$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa File: 9FC61D303F7A11F0BC711E7FC4F9AE02.roa (raw, json) Hash identifier: TdD366YPbDVh8M4hWGlCIcUx+fM9FgqZUJ2TV/gnPRw= Subject key identifier: 4B:62:47:C9:61:24:17:0D:DF:B1:18:30:DE:9B:E7:4B:9F:A7:CA:5C Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Certificate serial: 0CA7 Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:25:29 +0000 ROA not before: Tue 02 Dec 2025 09:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150371 IP address blocks: 103.70.86.0/24 maxlen: 24 103.70.87.0/24 maxlen: 24 103.117.162.0/24 maxlen: 24 103.117.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD Validity Not Before: Dec 2 09:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48499-b3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:dc:25:2f:7a:70:26:d2:8f:84:9b:49:e4: 3e:45:e6:0c:9d:9c:3b:03:eb:52:5b:d9:e8:b9:8d: 35:e6:a8:a1:44:fa:3f:ca:40:91:1e:ea:d1:e3:7f: a6:2b:05:e4:1a:56:2f:72:28:6e:5d:3f:44:53:b4: 7e:00:51:8b:f7:a8:64:6a:21:cf:d0:54:fc:ea:ae: 46:5e:c1:b5:6a:c1:47:1c:88:63:62:09:d7:ca:fe: 1f:1e:27:3d:30:df:c6:4f:b0:a4:68:df:f2:0b:dc: 8e:1f:dd:09:d9:e7:3a:c9:e1:9b:f8:5e:13:29:a9: 96:5a:4f:87:e8:64:e6:e1:88:ce:ea:36:a5:15:11: 20:0b:df:00:67:14:71:0f:99:5a:a5:0a:11:2f:6c: ac:60:40:da:d1:24:21:17:94:56:1a:a7:5c:23:af: 1d:e3:60:12:b9:38:3a:e6:23:54:a7:33:a4:a5:34: f0:8c:24:0f:56:6a:f6:08:5d:e7:5a:4d:47:5e:8b: 63:d9:87:e4:bd:09:f4:78:e6:0d:ae:ba:fd:e5:01: 77:d9:ca:91:b0:19:5a:99:2a:28:3c:8a:9a:ba:ac: 00:f2:88:bc:89:32:4b:ee:1d:12:e5:fd:dc:00:fe: c6:71:77:c6:35:49:67:ab:34:e1:36:7b:27:e1:1a: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:62:47:C9:61:24:17:0D:DF:B1:18:30:DE:9B:E7:4B:9F:A7:CA:5C X509v3 Authority Key Identifier: keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/9FC61D303F7A11F0BC711E7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.86.0/23 103.117.162.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:1c:ec:7e:b3:da:1c:ba:5b:b4:44:b2:c1:84:e7:0d:d9:a3: af:95:aa:42:6a:f8:a9:bb:0f:37:8c:88:4a:dd:18:18:f8:76: 60:fd:22:7a:a5:46:79:89:7b:a7:0a:30:ec:55:27:1d:24:71: b2:8a:88:a8:7a:2e:ea:fc:c0:b2:e0:e7:a0:6a:4b:81:38:3b: 98:7c:aa:1c:c3:09:0c:8e:33:9b:74:bb:59:4a:9c:5f:79:97: 02:f0:71:9d:a9:24:4a:ef:92:a1:13:6f:8d:84:11:b2:79:ba: ee:82:01:27:e0:fb:54:87:cd:ac:b9:b2:07:85:a7:21:a8:dd: 81:a7:5f:2b:17:e2:05:f7:cb:bf:c5:76:95:3d:15:80:35:d1: 41:0c:fd:48:64:86:3a:1d:e0:fb:4f:f1:6f:55:b4:e8:44:b4: 27:93:1d:39:2a:1f:78:5e:49:a2:7c:63:42:5a:13:2e:48:d9: 67:5e:38:d0:bf:36:a4:8c:c0:d4:7e:4b:5f:e2:33:f4:af:11: 10:1b:44:77:be:89:4f:91:da:57:dd:c5:27:d1:44:a1:7e:65: 01:5e:71:2d:75:26:ef:24:bc:a3:8e:55:2b:4b:ac:f2:4f:d6: d7:ae:da:a6:5e:13:df:ec:74:d7:e1:8a:01:3e:23:32:80:da: 58:5b:ed:79 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4REExMTAvBgNVBAUTKEZDQUEwODYyMjZERjAyQUY4Mzk0RkFCMjJEMUZCOTZF MEI3RDY1REQwHhcNMjUxMjAyMDkzMTI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ5OS1iM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApG/cJS96cCbSj4SbSeQ+ReYMnZw7A+tSW9nouY015qihRPo/ykCRHurR43+m KwXkGlYvcihuXT9EU7R+AFGL96hkaiHP0FT86q5GXsG1asFHHIhjYgnXyv4fHic9 MN/GT7CkaN/yC9yOH90J2ec6yeGb+F4TKamWWk+H6GTm4YjO6jalFREgC98AZxRx D5lapQoRL2ysYEDa0SQhF5RWGqdcI68d42ASuTg65iNUpzOkpTTwjCQPVmr2CF3n Wk1HXotj2YfkvQn0eOYNrrr95QF32cqRsBlamSooPIqauqwA8oi8iTJL7h0S5f3c AP7GcXfGNUlnqzThNnsn4Rpd9wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEtiR8lh JBcN37EYMN6b50ufp8pcMB8GA1UdIwQYMBaAFPyqCGIm3wKvg5T6si0fuW4LfWXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThEQS8zNEYzNjEyRTI2 ODExMUVBOTAzRDcwNThDNEY5QUUwMi9fS29JWWliZkFxLURsUHF5TFItNWJndDla ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Lb0lZaWJmQXEtRGxQcXlMUi01Ymd0OVpkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4REEvMzRGMzYxMkUyNjgxMTFFQTkwM0Q3MDU4QzRGOUFFMDIvOUZDNjFEMzAz RjdBMTFGMEJDNzExRTdGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ0ZWAwQBZ3WiMA0GCSqGSIb3DQEBCwUAA4IBAQAqHOx+s9oculu0 RLLBhOcN2aOvlapCavipuw83jIhK3RgY+HZg/SJ6pUZ5iXunCjDsVScdJHGyioio ei7q/MCy4OegakuBODuYfKocwwkMjjObdLtZSpxfeZcC8HGdqSRK75KhE2+NhBGy ebruggEn4PtUh82subIHhachqN2Bp18rF+IF98u/xXaVPRWANdFBDP1IZIY6HeD7 T/FvVbToRLQnkx05Kh94XkmifGNCWhMuSNlnXjjQvzakjMDUfktf4jP0rxEQG0R3 volPkdpX3cUn0UShfmUBXnEtdSbvJLyjjlUrS6zyT9bXrtqmXhPf7HTX4YoBPiMy gNpYW+15 -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:18 2026 by rpki-client