$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa File: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (raw, json) Hash identifier: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho= Subject key identifier: 67:43:D0:C5:43:54:FD:23:E9:65:15:CD:9D:80:EA:2C:53:51:7C:89 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 04EB Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa Signing time: Sun 01 Mar 2026 17:56:00 +0000 ROA not before: Mon 02 Feb 2026 06:04:31 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147033 IP address blocks: 103.173.106.0/24 maxlen: 24 2001:df7:9780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Feb 2 06:04:31 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47db0-b76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:37:03:54:17:ee:76:45:1f:30:7c:d4:4c:4f: e5:78:8c:00:21:56:76:c0:e0:d1:0a:7a:1e:6c:94: bd:1a:6b:f7:0a:7a:4b:b0:31:d6:c7:61:e2:5c:cf: 83:30:83:f2:4c:33:8c:da:a3:cf:ee:23:11:86:2a: a8:67:15:29:b3:40:a1:cc:74:8f:58:41:b6:40:97: 3a:1e:df:0f:f6:29:57:c1:75:15:ae:4d:96:5f:be: f6:c2:76:12:7f:2f:52:97:f1:d2:d1:7f:c2:1f:ba: 16:00:fa:a6:74:70:37:3b:e4:b7:d6:3c:60:c3:13: 19:bf:fc:3c:ad:71:fb:e8:17:18:3c:6a:dc:d2:e5: ff:16:c5:c0:48:58:d6:90:4b:35:58:cd:b3:70:1e: 1f:80:70:76:24:80:85:7a:5f:38:62:b7:55:0e:3c: ff:a3:7c:89:c8:48:04:9a:af:7a:5c:08:bc:73:0f: 82:18:76:76:34:f3:7d:64:18:ec:a0:ef:c3:ce:74: fa:e4:e8:b6:f0:37:25:27:36:3b:69:fa:7d:34:85: 62:f9:e0:33:06:41:e2:03:12:fa:73:bb:65:2f:c7: 18:f7:a1:6f:84:6b:5a:79:ea:27:8f:18:f7:1e:70: 80:c3:ac:51:cf:53:3b:04:22:eb:98:3c:47:c4:04: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:D0:C5:43:54:FD:23:E9:65:15:CD:9D:80:EA:2C:53:51:7C:89 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.173.106.0/24 IPv6: 2001:df7:9780::/48 Signature Algorithm: sha256WithRSAEncryption 39:f9:df:e8:57:40:97:dc:f3:40:f5:37:a1:90:46:c7:6d:ae: 39:87:fd:57:cb:11:91:29:46:32:8b:45:89:5f:1e:f0:0c:cd: 05:3a:d2:24:a0:8c:cc:95:05:9f:f3:76:07:f2:50:96:16:1b: 14:68:f9:a9:f2:23:fc:ea:a0:21:4e:63:07:03:f9:b8:d1:b4: b5:cc:4f:ce:58:b5:af:c6:4d:33:85:98:81:73:df:f8:3d:aa: 79:ec:84:11:ba:6a:88:a0:dc:8b:4e:fe:b0:d3:5e:71:ff:d8: 4c:0f:8e:c1:56:19:92:db:26:8f:d8:94:66:e6:84:af:88:b6: 48:bf:c8:2d:1e:71:b0:43:83:a4:47:bf:95:50:9f:ac:4f:66: 40:36:ff:43:55:b7:cd:80:be:b6:dc:1d:11:85:ce:d8:26:48: ba:36:35:bf:dc:d1:dd:1f:f1:fa:b6:15:13:f6:ec:d3:5a:77: 22:11:60:f0:60:65:25:07:b4:71:d4:b4:8b:b7:da:85:51:5e: c5:7c:b4:c2:59:29:4e:42:f8:22:79:e0:d2:ef:e3:1f:78:2f: 3c:5e:1b:72:ff:47:fe:f3:d8:d6:ac:69:b7:be:8a:36:38:8d: 09:3b:35:58:0f:d0:32:17:ce:31:71:2f:11:d7:47:68:fc:bb: 9b:d8:85:4a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjYwMjAyMDYwNDMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2RiMC1iNzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDcDVBfudkUfMHzUTE/leIwAIVZ2wODRCnoebJS9Gmv3CnpLsDHWx2HiXM+D MIPyTDOM2qPP7iMRhiqoZxUps0ChzHSPWEG2QJc6Ht8P9ilXwXUVrk2WX772wnYS fy9Sl/HS0X/CH7oWAPqmdHA3O+S31jxgwxMZv/w8rXH76BcYPGrc0uX/FsXASFjW kEs1WM2zcB4fgHB2JICFel84YrdVDjz/o3yJyEgEmq96XAi8cw+CGHZ2NPN9ZBjs oO/DznT65Oi28DclJzY7afp9NIVi+eAzBkHiAxL6c7tlL8cY96FvhGtaeeonjxj3 HnCAw6xRz1M7BCLrmDxHxARxSwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGdD0MVD VP0j6WUVzZ2A6ixTUXyJMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZFODcvNEUxNDAxRTY1Q0I2MTFFQ0E3NzExODBFQzRGOUFFMDIvRkRGRkQwRDhG RkZDMTFGMEJFN0I4OTg2M0E2RjU2QkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ61qMA8EAgACMAkDBwAgAQ33l4AwDQYJKoZIhvcNAQELBQADggEB ADn53+hXQJfc80D1N6GQRsdtrjmH/VfLEZEpRjKLRYlfHvAMzQU60iSgjMyVBZ/z dgfyUJYWGxRo+anyI/zqoCFOYwcD+bjRtLXMT85Yta/GTTOFmIFz3/g9qnnshBG6 aoig3ItO/rDTXnH/2EwPjsFWGZLbJo/YlGbmhK+Itki/yC0ecbBDg6RHv5VQn6xP ZkA2/0NVt82AvrbcHRGFztgmSLo2Nb/c0d0f8fq2FRP27NNadyIRYPBgZSUHtHHU tIu32oVRXsV8tMJZKU5C+CJ54NLv4x94LzxeG3L/R/7z2Nasabe+ijY4jQk7NVgP 0DIXzjFxLxHXR2j8u5vYhUo= -----END CERTIFICATE-----Generated at Mon Mar 2 15:05:08 2026 by rpki-client