$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/F50351E0C70A11EDB29DDE85C4F9AE02.roa File: F50351E0C70A11EDB29DDE85C4F9AE02.roa (raw, json) Hash identifier: rd/wAvSucL3KznyqiuFkW7+IzcHszwzgGGaI1AWvgdk= Subject key identifier: 4B:3A:06:94:2B:41:6B:65:DF:63:E6:4D:0D:A9:DB:AF:0B:09:8B:A3 Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Certificate serial: 022B Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/F50351E0C70A11EDB29DDE85C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:32:56 +0000 ROA not before: Sun 01 Jun 2025 03:19:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134122 IP address blocks: 103.105.122.0/23 maxlen: 23 103.105.122.0/24 maxlen: 24 103.105.123.0/24 maxlen: 24 2400:eb20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409 Validity Not Before: Jun 1 03:19:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3dd98-a404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:cc:c0:31:02:20:56:74:95:c5:e5:9d:d0: 7b:15:c1:10:f6:18:9f:8a:de:f9:29:1a:49:ae:6d: 2e:60:51:53:b2:c5:0b:79:2c:bf:87:4d:48:6c:fb: ac:86:f3:e3:70:de:63:f0:91:af:db:38:08:81:d0: ff:6b:67:92:ea:46:80:08:5b:d8:38:cd:b2:a1:6f: 07:03:35:78:7a:78:8a:cd:95:3e:ab:e1:8f:ce:fc: 05:d9:0e:a6:c5:b0:38:cf:e6:af:c1:a3:1e:28:25: c1:a0:4f:73:8c:56:1f:d8:e9:89:5d:ba:13:5f:97: 3b:56:cd:d3:76:05:be:63:e2:1c:f2:2b:49:40:56: 32:3c:e4:f6:6d:50:ad:a5:92:22:14:8f:40:ba:e7: e8:f4:83:6b:99:d4:d0:43:3d:aa:59:e9:ce:1f:1e: 45:c6:5a:72:b3:ba:4b:79:37:4f:f3:44:25:bd:e9: 73:a3:fe:03:12:34:b5:99:17:08:5c:27:dd:f0:1d: 69:5f:d3:51:e5:5b:cd:dd:63:54:f3:a8:42:4f:8a: ca:24:0f:b0:f3:d1:96:71:89:e1:ad:76:6f:fd:eb: 15:e0:f5:63:f1:72:d7:62:f8:99:55:dd:77:07:2b: 3a:16:df:84:e1:4b:a5:6a:61:4a:f5:1d:80:14:a6: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:06:94:2B:41:6B:65:DF:63:E6:4D:0D:A9:DB:AF:0B:09:8B:A3 X509v3 Authority Key Identifier: keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/F50351E0C70A11EDB29DDE85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.105.122.0/23 IPv6: 2400:eb20::/32 Signature Algorithm: sha256WithRSAEncryption 81:b0:73:c6:03:86:50:f4:24:f7:9b:0a:e0:8f:73:a5:a6:78: 63:cd:54:93:1f:ad:08:31:78:a0:59:df:2f:d6:13:0c:78:ac: 36:72:81:a1:88:01:b7:6e:b1:82:de:86:74:09:23:b3:92:fd: 70:9f:03:60:ff:1c:68:5c:73:73:59:41:8a:91:e6:c9:fb:d7: 9c:8f:22:ab:9e:c4:bd:53:e9:ae:4c:45:ff:fd:87:f9:45:59: 4e:db:ec:ba:1d:8c:46:ae:d0:6d:df:25:86:48:f2:60:35:3f: 3a:91:ea:d9:51:2e:7a:2f:74:e2:32:86:5a:a2:0e:99:aa:92: 60:e7:5f:94:57:d9:f1:e0:8f:f4:e6:2c:f9:fa:f7:64:5f:80: 5f:6f:19:96:bf:05:17:c1:26:f9:7a:02:10:0a:7e:08:35:6d: ab:04:0b:98:12:82:48:a1:c2:63:32:53:c2:e5:86:63:47:a7: 87:30:54:74:76:83:a5:2b:ce:c7:ce:25:7d:8d:42:a9:b9:0f: ea:0a:3a:f5:ec:e3:c6:2b:37:b5:03:3c:91:96:ff:83:2d:27: a5:64:3e:a9:2a:b7:91:a4:ee:73:72:12:8b:03:83:ef:6e:11: 9c:a0:d2:33:d6:ac:11:85:a1:d7:51:3f:4d:a6:45:fa:fb:1e: bf:86:8b:3a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI4RDkxMTAvBgNVBAUTKDAzOEVDMEFFQjgzNTBDOURBN0U2RjIwQjI2RDJGMzUw QkE2QzI0MDkwHhcNMjUwNjAxMDMxOTUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGQ5OC1hNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQfMwDECIFZ0lcXlndB7FcEQ9hifit75KRpJrm0uYFFTssULeSy/h01IbPus hvPjcN5j8JGv2zgIgdD/a2eS6kaACFvYOM2yoW8HAzV4eniKzZU+q+GPzvwF2Q6m xbA4z+avwaMeKCXBoE9zjFYf2OmJXboTX5c7Vs3TdgW+Y+Ic8itJQFYyPOT2bVCt pZIiFI9Auufo9INrmdTQQz2qWenOHx5Fxlpys7pLeTdP80Qlvelzo/4DEjS1mRcI XCfd8B1pX9NR5VvN3WNU86hCT4rKJA+w89GWcYnhrXZv/esV4PVj8XLXYviZVd13 Bys6Ft+E4UulamFK9R2AFKahqQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEs6BpQr QWtl32PmTQ2p268LCYujMB8GA1UdIwQYMBaAFAOOwK64NQydp+byCybS81C6bCQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjhEOS9BRjVDREIwNEM3 MDgxMUVEQTg3NEFFODVDNEY5QUUwMi9BNDdBcnJnMURKMm41dklMSnRMelVMcHNK QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0N0FycmcxREoybjV2SUxKdEx6VUxwc0pBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI4RDkvQUY1Q0RCMDRDNzA4MTFFREE4NzRBRTg1QzRGOUFFMDIvRjUwMzUxRTBD NzBBMTFFREIyOURERTg1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2l6MA0EAgACMAcDBQAkAOsgMA0GCSqGSIb3DQEBCwUAA4IBAQCB sHPGA4ZQ9CT3mwrgj3OlpnhjzVSTH60IMXigWd8v1hMMeKw2coGhiAG3brGC3oZ0 CSOzkv1wnwNg/xxoXHNzWUGKkebJ+9ecjyKrnsS9U+muTEX//Yf5RVlO2+y6HYxG rtBt3yWGSPJgNT86kerZUS56L3TiMoZaog6ZqpJg51+UV9nx4I/05iz5+vdkX4Bf bxmWvwUXwSb5egIQCn4INW2rBAuYEoJIocJjMlPC5YZjR6eHMFR0doOlK87HziV9 jUKpuQ/qCjr17OPGKze1AzyRlv+DLSelZD6pKreRpO5zchKLA4PvbhGcoNIz1qwR haHXUT9NpkX6+x6/hos6 -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:11 2026 by rpki-client