$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa File: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (raw, json) Hash identifier: Uvg+BnkN8k4fglRUul1hQWU8OMx515TnEmaoTVsiH3Q= Subject key identifier: F9:F8:DB:66:89:D4:47:4B:60:1F:84:87:F0:F8:F6:D8:E8:A9:B4:CE Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Certificate serial: 0C59 Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa Signing time: Sat 04 Apr 2026 19:25:14 +0000 ROA not before: Sat 04 Apr 2026 19:25:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63139 IP address blocks: 103.84.109.0/24 maxlen: 24 175.176.194.0/24 maxlen: 24 2404:a140:31::/48 maxlen: 48 2404:a140:34::/48 maxlen: 48 2404:a140:35::/48 maxlen: 48 2404:a140:36::/48 maxlen: 48 2404:a140:37::/48 maxlen: 48 2404:a140:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4 Validity Not Before: Apr 4 19:25:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d1659a-277f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:dd:57:c6:51:ce:29:55:2b:ad:3c:1c:b2: ed:31:69:11:9c:76:ee:1b:74:a1:91:a6:ed:46:48: 04:bf:51:e2:a6:28:7d:0a:72:47:e4:70:88:2d:81: ce:02:09:a2:c8:98:c3:d0:30:d2:e9:cb:27:36:25: ac:bd:59:ce:77:9c:f1:c7:36:18:14:54:5e:ac:18: 9b:51:ab:62:e8:ee:9d:ce:16:fd:88:bb:6b:6d:52: b0:e9:94:32:21:61:dd:08:54:4f:92:7a:7d:da:1c: 85:f4:91:c9:73:a2:29:ad:5a:12:ce:8d:d7:90:d1: 00:98:00:48:2c:77:4c:ee:e8:d4:40:13:dc:2b:13: 9d:80:19:0d:ed:79:cd:01:24:ff:6a:8e:2f:c1:b3: 09:79:76:28:47:8c:af:7a:d8:e2:9e:fc:54:11:cf: b3:92:67:76:56:35:c8:fa:e5:46:e8:e6:b7:f0:a5: 78:f1:b0:0c:16:78:eb:26:3c:47:ae:ce:d3:77:3a: b0:d3:06:4a:9c:fc:a6:53:97:73:cd:fd:ab:55:00: 0b:8e:10:b1:9f:dd:a8:fc:64:ff:88:81:c1:14:be: dd:28:60:3c:e3:5b:bb:bc:02:6e:90:9a:29:3e:c2: 2e:82:2d:bf:f2:f8:af:10:cd:c1:77:75:dd:65:b7: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F8:DB:66:89:D4:47:4B:60:1F:84:87:F0:F8:F6:D8:E8:A9:B4:CE X509v3 Authority Key Identifier: keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/261A2BA2F39611EDA98C5D4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.109.0/24 175.176.194.0/24 IPv6: 2404:a140:31::/48 2404:a140:34::/46 2404:a140:4e::/48 Signature Algorithm: sha256WithRSAEncryption 8b:9c:6e:8f:d9:11:b1:d2:f6:36:32:e2:cf:f2:91:bb:be:39: fb:08:80:85:41:44:48:19:86:5e:6a:e8:e7:0b:90:4f:f8:c4: c4:99:fc:13:7c:28:ed:35:5c:01:a5:27:5c:3a:f5:1f:3a:bf: 19:3e:c9:62:7d:a6:a1:f3:70:f8:fc:96:13:d6:4a:14:81:78: a0:07:2f:f5:a1:4b:a2:60:f2:d4:80:77:24:2c:5e:20:3d:4a: 9c:f3:17:d2:c4:60:73:f0:fd:80:d3:22:3e:05:8e:ec:5f:5c: 69:6b:02:80:0f:c4:9d:16:84:bb:9f:0d:f2:44:b1:4b:ac:d1: 03:f1:72:d5:c3:82:1d:24:ab:0d:60:5e:61:63:07:12:14:bf: 9a:b5:bd:9d:cd:2e:24:b4:d0:84:5b:f5:fb:e9:e9:8c:1b:16: 20:4d:bc:1f:26:13:7f:b2:2d:c6:65:6e:bd:92:3c:ca:2d:b5: 96:b6:2a:be:c4:e6:96:20:f2:11:71:44:a2:aa:b7:0b:df:66: cc:66:36:32:1d:f7:ae:03:c7:af:50:80:74:46:fe:23:81:78: c6:1b:68:2c:ff:da:cd:aa:a1:00:b0:d4:45:2f:aa:05:b6:e7: 26:35:9a:bb:f9:5a:7f:73:9d:3a:03:ae:e8:50:dc:6d:b3:92: f3:c1:cc:96 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1 QzBEREY5RDQwHhcNMjYwNDA0MTkyNTE0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQxNjU5YS0yNzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmWDdV8ZRzilVK608HLLtMWkRnHbuG3ShkabtRkgEv1Hipih9CnJH5HCILYHO AgmiyJjD0DDS6csnNiWsvVnOd5zxxzYYFFRerBibUati6O6dzhb9iLtrbVKw6ZQy IWHdCFRPknp92hyF9JHJc6IprVoSzo3XkNEAmABILHdM7ujUQBPcKxOdgBkN7XnN AST/ao4vwbMJeXYoR4yvetjinvxUEc+zkmd2VjXI+uVG6Oa38KV48bAMFnjrJjxH rs7Tdzqw0wZKnPymU5dzzf2rVQALjhCxn92o/GT/iIHBFL7dKGA841u7vAJukJop PsIugi2/8vivEM3Bd3XdZbeQOQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFPn422aJ 1EdLYB+Eh/D49tjoqbTOMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMjYxQTJCQTJG Mzk2MTFFREE5OEM1RDREQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAS BAIAATAMAwQAZ1RtAwQAr7DCMCEEAgACMBsDBwAkBKFAADEDBwIkBKFAADQDBwAk BKFAAE4wDQYJKoZIhvcNAQELBQADggEBAIucbo/ZEbHS9jYy4s/ykbu+OfsIgIVB REgZhl5q6OcLkE/4xMSZ/BN8KO01XAGlJ1w69R86vxk+yWJ9pqHzcPj8lhPWShSB eKAHL/WhS6Jg8tSAdyQsXiA9SpzzF9LEYHPw/YDTIj4FjuxfXGlrAoAPxJ0WhLuf DfJEsUus0QPxctXDgh0kqw1gXmFjBxIUv5q1vZ3NLiS00IRb9fvp6YwbFiBNvB8m E3+yLcZlbr2SPMottZa2Kr7E5pYg8hFxRKKqtwvfZsxmNjId964Dx69QgHRG/iOB eMYbaCz/2s2qoQCw1EUvqgW25yY1mrv5Wn9znToDruhQ3G2zkvPBzJY= -----END CERTIFICATE-----Generated at Sun Apr 5 23:50:38 2026 by rpki-client