2urvFXbfSS+hQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEsQt5q2 4kn+Ar1lI+ebAe+8+zaNMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1 MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q1ODYvOEYwMEM2QjY1NTJFMTFFNjg1MDQyMTQyQzRGOUFFMDIvNDE3MzNENDgz REFDMTFFRThEODg0RDZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ/eLMA8EAgACMAkDBwAgAQ3wApYwDQYJKoZIhvcNAQELBQADggEB AD4Tw4ALHTa9GFwb6cVNWluU4MKB2fEQyCw3MTJV/CAKvxU7fNd0ZhmB3UERJxes zCAZqKJgMa5F9cg/KD+jcNS0pqWXdO8/5X6m2ufCmXyHKDlYxSAkOOw2t4JKHhyU jT16mgsmRWm0fNnekmRTXB3mrzZkV35KnDxP5AdZsYDR8zeq/BYzvj+02gjIB4MM 0aoPuUUKRFZH0tx7W3e5RY3GEemDsznQr+gGPkbYF+PSxXUrqSj3qnJA5jl0nQ/F jors35E0KDDZ8wd/Ohn4RkNxNXDOmluF68btCFYqYJvgfuEnIItu2EX6ljD4+n4P ZdsJjwnsG+C7OGAp1fHSIVY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:58 2026 by rpki-client