$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa File: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (raw, json) Hash identifier: INoweSYCmqFkq03h0rV7NsRe9oj1XClrZjvkHIOnPOM= Subject key identifier: 12:A9:46:36:78:D0:B9:29:9A:C3:5D:0D:E2:16:06:54:C9:91:BF:4E Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0C50 Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:24:55 +0000 ROA not before: Tue 04 Mar 2025 19:57:25 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136400 IP address blocks: 103.86.124.0/24 maxlen: 24 103.86.125.0/24 maxlen: 24 103.86.126.0/24 maxlen: 24 103.86.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: Mar 4 19:57:25 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a405e7-2b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:38:95:83:b6:df:1d:e2:80:aa:34:15:51: 60:e5:fa:9c:94:36:ae:23:b1:dd:3a:27:9a:fe:b0: 1c:89:78:3c:6a:2d:85:c9:68:52:ae:56:ba:71:51: c0:d6:3e:30:50:6b:09:81:13:89:cd:29:9d:7a:48: 60:e5:c6:dc:80:0b:fe:4e:6f:f1:c2:19:a6:51:f5: 31:58:8b:f1:fb:de:d0:74:df:1a:c2:4e:0a:c7:f1: 02:16:74:9e:ef:23:26:7f:a1:06:33:d9:a5:6a:c3: 8a:ad:8d:56:2a:7a:14:2d:8c:61:1a:c3:a4:f4:2e: b2:06:1c:f9:52:c8:4c:7a:77:90:35:be:f4:03:0f: d8:49:09:a5:91:6b:c1:a7:ad:7a:f6:5e:81:ea:b9: ed:54:d4:b1:aa:f6:36:48:45:44:6c:aa:58:a1:c5: e7:98:bd:55:7d:60:26:69:bc:11:d9:44:10:0f:47: 8e:00:b8:39:09:03:27:e3:19:3e:70:ca:83:0d:ae: 21:65:4d:78:6c:90:c4:40:81:40:7d:97:63:72:32: eb:8f:66:89:9d:58:fa:d5:6f:96:c3:9e:dc:b6:62: 61:53:e1:4f:ec:2c:fb:3f:8a:51:cd:e6:98:b8:fe: ae:54:43:7f:ef:5d:3f:69:eb:da:e9:05:54:04:05: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:46:36:78:D0:B9:29:9A:C3:5D:0D:E2:16:06:54:C9:91:BF:4E X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/A46E4EAC205911EAAB6ECF1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.124.0/22 Signature Algorithm: sha256WithRSAEncryption 22:ee:33:ce:80:c6:7b:ba:3e:26:b0:f3:0a:fc:5e:e3:a0:9e: a4:20:a1:f9:4e:52:67:af:a6:9a:64:c9:7b:7a:50:d5:6d:9d: 61:80:c0:64:fa:90:b9:49:ea:b1:03:65:78:d0:0d:c4:af:2e: d5:22:9f:b5:d6:c1:08:7a:a0:40:af:b1:3c:ba:d2:7c:b4:ea: c4:d2:a9:71:e9:68:17:43:e8:d4:93:d3:fb:e7:fc:1b:a4:ad: 70:61:4b:68:6b:03:7e:6c:02:8f:b2:1e:cf:b5:25:e0:29:ac: 0f:ec:f1:38:d7:8f:dd:d6:74:be:95:47:b4:1d:0b:30:b3:52: b5:8e:ba:ba:2d:af:19:5d:66:6a:af:ad:7b:ca:6c:3f:95:e3: 45:bd:4c:f6:3f:2a:3b:88:4d:8b:b1:ca:7a:6e:b7:a6:dd:a7: 5a:f6:1d:53:9f:d9:54:fc:3d:c3:3f:3d:8f:d1:a6:53:bb:0c: 17:81:05:ac:09:56:9f:69:3a:14:ff:99:1b:ad:5c:83:34:9f: 99:36:41:88:14:b2:90:e0:ff:03:23:94:03:cc:0e:8e:ee:14: cd:9c:48:03:e5:fa:77:c3:b4:ff:e3:ec:2a:7a:75:39:51:f3: ad:4f:6e:2e:4b:cb:b8:d8:4f:dc:8b:33:16:1b:58:1c:72:e3: 32:5a:62:02 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjUwMzA0MTk1NzI1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDVlNy0yYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlo4lYO23x3igKo0FVFg5fqclDauI7HdOiea/rAciXg8ai2FyWhSrla6cVHA 1j4wUGsJgROJzSmdekhg5cbcgAv+Tm/xwhmmUfUxWIvx+97QdN8awk4Kx/ECFnSe 7yMmf6EGM9mlasOKrY1WKnoULYxhGsOk9C6yBhz5UshMeneQNb70Aw/YSQmlkWvB p6169l6B6rntVNSxqvY2SEVEbKpYocXnmL1VfWAmabwR2UQQD0eOALg5CQMn4xk+ cMqDDa4hZU14bJDEQIFAfZdjcjLrj2aJnVj61W+Ww57ctmJhU+FP7Cz7P4pRzeaY uP6uVEN/710/aeva6QVUBAXWlQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBKpRjZ4 0LkpmsNdDeIWBlTJkb9OMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0YyMjQvNkU5QkE0MUEyMDU4MTFFQUI3MTc3MjFCQzRGOUFFMDIvQTQ2RTRFQUMy MDU5MTFFQUFCNkVDRjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1Z8MA0GCSqGSIb3DQEBCwUAA4IBAQAi7jPOgMZ7uj4msPMK/F7j oJ6kIKH5TlJnr6aaZMl7elDVbZ1hgMBk+pC5SeqxA2V40A3Ery7VIp+11sEIeqBA r7E8utJ8tOrE0qlx6WgXQ+jUk9P75/wbpK1wYUtoawN+bAKPsh7PtSXgKawP7PE4 14/d1nS+lUe0HQsws1K1jrq6La8ZXWZqr617ymw/leNFvUz2Pyo7iE2Lscp6brem 3ada9h1Tn9lU/D3DPz2P0aZTuwwXgQWsCVafaToU/5kbrVyDNJ+ZNkGIFLKQ4P8D I5QDzA6O7hTNnEgD5fp3w7T/4+wqenU5UfOtT24uS8u42E/cizMWG1gccuMyWmIC -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:09 2026 by rpki-client