$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa File: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (raw, json) Hash identifier: mnjp2W7HgpiDoLRZcwfmeeA1AfeQy75tKs4VFRnDKBw= Subject key identifier: E7:C4:B3:B0:84:E3:2D:55:69:4C:95:87:4E:28:0B:60:5F:F5:9B:DA Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0C39 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:44:40 +0000 ROA not before: Wed 02 Apr 2025 19:50:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63139 IP address blocks: 103.84.109.0/24 maxlen: 24 175.176.194.0/24 maxlen: 24 2404:a140:31::/48 maxlen: 48 2404:a140:34::/48 maxlen: 48 2404:a140:35::/48 maxlen: 48 2404:a140:36::/48 maxlen: 48 2404:a140:37::/48 maxlen: 48 2404:a140:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Apr 2 19:50:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48918-9bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:08:58:4e:61:cf:ce:ea:f9:cb:f7:b9:50:7a: c0:75:d3:84:ef:eb:65:b8:4a:18:fa:94:c6:09:09: c4:6e:77:39:58:51:d2:b5:27:7b:15:8a:6a:b9:e1: be:fa:fd:ec:5c:8a:93:e2:ee:74:7a:c8:79:6f:3d: 79:1b:d2:12:98:13:8b:26:27:3e:93:ed:55:52:82: 70:36:fe:71:5a:96:3a:a3:35:94:93:12:ed:b3:5c: 31:41:5c:7c:44:eb:06:f4:83:42:60:96:cf:c6:b8: a3:b4:20:af:ef:d1:83:c8:ea:11:75:46:99:93:a7: df:1c:4c:60:d4:87:41:34:54:72:19:5a:b6:3b:8c: d4:2d:25:16:0e:dc:84:02:1e:2c:3b:60:de:57:15: e4:1f:d0:69:64:1c:29:e3:f7:cd:d6:ac:cc:aa:f2: 41:68:e9:94:dd:97:f5:c9:f1:82:af:36:d8:94:0d: 88:7d:80:ab:03:d6:74:74:c7:d0:d5:51:ea:96:af: c9:3e:25:34:3b:93:c4:0e:53:f8:b1:3e:3c:ed:92: cc:cf:62:31:0c:a9:94:ac:b7:e5:c1:1e:25:c2:2d: cc:b4:b8:ac:0e:f4:1c:7a:14:63:1f:3d:70:c2:5b: cc:09:f1:7a:41:22:47:06:82:b9:e0:ce:cf:b5:99: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C4:B3:B0:84:E3:2D:55:69:4C:95:87:4E:28:0B:60:5F:F5:9B:DA X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.109.0/24 175.176.194.0/24 IPv6: 2404:a140:31::/48 2404:a140:34::/46 2404:a140:4e::/48 Signature Algorithm: sha256WithRSAEncryption 9f:4e:21:20:26:82:d6:9a:3f:3d:07:e1:98:ac:9e:38:28:e7: 26:29:6d:04:96:24:cc:2b:34:c8:99:c5:9f:b9:a3:da:60:d6: 67:c8:64:4b:50:23:3d:14:74:23:7f:08:1d:e6:14:3e:97:92: 53:03:22:8a:99:d3:9a:51:73:72:a8:fc:e0:fe:f8:4d:3f:59: 2f:de:b4:0c:d9:f2:35:21:41:b6:f7:21:a1:cd:32:91:9d:7f: c5:7c:52:7a:51:e4:de:1a:9b:3d:bf:d2:b8:23:fe:70:84:8d: 28:ca:b4:a7:57:98:41:77:3d:65:92:e5:6b:3e:a7:5c:96:1a: 25:fc:0c:c5:89:83:ae:0d:81:f1:da:b0:4b:6a:5b:8d:53:29: 47:90:e9:4b:2c:e7:9d:3a:96:df:96:c8:24:59:06:63:0e:cd: 20:50:65:f4:bb:6a:51:07:ac:1d:b2:32:c9:3b:45:ff:5e:c1: 8a:dc:36:b4:ca:eb:42:8b:f7:70:f9:68:b7:c4:96:15:91:fc: 45:6a:50:56:5e:39:cd:15:f6:b7:a3:37:64:44:83:74:99:a6: 7f:ed:17:04:9b:32:15:6e:1e:7f:67:4d:8c:11:76:e4:e8:4c: a7:fe:c8:f2:aa:e9:fc:ad:bc:e4:f2:ef:de:f9:c1:23:ec:64: 2e:ed:dd:df -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjUwNDAyMTk1MDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODkxOC05YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ghYTmHPzur5y/e5UHrAddOE7+tluEoY+pTGCQnEbnc5WFHStSd7FYpqueG+ +v3sXIqT4u50esh5bz15G9ISmBOLJic+k+1VUoJwNv5xWpY6ozWUkxLts1wxQVx8 ROsG9INCYJbPxrijtCCv79GDyOoRdUaZk6ffHExg1IdBNFRyGVq2O4zULSUWDtyE Ah4sO2DeVxXkH9BpZBwp4/fN1qzMqvJBaOmU3Zf1yfGCrzbYlA2IfYCrA9Z0dMfQ 1VHqlq/JPiU0O5PEDlP4sT487ZLMz2IxDKmUrLflwR4lwi3MtLisDvQcehRjHz1w wlvMCfF6QSJHBoK54M7PtZnEaQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFOfEs7CE 4y1VaUyVh04oC2Bf9ZvaMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMjYxQTJCQTJG Mzk2MTFFREE5OEM1RDREQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAS BAIAATAMAwQAZ1RtAwQAr7DCMCEEAgACMBsDBwAkBKFAADEDBwIkBKFAADQDBwAk BKFAAE4wDQYJKoZIhvcNAQELBQADggEBAJ9OISAmgtaaPz0H4Zisnjgo5yYpbQSW JMwrNMiZxZ+5o9pg1mfIZEtQIz0UdCN/CB3mFD6XklMDIoqZ05pRc3Ko/OD++E0/ WS/etAzZ8jUhQbb3IaHNMpGdf8V8UnpR5N4amz2/0rgj/nCEjSjKtKdXmEF3PWWS 5Ws+p1yWGiX8DMWJg64NgfHasEtqW41TKUeQ6Uss5506lt+WyCRZBmMOzSBQZfS7 alEHrB2yMsk7Rf9ewYrcNrTK60KL93D5aLfElhWR/EVqUFZeOc0V9rejN2REg3SZ pn/tFwSbMhVuHn9nTYwRduToTKf+yPKq6fytvOTy7975wSPsZC7t3d8= -----END CERTIFICATE-----Generated at Mon Mar 2 23:08:32 2026 by rpki-client