$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa File: F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa (raw, json) Hash identifier: mY3dtD5W8Iju1eIPL4linHM5QD9vvZCX/OXihI1ApCQ= Subject key identifier: 74:12:2C:A3:74:B3:0A:77:AD:05:FA:13:29:D4:7D:CD:81:84:80:3F Certificate issuer: /CN=A91D3F79/serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Certificate serial: 01C1 Authority key identifier: 25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:39:35 +0000 ROA not before: Wed 23 Jul 2025 04:40:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151355 IP address blocks: 103.209.212.0/24 maxlen: 24 103.209.213.0/24 maxlen: 24 2001:df2:7f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F79, serialNumber=25F9DB6007ADF6F57EC4EFF7A62BF4D42DA75EC5 Validity Not Before: Jul 23 04:40:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ed37-e2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:88:72:9b:d7:97:84:41:c2:1a:34:ec:59: 2a:61:79:ac:22:97:da:23:45:0a:16:34:9c:27:c3: 51:24:ea:8a:7e:db:a1:2e:e0:0f:6b:72:40:63:26: 55:5e:8b:57:d5:d5:59:2c:0d:86:9f:3a:37:c0:0c: ac:5a:2e:97:80:b7:3d:f4:f4:86:b4:9b:36:85:0d: f9:fb:57:18:e2:98:59:92:c3:58:b8:6d:cb:f6:b5: 9e:7f:69:cd:b0:fd:f4:01:cc:7a:a2:3f:19:09:29: 39:31:54:cf:96:5d:99:0e:00:eb:38:64:98:6d:8d: ae:b3:48:ad:44:6c:5b:d7:c7:37:f9:f6:0a:fd:af: 63:a5:f1:d0:ff:b4:c0:62:08:a7:9e:f6:08:5b:c3: 42:2a:78:67:47:c8:58:cf:a8:4f:3c:a7:cc:89:3b: b9:d3:c0:c2:38:bb:1a:30:a8:d9:6e:44:da:84:6b: ba:84:85:8d:eb:a6:7f:2b:48:d4:39:dd:0d:64:60: 6d:5f:be:f6:94:79:c1:9b:39:99:c3:71:50:6f:a5: 78:90:b5:d7:9a:e9:63:a0:1f:4a:94:84:14:f4:60: d9:e5:7c:16:72:3f:5e:74:30:35:67:a9:50:c4:51: 00:b6:f6:fe:34:00:2f:19:a2:c5:a4:ce:c5:bd:b0: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:2C:A3:74:B3:0A:77:AD:05:FA:13:29:D4:7D:CD:81:84:80:3F X509v3 Authority Key Identifier: keyid:25:F9:DB:60:07:AD:F6:F5:7E:C4:EF:F7:A6:2B:F4:D4:2D:A7:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/JfnbYAet9vV-xO_3piv01C2nXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JfnbYAet9vV-xO_3piv01C2nXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F79/FA31A2B26F1A11EE8D32E064C4F9AE02/F4CDCE666F1C11EE8CA3F26AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.212.0/23 IPv6: 2001:df2:7f40::/48 Signature Algorithm: sha256WithRSAEncryption a6:c0:65:53:bf:07:18:f0:8e:e7:c9:aa:df:df:ce:ba:74:91: f0:bd:7e:24:cc:bd:67:de:4c:3d:4e:63:89:17:74:15:03:82: f1:3a:30:b9:cc:f1:38:f3:95:16:b6:da:83:3c:b1:ab:1b:00: 68:9a:4a:81:ac:b1:23:20:7c:17:19:70:5f:bf:2c:fe:d2:b1: bb:74:23:5b:3f:ea:40:c5:08:8f:bc:ae:b6:3b:15:94:28:41: af:b0:1b:9c:25:82:dd:a6:70:08:fa:34:71:01:c8:48:a4:ab: 0c:03:0c:94:3f:79:6d:fd:b7:02:b6:2e:41:a0:c9:f4:6d:ef: 1c:ec:6b:57:53:50:94:22:4c:84:df:85:d4:7e:c7:46:75:ee: a9:99:07:de:d9:70:62:bd:83:ac:e5:79:4f:84:cd:b7:71:06: 31:14:f1:1f:a0:d2:ff:46:6d:b8:64:d2:15:6d:6b:8a:ea:26: 49:fb:3c:8f:38:dc:54:35:59:d3:ca:50:4b:3d:02:9c:85:59: 9a:ec:fb:58:da:76:b8:c4:25:4f:d9:74:59:d1:42:65:8c:56: d1:8c:14:53:c2:6b:f4:f3:88:a1:b1:e2:aa:95:63:64:f6:b5: 19:94:88:c1:47:f4:d9:9c:7f:18:53:0d:6b:65:73:c5:16:b3: e1:7c:61:a3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGNzkxMTAvBgNVBAUTKDI1RjlEQjYwMDdBREY2RjU3RUM0RUZGN0E2MkJGNEQ0 MkRBNzVFQzUwHhcNMjUwNzIzMDQ0MDMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWQzNy1lMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bqIcpvXl4RBwho07FkqYXmsIpfaI0UKFjScJ8NRJOqKftuhLuAPa3JAYyZV XotX1dVZLA2Gnzo3wAysWi6XgLc99PSGtJs2hQ35+1cY4phZksNYuG3L9rWef2nN sP30Acx6oj8ZCSk5MVTPll2ZDgDrOGSYbY2us0itRGxb18c3+fYK/a9jpfHQ/7TA YginnvYIW8NCKnhnR8hYz6hPPKfMiTu508DCOLsaMKjZbkTahGu6hIWN66Z/K0jU Od0NZGBtX772lHnBmzmZw3FQb6V4kLXXmuljoB9KlIQU9GDZ5XwWcj9edDA1Z6lQ xFEAtvb+NAAvGaLFpM7FvbB69wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHQSLKN0 swp3rQX6EynUfc2BhIA/MB8GA1UdIwQYMBaAFCX522AHrfb1fsTv96Yr9NQtp17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y3OS9GQTMxQTJCMjZG MUExMUVFOEQzMkUwNjRDNEY5QUUwMi9KZm5iWUFldDl2Vi14T18zcGl2MDFDMm5Y c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pmbmJZQWV0OXZWLXhPXzNwaXYwMUMyblhzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNGNzkvRkEzMUEyQjI2RjFBMTFFRThEMzJFMDY0QzRGOUFFMDIvRjRDRENFNjY2 RjFDMTFFRThDQTNGMjZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ9HUMA8EAgACMAkDBwAgAQ3yf0AwDQYJKoZIhvcNAQELBQADggEB AKbAZVO/BxjwjufJqt/fzrp0kfC9fiTMvWfeTD1OY4kXdBUDgvE6MLnM8TjzlRa2 2oM8sasbAGiaSoGssSMgfBcZcF+/LP7Ssbt0I1s/6kDFCI+8rrY7FZQoQa+wG5wl gt2mcAj6NHEByEikqwwDDJQ/eW39twK2LkGgyfRt7xzsa1dTUJQiTITfhdR+x0Z1 7qmZB97ZcGK9g6zleU+EzbdxBjEU8R+g0v9Gbbhk0hVta4rqJkn7PI843FQ1WdPK UEs9ApyFWZrs+1jadrjEJU/ZdFnRQmWMVtGMFFPCa/TziKGx4qqVY2T2tRmUiMFH 9NmcfxhTDWtlc8UWs+F8YaM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:48:38 2026 by rpki-client