$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa File: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (raw, json) Hash identifier: XzdXJalmDiwrsQ8br8C3/6RWRgcAD1TML6UnE7S8eYc= Subject key identifier: C4:A5:26:3D:45:93:83:A5:DF:7F:43:17:09:FC:CA:29:0D:22:24:0C Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 01DF Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:19:07 +0000 ROA not before: Wed 29 Oct 2025 03:18:13 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151791 IP address blocks: 103.72.64.0/24 maxlen: 24 2001:df2:e840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Oct 29 03:18:13 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a458eb-c9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:49:54:7a:fb:6f:df:af:f4:9a:4e:de:cd: 7d:c8:bd:ce:8b:9f:76:5f:0f:ed:04:56:ac:2f:36: 0e:73:1a:57:df:70:95:64:db:c4:78:d0:e2:f0:a7: df:f1:9a:3e:36:8e:45:93:f7:56:cc:ac:f3:bd:05: ab:68:fb:20:75:05:28:c2:6e:aa:dc:b8:29:f3:ae: a7:2b:c3:65:50:92:48:ee:86:15:dc:4f:44:a5:48: d6:16:7a:ab:6d:54:31:14:4e:13:03:27:33:1f:b8: 49:5e:5a:da:59:55:cf:3f:8b:53:74:69:3c:dd:6b: a9:50:0f:2c:0f:11:92:22:0a:3f:2a:6e:52:0c:31: c1:93:84:ee:83:70:5e:d7:8c:be:8c:48:56:8d:48: 18:c2:48:da:50:99:3a:b1:00:09:a2:d7:55:ca:44: 0b:8d:c8:b1:90:8c:69:e9:47:d6:1b:99:8b:64:29: a9:85:34:02:84:42:75:2c:45:31:db:f7:dd:2a:00: ad:3e:51:fb:2c:dd:7d:58:1a:74:bd:99:23:f6:54: a4:74:f5:cb:00:bc:05:50:1b:6d:c2:a5:3c:8c:3e: a9:3d:e1:06:20:cd:ac:f9:d6:04:48:75:a0:7f:5f: 26:e8:28:40:03:d5:b2:19:7f:6f:fb:8f:7c:2a:c2: 94:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A5:26:3D:45:93:83:A5:DF:7F:43:17:09:FC:CA:29:0D:22:24:0C X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/3D870D1C685F11EEA29D9F4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.64.0/24 IPv6: 2001:df2:e840::/48 Signature Algorithm: sha256WithRSAEncryption 14:e1:5a:be:fe:6c:7b:7f:ef:e6:4c:50:7d:50:8a:b6:bf:6b: a4:cf:10:70:9b:df:47:f8:b3:39:fa:3d:af:eb:87:a9:e7:f7: cb:5b:e6:56:ab:7f:3f:0e:72:97:77:1b:a8:7e:eb:45:0f:99: cc:f1:bc:9b:05:50:fc:76:72:54:33:b3:be:49:ea:85:e6:b2: 7c:22:6b:5c:df:c6:a8:5e:a1:0b:88:56:a6:3d:aa:84:3d:df: b7:26:a1:78:e4:09:0e:97:34:c2:d5:c7:5b:6b:35:7b:26:a6: 04:f9:20:dd:48:c5:07:30:87:f9:0b:23:98:4f:aa:5d:61:10: 2e:ac:8e:1d:d5:6f:87:61:0e:bd:04:2b:cd:a4:05:4e:e5:2f: 1d:ba:7e:3e:ca:f5:31:dd:7c:13:53:79:27:3c:21:57:7f:c3: 9a:37:2b:8c:d6:7c:fb:1d:40:7f:ab:dc:39:20:3d:ab:ed:1a: 37:16:ba:54:d5:be:5c:63:9d:90:38:8a:b6:b4:f4:d6:8a:6d: 45:73:7b:60:38:42:47:c4:15:ff:82:ae:58:7f:31:07:b4:7e: 0e:3b:a4:de:53:cb:ab:89:09:3c:db:6d:a0:16:6d:63:fa:f4: 44:d6:d7:d0:16:8d:a7:07:d0:26:bc:dd:79:0a:87:41:55:82: b9:e5:40:2b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUxMDI5MDMxODEzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NThlYi1jOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYxJVHr7b9+v9JpO3s19yL3Oi592Xw/tBFasLzYOcxpX33CVZNvEeNDi8Kff 8Zo+No5Fk/dWzKzzvQWraPsgdQUowm6q3Lgp866nK8NlUJJI7oYV3E9EpUjWFnqr bVQxFE4TAyczH7hJXlraWVXPP4tTdGk83WupUA8sDxGSIgo/Km5SDDHBk4Tug3Be 14y+jEhWjUgYwkjaUJk6sQAJotdVykQLjcixkIxp6UfWG5mLZCmphTQChEJ1LEUx 2/fdKgCtPlH7LN19WBp0vZkj9lSkdPXLALwFUBttwqU8jD6pPeEGIM2s+dYESHWg f18m6ChAA9WyGX9v+498KsKULwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMSlJj1F k4Ol339DFwn8yikNIiQMMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZGMjUvNjA2NEJBQjI1MkY0MTFFRTg5OEI5QjQzQzRGOUFFMDIvM0Q4NzBEMUM2 ODVGMTFFRUEyOUQ5RjRCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ0hAMA8EAgACMAkDBwAgAQ3y6EAwDQYJKoZIhvcNAQELBQADggEB ABThWr7+bHt/7+ZMUH1Qira/a6TPEHCb30f4szn6Pa/rh6nn98tb5larfz8Ocpd3 G6h+60UPmczxvJsFUPx2clQzs75J6oXmsnwia1zfxqheoQuIVqY9qoQ937cmoXjk CQ6XNMLVx1trNXsmpgT5IN1IxQcwh/kLI5hPql1hEC6sjh3Vb4dhDr0EK82kBU7l Lx26fj7K9THdfBNTeSc8IVd/w5o3K4zWfPsdQH+r3DkgPavtGjcWulTVvlxjnZA4 ira09NaKbUVze2A4QkfEFf+Crlh/MQe0fg47pN5Ty6uJCTzbbaAWbWP69ETW19AW jacH0Ca83XkKh0FVgrnlQCs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:33 2026 by rpki-client