$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa File: FF4F13D4448711ECA80CFC34C4F9AE02.roa (raw, json) Hash identifier: lDq/RoR1gtpy/cAfk0IFee9KhUVF1t6WS4LHb4U+atA= Subject key identifier: 48:6C:F3:77:EB:C0:FD:C0:82:11:BB:ED:EA:D9:31:08:C8:06:A2:11 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0CF1 Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:29:05 +0000 ROA not before: Wed 19 Nov 2025 10:13:01 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137810 IP address blocks: 103.114.98.0/24 maxlen: 24 103.114.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Validity Not Before: Nov 19 10:13:01 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46950-24c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b3:bd:1f:aa:e8:e4:d8:26:a4:cf:7a:c4:72: 01:6d:2d:d8:d0:6d:c0:d7:48:44:b4:62:0c:78:40: 4e:bd:f5:e1:f9:6f:63:b7:f9:6a:7f:a9:22:52:b4: 1c:05:30:8c:32:65:0c:9a:5f:11:38:0a:ce:ec:48: 95:9f:2a:cd:b4:81:2b:19:d3:28:eb:da:28:87:a7: 49:59:58:0f:75:98:57:26:06:6b:0a:33:f7:de:1e: fa:80:6e:d2:47:66:43:82:dc:26:86:39:77:08:e2: 0c:64:13:81:88:b4:af:fa:a7:00:e7:52:57:dd:7c: d6:37:e8:90:08:7b:cf:4a:99:d3:6f:f4:5b:2c:13: 70:a5:35:05:19:f9:97:d4:0e:fd:65:5a:21:63:d9: cc:32:c2:58:cc:03:e0:47:dc:82:fa:f3:b8:70:08: 39:aa:b5:0b:21:b8:7b:67:98:4a:b9:f1:9c:ae:d4: 48:a5:c2:3e:15:e4:74:e3:c5:1d:2a:b9:1e:66:0b: 26:4c:66:7e:26:04:a7:1a:72:00:87:6d:8f:2c:80: 7c:79:60:64:77:9b:73:45:a8:69:ef:a3:9e:75:05: 6d:8f:20:f7:52:ac:02:b3:8a:39:40:56:3d:5a:78: f9:12:52:d4:a2:85:f6:98:b1:ff:3b:49:12:73:b4: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6C:F3:77:EB:C0:FD:C0:82:11:BB:ED:EA:D9:31:08:C8:06:A2:11 X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.114.98.0/23 Signature Algorithm: sha256WithRSAEncryption 72:0b:17:8c:83:99:18:50:47:4c:0f:d7:9f:59:6f:9a:5f:c2: 13:94:ee:d6:49:d6:a1:c3:c1:10:ec:f9:a2:03:f8:5f:15:84: eb:09:c2:27:2b:ae:90:ee:81:67:d5:09:30:9c:ae:16:83:3c: aa:dc:7f:8d:86:80:be:8b:4b:be:c2:e9:c9:44:8f:58:91:54: 21:66:92:d0:47:d3:c7:89:51:c7:1c:98:19:20:96:81:55:d7: 50:0e:c7:f4:35:7e:fe:72:4c:25:94:57:fe:fc:af:9a:9f:67: 73:e0:21:18:e0:7b:63:07:00:b7:14:fb:8e:40:c0:97:9b:9a: ff:65:4e:ab:68:80:36:59:45:f5:18:e5:d8:f8:05:af:66:c0: 54:bf:0d:ed:93:c3:73:c9:e4:b8:3f:a7:b3:2a:c3:82:b2:fb: 40:ad:19:e2:63:0d:81:79:dd:4e:41:2b:a3:2e:31:13:0c:cd: b9:f9:52:d8:26:db:89:3f:cc:18:8f:0e:1f:3c:33:97:17:2d: 7e:81:82:e2:00:44:df:19:ca:51:09:0b:3a:db:63:ca:ca:15: c0:a2:67:c3:32:b5:47:5c:57:ee:1b:40:a8:67:f5:fe:65:06: 09:bd:f9:10:10:0a:45:73:58:d9:64:74:6f:4a:28:e8:ec:7f: 82:ef:ab:9f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjUxMTE5MTAxMzAxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njk1MC0yNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrO9H6ro5NgmpM96xHIBbS3Y0G3A10hEtGIMeEBOvfXh+W9jt/lqf6kiUrQc BTCMMmUMml8ROArO7EiVnyrNtIErGdMo69ooh6dJWVgPdZhXJgZrCjP33h76gG7S R2ZDgtwmhjl3COIMZBOBiLSv+qcA51JX3XzWN+iQCHvPSpnTb/RbLBNwpTUFGfmX 1A79ZVohY9nMMsJYzAPgR9yC+vO4cAg5qrULIbh7Z5hKufGcrtRIpcI+FeR048Ud KrkeZgsmTGZ+JgSnGnIAh22PLIB8eWBkd5tzRahp76OedQVtjyD3UqwCs4o5QFY9 Wnj5ElLUooX2mLH/O0kSc7S1CQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEhs83fr wP3AghG77erZMQjIBqIRMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JCRjEvMjQ1REM1Q0EwQUY3MTFFQUE4NUE1RDFBQzRGOUFFMDIvRkY0RjEzRDQ0 NDg3MTFFQ0E4MENGQzM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3JiMA0GCSqGSIb3DQEBCwUAA4IBAQByCxeMg5kYUEdMD9efWW+a X8ITlO7WSdahw8EQ7PmiA/hfFYTrCcInK66Q7oFn1QkwnK4Wgzyq3H+NhoC+i0u+ wunJRI9YkVQhZpLQR9PHiVHHHJgZIJaBVddQDsf0NX7+ckwllFf+/K+an2dz4CEY 4HtjBwC3FPuOQMCXm5r/ZU6raIA2WUX1GOXY+AWvZsBUvw3tk8NzyeS4P6ezKsOC svtArRniYw2Bed1OQSujLjETDM25+VLYJtuJP8wYjw4fPDOXFy1+gYLiAETfGcpR CQs622PKyhXAomfDMrVHXFfuG0CoZ/X+ZQYJvfkQEApFc1jZZHRvSijo7H+C76uf -----END CERTIFICATE-----Generated at Mon Mar 2 19:26:13 2026 by rpki-client