$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/F4075E7CF28611EF976CB83AC4F9AE02.roa File: F4075E7CF28611EF976CB83AC4F9AE02.roa (raw, json) Hash identifier: 2XB9AUT5vQE1XXVh7JlV1lG+7wXXx67sWItW8OX0UI0= Subject key identifier: 3E:66:FB:A5:49:3C:FA:BE:DB:27:48:D1:9F:88:6D:F1:C3:D0:79:79 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 086B Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/F4075E7CF28611EF976CB83AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:06:22 +0000 ROA not before: Wed 18 Jun 2025 19:03:38 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135353 IP address blocks: 103.214.218.0/24 maxlen: 24 103.214.219.0/24 maxlen: 24 144.48.160.0/24 maxlen: 24 144.48.161.0/24 maxlen: 24 144.48.162.0/24 maxlen: 24 144.48.163.0/24 maxlen: 24 2404:ba40::/32 maxlen: 32 2404:ba40::/48 maxlen: 48 2404:ba40:1::/48 maxlen: 48 2404:ba40:2::/48 maxlen: 48 2404:ba40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Jun 18 19:03:38 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a48e2e-9dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:24:c2:a8:b7:43:47:b0:1b:55:8f:c7:29: 2d:a8:01:10:ef:3b:01:76:20:26:5f:8f:84:d5:d8: 36:ce:7c:88:77:a4:e8:55:ab:73:c6:b6:b3:7e:9b: c0:44:81:40:f7:a9:7c:ff:3c:86:f8:60:d1:3d:0b: 67:90:23:a8:e5:ce:10:10:76:6c:43:0f:89:a3:82: 95:a5:7a:d2:16:88:82:f4:90:61:ee:09:4b:2e:88: d1:00:40:7f:2a:f8:0c:aa:78:86:37:5b:59:88:72: 6e:ae:a5:84:9a:77:c4:58:67:d2:51:14:19:6a:a8: b2:42:a6:7d:76:07:72:e9:b8:0b:b4:9d:5a:6b:52: a5:52:13:16:c2:3e:65:67:be:dd:90:8c:3e:a3:ac: 22:58:93:71:09:b2:e7:12:24:c2:2c:ce:78:07:dd: ea:f4:76:01:b5:b6:77:24:1d:cd:91:4b:79:56:9f: 50:ad:e0:1e:64:5c:e6:e3:b8:c7:9b:34:93:3b:15: 3a:a9:ca:53:f6:50:47:b9:5e:3c:2b:db:04:0a:71: b4:bf:63:fd:2e:3b:21:19:58:7d:c0:0c:a1:36:2c: 05:96:c4:80:01:68:12:1d:c7:0d:50:68:61:c5:0c: df:c6:70:e9:f0:8f:a4:5a:02:20:a5:fe:49:2e:6d: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:66:FB:A5:49:3C:FA:BE:DB:27:48:D1:9F:88:6D:F1:C3:D0:79:79 X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/F4075E7CF28611EF976CB83AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.218.0/23 144.48.160.0/22 IPv6: 2404:ba40::/32 Signature Algorithm: sha256WithRSAEncryption a4:01:87:44:4f:dc:95:ca:ae:75:c7:ef:ec:b1:22:66:dc:15: fa:67:3d:52:63:29:7f:78:c2:87:30:31:9e:3a:f3:76:df:7d: 76:ac:6e:ea:fb:7b:7d:b9:b8:7f:3e:43:59:93:e3:4e:3d:9d: a3:2e:d6:7a:60:b4:f1:fa:38:51:11:d5:6e:25:a6:b9:42:89: 0a:0c:c9:83:58:c3:0e:d3:d2:14:87:46:4a:e1:00:e6:61:01: eb:80:60:8c:02:c1:be:06:5b:e6:1b:a9:c8:6e:d7:5b:b6:23: eb:05:a7:40:93:6b:6c:8a:26:d6:64:75:a0:b4:e6:2f:0f:4b: 11:d1:73:6c:f0:47:0b:3c:3a:3b:97:b2:36:42:1b:8e:e3:82: 91:45:6b:63:57:5b:0e:02:1c:5d:6e:e2:95:e9:14:f3:06:b6: f1:4e:49:45:0c:64:b8:1c:e5:c0:f0:59:fe:f4:6c:98:b5:d0: 2d:33:37:1e:db:7d:63:13:18:6e:79:3b:41:a0:6e:1c:d0:05: f4:1d:8d:9d:1a:cd:ae:0c:99:7f:83:26:d8:75:81:ab:29:ae: 9c:e4:55:99:56:c9:e7:a0:38:be:26:0a:69:c1:2b:10:cc:19: 7d:6f:34:e0:c7:83:af:24:b3:23:5f:ed:05:f1:81:7c:20:a0: 3d:10:e6:1d -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjUwNjE4MTkwMzM4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGUyZS05ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/Akwqi3Q0ewG1WPxyktqAEQ7zsBdiAmX4+E1dg2znyId6ToVatzxrazfpvA RIFA96l8/zyG+GDRPQtnkCOo5c4QEHZsQw+Jo4KVpXrSFoiC9JBh7glLLojRAEB/ KvgMqniGN1tZiHJurqWEmnfEWGfSURQZaqiyQqZ9dgdy6bgLtJ1aa1KlUhMWwj5l Z77dkIw+o6wiWJNxCbLnEiTCLM54B93q9HYBtbZ3JB3NkUt5Vp9QreAeZFzm47jH mzSTOxU6qcpT9lBHuV48K9sECnG0v2P9LjshGVh9wAyhNiwFlsSAAWgSHccNUGhh xQzfxnDp8I+kWgIgpf5JLm3orwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD5m+6VJ PPq+2ydI0Z+IbfHD0Hl5MB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkNEREYvMjY2MDhENDYxMDcyMTFFQUFDMDZCMDc5QzRGOUFFMDIvRjQwNzVFN0NG Mjg2MTFFRjk3NkNCODNBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ9baAwQCkDCgMA0EAgACMAcDBQAkBLpAMA0GCSqGSIb3DQEBCwUA A4IBAQCkAYdET9yVyq51x+/ssSJm3BX6Zz1SYyl/eMKHMDGeOvN23312rG7q+3t9 ubh/PkNZk+NOPZ2jLtZ6YLTx+jhREdVuJaa5QokKDMmDWMMO09IUh0ZK4QDmYQHr gGCMAsG+BlvmG6nIbtdbtiPrBadAk2tsiibWZHWgtOYvD0sR0XNs8EcLPDo7l7I2 QhuO44KRRWtjV1sOAhxdbuKV6RTzBrbxTklFDGS4HOXA8Fn+9GyYtdAtMzce231j ExhueTtBoG4c0AX0HY2dGs2uDJl/gybYdYGrKa6c5FWZVsnnoDi+JgppwSsQzBl9 bzTgx4OvJLMjX+0F8YF8IKA9EOYd -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:58 2026 by rpki-client