$ rpki-client -vvf rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa File: E3901F981BD711EEB9597921C4F9AE02.roa (raw, json) Hash identifier: 8MwxhTqxv/j2kzmr6bZcYqqFG0tKO6Vnf2148zJAni8= Subject key identifier: 88:38:05:97:7C:1F:F7:E8:67:F2:F8:96:0C:08:09:4B:B6:F9:52:C9 Certificate issuer: /CN=A917A67E/serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Certificate serial: 01FF Authority key identifier: 4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:33:54 +0000 ROA not before: Tue 01 Jul 2025 04:39:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151326 IP address blocks: 103.197.254.0/23 maxlen: 23 2001:df2:6fc0::/48 maxlen: 48 2401:ed60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A67E, serialNumber=4B722A3A6793BF32C9BCF52E4E772E0A6F3A6319 Validity Not Before: Jul 1 04:39:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ebe2-ffab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:d5:87:3c:25:14:9a:9c:62:37:f4:c2:9c: 52:f1:99:3e:23:cb:db:3c:5c:fa:ba:55:67:b2:73: 72:63:32:1c:4b:df:37:18:fb:28:5d:e1:d5:4d:20: f6:40:4c:66:b7:70:9d:d8:d9:10:1d:24:a5:cb:f0: 86:a5:9a:d7:9b:3d:19:25:a0:0b:e3:c0:83:ed:39: 53:e3:b1:1f:42:c0:84:3d:a6:95:1a:45:e9:64:66: 80:01:ce:ae:f7:19:64:45:4d:15:0a:5d:31:17:38: c2:aa:1b:cb:73:4d:d4:86:20:f1:11:5a:c2:9d:6d: ad:3d:a7:29:33:76:17:2a:3f:df:90:62:23:b9:16: a6:11:dd:ed:ba:f9:22:9b:d2:51:91:ce:b1:97:ff: 2a:6e:d0:e8:53:88:32:90:1c:54:88:c7:70:bc:d5: d4:fa:06:07:17:b0:95:26:b0:91:2a:b3:29:2a:2c: d7:c9:b6:da:2e:60:bb:9d:b0:ce:42:c3:25:b3:76: d1:e5:7a:dc:83:64:c8:d9:5f:33:40:fa:ee:7c:c9: 8c:ed:78:af:93:68:92:73:40:37:31:3c:a1:f5:54: 72:00:b1:d8:30:0e:a2:7a:9a:5e:28:09:7b:29:f2: b5:58:cb:22:8b:75:e8:a8:b3:e5:e5:e9:6e:87:61: d6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:38:05:97:7C:1F:F7:E8:67:F2:F8:96:0C:08:09:4B:B6:F9:52:C9 X509v3 Authority Key Identifier: keyid:4B:72:2A:3A:67:93:BF:32:C9:BC:F5:2E:4E:77:2E:0A:6F:3A:63:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/S3IqOmeTvzLJvPUuTncuCm86Yxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S3IqOmeTvzLJvPUuTncuCm86Yxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A67E/67B4CB841BD311EE965FEF38C4F9AE02/E3901F981BD711EEB9597921C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.197.254.0/23 IPv6: 2001:df2:6fc0::/48 2401:ed60::/32 Signature Algorithm: sha256WithRSAEncryption 68:1c:5d:e8:a5:08:e7:ea:6b:43:08:e1:1a:65:26:27:87:a6: 04:4b:a9:9e:b9:5b:17:6b:d3:f9:41:06:ee:ba:d5:d9:6b:59: 44:fd:16:4a:9e:19:fa:22:d9:c0:77:0d:5d:e2:dd:90:16:ac: e7:aa:55:ae:47:29:9b:53:ea:95:43:f8:f0:78:55:07:0b:5e: 7e:d8:70:b6:b6:49:5a:05:a0:f9:fd:10:4a:5a:56:60:c7:97: f0:88:c0:99:c6:df:5b:fa:96:f9:3c:7f:33:0b:b9:5d:ce:25: 0f:ac:5a:37:c6:69:b9:05:98:a4:18:a8:24:af:48:78:9e:72: 11:a9:9c:73:25:d2:99:71:a6:b2:0f:91:fc:49:10:9a:98:8f: e9:32:23:9a:12:b8:8a:fd:2b:41:fc:c1:88:c4:74:f8:67:d2: 43:61:c5:8d:58:91:7d:09:b3:51:c2:04:7c:49:36:c4:b5:dd: 4c:a3:ce:1b:1e:be:c5:8f:17:9e:16:ab:62:ee:9d:e0:6a:da: 2c:68:93:24:f7:0c:39:3e:59:f1:a6:45:04:b9:63:5f:39:fa: ec:be:a5:7a:79:f2:ce:a8:ad:70:99:1b:5a:af:f8:58:cd:f1: 15:34:13:14:b2:bd:db:67:ed:f6:82:6a:d7:ba:fe:fb:1c:a4: dd:64:ef:ab -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2N0UxMTAvBgNVBAUTKDRCNzIyQTNBNjc5M0JGMzJDOUJDRjUyRTRFNzcyRTBB NkYzQTYzMTkwHhcNMjUwNzAxMDQzOTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWJlMi1mZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAHVhzwlFJqcYjf0wpxS8Zk+I8vbPFz6ulVnsnNyYzIcS983GPsoXeHVTSD2 QExmt3Cd2NkQHSSly/CGpZrXmz0ZJaAL48CD7TlT47EfQsCEPaaVGkXpZGaAAc6u 9xlkRU0VCl0xFzjCqhvLc03UhiDxEVrCnW2tPacpM3YXKj/fkGIjuRamEd3tuvki m9JRkc6xl/8qbtDoU4gykBxUiMdwvNXU+gYHF7CVJrCRKrMpKizXybbaLmC7nbDO QsMls3bR5Xrcg2TI2V8zQPrufMmM7Xivk2iSc0A3MTyh9VRyALHYMA6ieppeKAl7 KfK1WMsii3XoqLPl5eluh2HWFQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFIg4BZd8 H/foZ/L4lgwICUu2+VLJMB8GA1UdIwQYMBaAFEtyKjpnk78yybz1Lk53LgpvOmMZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY3RS82N0I0Q0I4NDFC RDMxMUVFOTY1RkVGMzhDNEY5QUUwMi9TM0lxT21lVHZ6TEp2UFV1VG5jdUNtODZZ eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MzSXFPbWVUdnpMSnZQVXVUbmN1Q204Nll4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2N0UvNjdCNENCODQxQkQzMTFFRTk2NUZFRjM4QzRGOUFFMDIvRTM5MDFGOTgx QkQ3MTFFRUI5NTk3OTIxQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ8X+MBYEAgACMBADBwAgAQ3yb8ADBQAkAe1gMA0GCSqGSIb3DQEB CwUAA4IBAQBoHF3opQjn6mtDCOEaZSYnh6YES6meuVsXa9P5QQbuutXZa1lE/RZK nhn6ItnAdw1d4t2QFqznqlWuRymbU+qVQ/jweFUHC15+2HC2tklaBaD5/RBKWlZg x5fwiMCZxt9b+pb5PH8zC7ldziUPrFo3xmm5BZikGKgkr0h4nnIRqZxzJdKZcaay D5H8SRCamI/pMiOaEriK/StB/MGIxHT4Z9JDYcWNWJF9CbNRwgR8STbEtd1Mo84b Hr7FjxeeFqti7p3gatosaJMk9ww5PlnxpkUEuWNfOfrsvqV6efLOqK1wmRtar/hY zfEVNBMUsr3bZ+32gmrXuv77HKTdZO+r -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:47 2026 by rpki-client