$ rpki-client -vvf rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa File: 207B27560EE411EDA32ABE0FC4F9AE02.roa (raw, json) Hash identifier: oxW57Rf3bBB+kRg5TOz4zTUyuJenskkpmOeniqoUlE0= Subject key identifier: EB:98:4A:D5:1D:78:8A:E5:88:BC:D9:31:59:A4:40:C6:73:97:AB:68 Certificate issuer: /CN=A912391D/serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Certificate serial: 0304 Authority key identifier: 05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:23:21 +0000 ROA not before: Fri 11 Apr 2025 02:06:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45657 IP address blocks: 103.6.105.0/24 maxlen: 24 103.99.211.0/24 maxlen: 24 103.99.224.0/24 maxlen: 24 103.99.225.0/24 maxlen: 24 203.12.45.0/24 maxlen: 24 203.166.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 772 (0x304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912391D, serialNumber=056BEF46C7315837EBADEA41780B9E41A3FB7EA0 Validity Not Before: Apr 11 02:06:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e969-91ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:3a:a0:9a:c3:f2:ca:ee:7a:c3:a9:4e:41: b2:6f:11:ac:70:b8:3d:5e:1f:0a:99:ea:4f:3b:bd: b7:15:80:58:96:9e:43:73:ad:ba:a8:88:54:47:f5: 31:90:2f:0b:76:84:b3:b8:31:aa:eb:fa:f0:45:4b: 93:14:35:1e:b0:e3:23:99:4c:66:b7:13:36:82:56: 8c:08:2d:05:fd:81:34:1f:7f:25:02:c2:6d:d7:b3: 27:f4:ef:28:bb:f4:61:b9:13:fe:88:b7:09:66:b7: 08:d2:97:0c:ce:97:ef:c6:34:74:41:b7:27:20:d1: 31:59:ff:d1:ef:2a:f2:61:be:7a:de:58:26:c4:9d: 99:4c:3c:ba:48:0d:51:7c:a8:4e:ad:7d:ff:c5:98: 32:ec:62:e6:0c:dc:72:cf:24:c3:da:4d:f2:6e:b1: cf:54:a5:19:70:3d:4c:5b:5d:00:89:c6:58:e3:ab: 8b:36:44:da:bf:24:1e:1d:f6:34:f6:50:ae:d0:09: 4b:bc:63:20:f5:f6:de:a0:54:26:e5:75:14:a9:13: fa:0a:28:25:14:fd:e2:5d:94:de:3e:9f:e8:71:39: 8f:a1:9f:f6:9b:5f:e5:8f:05:c5:47:a6:85:d1:0b: d0:bb:29:46:86:19:4f:c9:f4:ed:c1:9f:86:86:79: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:98:4A:D5:1D:78:8A:E5:88:BC:D9:31:59:A4:40:C6:73:97:AB:68 X509v3 Authority Key Identifier: keyid:05:6B:EF:46:C7:31:58:37:EB:AD:EA:41:78:0B:9E:41:A3:FB:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/BWvvRscxWDfrrepBeAueQaP7fqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BWvvRscxWDfrrepBeAueQaP7fqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912391D/B571CCBE0EE111ED84674C0EC4F9AE02/207B27560EE411EDA32ABE0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.6.105.0/24 103.99.211.0/24 103.99.224.0/23 203.12.45.0/24 203.166.219.0/24 Signature Algorithm: sha256WithRSAEncryption 79:05:3f:be:c8:20:03:74:80:a2:b4:e3:65:e2:71:a7:e9:6b: 7e:9c:5d:54:ad:87:08:92:ae:d5:48:7e:2e:f5:31:24:24:7d: b1:37:50:cb:fa:cb:82:ab:2c:29:7c:19:bb:c1:52:80:1c:fe: 94:7c:c0:06:70:99:35:91:d5:f4:f7:fc:0e:39:8e:af:f1:0d: 2d:a6:46:51:02:fe:a6:98:c6:26:24:57:07:fb:68:10:1f:10: 4f:50:93:0a:0f:8d:f8:30:dc:84:30:96:f0:8c:f8:38:fc:f0: a0:30:d1:64:ad:6a:a3:74:16:6f:d4:a2:00:15:d9:05:76:31: 57:0b:1c:97:0c:54:88:a6:92:36:85:0c:0b:ad:30:e3:3e:8f: b0:2b:7f:03:15:6d:ba:60:6d:17:f2:33:ee:d3:09:93:cd:b9: a0:4f:07:fc:fb:e5:69:42:a8:97:19:32:0c:df:6d:ad:df:11: d4:77:92:9e:f2:d6:35:47:50:e5:77:7d:6e:22:e9:76:96:41: 79:9c:6b:20:3c:14:77:7b:56:55:07:07:c7:17:4e:19:8a:d4: ad:a3:71:da:6c:67:54:78:b4:80:ba:8a:9a:9c:7c:23:2c:62: 90:27:29:2c:b6:5a:33:0e:0a:ab:33:3f:5f:32:f7:a9:59:ee: b6:6e:33:c2 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM5MUQxMTAvBgNVBAUTKDA1NkJFRjQ2QzczMTU4MzdFQkFERUE0MTc4MEI5RTQx QTNGQjdFQTAwHhcNMjUwNDExMDIwNjU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTk2OS05MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvk6oJrD8sruesOpTkGybxGscLg9Xh8KmepPO723FYBYlp5Dc626qIhUR/Ux kC8LdoSzuDGq6/rwRUuTFDUesOMjmUxmtxM2glaMCC0F/YE0H38lAsJt17Mn9O8o u/RhuRP+iLcJZrcI0pcMzpfvxjR0QbcnINExWf/R7yryYb563lgmxJ2ZTDy6SA1R fKhOrX3/xZgy7GLmDNxyzyTD2k3ybrHPVKUZcD1MW10AicZY46uLNkTavyQeHfY0 9lCu0AlLvGMg9fbeoFQm5XUUqRP6CiglFP3iXZTePp/ocTmPoZ/2m1/ljwXFR6aF 0QvQuylGhhlPyfTtwZ+Ghnlh8QIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFOuYStUd eIrliLzZMVmkQMZzl6toMB8GA1UdIwQYMBaAFAVr70bHMVg3663qQXgLnkGj+36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzkxRC9CNTcxQ0NCRTBF RTExMUVEODQ2NzRDMEVDNEY5QUUwMi9CV3Z2UnNjeFdEZnJyZXBCZUF1ZVFhUDdm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JXdnZSc2N4V0RmcnJlcEJlQXVlUWFQN2ZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjM5MUQvQjU3MUNDQkUwRUUxMTFFRDg0Njc0QzBFQzRGOUFFMDIvMjA3QjI3NTYw RUU0MTFFREEzMkFCRTBGQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZwZpAwQAZ2PTAwQBZ2PgAwQAywwtAwQAy6bbMA0GCSqGSIb3DQEB CwUAA4IBAQB5BT++yCADdICitONl4nGn6Wt+nF1UrYcIkq7VSH4u9TEkJH2xN1DL +suCqywpfBm7wVKAHP6UfMAGcJk1kdX09/wOOY6v8Q0tpkZRAv6mmMYmJFcH+2gQ HxBPUJMKD434MNyEMJbwjPg4/PCgMNFkrWqjdBZv1KIAFdkFdjFXCxyXDFSIppI2 hQwLrTDjPo+wK38DFW26YG0X8jPu0wmTzbmgTwf8++VpQqiXGTIM322t3xHUd5Ke 8tY1R1Dld31uIul2lkF5nGsgPBR3e1ZVBwfHF04ZitSto3HabGdUeLSAuoqanHwj LGKQJykstlozDgqrMz9fMvepWe62bjPC -----END CERTIFICATE-----Generated at Mon Mar 2 19:42:03 2026 by rpki-client