$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/4A120466FC5F11EF9B1B9787C4F9AE02.roa File: 4A120466FC5F11EF9B1B9787C4F9AE02.roa (raw, json) Hash identifier: TmnCz4svkXeFZCWbvgUiA1zjjOZv2YaqvM6tFAU7tic= Subject key identifier: F1:35:5A:DC:7E:0F:8E:F5:DA:05:B7:96:95:8E:9E:9E:E0:66:9B:DC Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Certificate serial: 064C Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/4A120466FC5F11EF9B1B9787C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:29:50 +0000 ROA not before: Sun 28 Sep 2025 23:57:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 27182 IP address blocks: 103.172.134.0/24 maxlen: 24 103.172.135.0/24 maxlen: 24 2407:d340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1612 (0x64c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5 Validity Not Before: Sep 28 23:57:01 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4778d-e177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:72:3a:7d:f4:f6:ac:ee:3a:cd:0c:ba:12: a0:a0:1d:9b:79:d6:12:58:6b:45:e7:bc:3d:db:fb: e3:c5:63:5f:cb:01:9c:f7:33:1b:25:d6:1a:da:3d: 3e:a3:98:39:31:42:8a:c0:1e:0a:d7:75:e8:75:cd: b2:ab:70:83:40:da:26:56:fe:9b:14:d5:de:97:df: 69:8d:13:03:1d:e4:cd:13:63:92:24:3d:32:74:69: 4a:78:ef:9b:b2:d4:16:f5:fc:36:98:c3:57:ef:cf: 3b:30:59:ff:b1:22:8a:b4:a2:c3:a4:8b:ec:a5:f0: 2c:5c:e3:44:dd:8d:88:94:ef:f1:25:73:c6:6e:3b: df:35:34:a4:12:92:2b:22:42:b0:28:a4:4f:f5:93: 1f:0f:89:9f:ec:9a:33:9e:8a:1b:c3:f8:55:29:99: 89:6d:90:ba:60:8b:26:31:71:e4:4e:19:cf:09:05: a2:7f:11:30:2a:21:b7:54:8c:3d:3c:c8:85:52:7d: e9:81:9c:fe:b6:fb:07:55:28:ad:c9:fe:ba:46:7e: dc:20:a9:e8:9b:bb:47:c5:17:bd:dc:38:52:7e:dc: 90:ec:8e:30:75:af:5c:5d:89:41:29:28:c4:ac:96: 92:0c:68:6a:bd:71:cf:48:ae:8b:97:a2:ef:8b:86: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:35:5A:DC:7E:0F:8E:F5:DA:05:B7:96:95:8E:9E:9E:E0:66:9B:DC X509v3 Authority Key Identifier: keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/4A120466FC5F11EF9B1B9787C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.134.0/23 IPv6: 2407:d340::/32 Signature Algorithm: sha256WithRSAEncryption 3d:e2:63:e1:71:b5:43:0d:d5:13:13:fd:5d:3f:cc:50:9c:33: 03:e4:91:04:97:4a:9c:9a:ee:d6:0e:75:4c:7f:ae:00:6b:d6: f0:89:89:24:43:05:e5:e3:3c:0c:ec:ea:53:38:f0:53:0e:fb: d2:2a:c8:07:a4:27:06:59:6c:df:bd:36:34:80:c7:26:7d:83: f4:63:5f:69:33:20:0f:56:02:3e:81:d4:91:1a:f3:34:fd:a6: 8a:cd:3f:01:25:3e:c7:17:c1:de:82:c4:02:26:7f:47:d5:d8: 84:3c:82:0c:2b:59:18:06:33:be:b9:00:d7:d4:c1:f8:b0:20: c3:e6:6b:f3:80:69:71:c8:e7:41:fe:7b:1f:ac:65:fc:ab:fc: 55:c8:09:b5:e5:ee:c6:4b:06:ab:c0:26:fb:fa:c0:a7:e3:c9: 92:34:b0:d8:09:d7:51:b9:34:e1:00:9e:63:82:8b:93:d7:01: 1f:9c:81:d6:35:0a:62:cb:5a:d9:55:bb:87:b1:cc:75:82:eb: c9:0d:ac:a8:7f:c5:f6:2f:d0:9e:cd:7c:78:e9:c7:b1:71:83: c1:59:95:6e:5f:b6:95:48:28:94:a0:fa:68:50:e0:cc:df:5c: 93:83:42:43:8a:cc:51:2c:bd:0f:d3:e1:c8:11:5b:45:78:71: 16:c7:fe:41 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxOUUxMTAvBgNVBAUTKDE0NDU0ODlGREQ1MEFBNDRBQzFEMkEzQzNBMTY2RTA2 QzY2MkFGRDUwHhcNMjUwOTI4MjM1NzAxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzc4ZC1lMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyp9yOn309qzuOs0MuhKgoB2bedYSWGtF57w92/vjxWNfywGc9zMbJdYa2j0+ o5g5MUKKwB4K13Xodc2yq3CDQNomVv6bFNXel99pjRMDHeTNE2OSJD0ydGlKeO+b stQW9fw2mMNX7887MFn/sSKKtKLDpIvspfAsXONE3Y2IlO/xJXPGbjvfNTSkEpIr IkKwKKRP9ZMfD4mf7Joznoobw/hVKZmJbZC6YIsmMXHkThnPCQWifxEwKiG3VIw9 PMiFUn3pgZz+tvsHVSityf66Rn7cIKnom7tHxRe93DhSftyQ7I4wda9cXYlBKSjE rJaSDGhqvXHPSK6Ll6Lvi4YgqQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPE1Wtx+ D4712gW3lpWOnp7gZpvcMB8GA1UdIwQYMBaAFBRFSJ/dUKpErB0qPDoWbgbGYq/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE5RS85ODFFRTk4NjBC MjExMUVDODQyMTQ5NERDNEY5QUUwMi9GRVZJbjkxUXFrU3NIU284T2hadUJzWmly OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQxOUUvOTgxRUU5ODYwQjIxMTFFQzg0MjE0OTREQzRGOUFFMDIvNEExMjA0NjZG QzVGMTFFRjlCMUI5Nzg3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6yGMA0EAgACMAcDBQAkB9NAMA0GCSqGSIb3DQEBCwUAA4IBAQA9 4mPhcbVDDdUTE/1dP8xQnDMD5JEEl0qcmu7WDnVMf64Aa9bwiYkkQwXl4zwM7OpT OPBTDvvSKsgHpCcGWWzfvTY0gMcmfYP0Y19pMyAPVgI+gdSRGvM0/aaKzT8BJT7H F8HegsQCJn9H1diEPIIMK1kYBjO+uQDX1MH4sCDD5mvzgGlxyOdB/nsfrGX8q/xV yAm15e7GSwarwCb7+sCn48mSNLDYCddRuTThAJ5jgouT1wEfnIHWNQpiy1rZVbuH scx1guvJDayof8X2L9CezXx46cexcYPBWZVuX7aVSCiUoPpoUODM31yTg0JDisxR LL0P0+HIEVtFeHEWx/5B -----END CERTIFICATE-----Generated at Mon Mar 2 08:12:33 2026 by rpki-client