$ rpki-client -vvf rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/F48207E6DB8711EAA446B360C4F9AE02.roa File: F48207E6DB8711EAA446B360C4F9AE02.roa (raw, json) Hash identifier: VKLSV9fn0AYGuNs5W6g646lEixU0mZbJvam1SUJ+8wQ= Subject key identifier: AC:31:09:C7:CC:0D:6A:94:24:30:C6:07:EF:95:DB:CF:C4:84:59:94 Certificate issuer: /CN=A919ACF6/serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Certificate serial: 089F Authority key identifier: A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/F48207E6DB8711EAA446B360C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:55:10 +0000 ROA not before: Fri 08 Aug 2025 21:31:55 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134152 IP address blocks: 103.118.20.0/22 maxlen: 22 103.118.20.0/24 maxlen: 24 103.118.21.0/24 maxlen: 24 103.118.22.0/24 maxlen: 24 103.118.23.0/24 maxlen: 24 2403:2540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ACF6, serialNumber=A3511718B429A2B043E645BFB1650EE6777E4172 Validity Not Before: Aug 8 21:31:55 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4291e-cb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:d4:ee:4d:59:04:80:c1:c6:16:6e:4a:f7: e1:b0:3b:40:aa:18:7d:47:8b:88:f7:24:6e:42:fb: 73:ab:ac:5f:f4:4a:3c:d3:34:41:53:4e:6f:2e:d9: f2:59:79:86:1a:e8:2f:31:51:b0:00:ab:4b:eb:83: 63:d1:65:b9:8a:85:81:4a:1a:3a:e7:4d:d7:30:20: 63:0b:b4:d3:66:27:82:79:dc:80:ab:0d:b8:6f:d9: 63:7c:f1:19:4e:4d:32:80:aa:b8:03:7b:2f:2c:d2: 3d:fd:c7:8c:86:96:22:a9:b8:a9:63:09:a7:2c:12: bb:0d:9d:93:ca:93:52:3c:4b:1d:2a:8f:d0:77:d7: 59:3b:91:c5:a8:bc:3c:f3:19:70:3b:ba:1e:2c:c5: e9:9e:85:c2:7f:07:77:af:77:02:aa:6c:68:a9:34: b0:ad:96:77:64:b7:42:d7:18:75:f1:ca:50:ff:01: e5:fd:05:e8:98:17:a7:38:68:97:2f:1d:ce:7e:b9: c0:f6:31:aa:09:3f:f8:d5:d0:ad:e2:16:06:de:c7: a7:a9:1e:d2:a5:2e:81:52:b7:72:c2:fb:16:62:12: 85:6f:f4:de:06:18:1a:df:6c:72:d1:67:a0:b3:2d: 81:a5:95:16:ed:a3:83:c4:2e:a4:f4:49:af:aa:20: f8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:31:09:C7:CC:0D:6A:94:24:30:C6:07:EF:95:DB:CF:C4:84:59:94 X509v3 Authority Key Identifier: keyid:A3:51:17:18:B4:29:A2:B0:43:E6:45:BF:B1:65:0E:E6:77:7E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/o1EXGLQporBD5kW_sWUO5nd-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1EXGLQporBD5kW_sWUO5nd-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ACF6/349783EEDB8611EA8559425EC4F9AE02/F48207E6DB8711EAA446B360C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.118.20.0/22 IPv6: 2403:2540::/32 Signature Algorithm: sha256WithRSAEncryption 1c:12:d0:a3:64:f3:b1:02:c8:24:e6:de:41:63:21:68:89:6c: bf:a2:d5:49:37:e0:44:35:ee:06:5a:6a:b1:4f:6d:c7:df:f0: 8e:1f:57:bf:a2:16:f2:ad:9b:1c:80:b9:95:fd:70:63:80:0a: 69:f9:ed:7c:84:1b:cc:2b:b0:9f:15:5c:38:23:20:e2:87:a6: 22:aa:0b:94:fa:07:8a:ff:5c:97:4d:6a:70:41:35:96:32:e4: b6:07:1e:ef:11:a5:8a:d8:f6:b2:e3:ff:31:67:15:e8:22:af: ac:85:5c:9f:a8:62:9b:d5:41:26:c3:6f:5e:e9:2b:57:4a:55: ea:70:ff:c8:68:3e:88:d9:20:59:86:1c:76:d1:52:1b:14:ca: 46:55:05:5e:c1:a8:a7:4d:c9:13:dd:9d:cd:7d:8c:57:ea:26: b0:86:7c:93:d3:d6:80:63:48:3a:18:47:aa:23:16:8a:bd:2e: 08:ca:9e:d9:47:ee:43:27:64:fd:e2:5f:74:0f:ad:e7:1c:ca: 10:8c:ff:3f:29:17:08:71:f4:dc:95:d7:6f:c2:de:45:f4:d8: cf:55:55:d3:8a:c7:f7:bf:6a:28:72:bb:b4:8b:27:85:81:22: 26:0f:85:74:ad:ad:d4:34:e4:61:f4:70:90:42:d8:d8:bd:10: 71:22:2f:00 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUFDRjYxMTAvBgNVBAUTKEEzNTExNzE4QjQyOUEyQjA0M0U2NDVCRkIxNjUwRUU2 Nzc3RTQxNzIwHhcNMjUwODA4MjEzMTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjkxZS1jYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmn/U7k1ZBIDBxhZuSvfhsDtAqhh9R4uI9yRuQvtzq6xf9Eo80zRBU05vLtny WXmGGugvMVGwAKtL64Nj0WW5ioWBSho6503XMCBjC7TTZieCedyAqw24b9ljfPEZ Tk0ygKq4A3svLNI9/ceMhpYiqbipYwmnLBK7DZ2TypNSPEsdKo/Qd9dZO5HFqLw8 8xlwO7oeLMXpnoXCfwd3r3cCqmxoqTSwrZZ3ZLdC1xh18cpQ/wHl/QXomBenOGiX Lx3OfrnA9jGqCT/41dCt4hYG3senqR7SpS6BUrdywvsWYhKFb/TeBhga32xy0Weg sy2BpZUW7aODxC6k9EmvqiD47QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKwxCcfM DWqUJDDGB++V28/EhFmUMB8GA1UdIwQYMBaAFKNRFxi0KaKwQ+ZFv7FlDuZ3fkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUNGNi8zNDk3ODNFRURC ODYxMUVBODU1OTQyNUVDNEY5QUUwMi9vMUVYR0xRcG9yQkQ1a1dfc1dVTzVuZC1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRVhHTFFwb3JCRDVrV19zV1VPNW5kLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUFDRjYvMzQ5NzgzRUVEQjg2MTFFQTg1NTk0MjVFQzRGOUFFMDIvRjQ4MjA3RTZE Qjg3MTFFQUE0NDZCMzYwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3YUMA0EAgACMAcDBQAkAyVAMA0GCSqGSIb3DQEBCwUAA4IBAQAc EtCjZPOxAsgk5t5BYyFoiWy/otVJN+BENe4GWmqxT23H3/COH1e/ohbyrZscgLmV /XBjgApp+e18hBvMK7CfFVw4IyDih6YiqguU+geK/1yXTWpwQTWWMuS2Bx7vEaWK 2Pay4/8xZxXoIq+shVyfqGKb1UEmw29e6StXSlXqcP/IaD6I2SBZhhx20VIbFMpG VQVewainTckT3Z3NfYxX6iawhnyT09aAY0g6GEeqIxaKvS4Iyp7ZR+5DJ2T94l90 D63nHMoQjP8/KRcIcfTclddvwt5F9NjPVVXTisf3v2oocru0iyeFgSImD4V0ra3U NORh9HCQQtjYvRBxIi8A -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:08 2026 by rpki-client