$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/A6B5F55C23F911E79BE44454C4F9AE02.roa File: A6B5F55C23F911E79BE44454C4F9AE02.roa (raw, json) Hash identifier: qUCWf64va8/SIKb1VyUq9JVmXL+RbONXzM6xKgMQkAQ= Subject key identifier: 83:8E:70:D3:27:ED:81:E2:19:64:53:EF:DB:B3:F9:79:6B:F2:7A:26 Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Certificate serial: 1B90 Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/A6B5F55C23F911E79BE44454C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:55:05 +0000 ROA not before: Tue 06 Jan 2026 16:13:19 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38826 IP address blocks: 103.243.84.0/22 maxlen: 22 103.243.84.0/24 maxlen: 24 103.243.85.0/24 maxlen: 24 103.243.86.0/24 maxlen: 24 103.243.87.0/24 maxlen: 24 119.15.96.0/20 maxlen: 20 119.15.96.0/24 maxlen: 24 119.15.97.0/24 maxlen: 24 119.15.98.0/23 maxlen: 24 119.15.100.0/24 maxlen: 24 119.15.101.0/24 maxlen: 24 119.15.102.0/24 maxlen: 24 119.15.103.0/24 maxlen: 24 119.15.104.0/24 maxlen: 24 119.15.105.0/24 maxlen: 24 119.15.106.0/24 maxlen: 24 119.15.107.0/24 maxlen: 24 119.15.108.0/24 maxlen: 24 119.15.109.0/24 maxlen: 24 119.15.110.0/24 maxlen: 24 119.15.111.0/24 maxlen: 24 175.106.4.0/22 maxlen: 22 175.106.4.0/24 maxlen: 24 175.106.5.0/24 maxlen: 24 175.106.6.0/24 maxlen: 24 175.106.7.0/24 maxlen: 24 2400:5000::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7056 (0x1b90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726 Validity Not Before: Jan 6 16:13:19 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46159-4167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:8c:60:d4:45:45:cc:04:21:64:93:eb:3f: 57:e5:15:87:18:95:ff:b3:88:85:fe:f8:b0:93:ad: 59:aa:02:9e:06:da:67:14:75:7b:06:29:52:d2:ef: 48:35:9f:3d:bb:98:2f:a0:70:cc:76:eb:de:6d:63: 92:9c:52:64:12:45:ea:3b:2a:ba:87:d3:71:95:f6: 8e:01:c5:54:21:c3:c7:6e:d5:fb:fb:7c:14:95:9d: 4a:20:2e:14:16:87:ad:27:aa:b3:de:43:38:89:6d: b9:98:c1:3c:98:ca:50:fc:84:e9:36:3d:64:82:b5: 13:2d:d5:d9:2e:b0:16:67:11:72:6d:08:83:a8:d5: d1:7e:5c:8f:0b:75:f7:bf:79:be:28:49:b9:cd:03: f8:0c:36:2e:7d:5f:c8:c7:1d:6a:68:72:01:02:db: 16:e0:83:c5:c4:c4:c1:af:9d:eb:47:86:7b:d3:2c: 62:66:f7:27:c7:32:83:d6:e1:57:eb:32:aa:45:6e: 50:2d:f2:0b:8a:b5:1c:03:6b:4f:66:7c:48:d9:24: 3a:35:12:70:07:3f:6c:c3:b9:62:bc:98:42:ea:5a: a0:55:ab:f2:92:66:25:e5:f1:0e:be:3a:6c:48:17: 7f:53:25:bb:00:9d:7f:07:65:0b:4b:9c:b8:45:8d: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8E:70:D3:27:ED:81:E2:19:64:53:EF:DB:B3:F9:79:6B:F2:7A:26 X509v3 Authority Key Identifier: keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/A6B5F55C23F911E79BE44454C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.243.84.0/22 119.15.96.0/20 175.106.4.0/22 IPv6: 2400:5000::/32 Signature Algorithm: sha256WithRSAEncryption b4:f8:9d:6b:e7:91:05:a0:d0:53:12:28:1a:e6:b7:0c:19:dd: f5:a5:ca:4f:85:32:b3:d1:54:b3:52:6b:34:c3:de:62:92:58: f7:18:e4:c3:19:ff:f4:f1:42:00:77:65:54:54:eb:c9:b9:c0: e1:df:bb:fa:0d:4f:c4:6c:56:66:e5:5f:34:8f:aa:62:5e:d6: b9:63:ca:88:cd:16:c6:5a:59:46:f5:de:df:4a:72:06:99:0c: 22:bf:0c:d3:9b:46:4d:6e:de:c6:8f:d2:de:8d:62:33:94:e5: 3b:fe:4b:7c:81:ab:53:0a:b5:fc:45:84:b0:88:be:6e:75:62: 15:0d:50:25:8e:98:21:e7:98:00:1d:d0:1a:00:2c:d9:52:78: 28:c3:86:7f:02:be:93:2b:c0:67:5f:ad:c7:9a:06:95:f6:45: 01:e5:f5:39:25:28:f7:46:b3:c0:40:35:fd:4d:8d:06:37:02: 47:aa:d7:af:15:b2:66:aa:16:7e:c4:de:00:1a:4a:d6:41:46: f8:cd:00:35:a4:29:bf:5f:61:2d:f0:42:4a:57:36:49:a8:58: b3:9b:0b:84:9a:0e:d6:48:8f:5e:00:be:f6:8c:ac:e8:27:21: c4:1b:fc:9d:34:01:45:1b:ce:5a:11:e7:84:19:69:fb:d7:0b: 5e:bb:b1:a9 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICG5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQzQzIxMTAvBgNVBAUTKEU3MDYxREIyMjI4MzhERTY4QTkzQ0UyMUVGMjkxQjA1 NTQyRDg3MjYwHhcNMjYwMTA2MTYxMzE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE1OS00MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sOMYNRFRcwEIWST6z9X5RWHGJX/s4iF/viwk61ZqgKeBtpnFHV7BilS0u9I NZ89u5gvoHDMduvebWOSnFJkEkXqOyq6h9NxlfaOAcVUIcPHbtX7+3wUlZ1KIC4U FoetJ6qz3kM4iW25mME8mMpQ/ITpNj1kgrUTLdXZLrAWZxFybQiDqNXRflyPC3X3 v3m+KEm5zQP4DDYufV/Ixx1qaHIBAtsW4IPFxMTBr53rR4Z70yxiZvcnxzKD1uFX 6zKqRW5QLfILirUcA2tPZnxI2SQ6NRJwBz9sw7livJhC6lqgVavykmYl5fEOvjps SBd/UyW7AJ1/B2ULS5y4RY2vywIDAQABo4ICezCCAncwHQYDVR0OBBYEFIOOcNMn 7YHiGWRT79uz+Xlr8nomMB8GA1UdIwQYMBaAFOcGHbIig43mipPOIe8pGwVULYcm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNDMi83MkQ3Q0ZENjIz RjgxMUU3OTU4OUQ3NTJDNEY5QUUwMi81d1lkc2lLRGplYUtrODRoN3lrYkJWUXRo eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV3WWRzaUtEamVhS2s4NGg3eWtiQlZRdGh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQzQzIvNzJEN0NGRDYyM0Y4MTFFNzk1ODlENzUyQzRGOUFFMDIvQTZCNUY1NUMy M0Y5MTFFNzlCRTQ0NDU0QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ/NUAwQEdw9gAwQCr2oEMA0EAgACMAcDBQAkAFAAMA0GCSqGSIb3 DQEBCwUAA4IBAQC0+J1r55EFoNBTEiga5rcMGd31pcpPhTKz0VSzUms0w95iklj3 GOTDGf/08UIAd2VUVOvJucDh37v6DU/EbFZm5V80j6piXta5Y8qIzRbGWllG9d7f SnIGmQwivwzTm0ZNbt7Gj9LejWIzlOU7/kt8gatTCrX8RYSwiL5udWIVDVAljpgh 55gAHdAaACzZUngow4Z/Ar6TK8BnX63HmgaV9kUB5fU5JSj3RrPAQDX9TY0GNwJH qtevFbJmqhZ+xN4AGkrWQUb4zQA1pCm/X2Et8EJKVzZJqFizmwuEmg7WSI9eAL72 jKzoJyHEG/ydNAFFG85aEeeEGWn71wteu7Gp -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:22 2026 by rpki-client