$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/0F71ED56069211F1B57EF04B043D8C67.roa File: 0F71ED56069211F1B57EF04B043D8C67.roa (raw, json) Hash identifier: xPY+wIdcnnb2Oks0I60uG5/7XY88MYgKgdGxnk7WO9k= Subject key identifier: B0:52:86:DF:BC:F2:F8:93:F4:24:8D:B2:84:7F:67:4D:04:A0:E1:EC Certificate issuer: /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Certificate serial: 1912 Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/0F71ED56069211F1B57EF04B043D8C67.roa Signing time: Sun 01 Mar 2026 17:54:44 +0000 ROA not before: Tue 10 Feb 2026 15:06:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134512 IP address blocks: 43.239.143.0/24 maxlen: 24 103.71.172.0/24 maxlen: 24 103.71.173.0/24 maxlen: 24 103.71.174.0/24 maxlen: 24 103.71.175.0/24 maxlen: 24 103.194.168.0/24 maxlen: 24 103.194.169.0/24 maxlen: 24 103.194.170.0/24 maxlen: 24 103.194.171.0/24 maxlen: 24 103.248.52.0/24 maxlen: 24 103.248.53.0/24 maxlen: 24 103.248.54.0/24 maxlen: 24 103.248.55.0/24 maxlen: 24 103.252.220.0/24 maxlen: 24 103.252.222.0/24 maxlen: 24 103.252.223.0/24 maxlen: 24 2406:9980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6418 (0x1912) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E Validity Not Before: Feb 10 15:06:22 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47d64-f672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:8f:34:97:b7:9e:a8:2c:4c:ec:6f:45:bf: bd:b8:bf:55:d0:2b:65:fb:8d:e8:e7:28:80:54:3d: 04:a8:af:0d:c7:48:20:9c:14:3c:5d:cd:2f:97:73: ca:ec:dc:4b:9c:29:db:cd:61:94:4b:9b:8e:61:4e: f8:a2:75:1e:25:dd:86:56:8c:6e:52:3f:98:6d:b4: 27:04:f4:2c:7f:c1:17:d7:78:7e:3c:16:e5:c4:0b: 4e:29:28:68:17:fb:48:80:30:9f:8a:0c:65:9f:32: f4:29:c4:a4:9c:09:0b:b9:9f:97:4f:da:b6:a6:23: 48:4a:ad:60:52:6a:b9:66:5e:5c:54:15:84:59:9e: 01:78:a7:01:a6:cb:bf:17:48:36:05:f3:62:24:0a: 53:44:b8:b5:ff:89:2a:b7:9b:5e:8a:ba:fb:df:32: bb:1a:3b:f6:ef:c8:39:b3:de:6b:c8:9c:1b:61:69: 04:db:d7:96:51:e7:ae:6d:10:c2:9f:87:b8:85:0a: 0d:90:43:b3:51:78:5d:36:02:69:f4:98:5a:a0:6d: 06:06:18:18:f2:44:b0:10:08:b1:59:af:17:58:b8: c8:e7:b3:ea:10:af:b8:77:95:52:0a:8f:2e:0b:9e: c9:26:d3:a3:ce:36:7c:a6:18:49:6f:44:4b:19:c2: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:52:86:DF:BC:F2:F8:93:F4:24:8D:B2:84:7F:67:4D:04:A0:E1:EC X509v3 Authority Key Identifier: keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/0F71ED56069211F1B57EF04B043D8C67.roa sbgp-ipAddrBlock: critical IPv4: 43.239.143.0/24 103.71.172.0/22 103.194.168.0/22 103.248.52.0/22 103.252.220.0/24 103.252.222.0/23 IPv6: 2406:9980::/32 Signature Algorithm: sha256WithRSAEncryption 46:76:50:5e:e2:4b:06:ec:3d:80:eb:1f:36:07:2a:79:e0:58: f6:a0:e7:3e:86:11:b0:21:1d:1e:1b:8d:b6:8f:79:ae:91:e2: b8:24:cc:7c:65:05:de:4d:6b:8b:27:78:91:0a:e8:bc:a8:f7: df:ae:e0:6f:c8:e2:21:4c:54:71:85:08:76:1c:37:3c:f8:4a: 93:6b:08:1f:7b:60:e8:16:aa:ff:2b:a0:96:d6:9b:e3:b7:6e: ce:6e:91:ed:d2:36:05:47:04:ee:8b:8f:9b:fd:6e:b4:75:2e: 7b:d3:fb:9a:0c:49:8a:cf:2f:37:85:cc:5a:a5:fd:1b:8c:25: dd:12:10:f1:de:c3:1c:b4:5a:1e:43:a4:75:98:ad:94:35:97: f6:2e:60:c2:d7:88:ec:ff:1a:17:36:02:d9:24:36:89:0d:e0: 64:c7:3e:b4:5d:52:03:75:21:10:66:96:2a:f9:ad:23:b9:b6: a3:94:a9:5c:96:1e:b0:1a:d1:85:6b:41:6b:8f:14:11:83:2f: 7f:27:a8:5d:ed:e6:20:ec:6e:19:c3:13:3c:57:e9:e1:26:3e: b2:69:c6:e7:3c:5d:c3:a5:36:f6:71:3c:28:97:ab:64:2b:f3: 3f:c5:48:16:49:ee:bd:a5:f5:cb:cb:e6:13:64:7a:5d:78:f6: 01:5b:43:30 -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICGRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI1QkQxMTAvBgNVBAUTKDIyRTgxQjMyN0NCMUZCMzUwMUUwNUFGQUI5NDEyMTkx OEZEQjVCNUUwHhcNMjYwMjEwMTUwNjIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q2NC1mNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOuPNJe3nqgsTOxvRb+9uL9V0Ctl+43o5yiAVD0EqK8Nx0ggnBQ8Xc0vl3PK 7NxLnCnbzWGUS5uOYU74onUeJd2GVoxuUj+YbbQnBPQsf8EX13h+PBblxAtOKSho F/tIgDCfigxlnzL0KcSknAkLuZ+XT9q2piNISq1gUmq5Zl5cVBWEWZ4BeKcBpsu/ F0g2BfNiJApTRLi1/4kqt5teirr73zK7Gjv278g5s95ryJwbYWkE29eWUeeubRDC n4e4hQoNkEOzUXhdNgJp9JhaoG0GBhgY8kSwEAixWa8XWLjI57PqEK+4d5VSCo8u C57JJtOjzjZ8phhJb0RLGcKaHQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFLBSht+8 8viT9CSNsoR/Z00EoOHsMB8GA1UdIwQYMBaAFCLoGzJ8sfs1AeBa+rlBIZGP21te MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjVCRC8zM0NCMTE3QUI1 QTkxMUU3OUM3NENCNzJDNEY5QUUwMi9JdWdiTW55eC16VUI0RnI2dVVFaGtZX2JX MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l1Z2JNbnl4LXpVQjRGcjZ1VUVoa1lfYlcxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI1QkQvMzNDQjExN0FCNUE5MTFFNzlDNzRDQjcyQzRGOUFFMDIvMEY3MUVENTYw NjkyMTFGMUI1N0VGMDRCMDQzRDhDNjcucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQAK++PAwQCZ0esAwQCZ8KoAwQCZ/g0AwQAZ/zcAwQBZ/zeMA0EAgAC MAcDBQAkBpmAMA0GCSqGSIb3DQEBCwUAA4IBAQBGdlBe4ksG7D2A6x82Byp54Fj2 oOc+hhGwIR0eG422j3mukeK4JMx8ZQXeTWuLJ3iRCui8qPffruBvyOIhTFRxhQh2 HDc8+EqTawgfe2DoFqr/K6CW1pvjt27ObpHt0jYFRwTui4+b/W60dS570/uaDEmK zy83hcxapf0bjCXdEhDx3sMctFoeQ6R1mK2UNZf2LmDC14js/xoXNgLZJDaJDeBk xz60XVIDdSEQZpYq+a0jubajlKlclh6wGtGFa0FrjxQRgy9/J6hd7eYg7G4ZwxM8 V+nhJj6yacbnPF3DpTb2cTwol6tkK/M/xUgWSe69pfXLy+YTZHpdePYBW0Mw -----END CERTIFICATE-----Generated at Mon Mar 2 07:59:46 2026 by rpki-client