$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/F6542C72C53511ECA64F3010C4F9AE02.roa File: F6542C72C53511ECA64F3010C4F9AE02.roa (raw, json) Hash identifier: tIlegLOK6K2gzpC3EMxXzCQPQ5ijkvaOZu7GF+ennV8= Subject key identifier: 35:6D:9F:1E:89:0D:40:39:EB:73:07:DC:E2:37:3E:C9:55:FF:BC:3C Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 03D9 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/F6542C72C53511ECA64F3010C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:03:47 +0000 ROA not before: Sun 11 May 2025 01:07:33 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 22552 IP address blocks: 103.24.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 11 01:07:33 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40f03-d866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:42:de:f0:5a:6e:8b:3f:5e:ad:3f:73:6a: 21:62:d8:ae:3e:01:02:5c:1c:44:42:82:7b:c6:88: 20:f2:91:b8:85:60:89:54:9b:ec:a2:3a:63:a0:db: 93:91:30:1a:df:66:53:8a:ee:5c:df:c9:c5:9f:36: 68:e3:a2:7d:b3:98:06:d4:9a:02:38:75:68:58:1c: 54:23:aa:61:68:ac:79:5e:03:4c:13:ae:18:54:80: fc:5b:c9:57:26:d3:56:21:eb:da:dc:94:a0:af:e5: cd:77:59:0c:4f:61:eb:6e:bf:1b:ac:21:c4:e0:3f: 0c:f2:60:11:d0:19:95:e6:e3:20:d6:62:b0:02:d6: 62:f8:f8:3e:d1:9f:0b:19:b0:d6:1c:78:1f:fe:1b: 2c:fb:f8:75:18:54:32:da:9c:71:e3:0f:2c:5b:1b: d6:8a:80:18:34:70:d5:36:cb:d9:a7:ea:f0:c8:07: fd:a2:ad:63:65:43:c5:60:66:fd:de:8a:78:f6:f8: b8:ed:eb:b6:7f:ee:eb:17:c3:b6:4b:1a:49:8c:f8: 74:b3:5b:28:8d:72:fe:53:63:b8:67:e7:f8:2b:54: ec:45:44:5c:51:bc:3e:1c:d8:69:63:78:51:22:cb: cd:39:0f:bd:af:ff:59:19:17:19:5a:48:86:ad:b1: 4e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:9F:1E:89:0D:40:39:EB:73:07:DC:E2:37:3E:C9:55:FF:BC:3C X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/F6542C72C53511ECA64F3010C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.152.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:b0:f6:c8:f2:96:fc:16:ab:de:89:b0:2d:ee:d6:f0:05:f1: c1:95:81:01:0a:f4:e8:ae:db:5c:3c:23:fc:31:9b:bd:ca:a1: 11:96:85:63:9a:cb:17:c8:48:88:c3:df:97:2c:ca:04:63:ab: b6:11:df:46:33:cd:5c:ad:70:fb:03:86:cd:59:37:97:f2:ca: 3e:fb:b3:55:ea:50:00:e3:d5:61:7d:ef:1f:8d:72:36:16:c1: 26:4f:83:2f:04:7f:52:87:c4:07:d1:4a:18:86:31:f6:a4:c0: cd:cf:a5:2e:1d:5a:bd:50:f5:71:22:c6:ad:73:71:0a:d5:f9: 57:6e:98:c5:89:41:1b:71:1c:e0:0b:b5:af:8f:9c:b0:59:60: 43:d7:8e:9a:c8:fb:54:ec:ea:3a:cc:9d:1e:5e:02:96:80:6c: 6a:01:5b:21:4d:c3:8c:2b:7a:97:24:55:a6:8e:48:b8:40:50: 22:a1:2f:a8:5c:08:0b:2f:2b:5b:b1:5b:76:ca:ff:5e:bf:bd: 87:61:df:62:ed:85:e4:63:73:87:99:2f:d7:04:89:e5:e8:fa: db:40:c5:e1:cf:8d:b7:78:ce:0d:cc:25:50:3c:d6:5d:df:a8: cb:70:df:15:ad:62:62:85:87:96:d7:25:d2:df:24:ef:ea:a4: cc:fa:93:53 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUwNTExMDEwNzMzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGYwMy1kODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfFC3vBabos/Xq0/c2ohYtiuPgECXBxEQoJ7xogg8pG4hWCJVJvsojpjoNuT kTAa32ZTiu5c38nFnzZo46J9s5gG1JoCOHVoWBxUI6phaKx5XgNME64YVID8W8lX JtNWIeva3JSgr+XNd1kMT2Hrbr8brCHE4D8M8mAR0BmV5uMg1mKwAtZi+Pg+0Z8L GbDWHHgf/hss+/h1GFQy2pxx4w8sWxvWioAYNHDVNsvZp+rwyAf9oq1jZUPFYGb9 3op49vi47eu2f+7rF8O2SxpJjPh0s1sojXL+U2O4Z+f4K1TsRURcUbw+HNhpY3hR IsvNOQ+9r/9ZGRcZWkiGrbFO3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDVtnx6J DUA563MH3OI3PslV/7w8MB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZDMkMvQjA0RTkxOUNDNTMzMTFFQzk2REYzMTBGQzRGOUFFMDIvRjY1NDJDNzJD NTM1MTFFQ0E2NEYzMDEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZxiYMA0GCSqGSIb3DQEBCwUAA4IBAQBOsPbI8pb8FqveibAt7tbw BfHBlYEBCvTorttcPCP8MZu9yqERloVjmssXyEiIw9+XLMoEY6u2Ed9GM81crXD7 A4bNWTeX8so++7NV6lAA49Vhfe8fjXI2FsEmT4MvBH9Sh8QH0UoYhjH2pMDNz6Uu HVq9UPVxIsatc3EK1flXbpjFiUEbcRzgC7Wvj5ywWWBD146ayPtU7Oo6zJ0eXgKW gGxqAVshTcOMK3qXJFWmjki4QFAioS+oXAgLLytbsVt2yv9ev72HYd9i7YXkY3OH mS/XBInl6PrbQMXhz423eM4NzCVQPNZd36jLcN8VrWJihYeW1yXS3yTv6qTM+pNT -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:31 2026 by rpki-client