$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/741645EE422211EA937BB919C4F9AE02.roa File: 741645EE422211EA937BB919C4F9AE02.roa (raw, json) Hash identifier: HwPx0vPg1VtGRQbAWOwpU/WcG4J7vax6C4J9fWBN2DQ= Subject key identifier: C3:0E:3F:86:92:B7:B1:A4:0A:10:D2:8B:FF:EB:C2:BB:3E:B1:5A:59 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0BA5 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/741645EE422211EA937BB919C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:22:18 +0000 ROA not before: Wed 26 Nov 2025 13:14:58 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 58713 IP address blocks: 103.21.20.0/24 maxlen: 24 103.21.21.0/24 maxlen: 24 103.21.22.0/24 maxlen: 24 103.21.23.0/24 maxlen: 24 139.5.112.0/22 maxlen: 22 139.5.112.0/24 maxlen: 24 139.5.113.0/24 maxlen: 24 139.5.114.0/24 maxlen: 24 139.5.115.0/24 maxlen: 24 2405:92c0::/32 maxlen: 32 2405:92c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2981 (0xba5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Nov 26 13:14:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a475ca-5204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:82:5d:fc:be:eb:ad:38:b0:93:66:5c:6c: 1b:84:ea:91:17:64:12:72:f1:b0:bd:83:ec:74:4d: b5:9d:2a:99:ce:8e:8f:36:c2:70:0e:e4:f5:f2:6e: b1:eb:32:12:d8:d5:86:5e:c5:3d:c9:7f:04:19:9d: 36:d4:bb:23:53:4a:32:c1:0c:ad:57:a4:61:8f:4e: e7:df:d0:ea:38:7a:93:9b:01:80:fa:a7:c3:e6:0f: 05:9d:c8:a7:2a:75:79:00:06:82:db:8b:dc:f3:04: c1:c5:01:ae:b5:8f:12:89:b6:d6:45:db:6a:c5:a3: 2a:0d:8a:b9:1c:d4:24:eb:54:5b:63:3c:0a:fc:52: 4e:a8:9c:1a:71:69:15:05:ea:eb:2f:53:8f:25:d0: 5a:c5:87:fd:a0:52:08:84:b1:26:4d:62:fc:c9:45: 10:e6:04:c5:9e:c8:c6:d4:28:81:56:be:94:0e:9e: 05:f8:53:2a:9e:4c:18:7f:c4:a9:cc:9d:b1:88:23: 45:a0:22:2f:0a:39:15:07:77:d2:cb:6c:46:81:6e: cc:3f:77:73:df:fb:88:74:10:91:05:c7:07:ab:2f: db:52:a6:f0:04:95:d9:6e:90:ac:db:85:da:61:a8: 4d:b1:e1:f8:a6:9e:6e:9a:a3:d7:dd:4d:c5:f9:37: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0E:3F:86:92:B7:B1:A4:0A:10:D2:8B:FF:EB:C2:BB:3E:B1:5A:59 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/741645EE422211EA937BB919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.20.0/22 139.5.112.0/22 IPv6: 2405:92c0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:9f:31:24:47:25:ef:c0:c6:a5:6d:2b:45:48:35:37:e5:fb: 4b:9c:6d:cd:6b:b1:c4:09:ba:ba:3a:2f:e2:85:13:34:8c:7e: 11:70:73:27:7d:d8:5c:19:e1:30:ff:63:e0:a6:04:6e:2e:b2: 61:eb:60:40:71:d3:3f:46:9f:42:f2:df:fc:d1:b1:e3:1c:30: fe:a4:f1:41:07:fe:dc:e2:01:8b:b4:1f:34:41:22:67:82:af: 09:fe:fb:44:94:bb:37:d9:66:e5:ef:37:c1:35:c0:34:d6:cc: 95:9d:06:a5:dd:74:4d:95:f3:c5:37:b3:e8:86:72:cf:01:53: 2e:3c:5c:54:e4:88:4a:fc:07:91:c4:08:2e:d5:ba:bb:9d:84: 53:d3:d0:cd:18:62:80:cb:ea:73:8a:23:83:53:e4:89:58:76: 67:d3:d8:34:84:d6:8b:11:35:22:04:64:91:7c:01:52:5a:c4: 42:f4:57:7e:d1:b0:7a:45:80:51:a5:4d:c6:60:07:73:aa:19: 7f:8a:8e:ff:78:5e:98:2a:ea:1b:30:3f:58:7b:a1:c3:64:04: 98:55:c1:40:23:cc:bb:4a:00:dc:32:5e:43:51:a7:26:9c:80: 56:c7:82:fb:55:08:d2:93:89:4f:c1:97:67:17:b8:f2:6c:7e: af:cd:5f:76 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUxMTI2MTMxNDU4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzVjYS01MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFqCXfy+6604sJNmXGwbhOqRF2QScvGwvYPsdE21nSqZzo6PNsJwDuT18m6x 6zIS2NWGXsU9yX8EGZ021LsjU0oywQytV6Rhj07n39DqOHqTmwGA+qfD5g8Fncin KnV5AAaC24vc8wTBxQGutY8SibbWRdtqxaMqDYq5HNQk61RbYzwK/FJOqJwacWkV BerrL1OPJdBaxYf9oFIIhLEmTWL8yUUQ5gTFnsjG1CiBVr6UDp4F+FMqnkwYf8Sp zJ2xiCNFoCIvCjkVB3fSy2xGgW7MP3dz3/uIdBCRBccHqy/bUqbwBJXZbpCs24Xa YahNseH4pp5umqPX3U3F+TdvXQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMMOP4aS t7GkChDSi//rwrs+sVpZMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3N0YvMUE0RkZCODg0MjIwMTFFQUExQzA3NzE0QzRGOUFFMDIvNzQxNjQ1RUU0 MjIyMTFFQTkzN0JCOTE5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZxUUAwQCiwVwMA0EAgACMAcDBQAkBZLAMA0GCSqGSIb3DQEBCwUA A4IBAQBPnzEkRyXvwMalbStFSDU35ftLnG3Na7HECbq6Oi/ihRM0jH4RcHMnfdhc GeEw/2PgpgRuLrJh62BAcdM/Rp9C8t/80bHjHDD+pPFBB/7c4gGLtB80QSJngq8J /vtElLs32Wbl7zfBNcA01syVnQal3XRNlfPFN7PohnLPAVMuPFxU5IhK/AeRxAgu 1bq7nYRT09DNGGKAy+pziiODU+SJWHZn09g0hNaLETUiBGSRfAFSWsRC9Fd+0bB6 RYBRpU3GYAdzqhl/io7/eF6YKuobMD9Ye6HDZASYVcFAI8y7SgDcMl5DUacmnIBW x4L7VQjSk4lPwZdnF7jybH6vzV92 -----END CERTIFICATE-----Generated at Mon Mar 2 08:31:24 2026 by rpki-client