$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/677F3316E02711E9AB669750C4F9AE02.roa File: 677F3316E02711E9AB669750C4F9AE02.roa (raw, json) Hash identifier: ULb7MnuSpC+RNv8YH7wBDdLNbPZxB2oAuIx44Pnr+I8= Subject key identifier: BC:4E:4B:21:A3:E8:CE:56:31:DC:10:FD:51:BE:60:97:51:25:B3:68 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DB4 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/677F3316E02711E9AB669750C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:27:59 +0000 ROA not before: Mon 02 Jun 2025 18:21:01 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134823 IP address blocks: 103.214.16.0/22 maxlen: 24 144.48.32.0/22 maxlen: 24 2001:df5:7e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Jun 2 18:21:01 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4690f-46ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:37:a4:1c:5d:d5:c3:c3:1e:46:fc:e3:14: 74:1f:c7:6c:a1:03:73:dc:30:9d:fb:bf:98:35:be: e5:41:9c:e1:a0:41:5e:76:7b:f6:f9:2b:e8:30:e0: ea:68:07:a8:2e:bf:2c:5b:9b:bc:09:c0:da:27:10: 06:61:64:a7:56:98:a0:05:3e:01:b9:05:f6:41:ef: 96:9a:f9:d7:ee:07:a5:b9:05:66:20:38:f5:2b:c9: 1b:24:14:69:ed:0f:6a:a5:b1:cb:64:07:26:c5:64: 44:04:f5:6e:df:f0:42:45:66:0a:a3:c4:88:1d:9f: 49:6c:bd:15:9e:92:e9:f1:5d:c0:4d:df:cd:16:1f: df:da:07:b9:a0:a7:f2:af:0a:39:ff:cf:ef:45:22: c7:94:e1:21:22:d3:2f:36:80:86:d2:de:29:7c:de: 5b:01:d6:f0:e6:be:14:15:60:ba:af:3a:d1:57:2d: 6d:a0:bb:f1:65:6e:8d:96:2d:3d:d9:ef:5b:6f:15: 98:65:46:e6:fe:80:e8:c8:8b:56:da:37:95:11:00: a3:e1:e2:60:db:a5:dc:e2:d8:40:c2:9d:7a:41:84: 23:89:15:af:a2:f3:25:2b:61:7c:17:9e:ee:ed:e4: 17:27:2b:a8:67:72:38:92:bc:bf:b1:a5:62:43:6a: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4E:4B:21:A3:E8:CE:56:31:DC:10:FD:51:BE:60:97:51:25:B3:68 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/677F3316E02711E9AB669750C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.16.0/22 144.48.32.0/22 IPv6: 2001:df5:7e80::/48 Signature Algorithm: sha256WithRSAEncryption 78:48:0c:e4:e7:73:00:04:35:8e:ab:bf:f4:d8:53:ac:f6:32: a8:d0:80:0d:2d:8a:90:08:d8:63:bc:44:47:8e:67:1b:d9:18: 08:ed:5a:49:9c:85:73:0e:11:08:23:c3:ab:bb:49:e6:eb:fa: a8:d6:c3:84:67:af:f7:76:b2:30:2f:6d:4d:00:bf:dc:1b:8c: 51:a3:a5:9a:85:43:3c:5d:b9:e9:45:b9:fb:f4:db:f3:e2:be: f0:04:be:d8:ff:32:23:89:a7:fd:88:a7:0c:14:e8:ce:73:fa: a1:44:b2:5d:54:f6:68:df:30:96:e7:6d:d1:b9:66:27:2b:72: 6a:40:c5:60:31:08:90:5c:f4:77:b7:45:1d:57:ca:29:95:4d: 76:d4:78:fc:19:e9:d1:c8:df:57:26:3a:ce:e7:38:d6:b4:ef: 87:e8:42:ed:11:0c:f2:19:f1:5d:60:60:40:68:31:80:ea:ae: 3f:56:12:8c:57:8e:a4:94:b0:f5:71:cd:07:4f:d5:e9:1a:e9: af:31:c9:59:ae:a6:ef:a2:c3:7c:5b:e1:3a:b8:ff:32:19:64: be:b5:ef:0b:a8:18:f2:c4:33:d4:fc:69:0e:0f:e2:c0:b8:42: 8f:bc:28:ee:1b:cb:52:f8:e8:8b:7c:07:27:0e:6a:b4:28:aa: 06:c4:9a:39 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNjAyMTgyMTAxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjkwZi00NmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDw3pBxd1cPDHkb84xR0H8dsoQNz3DCd+7+YNb7lQZzhoEFednv2+SvoMODq aAeoLr8sW5u8CcDaJxAGYWSnVpigBT4BuQX2Qe+WmvnX7geluQVmIDj1K8kbJBRp 7Q9qpbHLZAcmxWREBPVu3/BCRWYKo8SIHZ9JbL0VnpLp8V3ATd/NFh/f2ge5oKfy rwo5/8/vRSLHlOEhItMvNoCG0t4pfN5bAdbw5r4UFWC6rzrRVy1toLvxZW6Nli09 2e9bbxWYZUbm/oDoyItW2jeVEQCj4eJg26Xc4thAwp16QYQjiRWvovMlK2F8F57u 7eQXJyuoZ3I4kry/saViQ2qMCQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLxOSyGj 6M5WMdwQ/VG+YJdRJbNoMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFOEIvRUMyNTdDQzZFMDI1MTFFOTkxQTk3NzREQzRGOUFFMDIvNjc3RjMzMTZF MDI3MTFFOUFCNjY5NzUwQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCZ9YQAwQCkDAgMA8EAgACMAkDBwAgAQ31foAwDQYJKoZIhvcNAQEL BQADggEBAHhIDOTncwAENY6rv/TYU6z2MqjQgA0tipAI2GO8REeOZxvZGAjtWkmc hXMOEQgjw6u7Sebr+qjWw4Rnr/d2sjAvbU0Av9wbjFGjpZqFQzxduelFufv02/Pi vvAEvtj/MiOJp/2IpwwU6M5z+qFEsl1U9mjfMJbnbdG5ZicrcmpAxWAxCJBc9He3 RR1XyimVTXbUePwZ6dHI31cmOs7nONa074foQu0RDPIZ8V1gYEBoMYDqrj9WEoxX jqSUsPVxzQdP1eka6a8xyVmupu+iw3xb4Tq4/zIZZL617wuoGPLEM9T8aQ4P4sC4 Qo+8KO4by1L46It8BycOarQoqgbEmjk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:02:27 2026 by rpki-client