$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa File: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (raw, json) Hash identifier: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw= Subject key identifier: 98:A3:5F:AD:88:11:AF:BD:83:B5:42:69:66:5C:3E:5A:0C:20:A5:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B2D Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa Signing time: Thu 02 Apr 2026 19:25:15 +0000 ROA not before: Thu 02 Apr 2026 19:25:15 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137018 IP address blocks: 103.149.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Apr 2 19:25:15 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69cec29b-a528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:d0:8a:42:75:d1:a5:4a:27:a5:b9:17:56: ab:71:34:54:84:d5:71:82:a8:c5:d2:ce:af:3a:a1: 28:c1:6a:e5:3a:c2:ec:9c:72:16:ca:4d:7f:32:73: 5e:80:25:54:07:7f:fc:0c:34:0b:7a:81:38:b1:56: fd:9d:cd:1c:c6:e5:1f:be:95:ab:60:22:e0:9a:18: 4f:f3:28:b7:f2:b9:e3:52:e5:0f:cb:68:49:fb:4c: 6f:aa:ff:a5:5e:9c:24:43:27:3e:80:cd:a6:9c:07: cc:24:a5:04:46:3b:57:ca:a4:1a:75:90:f0:5d:78: 00:94:ae:32:fd:f3:9a:ea:97:09:61:3d:3e:f5:5a: 33:5c:f7:55:97:f8:8e:38:c9:18:3e:fa:a7:3f:ed: 19:eb:78:cc:12:72:1d:c9:19:3b:c6:70:a7:8f:34: d4:81:70:bd:1e:b9:4a:c3:6d:29:1b:4d:c6:7d:7e: 24:53:ee:9b:63:4f:e1:6e:04:1b:1b:f6:3c:20:22: d6:68:16:b6:14:e4:76:4e:1d:17:03:6f:62:16:f0: 2b:11:b6:36:98:81:f7:d0:b6:46:2e:ee:9e:5e:04: e2:af:ea:0e:72:be:96:f0:f9:28:0e:b0:7f:df:41: 5a:45:70:36:d0:af:f5:44:13:26:ae:0d:2d:85:61: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A3:5F:AD:88:11:AF:BD:83:B5:42:69:66:5C:3E:5A:0C:20:A5:3D X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.60.0/24 Signature Algorithm: sha256WithRSAEncryption 95:d5:fc:97:23:29:d9:d7:43:a8:6f:d8:ed:0b:82:3a:e5:1a: f3:c1:74:ee:57:92:dc:6a:d4:37:97:cd:ad:5a:c7:15:d1:b1: a1:3a:25:89:a8:6a:19:4b:06:3c:25:f4:96:29:0d:a1:69:36: 8a:c9:b9:3c:c9:5f:ab:f1:08:88:51:69:54:ea:c2:c3:79:23: b4:71:7d:54:05:7e:fd:1d:12:bc:41:a5:9e:8c:ce:66:dc:c1: e3:86:17:ab:13:69:c5:17:95:6a:ce:da:02:94:80:c3:61:03: a8:19:b3:a5:9e:db:7e:95:9d:ae:2f:41:10:dc:1a:b2:ac:84: 8a:72:ed:f2:26:05:22:d7:e8:ac:da:7b:5f:5d:ed:ca:3e:58: 15:2f:7d:af:85:58:02:1c:3e:4b:a6:c0:0e:4d:f9:57:14:54: 4f:e2:46:f1:a3:a4:19:93:40:7f:2a:ec:6f:ac:e8:72:65:44: f2:7b:af:08:f5:d3:df:11:e9:7f:ac:b9:a3:58:1f:06:56:be: 73:5f:ba:ac:33:0a:49:cb:e6:82:63:be:8d:83:59:3b:76:98: 9d:dd:fb:27:ac:3b:22:65:58:fb:7a:2f:ed:41:cd:31:61:d7: f2:e4:95:1f:2e:47:ec:ab:9e:4e:f0:a2:94:52:28:d4:5a:fa: ac:e5:ba:75 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwNDAyMTkyNTE1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYzI5Yi1hNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BnQikJ10aVKJ6W5F1arcTRUhNVxgqjF0s6vOqEowWrlOsLsnHIWyk1/MnNe gCVUB3/8DDQLeoE4sVb9nc0cxuUfvpWrYCLgmhhP8yi38rnjUuUPy2hJ+0xvqv+l XpwkQyc+gM2mnAfMJKUERjtXyqQadZDwXXgAlK4y/fOa6pcJYT0+9VozXPdVl/iO OMkYPvqnP+0Z63jMEnIdyRk7xnCnjzTUgXC9HrlKw20pG03GfX4kU+6bY0/hbgQb G/Y8ICLWaBa2FOR2Th0XA29iFvArEbY2mIH30LZGLu6eXgTir+oOcr6W8PkoDrB/ 30FaRXA20K/1RBMmrg0thWG9RQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJijX62I Ea+9g7VCaWZcPloMIKU9MB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQxMTgvQkI4MUE1MTQ2MkJGMTFFQUFBM0E4OTQ1QzRGOUFFMDIvNUZGQTRCRUMz QzBCMTFFRDg5QUQ3NTVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5U8MA0GCSqGSIb3DQEBCwUAA4IBAQCV1fyXIynZ10Oob9jtC4I6 5RrzwXTuV5LcatQ3l82tWscV0bGhOiWJqGoZSwY8JfSWKQ2haTaKybk8yV+r8QiI UWlU6sLDeSO0cX1UBX79HRK8QaWejM5m3MHjhherE2nFF5VqztoClIDDYQOoGbOl ntt+lZ2uL0EQ3BqyrISKcu3yJgUi1+is2ntfXe3KPlgVL32vhVgCHD5LpsAOTflX FFRP4kbxo6QZk0B/KuxvrOhyZUTye68I9dPfEel/rLmjWB8GVr5zX7qsMwpJy+aC Y76Ng1k7dpid3fsnrDsiZVj7ei/tQc0xYdfy5JUfLkfsq55O8KKUUijUWvqs5bp1 -----END CERTIFICATE-----Generated at Mon Apr 6 10:26:19 2026 by rpki-client