$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/4AC85EBC8E1511F083A5EB46C4F9AE02.roa File: 4AC85EBC8E1511F083A5EB46C4F9AE02.roa (raw, json) Hash identifier: V0uk93K+tTKmGGUnT1kP+vXa31k+VQCSCk1wUBUODxM= Subject key identifier: 68:E0:5D:8A:24:62:8B:E8:D1:8B:C6:66:7D:CC:FF:5F:2A:88:C2:6C Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Certificate serial: 0736 Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/4AC85EBC8E1511F083A5EB46C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:47:46 +0000 ROA not before: Wed 10 Sep 2025 07:10:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 51847 IP address blocks: 103.24.207.0/24 maxlen: 24 103.100.158.0/24 maxlen: 24 103.137.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 21:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Validity Not Before: Sep 10 07:10:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46db2-5d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:dc:6d:7d:d3:3f:75:90:fc:44:18:4d:6b: 8b:23:41:3c:76:e2:9c:31:05:de:50:66:40:58:2c: f8:61:7b:2f:8e:9d:a7:f8:2b:3a:09:23:f6:c9:a9: da:e9:72:ae:68:d6:fa:ed:c6:f0:a3:31:0c:57:03: a7:35:c2:e4:47:75:4b:79:d5:bd:cd:c0:de:31:5b: dc:75:f6:f3:36:4c:07:3f:55:26:b6:15:74:f1:93: e2:e2:f0:60:06:77:0b:44:38:22:f7:5b:d4:ac:cd: df:c3:96:d5:29:fe:6b:51:91:39:ea:95:8a:02:66: 18:6c:c1:ae:f1:6f:34:72:d4:ee:af:1c:1f:b0:02: d7:c3:ec:16:4c:69:3d:03:59:ba:69:3e:78:b7:fd: 8f:07:2f:b5:66:e8:60:44:a4:12:7d:79:a1:de:7b: 27:d2:d2:c9:81:18:d1:d8:cd:91:81:50:d0:37:35: 97:38:f3:e3:9a:66:86:ac:59:a0:e8:c5:60:59:e1: 04:93:50:e3:7d:db:c2:a1:8d:52:b1:a4:f7:f1:23: ba:4e:1b:de:c8:0c:56:f3:9b:09:38:de:d0:e5:4e: b0:2d:85:e7:83:af:94:30:53:49:e1:5f:e7:10:b5: c4:11:91:e3:1e:7c:56:73:32:31:ac:00:f1:98:b9: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E0:5D:8A:24:62:8B:E8:D1:8B:C6:66:7D:CC:FF:5F:2A:88:C2:6C X509v3 Authority Key Identifier: keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/4AC85EBC8E1511F083A5EB46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.207.0/24 103.100.158.0/24 103.137.215.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:c3:ab:48:35:be:01:3c:04:c2:c5:f4:64:a3:b4:88:29:5c: 8b:0b:8d:c0:a8:14:3f:81:4b:a5:0a:3a:1d:c4:b8:8e:d2:6d: 20:ab:c1:8c:05:04:03:8d:89:a4:ee:98:2e:5c:d7:3a:63:f9: 0f:37:79:1a:39:78:a6:45:03:24:e0:e7:6a:9c:8f:03:5a:2f: 5f:ab:8b:89:78:83:ba:cd:72:4f:ea:b2:fb:ec:88:43:fa:df: 08:e8:cc:65:b3:c0:d2:84:0b:ee:c2:73:54:d7:e6:f9:59:4d: c7:b4:a2:6d:94:aa:30:eb:3e:e5:cd:4d:e5:c5:1b:b6:45:6c: 9f:ba:1e:26:55:23:66:1a:93:df:db:0c:ae:54:d0:15:37:b3: 49:dd:8c:72:42:15:25:83:86:48:0e:fe:59:3b:ed:4f:b4:47: 35:e9:3a:d1:3f:a5:d8:9e:d1:33:b1:68:5b:68:98:ed:bb:65: 3f:22:44:d1:4a:dd:de:49:aa:be:32:f1:34:6a:fe:97:af:41: 84:97:e4:03:b7:aa:70:6b:b5:aa:97:36:32:ce:e3:aa:53:f2: 1f:4f:cd:e8:ef:0c:01:21:1c:f3:ec:4d:e9:b4:44:4d:28:3d: 60:67:38:24:23:7d:f0:e4:35:c7:93:54:d0:6e:51:a8:5c:2b: 3a:c1:2c:b1 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlGODkxMTAvBgNVBAUTKDU1MDg4QTMxNUJDQjUwOThCRUVGNjY1QUE5Q0JERkQz MkEyMDU4MjAwHhcNMjUwOTEwMDcxMDU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRiMi01ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4TcbX3TP3WQ/EQYTWuLI0E8duKcMQXeUGZAWCz4YXsvjp2n+Cs6CSP2yana 6XKuaNb67cbwozEMVwOnNcLkR3VLedW9zcDeMVvcdfbzNkwHP1UmthV08ZPi4vBg BncLRDgi91vUrM3fw5bVKf5rUZE56pWKAmYYbMGu8W80ctTurxwfsALXw+wWTGk9 A1m6aT54t/2PBy+1ZuhgRKQSfXmh3nsn0tLJgRjR2M2RgVDQNzWXOPPjmmaGrFmg 6MVgWeEEk1DjfdvCoY1SsaT38SO6ThveyAxW85sJON7Q5U6wLYXng6+UMFNJ4V/n ELXEEZHjHnxWczIxrADxmLnqBQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGjgXYok Yovo0YvGZn3M/18qiMJsMB8GA1UdIwQYMBaAFFUIijFby1CYvu9mWqnL39MqIFgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUY4OS9EMzVBQTVBQTdC RTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVKaS03MlphcWN2ZjB5b2dX Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRaUtNVnZMVUppLTcyWmFxY3ZmMHlvZ1dDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlGODkvRDM1QUE1QUE3QkUxMTFFQjhGRjVGNzUyQzRGOUFFMDIvNEFDODVFQkM4 RTE1MTFGMDgzQTVFQjQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZxjPAwQAZ2SeAwQAZ4nXMA0GCSqGSIb3DQEBCwUAA4IBAQCLw6tI Nb4BPATCxfRko7SIKVyLC43AqBQ/gUulCjodxLiO0m0gq8GMBQQDjYmk7pguXNc6 Y/kPN3kaOXimRQMk4OdqnI8DWi9fq4uJeIO6zXJP6rL77IhD+t8I6Mxls8DShAvu wnNU1+b5WU3HtKJtlKow6z7lzU3lxRu2RWyfuh4mVSNmGpPf2wyuVNAVN7NJ3Yxy QhUlg4ZIDv5ZO+1PtEc16TrRP6XYntEzsWhbaJjtu2U/IkTRSt3eSaq+MvE0av6X r0GEl+QDt6pwa7WqlzYyzuOqU/IfT83o7wwBIRzz7E3ptERNKD1gZzgkI33w5DXH k1TQblGoXCs6wSyx -----END CERTIFICATE-----Generated at Wed Mar 4 14:22:28 2026 by rpki-client