$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa File: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (raw, json) Hash identifier: 85ndJ25GkWksXdD2wkzQ2/smQ3lSHNtoozH+Avdk67k= Subject key identifier: 62:B6:A5:6E:4C:34:6F:99:2F:39:1C:95:06:65:BC:0E:EA:E3:C2:5A Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 0216 Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:27:04 +0000 ROA not before: Wed 30 Jul 2025 07:02:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142036 IP address blocks: 103.114.160.0/24 maxlen: 24 103.114.161.0/24 maxlen: 24 103.114.162.0/24 maxlen: 24 103.114.163.0/24 maxlen: 24 103.124.104.0/24 maxlen: 24 103.124.105.0/24 maxlen: 24 103.124.106.0/24 maxlen: 24 103.124.107.0/24 maxlen: 24 2402:d0c0:10::/48 maxlen: 48 2402:d0c0:11::/48 maxlen: 48 2402:d0c0:12::/48 maxlen: 48 2402:d0c0:13::/48 maxlen: 48 2402:d0c0:14::/48 maxlen: 48 2402:d0c0:15::/48 maxlen: 48 2402:d0c0:16::/48 maxlen: 48 2402:d0c0:17::/48 maxlen: 48 2402:d0c0:18::/48 maxlen: 48 2402:d0c0:19::/48 maxlen: 48 2402:d0c0:20::/48 maxlen: 48 2402:d0c0:21::/48 maxlen: 48 2402:d0c0:22::/48 maxlen: 48 2402:d0c0:23::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 02:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Jul 30 07:02:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59e38-5643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:ba:ae:ee:35:db:b8:57:7d:d3:53:05:7f: fa:12:9a:9e:4d:6d:72:0d:f8:de:0c:96:e3:10:6e: 26:a2:86:ec:89:43:1d:63:0d:48:17:ab:a0:99:6c: 97:81:30:18:52:cc:cf:aa:3d:71:74:9d:eb:d7:94: d6:91:e0:ec:f6:30:93:bf:72:8d:c1:0a:f5:a7:e5: 30:0e:60:41:74:b8:48:71:38:73:ea:79:86:77:1d: 12:b0:0a:c4:aa:3b:61:a3:3c:14:33:2c:f5:f7:12: 66:29:f5:de:3f:6e:46:29:9f:42:41:33:65:2b:fe: 96:09:1e:4a:b3:57:64:dd:ba:19:bf:5f:04:de:cf: 07:c3:18:47:92:f7:5a:0f:29:51:ea:e8:f2:71:17: b4:ee:14:e2:8b:b1:4f:c7:6c:11:0a:44:86:56:36: af:d5:41:5c:d2:d0:69:87:ef:7d:3b:b8:eb:a5:e9: 87:66:57:2d:29:e3:80:45:0a:db:29:86:ed:96:4e: c0:03:58:18:ef:22:0f:d1:e3:1d:e1:ca:52:9d:82: 7a:60:f0:9f:50:17:d1:01:a0:42:63:c2:14:58:de: 64:78:e6:fc:ae:40:a4:62:3b:6e:35:77:72:ea:88: 26:9d:5b:8f:f1:08:1c:4f:fc:7a:c2:7f:97:f7:64: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B6:A5:6E:4C:34:6F:99:2F:39:1C:95:06:65:BC:0E:EA:E3:C2:5A X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.114.160.0/22 103.124.104.0/22 IPv6: 2402:d0c0:10::-2402:d0c0:19:ffff:ffff:ffff:ffff:ffff 2402:d0c0:20::/46 Signature Algorithm: sha256WithRSAEncryption d2:72:0b:08:37:f6:4c:a7:bf:7f:01:26:24:67:32:72:d3:38: 5e:09:be:d3:07:b4:e5:3f:4a:09:78:19:ce:04:a3:49:ba:c8: b7:56:af:c3:fa:55:08:42:6c:77:ed:21:b3:fc:0b:4b:80:d1: a5:cf:1e:d4:78:73:d3:30:20:28:bb:68:a2:e0:ea:e0:86:28: 78:e4:34:93:45:bb:c9:0c:15:2a:8f:66:ab:2f:5c:64:cd:a1: 51:4f:26:12:58:1a:a1:ee:0a:a8:e3:be:b0:5e:53:5e:08:45: 9f:08:dc:0c:c6:bb:2f:2f:d3:80:55:09:7a:db:13:f5:4f:8a: f2:1f:7e:13:8a:ab:30:98:2c:54:29:85:90:19:96:52:19:41: ed:a6:74:8c:69:96:3a:00:c8:44:80:2c:61:00:15:42:36:57: d6:81:52:b5:f3:f6:e4:d0:bf:b9:69:65:14:c5:f7:34:c9:02: 78:ff:d7:de:2e:34:4b:83:9d:ba:ce:73:ee:93:a1:51:5e:c4: 73:ba:67:81:c6:0f:28:89:4b:34:da:39:0e:35:d7:82:7d:e2: a6:0e:98:7d:96:5d:a0:fb:6a:12:29:4c:e6:25:20:aa:b0:66: f0:d0:06:c6:34:3e:01:a0:ee:fe:d5:21:c3:67:74:41:4c:c4: 52:74:5b:94 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwNzMwMDcwMjQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWUzOC01NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+C6ru4127hXfdNTBX/6EpqeTW1yDfjeDJbjEG4moobsiUMdYw1IF6ugmWyX gTAYUszPqj1xdJ3r15TWkeDs9jCTv3KNwQr1p+UwDmBBdLhIcThz6nmGdx0SsArE qjthozwUMyz19xJmKfXeP25GKZ9CQTNlK/6WCR5Ks1dk3boZv18E3s8HwxhHkvda DylR6ujycRe07hTii7FPx2wRCkSGVjav1UFc0tBph+99O7jrpemHZlctKeOARQrb KYbtlk7AA1gY7yIP0eMd4cpSnYJ6YPCfUBfRAaBCY8IUWN5keOb8rkCkYjtuNXdy 6ogmnVuP8QgcT/x6wn+X92TR/QIDAQABo4ICizCCAocwHQYDVR0OBBYEFGK2pW5M NG+ZLzkclQZlvA7q48JaMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc5QTcvOEJBOTYzRDQ0M0Y1MTFFRTlBOEU0RTE2QzRGOUFFMDIvN0VGMEIwQUM0 RDlCMTFFRUIwMTlBMzFGQzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAS BAIAATAMAwQCZ3KgAwQCZ3xoMCMEAgACMB0wEgMHBCQC0MAAEAMHASQC0MAAGAMH AiQC0MAAIDANBgkqhkiG9w0BAQsFAAOCAQEA0nILCDf2TKe/fwEmJGcyctM4Xgm+ 0we05T9KCXgZzgSjSbrIt1avw/pVCEJsd+0hs/wLS4DRpc8e1Hhz0zAgKLtoouDq 4IYoeOQ0k0W7yQwVKo9mqy9cZM2hUU8mElgaoe4KqOO+sF5TXghFnwjcDMa7Ly/T gFUJetsT9U+K8h9+E4qrMJgsVCmFkBmWUhlB7aZ0jGmWOgDIRIAsYQAVQjZX1oFS tfP25NC/uWllFMX3NMkCeP/X3i40S4Odus5z7pOhUV7Ec7pngcYPKIlLNNo5DjXX gn3ipg6YfZZdoPtqEilM5iUgqrBm8NAGxjQ+AaDu/tUhw2d0QUzEUnRblA== -----END CERTIFICATE-----Generated at Wed Mar 18 09:41:39 2026 by rpki-client