$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa File: 476C306204A711EEA68A0D2FC4F9AE02.roa (raw, json) Hash identifier: yqtXxu6K8/SJ810590/3CfsacSmByFqUd6TVJx9QLFE= Subject key identifier: 45:4A:7E:2A:4F:71:4C:89:59:6E:B3:CD:7E:19:5D:86:CA:16:57:54 Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Certificate serial: 0209 Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:31:40 +0000 ROA not before: Fri 27 Jun 2025 03:01:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151329 IP address blocks: 103.170.98.0/24 maxlen: 24 103.170.99.0/24 maxlen: 24 2001:df2:7440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7 Validity Not Before: Jun 27 03:01:34 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3eb5b-c45c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:2c:97:a7:0e:25:59:93:cb:67:e2:ca:8b: 79:4c:7e:48:d2:8d:74:64:48:da:2a:f7:f6:8d:94: 5a:66:43:3f:b7:1a:3e:01:35:19:fc:3f:a4:07:fc: 33:f1:81:83:df:3b:b0:5f:9b:08:40:34:8a:4d:a7: 7c:72:a2:83:42:af:d7:2e:db:77:44:3d:f3:8e:df: 51:ef:10:58:b0:e3:2c:ab:90:4a:ac:04:19:19:4a: 25:cc:d7:bb:9e:14:1b:2b:c3:d5:70:ad:6c:73:de: e2:72:0f:81:4f:ad:5f:ac:36:f0:97:47:01:db:37: ce:a0:10:7c:c8:79:c7:d2:22:05:bc:19:dd:c1:82: 65:e6:7e:b3:36:ab:23:8d:7f:88:a1:3f:0c:dd:a4: 1c:5b:9f:1e:fb:22:8c:d8:25:ff:16:70:0a:e1:2b: c5:c8:ce:57:37:81:be:de:62:be:16:6d:f3:5b:9f: 9e:7d:71:9b:2e:65:07:9f:0c:31:f7:fb:99:57:11: 6a:0e:42:1a:cd:27:fd:0a:8f:31:42:15:eb:1d:20: 0b:33:fc:54:c9:65:2f:60:18:0e:95:aa:98:cf:60: b9:07:b7:fe:68:87:f3:78:c2:f3:78:e4:24:08:56: 3f:a0:68:1e:12:02:aa:76:58:05:7e:72:e4:b6:ea: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4A:7E:2A:4F:71:4C:89:59:6E:B3:CD:7E:19:5D:86:CA:16:57:54 X509v3 Authority Key Identifier: keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/476C306204A711EEA68A0D2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.98.0/23 IPv6: 2001:df2:7440::/48 Signature Algorithm: sha256WithRSAEncryption 51:e5:39:63:4c:16:79:f2:75:8d:6e:81:e8:90:f6:5e:82:61: f6:fb:6c:16:87:d8:4a:e8:e3:48:ea:05:cc:6b:69:c8:f3:c1: 08:a3:68:2c:ce:58:88:b2:dc:31:38:d7:ad:04:aa:06:3e:e0: fa:f8:44:75:c8:19:43:1b:87:03:ca:61:f6:0f:01:c6:ec:da: f0:96:18:c0:96:d2:b0:e6:af:95:55:22:30:ba:a5:9c:42:f0: 52:db:e7:bb:5d:10:97:d6:97:98:13:9b:4d:07:97:67:33:e1: 45:7d:04:a6:60:63:57:22:72:94:f8:07:ca:61:10:ac:90:63: 83:aa:c9:e2:fc:3c:70:83:4a:a9:de:4a:8a:31:74:bb:cb:83: eb:98:a5:e3:e0:2e:ee:d6:c8:1b:98:9a:70:1f:28:99:fb:13: 17:d4:b3:ab:c9:9c:e5:4e:6b:1c:db:d4:41:e5:b5:a3:06:6d: 0f:17:36:83:0d:3e:3e:45:1e:23:04:48:af:b0:7c:4b:0b:ec: 64:48:98:70:42:69:a0:eb:e9:c2:32:36:c5:e5:e6:48:aa:33: 3c:86:11:f5:f0:57:05:00:d3:9c:7d:39:1b:f0:38:44:9c:50: f6:64:f9:3c:8e:cd:e3:b7:1e:10:28:d7:a9:37:9b:dd:19:65: 6f:b5:9e:42 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy MDU5NUIwQzcwHhcNMjUwNjI3MDMwMTM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWI1Yi1jNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvW8sl6cOJVmTy2fiyot5TH5I0o10ZEjaKvf2jZRaZkM/txo+ATUZ/D+kB/wz 8YGD3zuwX5sIQDSKTad8cqKDQq/XLtt3RD3zjt9R7xBYsOMsq5BKrAQZGUolzNe7 nhQbK8PVcK1sc97icg+BT61frDbwl0cB2zfOoBB8yHnH0iIFvBndwYJl5n6zNqsj jX+IoT8M3aQcW58e+yKM2CX/FnAK4SvFyM5XN4G+3mK+Fm3zW5+efXGbLmUHnwwx 9/uZVxFqDkIazSf9Co8xQhXrHSALM/xUyWUvYBgOlaqYz2C5B7f+aIfzeMLzeOQk CFY/oGgeEgKqdlgFfnLktupvgwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEVKfipP cUyJWW6zzX4ZXYbKFldUMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGNzkvRDBGODZENzJGRTA0MTFFRDkwNUUyMTZCQzRGOUFFMDIvNDc2QzMwNjIw NEE3MTFFRUE2OEEwRDJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6piMA8EAgACMAkDBwAgAQ3ydEAwDQYJKoZIhvcNAQELBQADggEB AFHlOWNMFnnydY1ugeiQ9l6CYfb7bBaH2Ero40jqBcxracjzwQijaCzOWIiy3DE4 160EqgY+4Pr4RHXIGUMbhwPKYfYPAcbs2vCWGMCW0rDmr5VVIjC6pZxC8FLb57td EJfWl5gTm00Hl2cz4UV9BKZgY1cicpT4B8phEKyQY4OqyeL8PHCDSqneSooxdLvL g+uYpePgLu7WyBuYmnAfKJn7ExfUs6vJnOVOaxzb1EHltaMGbQ8XNoMNPj5FHiME SK+wfEsL7GRImHBCaaDr6cIyNsXl5kiqMzyGEfXwVwUA05x9ORvwOEScUPZk+TyO zeO3HhAo16k3m90ZZW+1nkI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:29 2026 by rpki-client