$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa File: D75EF2ACFB6D11EC8F56D760C4F9AE02.roa (raw, json) Hash identifier: ZmAyU9kRA0slDQaJ0VTa+g0MzBvfdT0VhVsvUeReZ3c= Subject key identifier: 4D:AE:71:29:12:27:24:63:E8:22:77:CF:CE:AA:F1:BF:3D:FC:A9:AE Certificate issuer: /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Certificate serial: 07CD Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:54:15 +0000 ROA not before: Fri 14 Nov 2025 20:41:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 59315 IP address blocks: 103.243.76.0/22 maxlen: 22 103.243.76.0/24 maxlen: 24 103.243.77.0/24 maxlen: 24 103.243.78.0/24 maxlen: 24 103.243.79.0/24 maxlen: 24 116.206.46.0/23 maxlen: 23 116.206.46.0/24 maxlen: 24 116.206.47.0/24 maxlen: 24 2400:4c40::/32 maxlen: 32 2400:4c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E Validity Not Before: Nov 14 20:41:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45317-0eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:2c:f3:01:1c:e9:76:9e:da:61:d4:89:3a: ab:4c:5e:43:26:35:18:c5:68:fa:9d:80:a5:76:23: e9:07:f7:2a:fd:28:4f:f2:5f:97:2c:f2:29:35:17: 62:f2:30:8d:b3:53:e4:44:dd:10:a9:b2:a8:b2:7d: 88:1c:c5:38:37:60:1e:dc:47:15:31:39:18:28:8c: 9a:07:37:37:2b:81:ca:99:14:fc:c7:0c:34:c6:e2: 8a:aa:7f:0e:ee:b9:1d:03:4f:f9:15:d4:ee:90:df: f5:3d:bb:5d:34:7d:e7:36:42:1e:2f:80:3f:5d:f3: 6d:dc:b3:6c:a4:cb:41:ea:11:4d:7d:35:67:1e:90: 39:90:21:0d:46:92:99:a8:5b:ba:1f:97:f5:40:1b: 66:65:de:6f:75:7a:72:f5:dc:36:90:72:4d:cc:c4: a4:fe:e1:f1:85:a9:59:90:ae:9e:f2:b8:16:60:53: fa:02:1c:fe:a9:fc:48:bd:6a:f8:1a:22:d0:10:07: 63:24:3f:36:b9:5e:e7:a3:91:7c:21:c4:09:81:19: e0:e8:28:66:a6:df:35:07:0c:2c:de:85:0c:b6:38: e5:d2:58:a0:ce:af:d4:82:88:d2:7f:f9:50:23:d1: f9:d8:98:05:99:a3:18:36:cb:7f:fd:74:7e:cc:fb: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AE:71:29:12:27:24:63:E8:22:77:CF:CE:AA:F1:BF:3D:FC:A9:AE X509v3 Authority Key Identifier: keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/D75EF2ACFB6D11EC8F56D760C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.243.76.0/22 116.206.46.0/23 IPv6: 2400:4c40::/32 Signature Algorithm: sha256WithRSAEncryption 87:a4:d8:b8:29:0c:79:18:c0:45:e4:1e:ce:c6:18:10:82:1c: 4e:8a:30:b7:4d:40:46:31:98:72:de:3f:61:0a:d9:24:6b:22: b1:86:6c:f9:a9:67:29:5e:84:8a:df:0a:1a:8f:85:47:da:69: e4:6f:60:7c:f8:c0:03:15:cd:a5:5d:dd:bf:b1:04:20:17:15: ea:4d:45:c3:a2:1c:5e:01:aa:7f:4c:bd:ae:61:5c:c4:95:63: d3:3b:b9:1b:c1:9b:fa:fd:f1:72:12:26:bd:fb:64:6e:ba:71: cf:f6:1f:4a:eb:0d:63:63:35:de:d9:cb:c8:e1:ce:47:53:d1: 6a:3e:ca:b6:a3:18:8f:01:7b:80:a2:e6:30:3c:b8:b9:b9:63: 21:af:53:bc:c9:45:b2:db:fc:0a:d3:d5:b1:fd:62:25:08:b4: d5:13:49:35:09:60:2b:40:bf:ad:29:e9:b7:42:b3:9f:53:24: 02:54:9f:ab:19:2e:58:dc:fc:83:13:6b:60:1a:6b:50:98:c0: 02:77:6e:81:1d:7d:55:fc:3c:2f:10:98:53:2a:63:a4:88:4f: 63:9d:2d:93:26:3f:06:97:37:33:b9:4a:3c:a9:1c:22:cf:46: 9a:15:22:9d:a5:7b:2d:4a:24:7a:42:43:02:e1:0f:19:ea:08: ef:15:fa:49 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3 M0Q1QUFGM0UwHhcNMjUxMTE0MjA0MTMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTMxNy0wZWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ8s8wEc6Xae2mHUiTqrTF5DJjUYxWj6nYCldiPpB/cq/ShP8l+XLPIpNRdi 8jCNs1PkRN0QqbKosn2IHMU4N2Ae3EcVMTkYKIyaBzc3K4HKmRT8xww0xuKKqn8O 7rkdA0/5FdTukN/1PbtdNH3nNkIeL4A/XfNt3LNspMtB6hFNfTVnHpA5kCENRpKZ qFu6H5f1QBtmZd5vdXpy9dw2kHJNzMSk/uHxhalZkK6e8rgWYFP6Ahz+qfxIvWr4 GiLQEAdjJD82uV7no5F8IcQJgRng6Chmpt81Bwws3oUMtjjl0ligzq/UgojSf/lQ I9H52JgFmaMYNst//XR+zPtooQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFE2ucSkS JyRj6CJ3z86q8b89/KmuMB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MyM0MvMDkwNzQ0QzIzQTNGMTFFQkI2M0I3NTUxQzRGOUFFMDIvRDc1RUYyQUNG QjZEMTFFQzhGNTZENzYwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ/NMAwQBdM4uMA0EAgACMAcDBQAkAExAMA0GCSqGSIb3DQEBCwUA A4IBAQCHpNi4KQx5GMBF5B7OxhgQghxOijC3TUBGMZhy3j9hCtkkayKxhmz5qWcp XoSK3woaj4VH2mnkb2B8+MADFc2lXd2/sQQgFxXqTUXDohxeAap/TL2uYVzElWPT O7kbwZv6/fFyEia9+2RuunHP9h9K6w1jYzXe2cvI4c5HU9FqPsq2oxiPAXuAouYw PLi5uWMhr1O8yUWy2/wK09Wx/WIlCLTVE0k1CWArQL+tKem3QrOfUyQCVJ+rGS5Y 3PyDE2tgGmtQmMACd26BHX1V/DwvEJhTKmOkiE9jnS2TJj8GlzczuUo8qRwiz0aa FSKdpXstSiR6QkMC4Q8Z6gjvFfpJ -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:18 2026 by rpki-client