$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/A79D17F2361111EA95391375C4F9AE02.roa File: A79D17F2361111EA95391375C4F9AE02.roa (raw, json) Hash identifier: q2GF1CC4p1t2FL0of6+/asb4zOBEZzVUYsIcOysC6Sk= Subject key identifier: 2E:9E:9A:96:E0:9F:DE:AB:97:F0:5A:FB:20:EF:A8:4C:72:AC:18:4B Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Certificate serial: 0BED Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/A79D17F2361111EA95391375C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:30:00 +0000 ROA not before: Sun 08 Feb 2026 08:24:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134749 IP address blocks: 103.199.152.0/22 maxlen: 23 103.199.152.0/24 maxlen: 24 103.199.153.0/24 maxlen: 24 103.199.154.0/24 maxlen: 24 103.199.155.0/24 maxlen: 24 203.78.144.0/22 maxlen: 23 203.78.144.0/24 maxlen: 24 203.78.145.0/24 maxlen: 24 203.78.146.0/24 maxlen: 24 203.78.147.0/24 maxlen: 24 2407:fe80::/32 maxlen: 32 2407:fe80::/40 maxlen: 40 2407:fe80:2::/48 maxlen: 48 2407:fe80:100::/40 maxlen: 40 2407:fe80:100::/48 maxlen: 48 2407:fe80:300::/40 maxlen: 40 2407:fe80:3000::/36 maxlen: 36 2407:fe80:8100::/40 maxlen: 40 2407:fe80:8200::/40 maxlen: 40 2407:fe80:8300::/40 maxlen: 40 2407:fe80:8400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3053 (0xbed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989 Validity Not Before: Feb 8 08:24:45 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46988-f964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:40:a7:cc:a7:3a:27:1a:8b:85:67:99:c6:3a: fc:cb:31:f0:24:32:6d:35:b0:1e:b6:ae:d0:76:6e: 38:cb:f7:d6:e9:72:df:23:d3:50:a3:65:13:6d:ed: d7:5c:54:95:64:ce:e3:06:42:40:ae:03:75:6e:d3: 20:8b:17:75:f1:aa:c6:8e:c7:b0:e5:3e:de:72:17: e5:f2:cf:97:89:c2:e8:27:fb:41:39:89:f9:89:54: b4:cc:42:e8:53:a1:2e:23:7e:64:54:88:2d:a1:db: 28:39:00:8f:0c:97:92:bc:ad:45:0b:03:a7:12:3f: ef:46:28:e9:a5:79:e9:8f:c0:c0:ba:e0:38:73:ca: 96:dc:56:a0:52:54:53:13:0c:aa:ad:c5:3f:f7:00: 5d:41:96:c8:2a:81:d3:88:62:43:f0:75:55:55:c6: 26:ad:7d:c1:c1:f5:5a:09:c4:67:70:cd:1d:cd:02: 25:41:13:bb:d2:67:eb:06:06:55:bf:89:62:a6:5d: f7:8d:c9:ba:97:1f:f4:39:cc:b1:39:b0:3f:85:3b: 9e:35:2f:cc:4f:21:51:3f:13:4a:51:53:09:b7:fd: 64:18:d5:14:1e:4b:b7:18:0c:5f:51:cf:da:c8:4f: a7:89:91:44:0b:10:93:b4:8b:6f:a2:87:3d:25:1f: f3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9E:9A:96:E0:9F:DE:AB:97:F0:5A:FB:20:EF:A8:4C:72:AC:18:4B X509v3 Authority Key Identifier: keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/A79D17F2361111EA95391375C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.199.152.0/22 203.78.144.0/22 IPv6: 2407:fe80::/32 Signature Algorithm: sha256WithRSAEncryption 62:17:30:41:85:8e:16:7b:41:87:72:ac:0e:ff:b6:e3:2b:d3: 6c:79:60:9a:5e:40:ff:56:4a:4e:99:91:e8:09:70:5e:a0:0c: 7a:7c:1d:d0:6a:91:87:4b:59:52:67:2a:6c:32:c5:66:37:49: 85:d8:2f:8a:36:ea:c0:0f:80:7b:86:b5:6c:10:96:5f:01:e2: 98:2c:1c:c8:25:1c:78:c0:90:e3:85:3a:b7:64:23:34:1b:d0: 39:ba:8d:d2:6d:15:54:30:70:db:40:e1:42:c8:24:81:82:88: 64:3d:0a:47:82:4f:8f:55:99:40:a0:79:b4:d2:23:ae:9a:25: d5:c6:2f:fb:35:8c:63:c4:8a:d1:53:c3:25:bb:9e:20:b6:a3: 77:26:0c:5e:ab:12:4e:f3:86:37:10:5c:24:31:0c:b1:91:06: e4:c9:10:f4:49:ad:13:01:91:ed:4e:6e:bb:b7:88:54:36:4c: c7:5a:2e:08:1c:89:d0:fd:43:b1:5a:96:74:e7:23:84:66:12: c2:ae:82:60:fd:f2:da:43:4e:23:c6:44:f5:9f:de:06:ae:b5: 82:54:e4:01:33:b2:17:2c:10:ae:9e:a1:1c:33:be:0f:59:1a: 5e:7d:56:c5:99:f1:45:e2:c4:ee:d4:b8:8c:65:45:38:54:13: bd:ff:f3:19 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNTExMTAvBgNVBAUTKEY0RUNCNTNFQzIzMDUzOUMwQjU3RTU5QjQ2N0QxNTRG QURFQjM5ODkwHhcNMjYwMjA4MDgyNDQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njk4OC1mOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40CnzKc6JxqLhWeZxjr8yzHwJDJtNbAetq7Qdm44y/fW6XLfI9NQo2UTbe3X XFSVZM7jBkJArgN1btMgixd18arGjsew5T7echfl8s+XicLoJ/tBOYn5iVS0zELo U6EuI35kVIgtodsoOQCPDJeSvK1FCwOnEj/vRijppXnpj8DAuuA4c8qW3FagUlRT EwyqrcU/9wBdQZbIKoHTiGJD8HVVVcYmrX3BwfVaCcRncM0dzQIlQRO70mfrBgZV v4lipl33jcm6lx/0OcyxObA/hTueNS/MTyFRPxNKUVMJt/1kGNUUHku3GAxfUc/a yE+niZFECxCTtItvooc9JR/zowIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFC6empbg n96rl/Ba+yDvqExyrBhLMB8GA1UdIwQYMBaAFPTstT7CMFOcC1flm0Z9FU+t6zmJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE1MS9GOTI1QjM1MDM2 MTAxMUVBOUJEMTc0NzRDNEY5QUUwMi85T3kxUHNJd1U1d0xWLVdiUm4wVlQ2M3JP WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlPeTFQc0l3VTV3TFYtV2JSbjBWVDYzck9Zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkZBNTEvRjkyNUIzNTAzNjEwMTFFQTlCRDE3NDc0QzRGOUFFMDIvQTc5RDE3RjIz NjExMTFFQTk1MzkxMzc1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ8eYAwQCy06QMA0EAgACMAcDBQAkB/6AMA0GCSqGSIb3DQEBCwUA A4IBAQBiFzBBhY4We0GHcqwO/7bjK9NseWCaXkD/VkpOmZHoCXBeoAx6fB3QapGH S1lSZypsMsVmN0mF2C+KNurAD4B7hrVsEJZfAeKYLBzIJRx4wJDjhTq3ZCM0G9A5 uo3SbRVUMHDbQOFCyCSBgohkPQpHgk+PVZlAoHm00iOumiXVxi/7NYxjxIrRU8Ml u54gtqN3JgxeqxJO84Y3EFwkMQyxkQbkyRD0Sa0TAZHtTm67t4hUNkzHWi4IHInQ /UOxWpZ05yOEZhLCroJg/fLaQ04jxkT1n94GrrWCVOQBM7IXLBCunqEcM74PWRpe fVbFmfFF4sTu1LiMZUU4VBO9//MZ -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:50 2026 by rpki-client