$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/CF4B4BC61E6411EF8AA5A942C4F9AE02.roa File: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (raw, json) Hash identifier: Mz/1OwX4JKqamKbOmuQ3J5CrQbldXPJZfVinuqAEyrM= Subject key identifier: 3B:47:4E:1A:CC:4D:C9:F6:C5:DD:71:4D:E9:0C:A5:DC:47:1C:20:29 Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 0269 Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/CF4B4BC61E6411EF8AA5A942C4F9AE02.roa Signing time: Sat 14 Mar 2026 10:09:59 +0000 ROA not before: Sat 14 Mar 2026 10:09:59 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 150726 IP address blocks: 103.74.10.0/24 maxlen: 24 103.74.11.0/24 maxlen: 24 2001:df1:dd40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: Mar 14 10:09:59 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b533f7-4490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:8e:59:b6:c0:f7:36:a1:8c:6d:10:0b:2b: bb:c8:53:94:40:1d:da:03:b6:37:30:0a:dc:20:cb: 93:0c:e9:73:e2:6f:7d:81:85:1f:d6:cc:17:d5:29: 57:80:f2:90:23:0a:61:4c:06:de:44:e9:cd:77:f2: 1c:ec:5b:ed:f4:c0:6b:ae:e6:46:29:42:46:b7:de: eb:2f:ae:b0:f9:38:1a:a9:00:2b:9e:b4:e4:bc:8f: ba:9d:80:d0:f4:e6:54:fe:51:d7:ad:b9:5d:20:e7: af:22:63:a8:64:85:d3:46:1e:22:8c:1f:4a:99:ea: bd:07:57:08:e4:0e:41:1d:52:df:9a:3e:67:97:79: 80:7a:c4:e6:e3:72:94:71:06:87:be:64:75:a0:28: 15:ad:59:e9:d4:b1:4c:e3:2f:3f:53:c6:aa:c6:6e: 7e:02:84:05:ba:c2:c0:e5:e5:9b:40:79:ea:d7:dd: b3:ba:1e:5b:c4:f6:d3:29:6b:d2:77:26:4b:3c:23: 4d:8a:e7:7d:e4:43:db:e7:64:57:0d:fa:ec:eb:c3: 93:f2:6d:60:fa:25:38:53:12:2c:0c:f4:39:d3:88: 52:8c:1a:f6:2e:7c:db:b0:dd:ea:b9:79:c6:51:81: b8:2e:db:61:c4:85:2d:1f:6f:94:f7:14:09:56:6c: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:47:4E:1A:CC:4D:C9:F6:C5:DD:71:4D:E9:0C:A5:DC:47:1C:20:29 X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/CF4B4BC61E6411EF8AA5A942C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.74.10.0/23 IPv6: 2001:df1:dd40::/48 Signature Algorithm: sha256WithRSAEncryption 7e:9a:ed:d3:06:ef:d4:67:0f:c1:80:4c:0f:56:70:af:50:5d: 5c:4a:e3:8b:13:28:0f:df:7a:58:29:6f:3a:fd:fe:86:60:bf: 6d:02:f8:8a:1c:88:c9:05:98:0d:fb:83:f0:33:d5:f5:a4:e6: 03:b8:30:59:49:9a:86:f1:f9:74:30:8d:1a:3a:3d:9c:66:8c: 70:24:f1:62:ea:36:0e:be:ff:c3:34:13:41:a3:73:9a:d0:6d: b5:cb:01:71:fc:1e:fc:e3:4d:1d:58:0c:a6:27:6f:b3:b3:11: 62:42:32:4e:89:87:74:33:ac:44:6b:d2:8a:89:c6:d7:7f:d1: cf:17:29:af:73:b7:82:cf:fb:18:4e:32:8a:8b:e8:c5:aa:5b: 53:af:9d:1c:62:17:04:7b:80:84:60:46:22:b8:da:da:76:a8: da:68:2d:ec:d3:5e:de:e6:32:44:00:c3:2b:53:99:e3:5f:17: 61:8d:dc:18:4e:90:0f:10:92:b7:5f:2a:31:79:56:7b:9c:c9: 5f:32:d1:97:63:88:23:aa:91:94:48:93:66:3b:a0:b3:bb:94: 1d:20:15:71:69:1e:6b:81:f9:80:68:6e:4c:84:3e:e2:ee:02: 31:2c:45:48:7e:83:d7:7a:03:84:2d:e2:a9:b9:49:81:79:16: 45:cf:ab:63 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjYwMzE0MTAwOTU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1MzNmNy00NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7yOWbbA9zahjG0QCyu7yFOUQB3aA7Y3MArcIMuTDOlz4m99gYUf1swX1SlX gPKQIwphTAbeROnNd/Ic7Fvt9MBrruZGKUJGt97rL66w+TgaqQArnrTkvI+6nYDQ 9OZU/lHXrbldIOevImOoZIXTRh4ijB9Kmeq9B1cI5A5BHVLfmj5nl3mAesTm43KU cQaHvmR1oCgVrVnp1LFM4y8/U8aqxm5+AoQFusLA5eWbQHnq192zuh5bxPbTKWvS dyZLPCNNiud95EPb52RXDfrs68OT8m1g+iU4UxIsDPQ504hSjBr2LnzbsN3quXnG UYG4LtthxIUtH2+U9xQJVmyvewIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDtHThrM Tcn2xd1xTekMpdxHHCApMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURCQkYvQjU5NUE2Njg5QkY3MTFFREExREM1RTZGQzRGOUFFMDIvQ0Y0QjRCQzYx RTY0MTFFRjhBQTVBOTQyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ0oKMA8EAgACMAkDBwAgAQ3x3UAwDQYJKoZIhvcNAQELBQADggEB AH6a7dMG79RnD8GATA9WcK9QXVxK44sTKA/felgpbzr9/oZgv20C+IociMkFmA37 g/Az1fWk5gO4MFlJmobx+XQwjRo6PZxmjHAk8WLqNg6+/8M0E0Gjc5rQbbXLAXH8 HvzjTR1YDKYnb7OzEWJCMk6Jh3QzrERr0oqJxtd/0c8XKa9zt4LP+xhOMoqL6MWq W1OvnRxiFwR7gIRgRiK42tp2qNpoLezTXt7mMkQAwytTmeNfF2GN3BhOkA8Qkrdf KjF5VnucyV8y0ZdjiCOqkZRIk2Y7oLO7lB0gFXFpHmuB+YBobkyEPuLuAjEsRUh+ g9d6A4Qt4qm5SYF5FkXPq2M= -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:10 2026 by rpki-client