$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F85A5EB6C33911E9A9463781C4F9AE02.roa File: F85A5EB6C33911E9A9463781C4F9AE02.roa (raw, json) Hash identifier: tNQn0WKojlyhAAQEIQhVJrKL+oc/0+G9M4t9TtIfX+U= Subject key identifier: 8D:5C:75:F9:7A:BB:4C:6F:7D:60:57:35:6C:8A:59:62:D7:33:C3:75 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1234 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F85A5EB6C33911E9A9463781C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:34:04 +0000 ROA not before: Fri 06 Jun 2025 17:29:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134221 IP address blocks: 103.59.48.0/22 maxlen: 22 103.59.48.0/24 maxlen: 24 103.59.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4660 (0x1234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jun 6 17:29:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4788c-a54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:d1:a3:09:45:72:a2:d2:c4:40:f4:9f:a5: 2f:74:81:fe:fe:5a:7b:54:94:40:97:d6:3f:90:bb: f9:c1:2f:41:d1:53:3d:6d:d7:8f:99:bc:3e:99:67: 7b:56:8e:9b:02:1d:10:be:a6:b0:26:03:00:ac:37: 81:94:d4:f6:84:39:e5:a1:03:56:e2:9c:31:52:df: 92:db:02:a8:9c:01:24:52:91:79:68:ce:58:43:ae: d3:5f:91:83:42:7a:62:4b:58:44:17:bf:e0:73:94: bd:57:8b:c3:2e:96:4b:fd:fa:f0:9d:12:e9:97:99: bc:b6:5a:81:44:b9:eb:76:4e:57:c3:45:46:a8:13: de:77:59:28:b8:07:a2:5b:8c:11:3e:b0:2b:ee:b1: 4c:a1:24:89:1b:a9:75:42:e0:03:0b:54:7b:5a:70: 22:4c:82:64:01:92:41:88:a9:d9:3c:33:f0:57:21: 5a:e4:83:41:41:d9:71:2e:b3:86:d7:d4:fd:80:d2: f4:b0:c2:9d:fe:77:8f:a0:01:12:1a:7f:48:78:3f: 2f:80:86:7c:03:0f:41:3a:a2:e5:6d:67:66:b1:47: 76:5a:a0:1b:03:f1:c6:8f:12:0b:59:2c:f7:14:ea: e7:46:65:26:53:33:02:5c:01:cb:50:6e:8f:04:ea: 8c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5C:75:F9:7A:BB:4C:6F:7D:60:57:35:6C:8A:59:62:D7:33:C3:75 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F85A5EB6C33911E9A9463781C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.59.48.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:be:88:68:85:47:8c:e4:d7:84:0a:87:f5:ba:6f:a1:73:71: 57:d5:e0:13:6d:1e:c9:fb:87:16:d6:89:10:9f:be:3c:69:e2: 3b:07:8e:1d:ad:30:fd:62:f5:53:03:c7:b0:79:c3:90:0f:8e: b1:08:0f:68:8a:65:fa:82:6d:44:48:6f:19:f5:bd:af:dd:75: 13:ce:fd:3b:a8:18:11:f7:a0:77:3a:f1:b3:a6:8b:80:a9:be: 9a:f3:20:57:ee:18:13:3e:88:d3:d8:0c:6f:06:37:07:c7:08: 35:f2:d2:40:97:f4:1a:b6:08:00:6a:b7:b1:fe:2a:e9:72:84: a2:1a:7f:f0:bd:2a:ed:a2:4e:37:43:ec:44:6c:0e:f9:9b:da: fb:b6:73:81:5c:a6:ae:df:30:ad:32:cd:42:a6:5a:60:b8:10: b0:ec:d0:d2:d4:f6:97:c1:ae:6a:89:13:80:d8:5f:bf:4b:4c: 83:dc:67:da:61:33:70:f8:d6:4c:90:49:77:2d:5e:f6:30:9d: 0e:3c:50:7c:7e:15:33:e0:bf:f0:6a:fc:ce:78:7f:5b:93:3e: 03:c2:6f:7b:a3:c0:e0:c2:bb:09:60:b8:9c:4b:ea:20:4e:30: 60:06:a0:1a:5c:fc:8d:60:3e:e6:b2:4a:45:ff:c5:35:6b:0d: a3:4c:a9:63 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNjA2MTcyOTU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg4Yy1hNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2DRowlFcqLSxED0n6UvdIH+/lp7VJRAl9Y/kLv5wS9B0VM9bdePmbw+mWd7 Vo6bAh0QvqawJgMArDeBlNT2hDnloQNW4pwxUt+S2wKonAEkUpF5aM5YQ67TX5GD QnpiS1hEF7/gc5S9V4vDLpZL/frwnRLpl5m8tlqBRLnrdk5Xw0VGqBPed1kouAei W4wRPrAr7rFMoSSJG6l1QuADC1R7WnAiTIJkAZJBiKnZPDPwVyFa5INBQdlxLrOG 19T9gNL0sMKd/nePoAESGn9IeD8vgIZ8Aw9BOqLlbWdmsUd2WqAbA/HGjxILWSz3 FOrnRmUmUzMCXAHLUG6PBOqMBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI1cdfl6 u0xvfWBXNWyKWWLXM8N1MB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvRjg1QTVFQjZD MzM5MTFFOUE5NDYzNzgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZzswMA0GCSqGSIb3DQEBCwUAA4IBAQCOvohohUeM5NeECof1um+h c3FX1eATbR7J+4cW1okQn748aeI7B44drTD9YvVTA8ewecOQD46xCA9oimX6gm1E SG8Z9b2v3XUTzv07qBgR96B3OvGzpouAqb6a8yBX7hgTPojT2AxvBjcHxwg18tJA l/QatggAarex/irpcoSiGn/wvSrtok43Q+xEbA75m9r7tnOBXKau3zCtMs1Cplpg uBCw7NDS1PaXwa5qiROA2F+/S0yD3GfaYTNw+NZMkEl3LV72MJ0OPFB8fhUz4L/w avzOeH9bkz4Dwm97o8DgwrsJYLicS+ogTjBgBqAaXPyNYD7mskpF/8U1aw2jTKlj -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:00 2026 by rpki-client