$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa File: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (raw, json) Hash identifier: Csy9xn8YVykTwlTrdK4oyxiVi/Dh8Dq8HQrWcuNnI3Q= Subject key identifier: B7:00:9B:0D:70:F9:06:1B:BA:D6:D5:E7:46:07:28:F0:4D:0A:37:FF Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 01FD Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:16:35 +0000 ROA not before: Thu 03 Jul 2025 04:08:38 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132366 IP address blocks: 103.242.8.0/24 maxlen: 24 2401:1d20::/48 maxlen: 48 2401:1d20:4::/48 maxlen: 48 2401:1d20:5::/48 maxlen: 48 2401:1d20:6::/48 maxlen: 48 2401:1d20:7::/48 maxlen: 48 2401:1d20:8::/48 maxlen: 48 2401:1d20:9::/48 maxlen: 48 2401:1d20:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Jul 3 04:08:38 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a41203-0f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0b:cc:e8:50:e5:1d:57:e7:a8:05:d9:ec:42: 4f:34:05:65:a1:72:6f:2b:42:7a:d1:32:20:f3:bd: b4:6e:f1:ff:c3:ee:32:d4:d7:08:d3:89:2a:27:f7: 0a:66:25:35:48:74:af:36:78:10:80:bf:3f:02:f8: 52:11:fc:27:91:d8:95:de:64:ad:b1:83:77:ae:53: a6:b2:cd:d9:7a:8d:42:62:30:35:11:2a:f2:53:8a: 8c:da:b9:7c:77:d6:10:6e:01:31:2c:2a:1f:1a:d0: 7a:57:70:1c:b5:60:65:04:99:22:5b:d2:99:6a:7e: 72:5a:6f:7d:92:f3:fc:be:5c:ef:ae:64:27:21:27: 5c:88:7a:97:c8:bd:d2:d5:ef:cd:f5:4f:91:f8:aa: a4:ce:89:91:67:e8:90:51:16:66:2b:dd:49:b0:f7: c1:17:5d:3a:4d:e8:33:a2:c8:bf:98:de:66:1c:d0: 5c:b4:a9:ac:62:62:20:e6:af:21:5b:7f:ca:a3:2b: 2f:5d:3a:b3:37:93:ce:24:ef:be:eb:9a:ea:7a:d9: c3:dc:bc:0d:31:76:7e:ab:06:06:73:c8:3c:36:70: f3:17:de:2f:ed:63:d5:d7:84:4b:7d:b7:f7:f2:f2: 1e:ee:b5:67:71:de:22:2c:2d:c8:ee:89:81:c6:a1: e2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:9B:0D:70:F9:06:1B:BA:D6:D5:E7:46:07:28:F0:4D:0A:37:FF X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/1D11FFD4352D11EE9543B52FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.8.0/24 IPv6: 2401:1d20::/48 2401:1d20:4::-2401:1d20:9:ffff:ffff:ffff:ffff:ffff 2401:1d20:b::/48 Signature Algorithm: sha256WithRSAEncryption 52:0d:75:17:e0:f4:c6:2c:33:48:dd:44:98:e5:42:02:3b:4c: e7:de:c9:93:d5:7e:8a:41:0f:3a:f7:9e:06:48:77:29:95:85: b6:c8:08:a0:25:fa:e4:d3:b9:df:db:10:6a:3c:3a:6a:28:12: 10:c8:05:5b:88:70:d7:e6:eb:41:b6:bf:76:90:09:94:b0:eb: ee:29:72:18:45:c3:8d:8a:f0:6d:95:ee:6e:80:af:75:81:08: ff:c7:95:fa:63:3c:73:6a:34:78:e9:ea:65:63:d7:9d:d7:63: 37:66:2a:1f:7a:6e:d6:74:76:4c:03:81:a6:6b:7b:e8:bf:03: 96:b1:f9:d8:ac:cd:b0:57:e6:c4:39:02:0f:29:79:f6:99:00: da:24:2b:99:25:9b:39:dc:c6:a9:dc:35:bb:9d:2e:24:d1:14: 24:d6:90:b9:bc:41:12:b6:5e:45:bc:9b:15:5a:70:73:ea:a6: 3c:70:f9:ed:3b:5f:fd:91:1c:fb:89:b6:53:77:80:07:a4:09: 96:b5:e5:c2:ec:66:36:f9:a3:a1:ea:af:c5:8d:96:63:a8:a8: 12:c2:4f:39:a5:cb:0e:49:59:c7:09:51:f8:d5:50:86:40:54: 8d:ef:46:4b:bb:fe:27:9c:3d:ad:ca:69:19:97:65:14:f1:dc: dc:47:21:3a -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNzAzMDQwODM4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTIwMy0wZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7gvM6FDlHVfnqAXZ7EJPNAVloXJvK0J60TIg8720bvH/w+4y1NcI04kqJ/cK ZiU1SHSvNngQgL8/AvhSEfwnkdiV3mStsYN3rlOmss3Zeo1CYjA1ESryU4qM2rl8 d9YQbgExLCofGtB6V3ActWBlBJkiW9KZan5yWm99kvP8vlzvrmQnISdciHqXyL3S 1e/N9U+R+KqkzomRZ+iQURZmK91JsPfBF106Tegzosi/mN5mHNBctKmsYmIg5q8h W3/KoysvXTqzN5POJO++65rqetnD3LwNMXZ+qwYGc8g8NnDzF94v7WPV14RLfbf3 8vIe7rVncd4iLC3I7omBxqHiUwIDAQABo4ICjjCCAoowHQYDVR0OBBYEFLcAmw1w +QYbutbV50YHKPBNCjf/MB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkIwMTcvREU3NUYyMjIyQTEzMTFFRTk1RDU4QTY2QzRGOUFFMDIvMUQxMUZGRDQz NTJEMTFFRTk1NDNCNTJGQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAM BAIAATAGAwQAZ/IIMCwEAgACMCYDBwAkAR0gAAAwEgMHAiQBHSAABAMHASQBHSAA CAMHACQBHSAACzANBgkqhkiG9w0BAQsFAAOCAQEAUg11F+D0xiwzSN1EmOVCAjtM 597Jk9V+ikEPOveeBkh3KZWFtsgIoCX65NO539sQajw6aigSEMgFW4hw1+brQba/ dpAJlLDr7ilyGEXDjYrwbZXuboCvdYEI/8eV+mM8c2o0eOnqZWPXnddjN2YqH3pu 1nR2TAOBpmt76L8DlrH52KzNsFfmxDkCDyl59pkA2iQrmSWbOdzGqdw1u50uJNEU JNaQubxBErZeRbybFVpwc+qmPHD57Ttf/ZEc+4m2U3eAB6QJlrXlwuxmNvmjoeqv xY2WY6ioEsJPOaXLDklZxwlR+NVQhkBUje9GS7v+J5w9rcppGZdlFPHc3EchOg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:57:36 2026 by rpki-client