$ rpki-client -vvf rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa File: 74F3F11098BB11EA9B1BD75CC4F9AE02.roa (raw, json) Hash identifier: 8KvkPRwmxhEV4smy31k45OPE8C8gicai+UQplmn5B6M= Subject key identifier: 4B:80:4E:60:F4:CB:9D:88:2E:93:BA:77:56:07:A0:CA:A1:0E:3A:A8 Certificate issuer: /CN=A9142209/serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Certificate serial: 1FA6 Authority key identifier: B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:33:24 +0000 ROA not before: Thu 02 Oct 2025 16:14:12 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132123 IP address blocks: 103.70.228.0/22 maxlen: 22 103.70.228.0/24 maxlen: 24 103.70.229.0/24 maxlen: 24 103.70.230.0/24 maxlen: 24 103.70.231.0/24 maxlen: 24 2001:df3:be00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8102 (0x1fa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142209, serialNumber=B140529C69B2590FF769D6AAEEF99F266104CD50 Validity Not Before: Oct 2 16:14:12 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44e34-502d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:f1:22:38:77:1f:73:b4:41:df:47:8d:82: d5:a3:86:cf:af:7f:07:1a:3f:a2:a5:0d:ec:27:a6: a5:d4:42:12:94:3a:da:ac:77:32:0c:81:74:0b:c0: 77:1e:4d:5f:80:c6:48:5e:d3:8a:d0:c4:95:0f:f0: 88:8e:5d:6f:40:ba:a2:ae:2f:70:27:c0:8c:a7:6c: d4:4a:15:5d:bc:1a:6e:8c:e6:89:5c:2d:dc:e8:c1: 3c:4b:3c:16:18:43:26:ff:f5:9c:1f:23:66:e6:2b: 7a:7f:4e:9e:c9:1b:ff:da:53:b2:4b:b5:60:4c:df: d8:81:aa:c4:71:29:9f:ae:69:b0:27:b1:18:67:7c: c6:ff:ba:51:80:0a:e6:42:50:4d:54:3a:53:ec:a6: 71:30:13:15:c6:97:a2:46:f1:90:ff:79:f9:5a:91: cc:c5:7f:a8:69:74:72:c6:d5:54:d4:45:3f:30:60: c5:03:cb:5c:27:bf:eb:01:1a:30:16:d8:a5:8a:27: 92:46:e3:ef:8e:25:53:7b:d6:f9:47:24:f5:a3:f9: 46:25:7a:08:4a:64:94:94:03:ba:a7:73:06:3f:05: 51:b0:68:bf:58:ab:de:74:3c:b8:18:05:85:f3:b5: 54:75:c0:fe:b2:f0:39:1b:28:ad:f3:f3:e8:fe:a9: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:80:4E:60:F4:CB:9D:88:2E:93:BA:77:56:07:A0:CA:A1:0E:3A:A8 X509v3 Authority Key Identifier: keyid:B1:40:52:9C:69:B2:59:0F:F7:69:D6:AA:EE:F9:9F:26:61:04:CD:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/sUBSnGmyWQ_3adaq7vmfJmEEzVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUBSnGmyWQ_3adaq7vmfJmEEzVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142209/A6B56784589F11E6BDDFF121C4F9AE02/74F3F11098BB11EA9B1BD75CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.228.0/22 IPv6: 2001:df3:be00::/48 Signature Algorithm: sha256WithRSAEncryption b6:3c:13:50:e5:a6:a6:20:ff:63:71:8d:48:a1:51:ba:64:07: 12:cc:c0:af:62:91:0f:9a:97:8b:19:cb:d8:d6:84:57:16:f0: 7e:4e:ad:d6:3e:f0:f9:55:98:c2:5e:57:ea:8c:9a:1b:62:d3: e2:b8:ad:27:73:ae:af:68:fb:5c:b9:2c:29:33:31:1b:32:0e: 7c:41:ec:f7:93:50:cd:c7:f6:15:7d:17:96:61:5d:92:66:44: 8c:6d:1e:2b:88:44:3f:dd:2c:e0:e1:fb:51:90:06:d7:44:68: f1:fc:41:27:d0:13:e7:7e:2d:d8:f4:c5:78:28:5c:95:71:1e: f5:03:d7:f5:5f:cf:d9:8e:32:22:0b:09:c0:d0:fd:38:d4:cd: 6f:13:65:70:2f:97:70:44:dd:9e:a6:12:46:c7:e1:51:36:ce: 8f:2a:91:94:41:70:e0:a8:c9:85:68:de:3a:e6:dd:7b:24:c8: fc:e0:aa:a1:44:f4:13:f9:8a:b0:d7:85:b2:59:6d:28:fc:27: 6a:73:ea:3d:b7:8e:f3:9b:f4:32:38:5a:4e:c2:bf:fd:87:42: 48:b5:59:45:65:ee:2e:02:18:d6:42:f0:3b:f9:61:9d:f0:10: e6:34:7c:22:46:b2:5b:b5:4e:e7:c3:65:ec:4a:63:e4:a0:07: b0:bf:96:af -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICH6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyMDkxMTAvBgNVBAUTKEIxNDA1MjlDNjlCMjU5MEZGNzY5RDZBQUVFRjk5RjI2 NjEwNENENTAwHhcNMjUxMDAyMTYxNDEyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGUzNC01MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrbxIjh3H3O0Qd9HjYLVo4bPr38HGj+ipQ3sJ6al1EISlDrarHcyDIF0C8B3 Hk1fgMZIXtOK0MSVD/CIjl1vQLqiri9wJ8CMp2zUShVdvBpujOaJXC3c6ME8SzwW GEMm//WcHyNm5it6f06eyRv/2lOyS7VgTN/YgarEcSmfrmmwJ7EYZ3zG/7pRgArm QlBNVDpT7KZxMBMVxpeiRvGQ/3n5WpHMxX+oaXRyxtVU1EU/MGDFA8tcJ7/rARow FtiliieSRuPvjiVTe9b5RyT1o/lGJXoISmSUlAO6p3MGPwVRsGi/WKvedDy4GAWF 87VUdcD+svA5Gyit8/Po/qkw9wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEuATmD0 y52ILpO6d1YHoMqhDjqoMB8GA1UdIwQYMBaAFLFAUpxpslkP92nWqu75nyZhBM1Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjIwOS9BNkI1Njc4NDU4 OUYxMUU2QkRERkYxMjFDNEY5QUUwMi9zVUJTbkdteVdRXzNhZGFxN3ZtZkptRUV6 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NVQlNuR215V1FfM2FkYXE3dm1mSm1FRXpWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyMDkvQTZCNTY3ODQ1ODlGMTFFNkJEREZGMTIxQzRGOUFFMDIvNzRGM0YxMTA5 OEJCMTFFQTlCMUJENzVDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ0bkMA8EAgACMAkDBwAgAQ3zvgAwDQYJKoZIhvcNAQELBQADggEB ALY8E1DlpqYg/2NxjUihUbpkBxLMwK9ikQ+al4sZy9jWhFcW8H5OrdY+8PlVmMJe V+qMmhti0+K4rSdzrq9o+1y5LCkzMRsyDnxB7PeTUM3H9hV9F5ZhXZJmRIxtHiuI RD/dLODh+1GQBtdEaPH8QSfQE+d+Ldj0xXgoXJVxHvUD1/Vfz9mOMiILCcDQ/TjU zW8TZXAvl3BE3Z6mEkbH4VE2zo8qkZRBcOCoyYVo3jrm3XskyPzgqqFE9BP5irDX hbJZbSj8J2pz6j23jvOb9DI4Wk7Cv/2HQki1WUVl7i4CGNZC8Dv5YZ3wEOY0fCJG slu1TufDZexKY+SgB7C/lq8= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:08 2026 by rpki-client