$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/5CA352A49DAB11F0B1E32C64C4F9AE02.roa File: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (raw, json) Hash identifier: LyWvvw+ErBjB7W8o/R8I1LcD7CF1lU/R94KhGen7GVg= Subject key identifier: 11:FB:B5:91:12:F9:C9:C2:1E:02:36:5F:21:59:8F:2B:20:8E:3C:BD Certificate issuer: /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Certificate serial: 50 Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/5CA352A49DAB11F0B1E32C64C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:15:46 +0000 ROA not before: Tue 30 Sep 2025 03:12:57 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139279 IP address blocks: 103.140.172.0/23 maxlen: 24 2001:df0:cd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F Validity Not Before: Sep 30 03:12:57 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3d991-92c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:d9:10:37:9f:16:48:f4:df:da:c8:f8:be: b7:77:e5:b4:ce:04:dd:c2:3e:f2:e9:b2:1c:de:c4: 21:8c:72:43:1a:bf:0d:6d:01:03:ce:1f:3c:7a:c4: f5:49:14:fd:fb:fa:af:9b:1c:fe:ec:a5:61:e9:d8: 32:11:3a:bb:6d:dc:59:fe:f5:77:20:17:f0:b3:ad: 65:5c:e8:2c:55:46:f9:0d:61:52:b2:55:86:23:79: 93:de:85:58:04:ea:66:f8:14:66:e1:5a:86:44:f0: d1:dd:79:f7:d8:35:b5:d3:86:c2:3f:a5:c6:db:90: 9d:45:0e:5a:37:ab:cd:2e:f2:51:3c:23:5d:5b:e9: b1:fb:ab:b8:fb:bf:38:3c:9e:47:78:b8:89:25:f5: 91:f8:84:0c:28:85:5f:92:1a:69:e3:36:1e:aa:5d: db:5c:ed:40:ba:54:29:1d:bd:c5:73:48:1f:55:de: e5:4c:1d:bd:48:81:dc:57:18:c6:4c:dd:4b:ef:69: 43:6a:61:6b:8b:58:e7:85:c2:9b:ee:b2:cf:fd:9d: d7:49:11:fb:f9:22:42:c9:24:3e:1c:64:fb:47:07: a4:8d:a9:15:e4:d7:31:04:2a:ec:8c:d9:4d:b3:69: ac:f5:cc:d7:7d:f2:b6:78:71:8f:ec:82:e4:c6:f2: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:B5:91:12:F9:C9:C2:1E:02:36:5F:21:59:8F:2B:20:8E:3C:BD X509v3 Authority Key Identifier: keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/5CA352A49DAB11F0B1E32C64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.172.0/23 IPv6: 2001:df0:cd80::/48 Signature Algorithm: sha256WithRSAEncryption e0:0b:d5:b6:e8:3b:19:5b:8f:f5:e2:7a:f6:6e:31:d0:e4:4a: 4d:23:d1:dc:ed:eb:3f:ad:41:71:47:ec:01:fe:c1:02:37:bb: 73:5d:da:08:da:e5:a0:b5:0a:52:de:e9:ee:b2:d7:36:dd:f8: d2:33:4e:fb:e4:74:22:7a:93:1b:81:bb:4e:67:dd:8f:45:81: 40:00:82:10:49:1b:f0:b0:e8:67:47:e1:56:6f:6c:b3:99:56: bc:e6:71:b3:8c:cc:50:3a:87:09:cf:fa:31:39:b4:32:56:b4: c3:20:32:b6:90:f7:f6:51:65:12:3e:d9:b0:53:32:f1:4d:95: cc:5e:5d:dd:3f:cd:1b:a6:93:fe:fb:fe:5c:b3:ca:8f:0f:d9: 2a:8d:05:48:82:0b:f6:06:33:51:38:00:19:0d:7e:9e:11:50: 69:d2:9d:21:e8:f9:f0:a2:c5:14:7b:fb:a7:bc:ee:2e:21:e2: 56:3a:05:4f:47:cf:71:a3:a9:53:a2:f0:77:15:a5:d3:c1:81: aa:d0:59:2f:a6:68:fc:2c:5c:47:49:40:46:71:59:90:02:8a: a1:45:19:7c:95:2c:11:28:55:aa:36:8d:58:16:a5:45:44:29: 96:29:7e:33:6d:18:31:f2:9e:51:d1:8d:37:ef:b2:68:9e:31: 9f:11:b6:60 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQxRjExMC8GA1UEBRMoNjI0NjMyMERFQjM0MkQyQzNEQzFBRURCOTBGMTc2Nzcy QjdGQzc3RjAeFw0yNTA5MzAwMzEyNTdaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOTkxLTkyYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqZdkQN58WSPTf2sj4vrd35bTOBN3CPvLpshzexCGMckMavw1tAQPOHzx6xPVJ FP37+q+bHP7spWHp2DIROrtt3Fn+9XcgF/CzrWVc6CxVRvkNYVKyVYYjeZPehVgE 6mb4FGbhWoZE8NHdeffYNbXThsI/pcbbkJ1FDlo3q80u8lE8I11b6bH7q7j7vzg8 nkd4uIkl9ZH4hAwohV+SGmnjNh6qXdtc7UC6VCkdvcVzSB9V3uVMHb1IgdxXGMZM 3UvvaUNqYWuLWOeFwpvuss/9nddJEfv5IkLJJD4cZPtHB6SNqRXk1zEEKuyM2U2z aaz1zNd98rZ4cY/sguTG8mnbAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUEfu1kRL5 ycIeAjZfIVmPKyCOPL0wHwYDVR0jBBgwFoAUYkYyDes0LSw9wa7bkPF2dyt/x38w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDFGLzE0RDA5QzAyOURB QjExRjBBMUM1QjM2M0M0RjlBRTAyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWtZeURlczBMU3c5d2E3YmtQRjJkeXRfeDM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUQxRi8xNEQwOUMwMjlEQUIxMUYwQTFDNUIzNjNDNEY5QUUwMi81Q0EzNTJBNDlE QUIxMUYwQjFFMzJDNjRDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAFnjKwwDwQCAAIwCQMHACABDfDNgDANBgkqhkiG9w0BAQsFAAOCAQEA 4AvVtug7GVuP9eJ69m4x0ORKTSPR3O3rP61BcUfsAf7BAje7c13aCNrloLUKUt7p 7rLXNt340jNO++R0InqTG4G7Tmfdj0WBQACCEEkb8LDoZ0fhVm9ss5lWvOZxs4zM UDqHCc/6MTm0Mla0wyAytpD39lFlEj7ZsFMy8U2VzF5d3T/NG6aT/vv+XLPKjw/Z Ko0FSIIL9gYzUTgAGQ1+nhFQadKdIej58KLFFHv7p7zuLiHiVjoFT0fPcaOpU6Lw dxWl08GBqtBZL6Zo/CxcR0lARnFZkAKKoUUZfJUsEShVqjaNWBalRUQplil+M20Y MfKeUdGNN++yaJ4xnxG2YA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:06:13 2026 by rpki-client