$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa File: 4FFC83964CA311EE815AF017C4F9AE02.roa (raw, json) Hash identifier: i0QX1oh2vY0+yTeJS1CX+dvBMVRGvSk4uN3puOoN580= Subject key identifier: 10:4C:60:F7:A2:5F:15:87:26:2C:BF:F2:06:EA:4B:C6:B1:0C:AC:AA Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0B79 Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:19:24 +0000 ROA not before: Tue 18 Mar 2025 19:39:34 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150774 IP address blocks: 103.136.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: Mar 18 19:39:34 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42ecc-f5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:c8:4e:8d:0a:02:ce:f2:ab:0c:40:5a:ac: ca:15:63:b9:75:73:6c:10:7c:5c:87:85:b3:52:c6: 8d:08:d9:32:74:a4:af:20:e8:63:aa:1f:1f:a3:11: 33:f1:c8:0a:4f:47:c5:a6:a8:c0:7d:6d:a6:d9:47: 16:11:50:21:91:73:54:5c:79:9b:76:67:55:9f:13: b3:eb:89:16:01:c3:ee:68:9b:7a:d2:d1:41:fc:31: 55:14:00:01:d9:40:c6:ba:1f:ab:cd:19:fa:23:a6: d4:c7:ae:8a:bc:65:de:32:7f:6b:3b:7b:db:cf:26: 8c:ae:be:55:53:fe:09:74:bb:85:68:5c:26:be:d0: 3a:73:b3:c4:92:b2:ed:c6:7f:03:9c:14:cf:18:91: 5f:de:28:43:86:9b:93:7c:2f:89:a1:32:c1:4a:00: e0:2d:07:b2:69:42:f0:02:c9:47:0a:9e:c3:e8:59: d5:b5:3d:00:d7:0d:7c:8d:69:76:4b:1a:f9:e5:79: 03:b9:a8:72:d0:bb:a3:7a:60:db:1d:51:02:65:44: e1:33:94:4d:7c:83:36:08:a9:4d:09:43:78:a4:bb: 88:3a:9c:c2:90:6e:bd:98:4c:78:f1:1c:48:37:cf: 1a:25:cd:d3:4a:c5:80:c0:40:0a:bb:78:97:8e:f8: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:60:F7:A2:5F:15:87:26:2C:BF:F2:06:EA:4B:C6:B1:0C:AC:AA X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/4FFC83964CA311EE815AF017C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.159.0/24 Signature Algorithm: sha256WithRSAEncryption 60:ba:cb:db:e6:2f:15:e6:6d:e1:2e:5d:8a:20:38:cc:89:73: d6:12:e1:6c:90:b5:a7:7a:05:1e:be:a2:2f:74:17:2a:74:d0: e7:6a:98:20:62:b9:51:4d:50:1d:3b:12:97:e1:39:9c:ec:1b: 0a:d9:72:43:4e:b5:21:e6:5d:f9:c6:23:a8:db:8a:ad:d1:3b: 39:8e:b4:3e:1e:14:e4:0e:f6:be:81:48:56:54:f8:37:25:03: a8:76:af:0a:a6:02:ae:1d:8e:c1:88:b9:72:8e:17:d4:58:12: 33:48:3d:5d:07:9c:43:f4:93:cf:75:76:2c:4e:c4:f2:ac:ad: c3:fa:eb:74:f7:7c:28:0b:42:c4:5a:71:98:d7:7a:e3:49:b1: cc:56:fd:16:f3:14:09:7b:e6:5a:bb:34:54:81:43:df:03:76: 2c:62:59:cf:2f:fc:4e:e9:ff:40:24:1c:cb:62:2c:f6:16:f9: 3d:57:e0:b9:2f:d3:c6:27:d4:c4:77:a9:fc:3b:86:7b:7e:65: f6:d5:01:21:91:56:66:c7:53:73:a9:d4:fc:07:fa:67:93:ae: ba:a0:83:af:1c:d8:cc:76:53:a2:e9:20:71:f1:f0:4f:8e:2c: f4:a3:87:6d:7f:e8:4f:92:50:b3:9c:fb:30:7b:86:32:6b:a2: e9:d6:59:75 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjUwMzE4MTkzOTM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVjYy1mNWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkrITo0KAs7yqwxAWqzKFWO5dXNsEHxch4WzUsaNCNkydKSvIOhjqh8foxEz 8cgKT0fFpqjAfW2m2UcWEVAhkXNUXHmbdmdVnxOz64kWAcPuaJt60tFB/DFVFAAB 2UDGuh+rzRn6I6bUx66KvGXeMn9rO3vbzyaMrr5VU/4JdLuFaFwmvtA6c7PEkrLt xn8DnBTPGJFf3ihDhpuTfC+JoTLBSgDgLQeyaULwAslHCp7D6FnVtT0A1w18jWl2 Sxr55XkDuahy0LujemDbHVECZUThM5RNfIM2CKlNCUN4pLuIOpzCkG69mEx48RxI N88aJc3TSsWAwEAKu3iXjvj6oQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBBMYPei XxWHJiy/8gbqS8axDKyqMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU2Q0EvNzQwOUI0N0E0RkM3MTFFQThFNDZENDE1QzRGOUFFMDIvNEZGQzgzOTY0 Q0EzMTFFRTgxNUFGMDE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4ifMA0GCSqGSIb3DQEBCwUAA4IBAQBgusvb5i8V5m3hLl2KIDjM iXPWEuFskLWnegUevqIvdBcqdNDnapggYrlRTVAdOxKX4Tmc7BsK2XJDTrUh5l35 xiOo24qt0Ts5jrQ+HhTkDva+gUhWVPg3JQOodq8KpgKuHY7BiLlyjhfUWBIzSD1d B5xD9JPPdXYsTsTyrK3D+ut093woC0LEWnGY13rjSbHMVv0W8xQJe+ZauzRUgUPf A3YsYlnPL/xO6f9AJBzLYiz2Fvk9V+C5L9PGJ9TEd6n8O4Z7fmX21QEhkVZmx1Nz qdT8B/pnk666oIOvHNjMdlOi6SBx8fBPjiz0o4dtf+hPklCznPswe4Yya6Lp1ll1 -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:13 2026 by rpki-client