$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa File: 696ECAD4881311F0BDB4B016C4F9AE02.roa (raw, json) Hash identifier: 70lq6hB6RM8SsXFNoAKIOYxi3AShZ0ZVU7UdYmirsQ4= Subject key identifier: 86:5D:3E:3E:5E:AA:40:62:91:CF:D3:11:3A:B4:2E:FA:F8:A0:E2:24 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 3AB3 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:25:34 +0000 ROA not before: Tue 02 Sep 2025 15:42:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135660 IP address blocks: 111.88.77.0/24 maxlen: 24 117.102.0.0/24 maxlen: 24 117.102.1.0/24 maxlen: 24 117.102.2.0/24 maxlen: 24 117.102.3.0/24 maxlen: 24 117.102.4.0/24 maxlen: 24 117.102.5.0/24 maxlen: 24 117.102.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15027 (0x3ab3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Sep 2 15:42:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a492ad-b730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:06:bf:30:a8:f6:be:5f:bc:5f:da:f4:8e: b9:1b:49:bc:f3:60:64:b4:1b:08:bc:ff:2f:f0:4f: 09:fd:33:fd:85:52:2a:09:9c:35:27:0d:64:ee:1f: 57:91:5b:47:f2:8b:99:8d:74:2f:55:a6:6f:19:49: 08:db:64:67:0f:1e:94:3e:90:6a:2e:9d:eb:43:3c: f6:3c:c7:71:c0:6f:ed:84:8c:17:8d:b4:44:f3:4b: 80:89:52:bb:2b:c2:94:96:03:d7:ae:cd:bc:c5:9f: 0f:d5:40:9a:bf:f7:11:25:6f:53:fe:4e:22:64:1d: ef:9b:30:d7:29:10:7f:5f:49:93:4a:ad:2c:b4:ff: c0:34:fc:d2:a0:b1:85:50:54:67:54:81:dc:b5:ba: 21:ce:c4:50:0e:59:2b:84:57:97:15:10:5b:d6:4a: 8d:24:67:4c:28:38:fe:7a:01:a6:32:87:3b:c8:a6: 5a:99:12:4f:63:46:1d:56:88:57:cf:44:ef:4e:ca: 25:ce:30:00:6f:97:49:9d:73:b0:74:38:09:e1:26: 67:ff:5c:30:20:d9:0d:01:e2:a1:44:2c:24:1e:2f: 63:4b:bb:7f:aa:86:f8:7e:74:d5:b5:d8:73:c8:a3: a0:db:db:61:08:42:4c:a9:94:1d:27:98:f1:7f:f3: a3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5D:3E:3E:5E:AA:40:62:91:CF:D3:11:3A:B4:2E:FA:F8:A0:E2:24 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/696ECAD4881311F0BDB4B016C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 111.88.77.0/24 117.102.0.0-117.102.6.255 Signature Algorithm: sha256WithRSAEncryption 70:a5:f3:a9:23:8c:18:3f:3d:26:5c:1c:e9:cf:0d:6d:38:29: a9:f6:71:a3:19:43:c1:1c:e8:04:50:bb:46:13:65:4d:89:a2: a6:4f:39:c7:b0:e8:b8:1f:7f:75:ba:b1:f9:2e:f0:78:88:3a: 07:10:69:cc:69:7e:2c:aa:5a:cd:f1:ef:f7:ff:9a:10:9d:fa: b1:8a:9a:91:f8:38:57:97:7c:53:98:58:b7:d7:34:3d:19:7d: 74:fa:b3:bc:12:f4:4d:f4:a2:f5:28:64:18:42:c7:b7:4d:56: c5:df:d2:29:eb:d7:5f:05:cb:63:24:5c:d1:b8:a8:09:6c:01: 6a:fd:a2:d0:f4:87:7d:07:9f:06:09:f5:d2:5d:a8:1b:99:51: 7f:15:29:e5:65:f0:2a:62:6f:96:d3:f8:b8:bf:21:0e:33:7d: 2f:d0:09:4c:9b:3d:32:1f:07:25:26:2f:6c:a7:2d:a2:8c:0e: 20:cd:09:7f:14:34:fb:8c:08:97:51:9d:56:c8:e4:12:17:24: 23:97:32:bc:62:1a:36:73:9f:27:41:01:83:85:e1:86:65:0c: ed:fa:23:1f:af:ab:86:b3:48:94:a7:bd:ef:63:89:a2:8a:80: c3:57:25:30:67:25:a6:53:86:d2:d5:93:d3:78:14:cb:89:3c: 7f:ad:07:b3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgICOrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwOTAyMTU0MjIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTJhZC1iNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dwGvzCo9r5fvF/a9I65G0m882BktBsIvP8v8E8J/TP9hVIqCZw1Jw1k7h9X kVtH8ouZjXQvVaZvGUkI22RnDx6UPpBqLp3rQzz2PMdxwG/thIwXjbRE80uAiVK7 K8KUlgPXrs28xZ8P1UCav/cRJW9T/k4iZB3vmzDXKRB/X0mTSq0stP/ANPzSoLGF UFRnVIHctbohzsRQDlkrhFeXFRBb1kqNJGdMKDj+egGmMoc7yKZamRJPY0YdVohX z0TvTsolzjAAb5dJnXOwdDgJ4SZn/1wwINkNAeKhRCwkHi9jS7t/qob4fnTVtdhz yKOg29thCEJMqZQdJ5jxf/OjPwIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFIZdPj5e qkBikc/TETq0Lvr4oOIkMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNjk2RUNBRDQ4 ODEzMTFGMEJEQjRCMDE2QzRGOUFFMDIucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ BAIAATATAwQAb1hNMAsDAwF1ZgMEAHVmBjANBgkqhkiG9w0BAQsFAAOCAQEAcKXz qSOMGD89Jlwc6c8NbTgpqfZxoxlDwRzoBFC7RhNlTYmipk85x7DouB9/dbqx+S7w eIg6BxBpzGl+LKpazfHv9/+aEJ36sYqakfg4V5d8U5hYt9c0PRl9dPqzvBL0TfSi 9ShkGELHt01Wxd/SKevXXwXLYyRc0bioCWwBav2i0PSHfQefBgn10l2oG5lRfxUp 5WXwKmJvltP4uL8hDjN9L9AJTJs9Mh8HJSYvbKctoowOIM0JfxQ0+4wIl1GdVsjk EhckI5cyvGIaNnOfJ0EBg4XhhmUM7fojH6+rhrNIlKe972OJooqAw1clMGclplOG 0tWT03gUy4k8f60Hsw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:55:20 2026 by rpki-client