$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa File: 1CA70F32E44C11F0B985B081746F56BC.roa (raw, json) Hash identifier: Kd0wCD7Td3d6cDcpgWqhN30fgDMTSpkuqJNqAIq9L6I= Subject key identifier: 57:ED:36:D2:74:0B:71:4C:95:9D:62:73:7E:06:0A:BA:6E:8B:5E:D4 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 3C32 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa Signing time: Sun 01 Mar 2026 21:26:47 +0000 ROA not before: Mon 29 Dec 2025 00:20:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.104.86.0/24 maxlen: 24 103.253.240.0/22 maxlen: 22 144.48.40.0/22 maxlen: 24 211.44.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15410 (0x3c32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Dec 29 00:20:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4af17-f47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:04:62:16:7a:03:67:61:eb:3a:e6:9d:21: e2:b9:11:66:50:59:95:cf:a0:68:21:a0:93:95:df: 41:d5:ad:4b:80:4b:c7:d3:80:59:6f:a7:7d:9e:7d: d9:d8:db:be:88:25:c2:ed:b9:d1:3f:f2:c6:5e:88: fe:29:29:f3:85:5a:b4:41:e1:bc:77:d7:0a:d7:19: 11:92:0f:42:67:0c:34:05:13:cd:a1:ab:c6:de:27: a7:ee:36:27:67:78:4d:66:6c:64:4a:8e:3d:f8:49: ab:78:24:28:86:23:83:96:ee:1b:98:3f:2e:f6:0a: 9c:2f:bc:37:be:af:cd:ee:1a:fe:ad:2f:84:68:e1: b4:64:eb:b1:58:f8:ce:11:42:ba:c0:be:bb:a0:d8: 72:f1:23:64:c0:e6:24:c3:ee:24:3c:c8:61:82:4d: fc:9b:a2:ef:e8:4f:b0:48:53:a6:3a:45:de:ec:f1: 66:19:ba:7f:66:ed:ed:3a:3c:2b:b9:e3:c2:95:00: b0:b2:ac:6d:d9:55:ef:cc:eb:35:78:28:39:24:da: c3:f4:03:92:0b:cc:6e:27:1a:2c:d8:d4:92:4b:38: 63:f8:d4:1f:10:d4:53:e5:59:a5:fe:ce:e0:75:3a: 14:24:00:06:8f:cd:43:48:40:db:50:6a:e9:57:3d: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:ED:36:D2:74:0B:71:4C:95:9D:62:73:7E:06:0A:BA:6E:8B:5E:D4 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.104.86.0/24 103.253.240.0/22 144.48.40.0/22 211.44.103.0/24 Signature Algorithm: sha256WithRSAEncryption 55:e3:17:9a:9d:0a:ac:12:98:de:d2:4c:c3:74:66:79:5b:c6: 3b:dd:f1:4f:e9:c8:6a:91:40:2a:ac:fe:f8:49:f3:f1:3a:94: 1a:00:30:27:23:e9:12:3e:df:ef:c6:7f:87:20:31:f4:fa:64: 09:a1:62:b7:8a:5c:49:02:39:67:f5:93:6b:94:29:30:38:95: 2d:07:15:4f:f2:a1:ac:9f:46:66:53:d1:62:56:4e:d8:91:89: 43:e8:62:e0:2e:5f:46:ff:48:8f:92:81:68:fc:9d:0b:a0:03: 82:6d:05:4f:cf:b8:d4:c5:2c:7e:a9:64:1f:d6:71:00:88:43: 52:8c:6b:42:4b:2a:e1:83:62:a8:0d:5d:33:62:ee:ea:cd:e4: 25:56:e0:40:a8:e1:d6:31:d3:28:b4:77:7d:ac:4e:a4:f3:1c: 2c:d4:eb:f5:70:02:b7:56:d5:90:40:9f:02:c7:ff:61:24:87: e3:3e:dc:11:c2:40:a7:92:4d:0b:eb:73:4f:d0:47:12:c9:10: e0:12:e5:b4:f8:30:73:4c:88:d0:a2:4e:15:23:3b:2d:29:d3: 38:d2:56:5a:0e:ae:a2:b4:ca:40:83:36:05:41:c6:82:21:91: 93:ef:48:b6:84:02:93:2b:0a:20:c5:e4:21:20:13:b7:27:de: ab:ed:0c:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICPDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjUxMjI5MDAyMDAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWYxNy1mNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKIEYhZ6A2dh6zrmnSHiuRFmUFmVz6BoIaCTld9B1a1LgEvH04BZb6d9nn3Z 2Nu+iCXC7bnRP/LGXoj+KSnzhVq0QeG8d9cK1xkRkg9CZww0BRPNoavG3ien7jYn Z3hNZmxkSo49+EmreCQohiODlu4bmD8u9gqcL7w3vq/N7hr+rS+EaOG0ZOuxWPjO EUK6wL67oNhy8SNkwOYkw+4kPMhhgk38m6Lv6E+wSFOmOkXe7PFmGbp/Zu3tOjwr uePClQCwsqxt2VXvzOs1eCg5JNrD9AOSC8xuJxos2NSSSzhj+NQfENRT5Vml/s7g dToUJAAGj81DSEDbUGrpVz0C8wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFftNtJ0 C3FMlZ1ic34GCrpui17UMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMUNBNzBGMzJF NDRDMTFGMEI5ODVCMDgxNzQ2RjU2QkMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZ2hWAwQCZ/3wAwQCkDAoAwQA0yxnMA0GCSqGSIb3DQEBCwUAA4IB AQBV4xeanQqsEpje0kzDdGZ5W8Y73fFP6chqkUAqrP74SfPxOpQaADAnI+kSPt/v xn+HIDH0+mQJoWK3ilxJAjln9ZNrlCkwOJUtBxVP8qGsn0ZmU9FiVk7YkYlD6GLg Ll9G/0iPkoFo/J0LoAOCbQVPz7jUxSx+qWQf1nEAiENSjGtCSyrhg2KoDV0zYu7q zeQlVuBAqOHWMdMotHd9rE6k8xws1Ov1cAK3VtWQQJ8Cx/9hJIfjPtwRwkCnkk0L 63NP0EcSyRDgEuW0+DBzTIjQok4VIzstKdM40lZaDq6itMpAgzYFQcaCIZGT70i2 hAKTKwogxeQhIBO3J96r7Qy3 -----END CERTIFICATE-----Generated at Mon Mar 2 03:53:12 2026 by rpki-client