$ rpki-client -vvf rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/F126F04A11A911EBB5A4DD83C4F9AE02.roa File: F126F04A11A911EBB5A4DD83C4F9AE02.roa (raw, json) Hash identifier: Ca1sU4x07vR9ic014MfkvHriHHtFXo0Z6p1sbkhlP4M= Subject key identifier: FE:3B:7B:B2:78:EF:31:4C:38:8B:1B:2D:37:AE:36:6B:B7:3B:6F:BF Certificate issuer: /CN=A917DA4A/serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Certificate serial: 081E Authority key identifier: 08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/F126F04A11A911EBB5A4DD83C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:38:35 +0000 ROA not before: Mon 18 Aug 2025 22:02:51 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131188 IP address blocks: 103.1.12.0/24 maxlen: 24 103.1.13.0/24 maxlen: 24 103.1.14.0/24 maxlen: 24 103.1.15.0/24 maxlen: 24 111.91.236.0/24 maxlen: 24 111.91.237.0/24 maxlen: 24 111.91.238.0/24 maxlen: 24 111.91.239.0/24 maxlen: 24 2403:4900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DA4A, serialNumber=088691F1F78BD9CEFED80D36D650D67767A6BDB0 Validity Not Before: Aug 18 22:02:51 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4091b-4bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:26:44:a1:39:2d:25:64:d6:09:d6:22:42: 11:18:9c:0c:02:ba:9d:ec:a5:92:7a:d0:96:06:f2: 84:a1:5a:81:fd:ae:61:d0:2d:95:42:02:9c:e6:c8: 07:f3:84:cc:15:43:ac:77:da:e1:50:99:05:b3:75: bb:7a:3b:82:b2:d6:be:83:49:fe:54:15:e6:55:5c: e1:f1:1c:cb:28:c0:14:be:93:01:2c:44:96:f4:76: 48:50:4d:6e:96:5d:ac:94:84:12:07:3c:3d:6a:5c: 13:be:86:c6:a6:a4:12:84:9a:4b:df:2b:a3:2a:1f: 41:cc:6b:39:1d:80:ce:46:45:ef:3a:e8:6b:13:38: 73:8c:37:e6:79:e1:eb:9e:87:1d:4b:66:70:6e:98: ae:1c:1d:f7:6a:34:b7:f5:6d:d8:5f:f0:a4:a6:69: c3:bb:3c:b3:cc:4c:9d:a4:2a:4b:82:30:b1:fa:2a: fd:77:e1:59:04:c6:2c:32:12:55:fc:e4:69:fa:46: 1e:e5:66:8f:b4:bc:ff:66:de:36:4f:1a:e8:71:9a: 97:7a:6f:5d:46:b8:10:ce:d3:18:c7:a1:01:85:f2: 51:3c:01:af:d9:30:38:cf:f6:15:8d:16:bd:d5:a8: ab:a5:d5:79:ff:d0:28:c6:28:2b:77:b3:c6:e3:d9: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3B:7B:B2:78:EF:31:4C:38:8B:1B:2D:37:AE:36:6B:B7:3B:6F:BF X509v3 Authority Key Identifier: keyid:08:86:91:F1:F7:8B:D9:CE:FE:D8:0D:36:D6:50:D6:77:67:A6:BD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/CIaR8feL2c7-2A021lDWd2emvbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIaR8feL2c7-2A021lDWd2emvbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DA4A/051DAF5A0DC511EB9C6BBD1CC4F9AE02/F126F04A11A911EBB5A4DD83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.1.12.0/22 111.91.236.0/22 IPv6: 2403:4900:1::/48 Signature Algorithm: sha256WithRSAEncryption 82:ba:d8:e7:be:97:ff:6b:20:3d:1a:bc:0c:b0:7f:8d:76:76: b6:fd:b8:bc:be:3a:82:93:e7:c2:f0:80:28:8a:68:87:80:92: 5b:4c:d8:c0:57:7f:55:d3:54:77:c9:16:f6:33:d7:cc:f6:ef: 78:19:26:22:0e:32:6d:5d:3b:2d:57:b3:7b:94:3b:91:89:38: b8:6e:99:1b:7d:8d:14:b0:b7:ff:4c:95:e6:ab:70:37:65:61: 10:73:3d:96:2e:6f:49:d0:e0:84:ea:6a:10:23:02:02:d4:5e: a7:99:db:0a:cf:a8:eb:a4:e5:c9:33:f2:38:a1:be:43:a9:03: 8c:4a:4a:ec:92:a9:c7:92:9a:cf:19:3b:07:f4:aa:02:24:4e: e1:ea:21:5e:00:71:ce:3c:fd:33:1e:af:1d:99:29:0c:a9:4b: 45:29:73:98:ce:41:ee:7b:9a:60:17:eb:22:3f:4f:56:57:0a: c1:dc:b2:75:ce:fe:e2:db:dd:23:4b:26:f6:26:48:d2:c9:94: 02:cf:92:46:fc:9e:a3:68:a0:83:1a:c4:1b:98:23:81:c9:23: fc:07:93:30:02:b2:92:55:47:9f:e0:8a:ba:fd:e6:d2:2f:4b: a2:81:46:1a:19:0c:42:f4:8d:42:35:59:94:32:28:0f:34:73: 74:8a:98:9d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RBNEExMTAvBgNVBAUTKDA4ODY5MUYxRjc4QkQ5Q0VGRUQ4MEQzNkQ2NTBENjc3 NjdBNkJEQjAwHhcNMjUwODE4MjIwMjUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDkxYi00YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fgmRKE5LSVk1gnWIkIRGJwMArqd7KWSetCWBvKEoVqB/a5h0C2VQgKc5sgH 84TMFUOsd9rhUJkFs3W7ejuCsta+g0n+VBXmVVzh8RzLKMAUvpMBLESW9HZIUE1u ll2slIQSBzw9alwTvobGpqQShJpL3yujKh9BzGs5HYDORkXvOuhrEzhzjDfmeeHr nocdS2ZwbpiuHB33ajS39W3YX/CkpmnDuzyzzEydpCpLgjCx+ir9d+FZBMYsMhJV /ORp+kYe5WaPtLz/Zt42TxrocZqXem9dRrgQztMYx6EBhfJRPAGv2TA4z/YVjRa9 1airpdV5/9Aoxigrd7PG49niXQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFP47e7J4 7zFMOIsbLTeuNmu3O2+/MB8GA1UdIwQYMBaAFAiGkfH3i9nO/tgNNtZQ1ndnpr2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REE0QS8wNTFEQUY1QTBE QzUxMUVCOUM2QkJEMUNDNEY5QUUwMi9DSWFSOGZlTDJjNy0yQTAyMWxEV2QyZW12 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NJYVI4ZmVMMmM3LTJBMDIxbERXZDJlbXZiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RBNEEvMDUxREFGNUEwREM1MTFFQjlDNkJCRDFDQzRGOUFFMDIvRjEyNkYwNEEx MUE5MTFFQkI1QTRERDgzQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQCZwEMAwQCb1vsMA8EAgACMAkDBwAkA0kAAAEwDQYJKoZIhvcNAQEL BQADggEBAIK62Oe+l/9rID0avAywf412drb9uLy+OoKT58LwgCiKaIeAkltM2MBX f1XTVHfJFvYz18z273gZJiIOMm1dOy1Xs3uUO5GJOLhumRt9jRSwt/9MlearcDdl YRBzPZYub0nQ4ITqahAjAgLUXqeZ2wrPqOuk5ckz8jihvkOpA4xKSuySqceSms8Z Owf0qgIkTuHqIV4Acc48/TMerx2ZKQypS0Upc5jOQe57mmAX6yI/T1ZXCsHcsnXO /uLb3SNLJvYmSNLJlALPkkb8nqNooIMaxBuYI4HJI/wHkzACspJVR5/girr95tIv S6KBRhoZDEL0jUI1WZQyKA80c3SKmJ0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:17 2026 by rpki-client