$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa File: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (raw, json) Hash identifier: 75GT6PvkKn9coQEFldzoJNCikDpnLP6koK3TaJEr5tY= Subject key identifier: B9:03:F0:02:16:AB:B4:C6:96:5C:11:79:00:DD:E1:20:96:41:65:12 Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 01BF Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa Signing time: Sat 25 Jul 2026 05:54:46 +0000 ROA not before: Sat 25 Jul 2026 05:54:46 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 151845 IP address blocks: 103.49.70.0/23 maxlen: 23 103.49.70.0/24 maxlen: 24 103.49.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 05:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Jul 25 05:54:46 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a644fa6-6d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:9b:45:d2:2b:69:75:46:ac:b3:ea:f0:b7: de:79:8b:16:95:a1:51:6e:93:9b:cd:c3:2b:e7:30: b4:8b:7f:41:d7:62:b7:7e:d2:47:14:2b:03:c8:2c: ce:1d:6e:56:e9:2f:bb:e4:93:7d:a8:95:37:38:b2: 9a:81:c5:98:1f:3a:e2:1c:30:ae:18:1a:e1:ef:b8: 0e:62:6c:23:b8:aa:b7:0f:af:42:1c:25:f3:02:e0: fe:82:a6:01:86:63:bd:cb:e2:50:3f:93:6c:d1:10: 61:94:4b:02:5b:d3:a0:0f:a9:72:a2:d0:a5:f9:1a: 18:1c:9e:91:90:b2:c4:a0:80:98:f4:bf:95:0e:1b: 29:d1:5b:76:93:0d:c8:9b:95:1b:98:a1:7c:f7:ae: fc:3f:9c:05:18:04:7a:72:54:2f:b2:2b:11:55:25: 21:90:22:a9:e7:c8:ae:ca:87:bd:e9:fd:6a:9a:27: a9:9d:d7:f8:a4:e5:a9:a1:da:16:ba:08:bd:62:6f: 01:c8:3e:85:5d:09:57:5e:f1:02:59:96:15:61:6c: a8:86:02:0b:ae:6c:09:f7:7a:03:d7:07:2c:72:26: 09:70:b2:39:c5:b1:cd:e0:46:fc:06:90:43:35:8b: 41:5c:ca:d1:e8:e1:5b:a6:cf:79:c3:b1:94:a8:8a: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:03:F0:02:16:AB:B4:C6:96:5C:11:79:00:DD:E1:20:96:41:65:12 X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.49.70.0/23 Signature Algorithm: sha256WithRSAEncryption 40:d8:59:d5:c4:49:2d:a7:44:01:36:5a:5e:8c:2d:8b:1e:58: 7f:79:e6:5f:8e:eb:f4:f1:6b:22:1c:c5:66:7c:65:4d:4a:c2: 46:18:30:4a:06:7f:d7:c4:68:7e:31:ce:43:07:e1:1d:28:89: 7d:55:cd:16:f3:a8:e9:a2:2c:7b:cc:2d:08:09:ca:1c:24:63: 9a:ee:be:4a:0c:0b:be:6f:0a:01:c9:a3:54:e8:b0:f2:45:f9: 39:b1:cb:b0:44:5f:d8:4a:bb:d3:9f:8b:b7:b8:f8:ff:21:a1: 62:16:4d:eb:29:5f:59:53:54:51:42:d5:87:54:19:a6:25:96: 52:48:f7:07:f4:9e:14:68:ae:82:b7:e4:c9:82:ae:70:21:b2: 09:a8:b0:21:d5:88:ea:24:dd:be:f6:0e:67:45:09:02:c9:41: 49:db:7e:de:73:9a:42:87:81:34:b8:60:f9:2c:b6:84:6d:6c: dd:2f:f5:14:0a:52:b2:a2:17:ba:d7:9b:cd:e8:7e:a3:33:fc: 11:76:b4:b2:48:dd:cd:40:b5:d5:ec:4e:8d:69:f0:c5:3e:fd: b6:13:74:0a:96:8e:e2:99:98:e7:ca:90:0c:ac:0d:bd:0e:c5: bc:b5:e5:0c:d1:5e:af:42:d2:d6:2a:88:0b:20:02:cc:d8:fe: bd:17:92:72 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjYwNzI1MDU1NDQ2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY0NGZhNi02ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3WbRdIraXVGrLPq8LfeeYsWlaFRbpObzcMr5zC0i39B12K3ftJHFCsDyCzO HW5W6S+75JN9qJU3OLKagcWYHzriHDCuGBrh77gOYmwjuKq3D69CHCXzAuD+gqYB hmO9y+JQP5Ns0RBhlEsCW9OgD6lyotCl+RoYHJ6RkLLEoICY9L+VDhsp0Vt2kw3I m5UbmKF89678P5wFGAR6clQvsisRVSUhkCKp58iuyoe96f1qmiepndf4pOWpodoW ugi9Ym8ByD6FXQlXXvECWZYVYWyohgILrmwJ93oD1wcsciYJcLI5xbHN4Eb8BpBD NYtBXMrR6OFbps95w7GUqIppQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLkD8AIW q7TGllwReQDd4SCWQWUSMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyMEQvODg2OEExMUUwM0ExMTFFRjg5MjZDMDJBQzRGOUFFMDIvNEJBM0ZBQzhC NTMzMTFFRkFDREZDNTc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZzFGMA0GCSqGSIb3DQEBCwUAA4IBAQBA2FnVxEktp0QBNlpejC2L Hlh/eeZfjuv08WsiHMVmfGVNSsJGGDBKBn/XxGh+Mc5DB+EdKIl9Vc0W86jpoix7 zC0ICcocJGOa7r5KDAu+bwoByaNU6LDyRfk5scuwRF/YSrvTn4u3uPj/IaFiFk3r KV9ZU1RRQtWHVBmmJZZSSPcH9J4UaK6Ct+TJgq5wIbIJqLAh1YjqJN2+9g5nRQkC yUFJ237ec5pCh4E0uGD5LLaEbWzdL/UUClKyohe615vN6H6jM/wRdrSySN3NQLXV 7E6NafDFPv22E3QKlo7imZjnypAMrA29DsW8teUM0V6vQtLWKogLIALM2P69F5Jy -----END CERTIFICATE-----Generated at Wed Jul 29 19:02:42 2026 by rpki-client