$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/F1F8A98442D811ED854B9670C4F9AE02.roa File: F1F8A98442D811ED854B9670C4F9AE02.roa (raw, json) Hash identifier: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k= Subject key identifier: BB:7A:18:5E:92:5D:54:34:03:95:20:DE:7D:4C:A1:C4:F6:1A:CE:0B Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 0289 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/F1F8A98442D811ED854B9670C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:09:17 +0000 ROA not before: Wed 03 Dec 2025 00:30:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9253 IP address blocks: 45.115.196.0/22 maxlen: 24 103.84.220.0/22 maxlen: 24 202.126.48.0/20 maxlen: 24 2406:9400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Dec 3 00:30:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a42c6d-c6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:1b:4e:a1:0b:9a:61:b4:a8:6a:20:9c:40: 45:a4:b6:b4:22:ce:5b:e7:5f:f9:cb:0c:d0:ee:2e: 76:29:36:01:bc:2d:f1:ec:65:1c:f4:4e:3e:33:77: 3f:93:e1:b8:c9:82:0d:fe:50:46:25:97:5a:ce:86: 1a:0c:65:bc:ca:be:7e:33:72:3c:38:76:c8:7e:7c: f7:5f:f9:54:4e:95:b0:63:08:f9:aa:1f:cb:3e:44: c7:34:97:cf:2f:e2:70:3e:3f:b4:c6:ff:cf:98:76: 23:82:db:3c:2c:ba:6f:c4:7f:a5:45:be:e7:17:28: 35:50:12:fa:5b:4c:58:ac:32:5e:fd:c6:71:f2:1f: 42:62:53:b2:74:f3:92:53:15:64:04:5d:ec:62:1c: a7:0c:a2:a3:5e:86:12:de:fb:03:c4:3f:3b:90:e1: 8a:fe:5c:c4:56:ec:e3:ff:a1:ea:40:45:50:13:e0: f9:d4:f6:b6:cb:36:95:22:4e:0a:96:ea:ec:ba:d2: 7d:18:e1:98:14:be:09:3e:53:30:f9:e8:dd:8d:ce: dc:fa:1c:a6:51:d2:3e:0a:e4:8a:50:9e:f9:9d:c1: 26:7c:4f:08:87:66:6f:6e:ec:0d:65:79:5e:86:13: 9c:10:92:57:e0:36:00:07:3d:90:e3:16:3f:ed:4b: 22:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:18:5E:92:5D:54:34:03:95:20:DE:7D:4C:A1:C4:F6:1A:CE:0B X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/F1F8A98442D811ED854B9670C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.115.196.0/22 103.84.220.0/22 202.126.48.0/20 IPv6: 2406:9400::/32 Signature Algorithm: sha256WithRSAEncryption 75:0e:9d:9e:ff:00:bd:44:13:6f:d2:42:3c:6c:02:72:c9:1a: fc:77:47:46:22:45:19:07:52:61:0c:76:2c:85:35:88:5a:4f: 75:88:0f:ad:20:78:ff:93:4f:e4:4a:7b:54:3e:8f:a6:92:52: cd:31:88:e4:94:4c:ec:be:f6:07:08:91:e5:37:89:c1:9c:df: 3d:22:66:c9:94:4b:10:10:b9:a8:fa:c0:cc:68:ba:23:8c:8e: 4f:be:d3:c5:67:a1:5d:32:b5:1a:8a:2a:79:fa:2f:bd:1b:f8: 15:ab:9d:fb:6e:10:88:ed:19:9e:96:f6:33:e9:4b:49:00:b8: 62:44:ec:b7:a6:af:2e:81:a9:68:93:7b:b9:92:33:f6:dc:f1: b5:9f:6c:73:94:df:a1:87:4b:df:50:c0:3a:c9:e5:c9:83:74: b6:65:d7:53:cf:65:a6:17:0c:46:db:89:82:73:97:af:89:44: 2c:83:7d:24:2a:52:a8:e5:de:dd:ee:41:d6:c1:54:86:ce:6c: f8:bb:95:b6:c1:5e:de:39:a6:5e:01:38:7d:d8:c5:b9:31:81: 07:e0:db:b7:a9:8d:2d:c8:d8:47:e7:ac:a3:6b:a9:c6:2c:e5: 19:32:0f:59:cd:de:8a:0b:cc:fe:50:32:0e:6b:a7:96:e5:01: 07:9e:ec:a7 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUxMjAzMDAzMDIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmM2ZC1jNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMAbTqELmmG0qGognEBFpLa0Is5b51/5ywzQ7i52KTYBvC3x7GUc9E4+M3c/ k+G4yYIN/lBGJZdazoYaDGW8yr5+M3I8OHbIfnz3X/lUTpWwYwj5qh/LPkTHNJfP L+JwPj+0xv/PmHYjgts8LLpvxH+lRb7nFyg1UBL6W0xYrDJe/cZx8h9CYlOydPOS UxVkBF3sYhynDKKjXoYS3vsDxD87kOGK/lzEVuzj/6HqQEVQE+D51Pa2yzaVIk4K lursutJ9GOGYFL4JPlMw+ejdjc7c+hymUdI+CuSKUJ75ncEmfE8Ih2ZvbuwNZXle hhOcEJJX4DYABz2Q4xY/7UsimQIDAQABo4ICezCCAncwHQYDVR0OBBYEFLt6GF6S XVQ0A5Ug3n1MocT2Gs4LMB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkMzQ0MvNEExNDc0MDQ0MkQ0MTFFREExMjYwRTZBQzRGOUFFMDIvRjFGOEE5ODQ0 MkQ4MTFFRDg1NEI5NjcwQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCLXPEAwQCZ1TcAwQEyn4wMA0EAgACMAcDBQAkBpQAMA0GCSqGSIb3 DQEBCwUAA4IBAQB1Dp2e/wC9RBNv0kI8bAJyyRr8d0dGIkUZB1JhDHYshTWIWk91 iA+tIHj/k0/kSntUPo+mklLNMYjklEzsvvYHCJHlN4nBnN89ImbJlEsQELmo+sDM aLojjI5PvtPFZ6FdMrUaiip5+i+9G/gVq537bhCI7RmelvYz6UtJALhiROy3pq8u galok3u5kjP23PG1n2xzlN+hh0vfUMA6yeXJg3S2ZddTz2WmFwxG24mCc5eviUQs g30kKlKo5d7d7kHWwVSGzmz4u5W2wV7eOaZeATh92MW5MYEH4Nu3qY0tyNhH56yj a6nGLOUZMg9Zzd6KC8z+UDIOa6eW5QEHnuyn -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:10 2026 by rpki-client