$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/494B4070419C11EAAE836772C4F9AE02.roa File: 494B4070419C11EAAE836772C4F9AE02.roa (raw, json) Hash identifier: bU5lNAcE66Bv/ZZrCjffKOq+spnXNneUB8Pi8JBkWRc= Subject key identifier: BA:9F:19:D9:D5:5A:D6:47:7F:25:92:E3:D3:C8:B9:59:38:0B:E1:E1 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0BA7 Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/494B4070419C11EAAE836772C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:37:43 +0000 ROA not before: Mon 02 Feb 2026 19:16:01 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17408 IP address blocks: 103.247.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2983 (0xba7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Feb 2 19:16:01 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45d47-3d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:f5:29:52:d0:fe:47:51:c1:44:99:f5:28: 05:8d:2d:91:27:d1:34:ff:49:13:19:36:6a:b6:b7: 0a:46:eb:6d:9f:a2:21:11:f6:c4:b5:b5:93:f7:b9: 6e:46:53:33:12:7f:94:52:d5:b4:97:17:55:ca:7c: bd:bb:f3:fb:70:40:ac:34:a2:e8:86:be:ec:11:fd: 8b:5a:ae:00:f4:64:c3:33:57:53:8f:0b:2c:40:0f: 89:da:4e:7d:1e:88:4b:ae:28:4d:84:59:67:93:41: 52:e7:bb:5c:55:1c:ef:44:d2:b3:57:e0:9d:a6:0d: f3:be:8e:26:c8:70:84:99:d5:5b:33:9e:0f:3f:92: a0:0d:25:66:cf:f7:e7:7b:b5:8e:8d:3e:8a:95:7e: 0c:db:4a:83:2b:dd:9a:9d:f7:d8:86:69:98:ae:e6: ec:69:74:38:9e:90:d8:69:19:25:f4:13:1a:b6:b2: cc:c7:c8:a9:4e:6e:ad:35:72:6c:b4:78:ef:0d:25: 06:46:a1:45:38:0b:4f:c8:9e:9b:80:7d:8e:2c:3a: 37:9f:b1:31:cf:92:aa:5c:a1:38:14:a4:ab:0c:a4: 7b:83:db:4e:bc:9d:ba:2e:03:f6:47:08:da:f5:5a: a7:38:93:26:46:ec:6b:e0:86:74:4c:25:b2:f1:90: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9F:19:D9:D5:5A:D6:47:7F:25:92:E3:D3:C8:B9:59:38:0B:E1:E1 X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/494B4070419C11EAAE836772C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.247.68.0/22 Signature Algorithm: sha256WithRSAEncryption 95:cb:25:77:d7:45:1c:19:b0:c7:fb:81:42:44:32:a3:cb:6f: 6c:03:c2:d7:e6:b8:69:4f:c9:7b:cf:a6:b9:78:50:2f:fe:ed: ff:b9:7a:5c:dd:e6:f6:f3:dc:a8:0b:62:b1:1d:f0:28:5b:b5: 48:dd:0f:10:81:f5:42:72:d5:56:72:58:14:c5:31:e1:4b:00: 4a:e9:23:4d:0d:34:ac:69:a0:b3:80:51:1c:cf:4a:8b:3e:cc: 0b:91:e8:cb:69:2e:e2:d0:6d:29:cf:9b:d7:1e:28:dc:09:6d: 3e:4a:54:e9:95:d3:e4:26:d7:b8:8d:82:b8:8d:8e:3d:2b:ae: 1c:2f:7e:34:fa:43:d9:cf:48:84:88:36:24:9a:29:9b:95:4c: e8:cf:67:66:2d:32:bc:d7:93:95:01:73:25:73:6c:0c:79:f1: 85:72:f8:8f:9d:48:d1:81:f9:f0:ec:6a:74:c7:2b:1c:c5:16: 23:cf:ef:d7:d2:2f:8c:c2:4f:77:36:76:c3:1b:86:af:7c:ae: 13:c6:0e:29:bf:a6:1c:5d:86:db:9e:17:7c:9b:e4:f2:f6:bf: 04:32:de:88:e7:b7:46:14:de:0d:22:54:bc:2b:3c:6d:73:e1: db:a9:9c:eb:72:3b:d2:4b:da:a6:ee:4f:77:66:59:bd:f8:a9: b8:20:d6:9e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjYwMjAyMTkxNjAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQ0Ny0zZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHz1KVLQ/kdRwUSZ9SgFjS2RJ9E0/0kTGTZqtrcKRuttn6IhEfbEtbWT97lu RlMzEn+UUtW0lxdVyny9u/P7cECsNKLohr7sEf2LWq4A9GTDM1dTjwssQA+J2k59 HohLrihNhFlnk0FS57tcVRzvRNKzV+Cdpg3zvo4myHCEmdVbM54PP5KgDSVmz/fn e7WOjT6KlX4M20qDK92anffYhmmYrubsaXQ4npDYaRkl9BMatrLMx8ipTm6tNXJs tHjvDSUGRqFFOAtPyJ6bgH2OLDo3n7Exz5KqXKE4FKSrDKR7g9tOvJ26LgP2Rwja 9VqnOJMmRuxr4IZ0TCWy8ZBzZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLqfGdnV WtZHfyWS49PIuVk4C+HhMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQyNUEvMDI0QzI0Rjg0MTZDMTFFQTgzQzNFRjVBQzRGOUFFMDIvNDk0QjQwNzA0 MTlDMTFFQUFFODM2NzcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/dEMA0GCSqGSIb3DQEBCwUAA4IBAQCVyyV310UcGbDH+4FCRDKj y29sA8LX5rhpT8l7z6a5eFAv/u3/uXpc3eb289yoC2KxHfAoW7VI3Q8QgfVCctVW clgUxTHhSwBK6SNNDTSsaaCzgFEcz0qLPswLkejLaS7i0G0pz5vXHijcCW0+SlTp ldPkJte4jYK4jY49K64cL340+kPZz0iEiDYkmimblUzoz2dmLTK815OVAXMlc2wM efGFcviPnUjRgfnw7Gp0xyscxRYjz+/X0i+Mwk93NnbDG4avfK4Txg4pv6YcXYbb nhd8m+Ty9r8EMt6I57dGFN4NIlS8Kzxtc+HbqZzrcjvSS9qm7k93Zlm9+Km4INae -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:48 2026 by rpki-client