$ rpki-client -vvf rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa File: CC70CB68724B11EDA156B97BC4F9AE02.roa (raw, json) Hash identifier: 7Tcb2j1Qauvr4g2MsFMCbnmcw3FXb0IUg5qfxOtAQcE= Subject key identifier: D8:D7:CC:37:EC:7A:FF:1F:FC:D2:4B:D5:54:F4:BB:E8:86:20:0F:CC Certificate issuer: /CN=A919CFF5/serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Certificate serial: 026A Authority key identifier: 25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:05:31 +0000 ROA not before: Thu 11 Dec 2025 16:22:27 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150347 IP address blocks: 103.68.139.0/24 maxlen: 24 2400:b4a0::/32 maxlen: 32 2400:b4a0:40::/48 maxlen: 48 2400:b4a0:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 618 (0x26a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CFF5, serialNumber=25608B1C3FCCD3DCCEBF994B9325F3A2EFE7CCEF Validity Not Before: Dec 11 16:22:27 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a455bb-b4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:2b:55:2c:96:28:72:b5:e9:72:a5:26:72: 78:24:20:ec:33:64:6d:c6:3b:98:61:53:7b:ce:3b: f2:6c:bc:f0:67:d4:a9:6f:4c:0a:97:83:35:c8:71: a3:a0:1d:fa:96:ed:c4:91:4c:45:15:ea:18:5c:b8: c3:05:85:6b:a9:39:ad:76:0d:6d:49:1e:bf:35:f5: 3c:8a:70:a6:14:c2:64:23:93:7a:7d:3c:f4:95:45: 5c:98:e4:11:0b:ff:7b:2b:97:de:0a:ca:18:6d:d1: 34:5b:22:ae:1e:d6:ff:a5:c7:d3:04:39:4f:22:b2: d1:2d:79:8b:7e:73:17:49:a0:1e:85:37:c2:97:a5: 59:ec:f4:99:70:84:27:30:5b:b7:9d:dd:8c:77:e5: ff:62:32:86:83:63:6a:3b:6f:48:57:4d:42:f0:c8: 34:ca:13:3e:00:40:e4:63:db:b6:a3:03:ff:cd:d4: 8c:b0:39:a9:69:e0:a5:8b:b1:8a:60:ac:09:1b:9d: df:8a:9d:1d:65:96:e5:b4:16:c4:8a:a4:bf:2b:db: ba:17:67:29:57:1a:43:af:fe:9a:99:aa:12:8e:39: 7a:ec:c2:06:e8:a3:4a:7e:6c:55:f8:0d:5b:d8:42: f4:80:d2:86:b4:8d:ef:da:08:4b:b1:9c:48:c4:a3: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:CC:37:EC:7A:FF:1F:FC:D2:4B:D5:54:F4:BB:E8:86:20:0F:CC X509v3 Authority Key Identifier: keyid:25:60:8B:1C:3F:CC:D3:DC:CE:BF:99:4B:93:25:F3:A2:EF:E7:CC:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/JWCLHD_M09zOv5lLkyXzou_nzO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWCLHD_M09zOv5lLkyXzou_nzO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CFF5/3FE5CA8E724811ED9BC2BA76C4F9AE02/CC70CB68724B11EDA156B97BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.139.0/24 IPv6: 2400:b4a0::/32 Signature Algorithm: sha256WithRSAEncryption 79:9e:f9:c3:90:e8:d4:fc:0a:18:b7:17:b0:f8:b6:d5:68:02: fb:51:5b:1e:e6:f6:ba:83:82:67:53:77:d0:f0:70:1f:e9:5d: f8:8d:f6:6d:cc:be:40:26:52:2c:d5:e4:15:71:c3:a3:fc:37: 83:3c:cc:dd:b2:f5:28:4f:73:d1:25:93:2c:ba:d6:1d:ec:d1: 04:16:88:61:4e:19:bb:de:54:85:35:ef:31:98:01:67:7d:d5: 66:06:cf:8d:b8:43:b8:a3:1b:9e:4e:be:17:ad:d6:20:8b:ff: 16:0a:ae:2e:04:db:91:2d:17:5f:04:cf:2c:18:bc:d2:86:aa: fc:36:63:f3:f4:75:c4:bd:45:17:66:ce:8f:2d:1b:15:3b:81: ca:b6:9e:2c:9c:eb:30:b6:1f:d9:67:f9:2c:b1:3c:99:6e:42: b8:12:5b:03:03:df:b6:57:76:9f:7d:7c:06:09:a8:27:5a:51: ca:5d:3a:3d:fe:f0:50:26:5a:bd:af:ec:3a:e3:f1:ee:37:6a: 98:ff:28:fd:0a:f0:59:10:cc:6a:29:39:7d:e3:82:68:4f:39: 02:80:8b:d6:e6:4f:0c:0d:3e:88:10:7c:bf:fd:b4:e6:aa:65: ae:21:b8:1b:ea:9e:be:cf:5d:30:d1:95:ee:9c:50:35:a6:f6: 25:b1:24:1f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGRjUxMTAvBgNVBAUTKDI1NjA4QjFDM0ZDQ0QzRENDRUJGOTk0QjkzMjVGM0Ey RUZFN0NDRUYwHhcNMjUxMjExMTYyMjI3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTViYi1iNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCcrVSyWKHK16XKlJnJ4JCDsM2RtxjuYYVN7zjvybLzwZ9Spb0wKl4M1yHGj oB36lu3EkUxFFeoYXLjDBYVrqTmtdg1tSR6/NfU8inCmFMJkI5N6fTz0lUVcmOQR C/97K5feCsoYbdE0WyKuHtb/pcfTBDlPIrLRLXmLfnMXSaAehTfCl6VZ7PSZcIQn MFu3nd2Md+X/YjKGg2NqO29IV01C8Mg0yhM+AEDkY9u2owP/zdSMsDmpaeCli7GK YKwJG53fip0dZZbltBbEiqS/K9u6F2cpVxpDr/6amaoSjjl67MIG6KNKfmxV+A1b 2EL0gNKGtI3v2ghLsZxIxKPqpQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNjXzDfs ev8f/NJL1VT0u+iGIA/MMB8GA1UdIwQYMBaAFCVgixw/zNPczr+ZS5Ml86Lv58zv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ZGNS8zRkU1Q0E4RTcy NDgxMUVEOUJDMkJBNzZDNEY5QUUwMi9KV0NMSERfTTA5ek92NWxMa3lYem91X256 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pXQ0xIRF9NMDl6T3Y1bExreVh6b3VfbnpPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNGRjUvM0ZFNUNBOEU3MjQ4MTFFRDlCQzJCQTc2QzRGOUFFMDIvQ0M3MENCNjg3 MjRCMTFFREExNTZCOTdCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ0SLMA0EAgACMAcDBQAkALSgMA0GCSqGSIb3DQEBCwUAA4IBAQB5 nvnDkOjU/AoYtxew+LbVaAL7UVse5va6g4JnU3fQ8HAf6V34jfZtzL5AJlIs1eQV ccOj/DeDPMzdsvUoT3PRJZMsutYd7NEEFohhThm73lSFNe8xmAFnfdVmBs+NuEO4 oxueTr4XrdYgi/8WCq4uBNuRLRdfBM8sGLzShqr8NmPz9HXEvUUXZs6PLRsVO4HK tp4snOswth/ZZ/kssTyZbkK4ElsDA9+2V3affXwGCagnWlHKXTo9/vBQJlq9r+w6 4/HuN2qY/yj9CvBZEMxqKTl944JoTzkCgIvW5k8MDT6IEHy//bTmqmWuIbgb6p6+ z10w0ZXunFA1pvYlsSQf -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:39 2026 by rpki-client