$ rpki-client -vvf rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/41121A8C9F5211EFA8F8A056C4F9AE02.roa File: 41121A8C9F5211EFA8F8A056C4F9AE02.roa (raw, json) Hash identifier: nPW3gB7mRCmevpRYG5d1F/JU3ayWf9P9dMruXMX95ow= Subject key identifier: 66:D9:DC:FF:58:B8:B8:4A:6E:2B:83:9C:E6:D4:6B:14:5A:FF:8B:77 Certificate issuer: /CN=A911A739/serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Certificate serial: 0101 Authority key identifier: 0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/41121A8C9F5211EFA8F8A056C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:09:06 +0000 ROA not before: Thu 31 Jul 2025 07:12:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139230 IP address blocks: 103.140.94.0/23 maxlen: 24 2001:df0:b780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A739, serialNumber=0C1BCE024B43FDDA87F39615D994BA3706246C50 Validity Not Before: Jul 31 07:12:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a58bf2-b6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:66:43:07:dd:e5:f1:3e:14:15:6d:e9:18: 94:f2:92:fd:0e:36:aa:b1:7b:e0:c5:f2:eb:b7:73: 10:4f:ae:e2:51:89:dd:14:f6:eb:5d:f5:e4:af:87: dd:04:e3:49:c9:4c:21:c2:94:ad:9b:44:2e:77:a1: 98:ca:7a:65:f8:0f:e4:1e:39:a0:06:ba:b1:06:79: 36:53:75:ff:17:73:fb:69:7e:59:75:ab:b7:f8:13: 64:61:0a:c9:88:ec:17:b7:7c:2d:c0:0d:8e:1a:b9: fb:8d:c6:55:bb:4d:ba:6e:c0:d4:12:e2:ae:8f:91: 24:62:b9:3b:9a:a2:a7:19:6a:ca:2d:00:20:a7:ea: bc:43:0a:c6:2e:cc:d7:95:d4:f8:d5:a5:6c:04:70: ad:ff:02:5f:b0:51:8d:8a:b6:65:5b:62:60:7b:c4: 0c:1f:ce:e5:5f:0f:1c:45:92:1c:bb:6d:7b:59:97: 43:69:8e:b3:88:4e:3d:2d:1e:18:04:70:6e:95:2b: 1a:0b:83:6e:af:dd:41:ce:74:0b:73:68:8f:c8:22: f3:a2:a7:93:50:69:2f:9b:50:f8:a4:5e:df:6e:32: 83:a2:33:c5:33:ff:3a:69:c4:66:a5:4d:a5:02:56: 17:cd:8a:f1:98:32:d1:8a:a7:da:05:c6:e6:03:d4: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D9:DC:FF:58:B8:B8:4A:6E:2B:83:9C:E6:D4:6B:14:5A:FF:8B:77 X509v3 Authority Key Identifier: keyid:0C:1B:CE:02:4B:43:FD:DA:87:F3:96:15:D9:94:BA:37:06:24:6C:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/DBvOAktD_dqH85YV2ZS6NwYkbFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DBvOAktD_dqH85YV2ZS6NwYkbFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A739/C95D397C9F5111EF9B63CC55C4F9AE02/41121A8C9F5211EFA8F8A056C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.94.0/23 IPv6: 2001:df0:b780::/48 Signature Algorithm: sha256WithRSAEncryption 9d:96:16:2e:d0:55:ca:59:8c:a9:9a:08:b8:f3:55:5e:9e:47: ce:a5:3b:c3:64:e6:0a:8f:6a:46:6f:a9:81:a3:1a:89:fe:42: bc:87:57:f0:47:72:5b:7a:41:b8:c4:dd:d8:38:a5:ff:5b:3d: 2b:ad:89:f0:b0:ca:52:a9:65:d8:82:5a:e0:1a:6f:4c:b6:6d: bd:7b:89:44:2e:69:e3:d4:59:3d:90:b7:03:21:66:02:9b:e1: 92:93:79:ea:fc:8d:af:76:cb:01:af:4e:c6:ca:4f:95:a2:f8: 62:d8:d5:83:fc:e7:9b:44:9f:39:91:71:2e:fd:8e:9b:f8:a3: 18:34:14:3f:81:96:ff:4d:e5:5e:5a:34:ac:5a:00:00:98:9e: 31:d2:51:61:fd:f7:74:57:79:5a:f3:a0:15:0f:85:57:0b:71: 9d:b3:2c:28:c6:ec:b7:e6:2d:73:61:84:67:77:5f:f1:5f:85: 6b:82:2f:fd:7b:04:1e:88:d8:47:8a:92:a6:50:a8:f8:a8:ec: b5:0f:88:38:ac:2d:6a:73:85:3e:f7:d8:97:1c:a7:cf:9f:03: fa:64:fb:46:5b:7a:86:52:1e:95:e6:c8:87:3b:3d:80:57:bb: 3a:7f:53:a8:0b:0a:1f:fb:a9:a6:79:57:99:8f:b9:d6:b8:cd: d7:ca:d6:49 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3MzkxMTAvBgNVBAUTKDBDMUJDRTAyNEI0M0ZEREE4N0YzOTYxNUQ5OTRCQTM3 MDYyNDZDNTAwHhcNMjUwNzMxMDcxMjQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGJmMi1iNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkRmQwfd5fE+FBVt6RiU8pL9DjaqsXvgxfLrt3MQT67iUYndFPbrXfXkr4fd BONJyUwhwpStm0Qud6GYynpl+A/kHjmgBrqxBnk2U3X/F3P7aX5Zdau3+BNkYQrJ iOwXt3wtwA2OGrn7jcZVu026bsDUEuKuj5EkYrk7mqKnGWrKLQAgp+q8QwrGLszX ldT41aVsBHCt/wJfsFGNirZlW2Jge8QMH87lXw8cRZIcu217WZdDaY6ziE49LR4Y BHBulSsaC4Nur91BznQLc2iPyCLzoqeTUGkvm1D4pF7fbjKDojPFM/86acRmpU2l AlYXzYrxmDLRiqfaBcbmA9TS4QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGbZ3P9Y uLhKbiuDnObUaxRa/4t3MB8GA1UdIwQYMBaAFAwbzgJLQ/3ah/OWFdmUujcGJGxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTczOS9DOTVEMzk3QzlG NTExMUVGOUI2M0NDNTVDNEY5QUUwMi9EQnZPQWt0RF9kcUg4NVlWMlpTNk53WWti RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RCdk9Ba3REX2RxSDg1WVYyWlM2TndZa2JGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE3MzkvQzk1RDM5N0M5RjUxMTFFRjlCNjNDQzU1QzRGOUFFMDIvNDExMjFBOEM5 RjUyMTFFRkE4RjhBMDU2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4xeMA8EAgACMAkDBwAgAQ3wt4AwDQYJKoZIhvcNAQELBQADggEB AJ2WFi7QVcpZjKmaCLjzVV6eR86lO8Nk5gqPakZvqYGjGon+QryHV/BHclt6QbjE 3dg4pf9bPSutifCwylKpZdiCWuAab0y2bb17iUQuaePUWT2QtwMhZgKb4ZKTeer8 ja92ywGvTsbKT5Wi+GLY1YP855tEnzmRcS79jpv4oxg0FD+Blv9N5V5aNKxaAACY njHSUWH993RXeVrzoBUPhVcLcZ2zLCjG7LfmLXNhhGd3X/FfhWuCL/17BB6I2EeK kqZQqPio7LUPiDisLWpzhT732Jccp8+fA/pk+0ZbeoZSHpXmyIc7PYBXuzp/U6gL Ch/7qaZ5V5mPuda4zdfK1kk= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:13 2026 by rpki-client