$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/9FA735ECEAF811ED9E2D1958C4F9AE02.roa File: 9FA735ECEAF811ED9E2D1958C4F9AE02.roa (raw, json) Hash identifier: gtcSmglfyYET8vx9KgH4eUS7gxVQjUPaqIq5ZBBWWaA= Subject key identifier: AF:8D:DF:AA:52:12:06:92:3B:3C:C3:64:A7:6E:06:87:21:A1:E4:8A Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 15C1 Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/9FA735ECEAF811ED9E2D1958C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:15:24 +0000 ROA not before: Thu 24 Apr 2025 17:15:20 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140867 IP address blocks: 103.100.141.0/24 maxlen: 24 103.100.142.0/23 maxlen: 24 103.113.45.0/24 maxlen: 24 103.113.46.0/23 maxlen: 24 2402:b740:8000::/33 maxlen: 33 2402:b740:8001::/48 maxlen: 48 2402:b740:8f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5569 (0x15c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Apr 24 17:15:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42ddc-e2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:79:fd:c2:35:db:b9:14:83:06:d4:02:5b: 32:04:4b:64:22:10:8a:45:91:be:66:e7:98:83:a2: 10:d5:8e:bd:ff:1c:7f:7c:94:35:97:63:c8:11:c1: b5:63:4d:5c:35:f4:41:41:95:7f:8b:aa:25:7a:34: 06:60:f2:54:3b:42:b9:da:7d:7a:dc:a9:58:fa:73: 19:1a:c9:8e:ce:80:6e:b4:6b:97:6c:a4:6f:ba:0c: 23:b2:ae:ee:7a:9e:d2:90:fb:ce:5f:38:4e:ad:7f: 30:d9:6c:fe:72:c5:6f:94:f7:10:e6:c2:8a:33:9e: 8c:30:ea:1d:9e:dc:49:ce:30:24:95:c1:1f:48:73: 2c:21:b5:99:ac:a5:7f:c2:0f:e1:f9:98:0a:cd:69: 5e:1f:3d:33:98:7f:fa:cb:f8:a6:89:c2:42:37:66: 5e:e5:92:9c:a3:6c:e7:2e:f1:16:a4:0d:c3:dc:95: cc:8b:6a:da:5e:32:dc:3a:46:95:bb:42:ae:5d:f1: 3e:6f:41:ef:41:f0:1b:5b:28:a0:50:94:a4:09:40: 15:47:40:64:ec:3d:b4:2e:57:fd:13:f7:e3:4c:76: 64:14:2b:08:ef:d4:3f:96:3c:45:36:20:83:5a:14: d7:1c:39:6c:91:0f:bb:4c:a7:3a:73:b0:1e:02:0a: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8D:DF:AA:52:12:06:92:3B:3C:C3:64:A7:6E:06:87:21:A1:E4:8A X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/9FA735ECEAF811ED9E2D1958C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.100.141.0-103.100.143.255 103.113.45.0-103.113.47.255 IPv6: 2402:b740:8000::/33 Signature Algorithm: sha256WithRSAEncryption 5a:95:d7:46:fe:d7:a1:7b:5d:07:c5:dd:15:4f:49:23:3d:42: 68:4d:52:a4:00:c5:12:9a:37:76:07:e4:2c:d5:73:70:1a:fa: 78:bd:6a:f7:53:a7:46:14:f1:ec:78:ec:ca:cc:73:1f:f2:be: e7:77:ba:6d:16:0f:65:52:57:4a:8d:84:ab:fe:2e:f3:20:79: ee:4b:63:0b:fc:5b:14:8d:59:4e:24:f1:a9:47:1f:92:a4:99: e6:27:c0:80:d9:14:07:82:16:34:ce:25:a7:61:b2:9b:cb:e2: f0:24:23:ae:d1:f0:a0:56:44:a7:d6:04:b1:c5:b9:e7:19:74: b3:35:2a:7d:55:19:bc:4d:b7:d5:83:b4:48:f2:e0:22:8a:1a: 6c:03:28:db:0f:cd:56:a9:0b:11:dc:ee:07:01:0b:3a:f4:22: 18:78:eb:ee:76:43:29:4c:2d:99:a0:aa:0a:17:d0:a7:27:9d: 0d:e8:7a:97:4c:73:6a:48:fd:02:40:98:12:cf:59:ee:72:9f: f6:55:99:df:fa:bb:a8:9c:f6:16:34:df:8d:e2:c0:57:2f:aa: 7f:a7:81:7a:91:47:a0:2b:f7:2b:9e:89:5e:bd:20:ee:3e:a6: a5:ee:d4:ac:fe:46:55:e5:0c:85:83:0e:45:82:a8:c4:68:4a: cf:d8:ed:53 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICFcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNDI0MTcxNTIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmRkYy1lMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHB5/cI127kUgwbUAlsyBEtkIhCKRZG+ZueYg6IQ1Y69/xx/fJQ1l2PIEcG1 Y01cNfRBQZV/i6olejQGYPJUO0K52n163KlY+nMZGsmOzoButGuXbKRvugwjsq7u ep7SkPvOXzhOrX8w2Wz+csVvlPcQ5sKKM56MMOodntxJzjAklcEfSHMsIbWZrKV/ wg/h+ZgKzWleHz0zmH/6y/imicJCN2Ze5ZKco2znLvEWpA3D3JXMi2raXjLcOkaV u0KuXfE+b0HvQfAbWyigUJSkCUAVR0Bk7D20Llf9E/fjTHZkFCsI79Q/ljxFNiCD WhTXHDlskQ+7TKc6c7AeAgoygwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFK+N36pS EgaSOzzDZKduBochoeSKMB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNGNDIvN0E2QUJGQ0M0Q0M2MTFFOEJFRjAzRDc1QzRGOUFFMDIvOUZBNzM1RUNF QUY4MTFFRDlFMkQxOTU4QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAi BAIAATAcMAwDBABnZI0DBARnZIAwDAMEAGdxLQMEBGdxIDAOBAIAAjAIAwYHJAK3 QIAwDQYJKoZIhvcNAQELBQADggEBAFqV10b+16F7XQfF3RVPSSM9QmhNUqQAxRKa N3YH5CzVc3Aa+ni9avdTp0YU8ex47MrMcx/yvud3um0WD2VSV0qNhKv+LvMgee5L Ywv8WxSNWU4k8alHH5KkmeYnwIDZFAeCFjTOJadhspvL4vAkI67R8KBWRKfWBLHF uecZdLM1Kn1VGbxNt9WDtEjy4CKKGmwDKNsPzVapCxHc7gcBCzr0Ihh46+52QylM LZmgqgoX0KcnnQ3oepdMc2pI/QJAmBLPWe5yn/ZVmd/6u6ic9hY0343iwFcvqn+n gXqRR6Ar9yueiV69IO4+pqXu1Kz+RlXlDIWDDkWCqMRoSs/Y7VM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:33 2026 by rpki-client