$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/7B68D8F2A3E811EAB397F675C4F9AE02.roa File: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (raw, json) Hash identifier: AjxjmwQEjXn0QHDZKCLjrPCZHZ9/Qm2oT27QUruEzk8= Subject key identifier: 89:D1:2E:3C:5F:39:95:7F:AD:FC:D2:80:47:2D:D8:D5:03:38:DF:DE Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 09A7 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/7B68D8F2A3E811EAB397F675C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:32:31 +0000 ROA not before: Wed 14 May 2025 20:56:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38478 IP address blocks: 103.53.224.0/24 maxlen: 24 103.53.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2471 (0x9a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: May 14 20:56:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a407ae-f64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:66:08:18:34:04:75:12:01:f1:83:55:5e: 17:e1:b4:2d:f3:6e:db:92:5e:d8:e4:0b:e4:03:ba: 22:65:2a:42:cf:59:5a:f6:e0:4e:0f:33:10:eb:ab: 47:2f:23:00:01:3a:8f:da:f3:69:46:0b:d9:e5:26: df:eb:e0:c5:12:58:47:79:b4:56:7b:eb:67:99:02: d8:2e:3d:2d:4f:37:6f:67:db:63:3c:5e:c3:d9:27: 82:70:82:7c:95:33:5f:21:0f:2f:c7:48:79:5b:92: ba:dc:15:f7:f0:09:c0:a8:c0:2e:c6:ee:a8:72:c1: fe:71:18:81:f2:83:a1:cc:94:38:cf:98:f4:c9:8d: d3:9a:32:af:43:02:f3:0a:f2:a5:fa:27:f0:3c:c4: 62:7d:66:5b:b1:2d:5d:aa:3e:62:32:86:d8:dd:34: 18:37:94:0b:f6:cd:76:0a:04:62:6a:3f:f3:0d:da: ed:e5:f4:8d:41:a1:03:96:c3:99:d7:2a:07:27:67: cf:b1:12:a9:ca:27:08:74:bb:74:dc:e5:8b:85:9b: f2:4c:d2:4b:c4:eb:dc:9a:b1:25:27:6e:40:c2:60: 15:05:d2:b7:cf:25:2e:a2:29:89:5a:66:ea:26:70: 9c:fa:7f:86:e4:01:41:68:43:59:53:0a:ce:36:5f: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D1:2E:3C:5F:39:95:7F:AD:FC:D2:80:47:2D:D8:D5:03:38:DF:DE X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/7B68D8F2A3E811EAB397F675C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.53.224.0/23 Signature Algorithm: sha256WithRSAEncryption 77:75:d4:9f:30:07:80:92:47:19:6c:95:4d:ef:d2:45:0e:d2: c1:3f:85:5d:04:c7:5f:b2:08:78:28:11:2f:61:ab:17:e2:0d: d4:73:d3:b1:f3:7e:81:10:24:39:9f:af:82:3c:c9:9b:ab:3d: 11:e2:b2:47:ed:cc:8f:2f:43:ea:9a:68:f7:c3:b2:c2:36:79: 5f:9f:fa:b1:89:6b:e0:47:ec:88:28:fd:ba:c0:bc:9e:9c:cb: 54:23:13:a8:5f:75:6c:07:39:63:0e:2e:f0:87:f5:c5:5d:43: da:26:04:60:3f:e0:ae:77:be:e5:2f:17:38:15:16:98:3b:b5: ac:39:80:13:d7:5c:aa:08:fc:ae:85:f2:a7:2c:1f:fe:33:55: 97:c3:92:5b:0f:d4:f9:17:01:68:88:05:f1:b4:9d:7d:94:94: b8:a0:97:30:36:41:c8:31:a3:32:cd:ba:a3:8e:8c:26:52:b2: d1:f6:ef:3a:53:f0:40:e7:73:a3:25:7c:11:dc:75:e6:40:3d: 4b:fc:00:95:40:30:5d:28:23:64:d9:ad:bb:a1:5c:bb:85:ea: b8:19:29:d4:83:02:6b:bd:66:31:66:3f:e1:f2:5f:e6:3f:ed: 8a:2c:6f:ec:5e:df:4d:ce:f0:8c:32:8f:df:b1:fb:3e:50:94: f1:38:9b:41 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwNTE0MjA1NjUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDdhZS1mNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArshmCBg0BHUSAfGDVV4X4bQt827bkl7Y5AvkA7oiZSpCz1la9uBODzMQ66tH LyMAATqP2vNpRgvZ5Sbf6+DFElhHebRWe+tnmQLYLj0tTzdvZ9tjPF7D2SeCcIJ8 lTNfIQ8vx0h5W5K63BX38AnAqMAuxu6ocsH+cRiB8oOhzJQ4z5j0yY3TmjKvQwLz CvKl+ifwPMRifWZbsS1dqj5iMobY3TQYN5QL9s12CgRiaj/zDdrt5fSNQaEDlsOZ 1yoHJ2fPsRKpyicIdLt03OWLhZvyTNJLxOvcmrElJ25AwmAVBdK3zyUuoimJWmbq JnCc+n+G5AFBaENZUwrONl9hnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFInRLjxf OZV/rfzSgEct2NUDON/eMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUUyNEEvNjM1QzAxMThBM0U3MTFFQUE2QTlEOTc0QzRGOUFFMDIvN0I2OEQ4RjJB M0U4MTFFQUIzOTdGNjc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZzXgMA0GCSqGSIb3DQEBCwUAA4IBAQB3ddSfMAeAkkcZbJVN79JF DtLBP4VdBMdfsgh4KBEvYasX4g3Uc9Ox836BECQ5n6+CPMmbqz0R4rJH7cyPL0Pq mmj3w7LCNnlfn/qxiWvgR+yIKP26wLyenMtUIxOoX3VsBzljDi7wh/XFXUPaJgRg P+Cud77lLxc4FRaYO7WsOYAT11yqCPyuhfKnLB/+M1WXw5JbD9T5FwFoiAXxtJ19 lJS4oJcwNkHIMaMyzbqjjowmUrLR9u86U/BA53OjJXwR3HXmQD1L/ACVQDBdKCNk 2a27oVy7heq4GSnUgwJrvWYxZj/h8l/mP+2KLG/sXt9NzvCMMo/fsfs+UJTxOJtB -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:15 2026 by rpki-client