$ rpki-client -vvf rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/FF7048A08BB111EF8981B871C4F9AE02.roa File: FF7048A08BB111EF8981B871C4F9AE02.roa (raw, json) Hash identifier: Pf4vtsycRl7uQ7TRSuhW3ZPGeuFhV8pttTvvgiVqOIo= Subject key identifier: 01:64:F8:C6:37:24:1C:F4:8F:CE:08:30:A7:D0:AB:50:E8:D4:02:88 Certificate issuer: /CN=A917B503/serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Certificate serial: 013E Authority key identifier: BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/FF7048A08BB111EF8981B871C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:07:26 +0000 ROA not before: Wed 25 Feb 2026 04:24:39 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 206888 IP address blocks: 45.114.124.0/22 maxlen: 22 103.81.168.0/22 maxlen: 22 2400:7ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B503, serialNumber=BD63E0DDCB5CD41B34501DF2E81A2A72CEE36EF2 Validity Not Before: Feb 25 04:24:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41dee-999d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:e3:9b:01:91:99:4a:04:03:b6:55:80:e0: ff:e1:e8:5e:c7:40:56:9c:70:da:00:6d:bc:65:11: b3:1b:bb:b5:b3:65:ba:cd:6a:16:bb:fe:78:98:50: ab:42:40:8a:f6:b6:00:b0:8e:69:e9:65:16:33:64: 94:55:5a:22:9e:99:e1:4d:9f:a3:c3:d7:73:f1:91: 97:77:28:ac:71:88:7e:4d:4a:ef:28:3c:37:bd:cb: 80:a0:41:ff:3d:e2:a6:80:93:75:75:3f:79:fe:df: 75:a2:80:ee:3e:4c:49:10:a0:ba:60:30:cb:1c:ea: 2a:01:d8:c4:d6:87:ed:d6:f8:ce:39:4b:fa:56:65: 24:1e:15:92:e6:e4:12:ef:13:39:aa:4f:dd:60:1e: 66:51:f0:3e:42:ee:4e:61:35:b5:3e:2f:5a:5f:de: c9:b6:e1:18:83:a4:ec:de:cf:75:17:1f:0b:87:c5: 7a:80:fa:3b:81:d8:5c:ff:f6:17:38:3e:69:9b:f3: c1:54:e9:71:94:a7:fb:e7:59:ae:84:80:fa:76:c8: 2e:eb:2d:03:53:da:d7:51:6b:94:9c:00:67:58:30: 02:6d:ce:00:40:f5:4e:68:54:b6:01:82:06:e9:c9: d8:23:18:bb:e9:3c:ff:4b:b4:11:39:7b:e2:11:d6: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:64:F8:C6:37:24:1C:F4:8F:CE:08:30:A7:D0:AB:50:E8:D4:02:88 X509v3 Authority Key Identifier: keyid:BD:63:E0:DD:CB:5C:D4:1B:34:50:1D:F2:E8:1A:2A:72:CE:E3:6E:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWPg3ctc1Bs0UB3y6Boqcs7jbvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B503/7B885FE4431011EF8948A381C4F9AE02/FF7048A08BB111EF8981B871C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.114.124.0/22 103.81.168.0/22 IPv6: 2400:7ac0::/32 Signature Algorithm: sha256WithRSAEncryption 45:a5:07:43:96:53:2e:14:57:fd:7c:5a:34:76:99:82:72:b4: 7a:77:ad:e7:b1:b9:43:b1:db:51:69:88:2d:9f:89:d9:b0:0c: 28:83:e1:2b:f4:d9:ef:38:5d:39:47:4a:8f:6a:11:fa:04:56: 19:71:aa:a4:a7:bf:ea:d9:df:0c:f1:a1:1a:35:b9:8d:7f:01: bf:e2:20:e6:6c:da:1b:81:de:9c:e7:1b:74:94:51:de:c4:ae: 1b:dc:16:be:66:d3:6c:a2:a1:f1:df:9e:b4:d7:28:0a:b3:58: 4b:e8:e7:b6:c0:14:89:f1:e6:4b:44:65:79:ae:65:a4:4d:e6: d3:8d:1f:10:07:9f:f1:46:80:68:78:89:da:b4:a1:d9:d2:0f: a6:e2:da:b0:14:08:c3:00:57:91:88:a1:d1:26:a1:26:6a:42: a9:5c:f2:25:f4:5f:58:26:87:12:6b:aa:84:c9:c5:f7:3e:48: d6:32:ae:a2:3a:5e:89:86:a6:52:58:0b:5c:28:87:67:7e:dc: 10:38:2d:85:38:f4:60:b1:26:60:48:74:bd:62:d1:82:3e:60: ce:32:f0:90:84:7f:64:ba:ff:f1:15:f0:a0:5a:75:92:a9:92: 39:b9:77:25:0d:ad:04:4c:ba:0d:c8:5d:86:62:81:4a:4b:f1: 78:df:d6:a8 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MDMxMTAvBgNVBAUTKEJENjNFMEREQ0I1Q0Q0MUIzNDUwMURGMkU4MUEyQTcy Q0VFMzZFRjIwHhcNMjYwMjI1MDQyNDM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWRlZS05OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOHjmwGRmUoEA7ZVgOD/4ehex0BWnHDaAG28ZRGzG7u1s2W6zWoWu/54mFCr QkCK9rYAsI5p6WUWM2SUVVoinpnhTZ+jw9dz8ZGXdyiscYh+TUrvKDw3vcuAoEH/ PeKmgJN1dT95/t91ooDuPkxJEKC6YDDLHOoqAdjE1oft1vjOOUv6VmUkHhWS5uQS 7xM5qk/dYB5mUfA+Qu5OYTW1Pi9aX97JtuEYg6Ts3s91Fx8Lh8V6gPo7gdhc//YX OD5pm/PBVOlxlKf751muhID6dsgu6y0DU9rXUWuUnABnWDACbc4AQPVOaFS2AYIG 6cnYIxi76Tz/S7QROXviEdbOpwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAFk+MY3 JBz0j84IMKfQq1Do1AKIMB8GA1UdIwQYMBaAFL1j4N3LXNQbNFAd8ugaKnLO427y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUwMy83Qjg4NUZFNDQz MTAxMUVGODk0OEEzODFDNEY5QUUwMi92V1BnM2N0YzFCczBVQjN5NkJvcWNzN2pi dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXUGczY3RjMUJzMFVCM3k2Qm9xY3M3amJ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0I1MDMvN0I4ODVGRTQ0MzEwMTFFRjg5NDhBMzgxQzRGOUFFMDIvRkY3MDQ4QTA4 QkIxMTFFRjg5ODFCODcxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCLXJ8AwQCZ1GoMA0EAgACMAcDBQAkAHrAMA0GCSqGSIb3DQEBCwUA A4IBAQBFpQdDllMuFFf9fFo0dpmCcrR6d63nsblDsdtRaYgtn4nZsAwog+Er9Nnv OF05R0qPahH6BFYZcaqkp7/q2d8M8aEaNbmNfwG/4iDmbNobgd6c5xt0lFHexK4b 3Ba+ZtNsoqHx35601ygKs1hL6Oe2wBSJ8eZLRGV5rmWkTebTjR8QB5/xRoBoeIna tKHZ0g+m4tqwFAjDAFeRiKHRJqEmakKpXPIl9F9YJocSa6qEycX3PkjWMq6iOl6J hqZSWAtcKIdnftwQOC2FOPRgsSZgSHS9YtGCPmDOMvCQhH9kuv/xFfCgWnWSqZI5 uXclDa0ETLoNyF2GYoFKS/F439ao -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:13 2026 by rpki-client