$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/46BF7E7CFA0611ED802A1C29C4F9AE02.roa File: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (raw, json) Hash identifier: WgI7CDc59isqqRIyCU2539zLb8jArZwcztjdz4JpKEQ= Subject key identifier: 61:63:E2:63:69:4F:49:DD:DC:C4:18:94:DF:9A:64:1F:D1:A0:E6:70 Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Certificate serial: 0209 Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/46BF7E7CFA0611ED802A1C29C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:36:03 +0000 ROA not before: Thu 15 May 2025 03:22:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151045 IP address blocks: 103.119.174.0/23 maxlen: 23 103.119.174.0/24 maxlen: 24 103.119.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF Validity Not Before: May 15 03:22:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3de53-24d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:2a:5f:ae:94:5d:d8:65:b6:a4:80:3f:3a: b3:80:88:61:e5:59:e6:7f:0e:ba:b0:b8:30:fb:7d: 89:9c:4c:09:dc:e6:4b:54:77:00:41:6c:10:b2:f1: ca:23:ae:6e:29:86:21:95:3b:55:0a:6a:56:6e:3f: 93:b3:f6:89:d1:6f:3c:30:d0:38:9f:7d:bb:2b:52: e5:af:05:75:0b:cc:55:fb:35:af:80:9c:b4:eb:37: 02:4d:7b:f5:d0:a1:d6:78:e7:69:bd:ba:b4:00:7e: 30:c7:10:02:c5:43:db:0f:88:10:d0:86:b1:c6:23: 82:75:11:74:fa:cd:9b:77:2a:90:90:bb:83:65:1b: ce:45:f7:63:78:90:43:40:69:59:2b:2e:6d:ec:74: 39:fd:46:1c:9e:11:0b:b5:c7:cb:4a:d5:16:d8:18: bc:5c:0e:49:a3:60:b7:16:1b:11:6d:94:b7:b6:f4: fb:e9:c0:cb:26:97:0b:9e:fc:a5:50:e0:1a:2c:47: fa:16:06:aa:ec:12:27:bd:11:db:57:03:9e:37:30: 7a:9e:01:29:31:0e:e4:90:5f:a8:4e:20:a2:12:ed: b3:81:a6:b4:64:0a:b7:ac:c0:cc:89:4d:77:36:7c: f8:5b:be:eb:1f:86:dc:2a:86:0e:75:e0:fb:a2:2d: 36:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:E2:63:69:4F:49:DD:DC:C4:18:94:DF:9A:64:1F:D1:A0:E6:70 X509v3 Authority Key Identifier: keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/46BF7E7CFA0611ED802A1C29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.119.174.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:d1:9a:c5:2b:9b:df:68:9f:e3:c8:75:db:5a:cc:11:05:3c: 64:1b:0e:b5:cb:e3:83:8e:ce:b4:df:51:0e:49:38:43:c9:aa: 5a:ab:48:f1:6d:c0:91:6b:ec:3a:39:16:6c:49:18:a1:89:a6: 48:66:9a:f2:0f:c1:f6:55:c6:dc:ed:97:b5:ea:ab:42:28:09: 97:9e:29:d7:04:21:f5:cf:7f:73:2f:34:7b:3e:50:7a:88:14: ca:18:ac:8b:e5:1f:b4:c6:d3:89:91:af:53:38:ca:6b:f4:09: d9:59:1d:51:7a:4b:c1:0f:8c:3e:64:75:47:4f:02:65:2b:66: 85:e7:1f:b3:56:8c:6a:dc:44:00:89:53:ec:3f:b6:d4:1a:1c: 73:e7:d4:2d:d6:8e:d5:70:62:5a:56:0f:0f:ee:e6:43:73:ee: 6d:c4:8a:a4:19:c9:12:5d:e3:6c:e2:86:2f:ca:d1:fc:6e:5e: 5f:96:77:c9:1e:51:55:e2:70:56:68:a9:6e:ac:9b:ff:cf:fa: db:83:04:91:90:18:34:6a:b2:e7:83:60:c4:80:05:08:6f:33: bf:66:dc:10:96:97:81:3e:9b:4c:b8:52:eb:67:cf:c2:a5:48: c1:8c:5e:01:dc:a4:aa:2b:6b:04:61:d5:89:44:ac:f1:53:54: 9d:f4:f8:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MjYxMTAvBgNVBAUTKDU2MERDNDBGRjNBNTA5RjlFRkRCNTI2MEVFMUJCMzg2 MkRCNkQ4REYwHhcNMjUwNTE1MDMyMjI2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGU1My0yNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/IqX66UXdhltqSAPzqzgIhh5Vnmfw66sLgw+32JnEwJ3OZLVHcAQWwQsvHK I65uKYYhlTtVCmpWbj+Ts/aJ0W88MNA4n327K1LlrwV1C8xV+zWvgJy06zcCTXv1 0KHWeOdpvbq0AH4wxxACxUPbD4gQ0IaxxiOCdRF0+s2bdyqQkLuDZRvORfdjeJBD QGlZKy5t7HQ5/UYcnhELtcfLStUW2Bi8XA5Jo2C3FhsRbZS3tvT76cDLJpcLnvyl UOAaLEf6Fgaq7BInvRHbVwOeNzB6ngEpMQ7kkF+oTiCiEu2zgaa0ZAq3rMDMiU13 Nnz4W77rH4bcKoYOdeD7oi02gQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGFj4mNp T0nd3MQYlN+aZB/RoOZwMB8GA1UdIwQYMBaAFFYNxA/zpQn579tSYO4bs4Ytttjf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyNi84NjY3NkRBMEZB MDExMUVEQkFENzVEMjhDNEY5QUUwMi9WZzNFRF9PbENmbnYyMUpnN2h1emhpMjIy TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZnM0VEX09sQ2ZudjIxSmc3aHV6aGkyMjJOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU5MjYvODY2NzZEQTBGQTAxMTFFREJBRDc1RDI4QzRGOUFFMDIvNDZCRjdFN0NG QTA2MTFFRDgwMkExQzI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3euMA0GCSqGSIb3DQEBCwUAA4IBAQAq0ZrFK5vfaJ/jyHXbWswR BTxkGw61y+ODjs6031EOSThDyapaq0jxbcCRa+w6ORZsSRihiaZIZpryD8H2Vcbc 7Ze16qtCKAmXninXBCH1z39zLzR7PlB6iBTKGKyL5R+0xtOJka9TOMpr9AnZWR1R ekvBD4w+ZHVHTwJlK2aF5x+zVoxq3EQAiVPsP7bUGhxz59Qt1o7VcGJaVg8P7uZD c+5txIqkGckSXeNs4oYvytH8bl5flnfJHlFV4nBWaKlurJv/z/rbgwSRkBg0arLn g2DEgAUIbzO/ZtwQlpeBPptMuFLrZ8/CpUjBjF4B3KSqK2sEYdWJRKzxU1Sd9Pjo -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:05 2026 by rpki-client