$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/4CBECA5CF9C311EBBA064C70C4F9AE02.roa File: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (raw, json) Hash identifier: F6f3sqC/VrCexYL7KiqhHMWOLZTVDuTXvmAuEtkPuPk= Subject key identifier: CC:1E:3F:2B:93:F8:AE:6C:37:43:92:66:91:47:9B:3A:91:AC:47:02 Certificate issuer: /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Certificate serial: 05C8 Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/4CBECA5CF9C311EBBA064C70C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:54:20 +0000 ROA not before: Fri 25 Jul 2025 00:05:46 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142428 IP address blocks: 103.168.68.0/23 maxlen: 24 2001:df6:d180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC Validity Not Before: Jul 25 00:05:46 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40ccc-8465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:8e:a4:4f:38:69:ac:21:2d:23:a0:c8:c1: 5c:3b:2f:b2:54:1f:af:7d:a8:57:f7:17:73:69:b1: 82:7d:f4:54:23:27:d6:21:03:19:71:f9:8f:57:14: a2:c5:b4:30:ac:6d:b0:f8:2e:23:7b:b9:03:26:35: dd:c0:59:50:ba:f9:05:08:0a:04:f6:9e:48:2f:ee: 09:6e:c3:f4:77:51:cd:80:d7:2c:3a:70:85:a3:d8: a3:35:3d:4e:7a:10:ac:13:b2:86:51:6e:5f:56:8d: 5c:29:4d:96:fc:af:df:4e:af:ee:52:3a:23:ab:39: b1:1f:09:98:e9:0a:7d:8f:19:fa:d6:8d:c0:1b:f1: 08:ad:8b:6b:50:d1:de:3b:2e:9f:e6:c8:76:ae:81: a6:4a:e0:48:91:fc:13:7b:c3:86:1e:27:52:f6:fd: 1f:03:b5:e4:99:75:a2:8c:02:3d:10:ec:4a:21:8c: 36:55:bf:54:d5:49:d6:f6:d8:bd:3a:94:4a:a3:61: 1b:ff:35:27:f6:84:a2:f5:67:61:fe:13:4e:c4:b7: d6:ce:f5:f1:c2:9d:4a:3a:94:18:fa:53:ea:27:5c: 4f:49:9e:6f:1a:1a:e8:b3:3d:bb:d7:5b:50:43:af: e5:d7:c9:b8:1b:97:13:d9:a9:63:93:92:f4:82:67: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1E:3F:2B:93:F8:AE:6C:37:43:92:66:91:47:9B:3A:91:AC:47:02 X509v3 Authority Key Identifier: keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/4CBECA5CF9C311EBBA064C70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.68.0/23 IPv6: 2001:df6:d180::/48 Signature Algorithm: sha256WithRSAEncryption 3d:31:d4:1a:11:32:30:10:05:3d:b6:f2:08:42:ca:67:f9:68: ae:86:9a:9c:54:56:9d:b9:8e:36:bb:fd:43:15:fb:aa:d9:e3: c9:c4:b8:c2:26:cd:61:8e:c8:21:d7:23:9d:20:a4:52:32:a3: 0a:a7:5a:eb:79:47:11:21:41:fe:60:cb:99:07:9d:ef:8f:20: bc:af:a4:aa:45:99:0d:79:b7:8e:9f:ac:a0:41:8e:10:03:ba: 28:ba:a8:3d:a2:3d:3d:8b:5d:ff:36:50:5b:dc:08:32:28:14: c4:14:d9:92:48:f8:d7:cf:fc:97:eb:44:71:c9:3b:81:1b:33: bf:8d:de:c3:98:48:4e:ff:6d:44:3b:e3:5d:9c:59:f0:64:37: af:1f:f7:c1:4c:03:22:c1:88:55:89:e4:54:ec:84:3f:d2:a0: 95:a0:ef:77:6b:7d:a8:55:b8:c3:91:28:57:c9:bb:3d:c4:4c: 21:4d:18:70:03:24:29:a5:c2:d6:bb:04:a4:92:d1:2b:38:20: 79:24:6e:e0:08:b0:76:ed:aa:87:75:27:7c:9a:83:a6:ad:2e: e1:16:4c:5e:1c:15:0a:38:3e:3f:46:35:7c:cc:a3:f0:2e:5f: 00:e4:2f:2b:e9:90:4d:f2:36:4e:33:b2:8e:1e:b0:83:ff:59: a7:7b:c0:f4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURDRkIxMTAvBgNVBAUTKEE1MTc0MURDMTlDQjkzOTA0MDI2NzZBMDNBMUZEQUVC RTBFN0YyQkMwHhcNMjUwNzI1MDAwNTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGNjYy04NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6iOpE84aawhLSOgyMFcOy+yVB+vfahX9xdzabGCffRUIyfWIQMZcfmPVxSi xbQwrG2w+C4je7kDJjXdwFlQuvkFCAoE9p5IL+4JbsP0d1HNgNcsOnCFo9ijNT1O ehCsE7KGUW5fVo1cKU2W/K/fTq/uUjojqzmxHwmY6Qp9jxn61o3AG/EIrYtrUNHe Oy6f5sh2roGmSuBIkfwTe8OGHidS9v0fA7XkmXWijAI9EOxKIYw2Vb9U1UnW9ti9 OpRKo2Eb/zUn9oSi9Wdh/hNOxLfWzvXxwp1KOpQY+lPqJ1xPSZ5vGhrosz2711tQ Q6/l18m4G5cT2aljk5L0gmehwQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMwePyuT +K5sN0OSZpFHmzqRrEcCMB8GA1UdIwQYMBaAFKUXQdwZy5OQQCZ2oDof2uvg5/K8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRENGQi9BQUVBMERDMEY5 QkYxMUVCODAyNDVFNkFDNEY5QUUwMi9wUmRCM0JuTGs1QkFKbmFnT2hfYTYtRG44 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BSZEIzQm5MazVCQUpuYWdPaF9hNi1Ebjhydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURDRkIvQUFFQTBEQzBGOUJGMTFFQjgwMjQ1RTZBQzRGOUFFMDIvNENCRUNBNUNG OUMzMTFFQkJBMDY0QzcwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6hEMA8EAgACMAkDBwAgAQ320YAwDQYJKoZIhvcNAQELBQADggEB AD0x1BoRMjAQBT228ghCymf5aK6GmpxUVp25jja7/UMV+6rZ48nEuMImzWGOyCHX I50gpFIyowqnWut5RxEhQf5gy5kHne+PILyvpKpFmQ15t46frKBBjhADuii6qD2i PT2LXf82UFvcCDIoFMQU2ZJI+NfP/JfrRHHJO4EbM7+N3sOYSE7/bUQ7412cWfBk N68f98FMAyLBiFWJ5FTshD/SoJWg73drfahVuMORKFfJuz3ETCFNGHADJCmlwta7 BKSS0Ss4IHkkbuAIsHbtqod1J3yag6atLuEWTF4cFQo4Pj9GNXzMo/AuXwDkLyvp kE3yNk4zso4esIP/Wad7wPQ= -----END CERTIFICATE-----Generated at Mon Mar 2 16:07:36 2026 by rpki-client