$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa File: 4317395081E611EE9EFE132BC4F9AE02.roa (raw, json) Hash identifier: /6x7x4b9csD2TYsiLEKnpfZB3jGbE1YGP0AsFpZrdN4= Subject key identifier: EE:A1:00:F4:50:18:55:20:A8:4F:71:F9:B1:33:03:CD:81:34:4F:E3 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 01BF Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:19:07 +0000 ROA not before: Tue 03 Jun 2025 04:42:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 103.186.158.0/24 maxlen: 24 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jun 3 04:42:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3f67b-3d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:e0:92:bf:f7:ef:18:64:b2:b4:9d:f4:f8: 8f:bb:76:6a:0b:c9:40:c7:9c:b3:ee:6f:85:7a:ff: df:e0:a9:36:c2:88:3e:55:8a:d3:08:8a:c5:bd:6f: 8b:33:bf:d1:e8:88:15:bc:75:d2:d5:b2:d2:aa:b0: 76:90:23:5c:a3:19:f4:9c:38:35:59:54:4d:c8:2c: f2:7c:48:a9:02:26:80:78:c8:8f:1d:bd:1d:b5:b9: 48:52:9d:9d:3a:12:66:f2:0a:7d:d2:7d:dc:65:2c: 9c:16:cd:ed:4a:35:d1:b7:67:a0:65:05:ec:00:6c: 18:c9:53:31:03:ed:3a:e4:11:00:b5:03:82:a4:e3: a2:ab:d6:da:37:e2:1a:59:3e:5f:51:02:4a:18:f9: 59:ba:7d:17:ed:23:73:20:4b:9d:8f:49:d1:9b:a0: e9:9a:a8:f3:d3:ae:b3:bf:b0:1f:5c:c1:d4:94:a1: 58:6e:73:f6:9f:f6:0d:9d:33:cb:28:67:c5:33:81: 22:6e:75:18:1a:45:7d:83:bb:f4:73:8c:a2:d6:dc: 09:a0:92:db:85:f0:38:4b:95:aa:55:b4:ac:04:7a: 04:41:c6:2e:00:5b:0d:fe:ff:33:ed:e1:09:32:d8: 6c:ab:1e:8b:35:d5:69:f9:0e:46:7a:9d:b6:9a:7f: 59:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A1:00:F4:50:18:55:20:A8:4F:71:F9:B1:33:03:CD:81:34:4F:E3 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/4317395081E611EE9EFE132BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.158.0/23 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 78:cc:32:a6:af:2c:83:fd:ae:69:ae:d9:a7:91:c6:9c:dc:f4: 92:bd:55:b0:af:f0:13:17:a5:8d:03:c9:ba:31:c3:60:c9:68: fd:ee:be:85:d7:3d:30:b6:4d:76:79:34:2f:70:d0:93:84:bb: 1e:73:ec:51:48:14:0c:cc:0e:ce:8f:a7:fa:5e:b8:08:e0:ba: 69:9e:4e:7f:58:5e:f5:9e:17:10:7b:26:ef:73:a8:29:a4:fb: 55:d3:c3:b2:33:ba:1b:ee:d8:01:70:f0:20:de:4d:a1:62:55: e3:76:94:ad:21:9b:c9:10:e1:4d:7c:81:51:9f:e8:eb:fe:28: 97:cb:db:b2:19:ed:81:34:b7:29:a4:7f:0d:83:4d:d4:dd:cb: 69:90:41:7d:f8:36:22:e1:7e:a7:2c:9c:96:af:9a:5c:cd:c1: d6:79:9d:44:c9:bd:42:0e:ff:f3:bc:9d:e2:cd:ac:42:96:31: 67:d5:49:69:13:10:60:35:b6:b5:50:e4:0d:3d:5a:f6:e1:fb: 07:60:6b:bd:3f:66:db:c5:40:7e:c1:84:74:a9:97:ac:2e:9b: a2:1f:f9:15:45:7b:7d:64:ef:28:5b:48:0a:bc:fb:51:fe:26: 8d:a3:a1:e0:32:f6:03:65:4b:80:37:37:98:50:6a:e4:81:2d: 60:00:9a:63 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjUwNjAzMDQ0MjUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjY3Yi0zZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Krgkr/37xhksrSd9PiPu3ZqC8lAx5yz7m+Fev/f4Kk2wog+VYrTCIrFvW+L M7/R6IgVvHXS1bLSqrB2kCNcoxn0nDg1WVRNyCzyfEipAiaAeMiPHb0dtblIUp2d OhJm8gp90n3cZSycFs3tSjXRt2egZQXsAGwYyVMxA+065BEAtQOCpOOiq9baN+Ia WT5fUQJKGPlZun0X7SNzIEudj0nRm6Dpmqjz066zv7AfXMHUlKFYbnP2n/YNnTPL KGfFM4EibnUYGkV9g7v0c4yi1twJoJLbhfA4S5WqVbSsBHoEQcYuAFsN/v8z7eEJ Mthsqx6LNdVp+Q5Gep22mn9Z1QIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFO6hAPRQ GFUgqE9x+bEzA82BNE/jMB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3Q0EvNENGN0YxNTg3RUI3MTFFRTk2MjNFOTFBQzRGOUFFMDIvNDMxNzM5NTA4 MUU2MTFFRTlFRkUxMzJCQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ7qeMA4EAgACMAgDBgAkAHLgnzANBgkqhkiG9w0BAQsFAAOCAQEA eMwypq8sg/2uaa7Zp5HGnNz0kr1VsK/wExeljQPJujHDYMlo/e6+hdc9MLZNdnk0 L3DQk4S7HnPsUUgUDMwOzo+n+l64COC6aZ5Of1he9Z4XEHsm73OoKaT7VdPDsjO6 G+7YAXDwIN5NoWJV43aUrSGbyRDhTXyBUZ/o6/4ol8vbshntgTS3KaR/DYNN1N3L aZBBffg2IuF+pyyclq+aXM3B1nmdRMm9Qg7/87yd4s2sQpYxZ9VJaRMQYDW2tVDk DT1a9uH7B2BrvT9m28VAfsGEdKmXrC6boh/5FUV7fWTvKFtICrz7Uf4mjaOh4DL2 A2VLgDc3mFBq5IEtYACaYw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:21 2026 by rpki-client