$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa File: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (raw, json) Hash identifier: PX8w+pG5IjtEQj/47/h35ydhlOc7PuW6Cz8f/wx2lAc= Subject key identifier: FA:F5:0B:40:D9:F6:50:4E:92:08:8A:53:02:3E:D6:23:C4:47:80:DA Certificate issuer: /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Certificate serial: 01B0 Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa Signing time: Wed 01 Jul 2026 06:31:29 +0000 ROA not before: Wed 01 Jul 2026 06:31:29 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 151845 IP address blocks: 103.49.70.0/23 maxlen: 23 103.49.70.0/24 maxlen: 24 103.49.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Jul 2026 05:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D Validity Not Before: Jul 1 06:31:29 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a44b441-57b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:68:3b:1c:43:98:a6:f3:d4:18:a1:f9:a7: 07:ce:dd:30:1a:5c:21:74:0b:83:e5:a4:81:71:bc: c5:dd:d8:67:70:09:78:49:b7:bb:d1:45:f5:7d:de: 72:39:0b:59:06:55:c8:e9:f0:c2:46:c5:2c:f2:35: 99:44:84:2c:8e:86:07:bd:55:4a:cc:64:95:6f:01: 46:9c:6a:ec:71:1a:61:c5:6d:05:2c:fa:1c:fe:35: b7:ac:0e:6d:cd:83:a7:2f:c9:99:b6:94:db:7d:f1: 70:5f:16:8c:da:55:20:df:f9:fc:d3:73:73:db:03: e5:a0:c9:e1:42:09:32:87:96:85:51:8a:4c:3f:67: a7:a3:8b:69:88:53:96:8a:11:e5:12:09:fd:46:80: 5d:3b:c8:8b:e4:63:c6:e3:f7:a0:a8:d8:4c:68:13: 89:8e:52:cb:af:ef:5e:a1:5b:fc:06:2a:0b:d5:39: e8:07:0b:9c:f6:1c:68:ee:23:41:00:ea:e2:ff:65: a2:01:f5:eb:6e:4c:30:ca:b5:2b:9f:95:b0:e0:b0: 1f:ae:68:af:11:b9:f7:e2:50:ef:6e:91:16:0c:99: a1:bb:9e:4e:0b:69:83:3b:0b:b5:69:85:55:38:8d: 24:62:84:0a:10:b5:48:94:17:7f:c8:2e:95:56:52: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:0B:40:D9:F6:50:4E:92:08:8A:53:02:3E:D6:23:C4:47:80:DA X509v3 Authority Key Identifier: keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/4BA3FAC8B53311EFACDFC575C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.49.70.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:5c:57:b3:ae:c6:63:5d:56:aa:bf:d3:3e:da:61:2f:d1:56: 5c:40:37:00:8c:f3:9d:d1:d0:a1:8c:b7:97:33:39:5f:cc:f6: 5a:bd:fe:7b:15:6e:3e:31:71:8d:e5:b1:d7:33:3f:52:2c:41: ec:0e:7f:a8:7b:ec:7d:ec:41:00:58:53:d1:16:31:b8:f4:f7: 6c:98:20:3f:9f:c3:ca:07:97:90:13:cd:06:a5:95:d7:69:a2: 22:94:c2:25:37:22:57:fa:05:3b:59:3d:81:e0:49:ac:9e:95: 00:5f:e4:99:a3:f6:f1:13:95:24:f1:1f:73:11:11:47:cd:c1: b0:22:3d:0e:20:23:1d:a8:42:2d:d4:23:a0:8d:8a:21:fb:5f: 71:df:eb:ca:ba:2f:ab:cf:b3:3e:bd:e1:94:0a:91:5a:8b:16: 9e:4f:43:25:c3:5f:aa:dc:c6:6e:10:56:e2:5f:96:cd:7b:1f: ae:8b:ba:f2:45:c1:29:25:86:b8:f3:7c:ca:ff:e4:1b:65:06: 28:e3:15:25:92:22:b1:f6:44:43:67:59:dc:33:66:06:ed:44: d7:7a:d5:6d:68:2e:72:4e:33:8d:f2:42:3a:12:d0:2d:02:4d: e7:47:79:aa:fa:b4:9b:66:0c:b0:6a:97:c3:07:6d:0b:a2:de: 84:c7:d5:f1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyMEQxMTAvBgNVBAUTKEE3NDk3ODhDQjRGNDFGRDg1RTdBQzI2M0M4NzVCN0VB RjJDMEU3OEQwHhcNMjYwNzAxMDYzMTI5WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0YjQ0MS01N2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv1oOxxDmKbz1Bih+acHzt0wGlwhdAuD5aSBcbzF3dhncAl4Sbe70UX1fd5y OQtZBlXI6fDCRsUs8jWZRIQsjoYHvVVKzGSVbwFGnGrscRphxW0FLPoc/jW3rA5t zYOnL8mZtpTbffFwXxaM2lUg3/n803Nz2wPloMnhQgkyh5aFUYpMP2eno4tpiFOW ihHlEgn9RoBdO8iL5GPG4/egqNhMaBOJjlLLr+9eoVv8BioL1TnoBwuc9hxo7iNB AOri/2WiAfXrbkwwyrUrn5Ww4LAfrmivEbn34lDvbpEWDJmhu55OC2mDOwu1aYVV OI0kYoQKELVIlBd/yC6VVlIqRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPr1C0DZ 9lBOkgiKUwI+1iPER4DaMB8GA1UdIwQYMBaAFKdJeIy09B/YXnrCY8h1t+rywOeN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzIwRC84ODY4QTExRTAz QTExMUVGODkyNkMwMkFDNEY5QUUwMi9wMGw0akxUMEg5aGVlc0pqeUhXMzZ2TEE1 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwbDRqTFQwSDloZWVzSmp5SFczNnZMQTU0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyMEQvODg2OEExMUUwM0ExMTFFRjg5MjZDMDJBQzRGOUFFMDIvNEJBM0ZBQzhC NTMzMTFFRkFDREZDNTc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZzFGMA0GCSqGSIb3DQEBCwUAA4IBAQBOXFezrsZjXVaqv9M+2mEv 0VZcQDcAjPOd0dChjLeXMzlfzPZavf57FW4+MXGN5bHXMz9SLEHsDn+oe+x97EEA WFPRFjG49PdsmCA/n8PKB5eQE80GpZXXaaIilMIlNyJX+gU7WT2B4EmsnpUAX+SZ o/bxE5Uk8R9zERFHzcGwIj0OICMdqEIt1COgjYoh+19x3+vKui+rz7M+veGUCpFa ixaeT0Mlw1+q3MZuEFbiX5bNex+ui7ryRcEpJYa483zK/+QbZQYo4xUlkiKx9kRD Z1ncM2YG7UTXetVtaC5yTjON8kI6EtAtAk3nR3mq+rSbZgywapfDB20Lot6Ex9Xx -----END CERTIFICATE-----Generated at Fri Jul 10 19:35:28 2026 by rpki-client