$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/751E90665BAB11EFB9769A80C4F9AE02.roa File: 751E90665BAB11EFB9769A80C4F9AE02.roa (raw, json) Hash identifier: lp1mIWHv50H67/1sWvgWafFsHRljAsP65REDU9P4PJ4= Subject key identifier: 7B:66:28:16:CA:80:A2:02:C5:4D:25:14:48:7A:0D:61:6E:97:67:C2 Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Certificate serial: 0218 Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/751E90665BAB11EFB9769A80C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:59:59 +0000 ROA not before: Mon 19 May 2025 13:30:43 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135817 IP address blocks: 103.78.46.0/24 maxlen: 24 103.97.46.0/23 maxlen: 24 103.97.84.0/24 maxlen: 24 103.110.164.0/23 maxlen: 24 103.123.234.0/23 maxlen: 24 103.148.152.0/23 maxlen: 23 103.148.152.0/24 maxlen: 24 103.148.153.0/24 maxlen: 24 2001:df2:da80::/48 maxlen: 48 2001:df4:a300::/48 maxlen: 48 2403:8940::/32 maxlen: 32 2403:8940:2::/48 maxlen: 48 2403:8940:40::/48 maxlen: 48 2403:8940:1a00::/40 maxlen: 40 2403:8940:abcd::/48 maxlen: 48 2403:8940:fffd::/48 maxlen: 48 2403:8940:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802 Validity Not Before: May 19 13:30:43 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48caf-7c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:92:4e:6a:12:3b:70:8e:14:ca:f8:f6:c4: ea:62:e3:cb:88:dd:24:99:78:e4:d7:a7:48:fd:19: 1b:67:0b:11:06:cc:2a:41:34:63:85:03:1b:a9:af: 7d:74:92:2c:b8:a1:8d:70:a9:a0:66:2b:61:16:da: 62:dd:75:67:99:16:b3:1a:5d:ce:ed:3a:9f:f0:ff: b1:f7:95:ee:cf:68:41:b5:9b:7e:b0:6a:bf:ef:e8: 85:81:e7:40:9b:19:d3:ea:84:6c:1d:da:af:e5:d0: 82:92:08:a1:fb:43:5f:e1:66:81:9f:dc:b7:50:87: 79:9b:bf:39:66:fa:8b:f3:b9:7b:23:6f:c4:6f:79: 88:6d:59:d9:79:02:b1:c2:ad:20:20:61:9a:50:f4: aa:44:27:ab:4b:bc:a5:f6:e1:da:55:37:cb:25:59: 1a:b9:cb:64:51:d7:09:6b:c6:1c:b2:f0:ae:89:54: 51:3a:18:65:41:56:92:76:3e:c9:2f:68:df:74:83: 14:22:c7:ae:e8:38:a0:89:47:32:fa:eb:d4:3f:dc: 3d:cb:cf:6f:70:c0:91:4c:97:12:ca:cd:00:4a:84: 51:20:2c:c1:b0:73:b4:92:2b:1d:56:9d:47:63:ed: 2d:cc:fb:e4:c2:67:ef:e5:5b:68:77:86:02:c3:84: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:66:28:16:CA:80:A2:02:C5:4D:25:14:48:7A:0D:61:6E:97:67:C2 X509v3 Authority Key Identifier: keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/751E90665BAB11EFB9769A80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.46.0/24 103.97.46.0/23 103.97.84.0/24 103.110.164.0/23 103.123.234.0/23 103.148.152.0/23 IPv6: 2001:df2:da80::/48 2001:df4:a300::/48 2403:8940::/32 Signature Algorithm: sha256WithRSAEncryption 2d:c8:73:a6:60:29:ed:49:ef:4a:89:11:63:f0:a6:b9:3c:64: fe:23:5c:af:6e:56:a2:53:b3:a3:1d:b0:f9:d4:15:4a:44:84: 7a:77:ad:e3:40:04:14:e6:0d:2d:78:2c:12:5b:20:17:b0:54: 7f:5a:62:ed:78:48:2c:68:34:6e:a4:4e:e1:dd:c7:05:5b:21: 84:d6:8d:2a:45:e3:90:4d:ed:37:80:b8:e5:c6:aa:8e:ff:a8: 0b:e4:f9:56:8a:8f:2c:a3:57:1f:a8:0b:52:ed:2e:d8:8e:f4: 47:80:5b:cd:2b:c7:69:59:d7:0c:29:52:56:55:46:a8:80:f9: 45:b3:0c:3d:15:85:f0:6f:75:dd:e1:cd:17:cc:e6:55:c0:e7: 3d:c1:7b:d2:af:37:29:83:f5:39:57:d1:e0:50:8a:fe:42:41: 4b:56:b9:a5:ea:54:e0:23:71:a9:8b:75:ef:73:d6:96:8b:4b: 63:ae:c6:cf:0d:82:cb:03:cc:cc:06:62:f6:a1:2a:22:f9:7b: 29:d0:c7:eb:53:12:ce:a3:70:6d:75:58:34:6f:f1:c2:e9:14: fd:0a:93:d1:31:d9:1d:9b:49:5b:d5:db:6a:ef:3b:2b:f5:d3: 24:55:5c:0a:df:3a:46:1c:ff:cf:8e:2d:8e:40:4f:02:30:7d: a3:21:4f:e7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKEQ3MkU5MjQzNUNFN0RCQjc3ODlCMjQzOEE0OEYyMTFD NDMxQzU4MDIwHhcNMjUwNTE5MTMzMDQzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGNhZi03YzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmCSTmoSO3COFMr49sTqYuPLiN0kmXjk16dI/RkbZwsRBswqQTRjhQMbqa99 dJIsuKGNcKmgZithFtpi3XVnmRazGl3O7Tqf8P+x95Xuz2hBtZt+sGq/7+iFgedA mxnT6oRsHdqv5dCCkgih+0Nf4WaBn9y3UId5m785ZvqL87l7I2/Eb3mIbVnZeQKx wq0gIGGaUPSqRCerS7yl9uHaVTfLJVkauctkUdcJa8YcsvCuiVRROhhlQVaSdj7J L2jfdIMUIseu6DigiUcy+uvUP9w9y89vcMCRTJcSys0ASoRRICzBsHO0kisdVp1H Y+0tzPvkwmfv5Vtod4YCw4RYPwIDAQABo4ICnzCCApswHQYDVR0OBBYEFHtmKBbK gKICxU0lFEh6DWFul2fCMB8GA1UdIwQYMBaAFNcukkNc59u3eJskOKSPIRxDHFgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi8xeTZTUTF6bjI3ZDRteVE0cEk4aEhFTWNX QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF5NlNRMXpuMjdkNG15UTRwSThoSEVNY1dBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY1QjcvNzFFN0EyMjI1MTk1MTFFQTg0NjRCQTc4QzRGOUFFMDIvNzUxRTkwNjY1 QkFCMTFFRkI5NzY5QTgwQzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTAq BAIAATAkAwQAZ04uAwQBZ2EuAwQAZ2FUAwQBZ26kAwQBZ3vqAwQBZ5SYMB8EAgAC MBkDBwAgAQ3y2oADBwAgAQ30owADBQAkA4lAMA0GCSqGSIb3DQEBCwUAA4IBAQAt yHOmYCntSe9KiRFj8Ka5PGT+I1yvblaiU7OjHbD51BVKRIR6d63jQAQU5g0teCwS WyAXsFR/WmLteEgsaDRupE7h3ccFWyGE1o0qReOQTe03gLjlxqqO/6gL5PlWio8s o1cfqAtS7S7YjvRHgFvNK8dpWdcMKVJWVUaogPlFsww9FYXwb3Xd4c0XzOZVwOc9 wXvSrzcpg/U5V9HgUIr+QkFLVrml6lTgI3Gpi3Xvc9aWi0tjrsbPDYLLA8zMBmL2 oSoi+Xsp0MfrUxLOo3BtdVg0b/HC6RT9CpPRMdkdm0lb1dtq7zsr9dMkVVwK3zpG HP/Pji2OQE8CMH2jIU/n -----END CERTIFICATE-----Generated at Mon Mar 2 23:23:42 2026 by rpki-client