$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa File: 676A2DE2564911F08353B443C4F9AE02.roa (raw, json) Hash identifier: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y= Subject key identifier: 85:2E:54:24:66:56:2D:7C:5B:AB:C4:5B:C9:9F:D8:9C:3C:4F:9F:A7 Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B2E Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa Signing time: Thu 02 Apr 2026 19:25:17 +0000 ROA not before: Thu 02 Apr 2026 19:25:17 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153800 IP address blocks: 103.149.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Apr 2 19:25:17 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69cec29d-3008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:d0:6b:44:ff:12:32:a4:35:bf:35:75:ca: 65:bd:2a:d0:8e:0c:c4:4a:39:fd:49:06:dc:9f:b3: 21:3b:66:04:92:14:82:68:25:f0:9e:0e:b0:53:e8: 21:f2:a3:8a:72:55:7f:9d:60:db:03:13:90:24:81: 79:aa:88:41:63:55:0b:ea:17:7a:12:65:9b:1b:00: 9a:46:91:cf:b9:f9:28:6e:7d:47:1e:73:e5:a0:ab: ec:a2:67:7d:73:01:79:77:c2:c4:ba:19:66:d9:30: 60:71:10:2c:9f:7e:3c:bf:8c:a7:60:84:bd:50:4e: ea:b8:28:d7:ee:07:40:b8:e7:1b:78:c3:2f:c9:48: 8f:38:98:6a:ff:1d:e7:54:c2:bd:71:f2:9b:a9:78: bd:c5:13:f0:1d:8a:b4:1f:8e:0d:d1:7f:a9:ab:b5: 2a:c6:7a:c6:bb:d5:92:61:dc:e9:69:72:61:82:58: ff:b1:48:99:75:8d:33:4e:44:69:14:8c:02:52:96: 09:1a:01:85:2a:5a:0d:bd:8c:7e:4a:96:97:55:e2: 88:7a:8a:a1:d8:0b:1f:c1:19:8f:f3:0d:98:d8:76: a5:c7:f9:79:9a:ef:b5:33:b2:04:df:7f:03:29:76: de:4f:db:4f:4d:ce:80:44:e3:fb:76:71:94:55:50: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2E:54:24:66:56:2D:7C:5B:AB:C4:5B:C9:9F:D8:9C:3C:4F:9F:A7 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.61.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:49:e8:4e:70:a7:29:01:70:53:5e:6e:c0:14:88:31:40:9d: 55:f1:22:0f:d6:ec:b5:91:7e:ed:81:f8:34:8e:80:bb:85:42: 55:2d:17:65:89:28:2a:c0:6e:95:91:64:50:0f:cb:1a:30:1b: 85:3b:52:24:d9:b6:0f:17:b8:6a:71:8c:e8:64:db:c2:1b:ad: ba:50:33:b7:d6:21:6e:7e:dd:76:7a:2e:3d:0a:9b:f1:d1:7d: e9:d1:d3:49:7e:3c:9f:82:32:50:95:d7:97:7e:e6:ed:43:7c: 40:3a:cd:aa:43:24:f4:da:f8:ea:ba:30:7f:a7:5d:66:bc:d2: 6f:3b:28:86:5d:f6:17:93:fa:11:fe:ac:63:16:40:75:c3:7d: cb:b9:a2:23:89:fd:7c:3c:b3:ae:29:60:37:8c:2e:70:d3:2f: 6e:fc:ab:71:29:ec:29:46:ac:53:12:e9:a4:82:8f:24:de:90: 54:52:a6:6b:eb:87:70:3d:b9:42:ed:ee:bb:5a:99:1d:b4:43: aa:83:fe:dc:51:47:73:19:d4:0f:32:ff:e4:16:ca:ae:ab:0f: a3:8b:5e:9c:39:f2:5c:2a:20:0d:ab:ab:5b:c7:ce:d5:88:b0: 8e:70:ad:e3:83:9e:de:d0:74:20:95:24:fd:6a:c9:5f:97:03: 52:d9:ec:d6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwNDAyMTkyNTE3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYzI5ZC0zMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRbQa0T/EjKkNb81dcplvSrQjgzESjn9SQbcn7MhO2YEkhSCaCXwng6wU+gh 8qOKclV/nWDbAxOQJIF5qohBY1UL6hd6EmWbGwCaRpHPufkobn1HHnPloKvsomd9 cwF5d8LEuhlm2TBgcRAsn348v4ynYIS9UE7quCjX7gdAuOcbeMMvyUiPOJhq/x3n VMK9cfKbqXi9xRPwHYq0H44N0X+pq7UqxnrGu9WSYdzpaXJhglj/sUiZdY0zTkRp FIwCUpYJGgGFKloNvYx+SpaXVeKIeoqh2AsfwRmP8w2Y2Halx/l5mu+1M7IE338D KXbeT9tPTc6AROP7dnGUVVCmAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIUuVCRm Vi18W6vEW8mf2Jw8T5+nMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQxMTgvQkI4MUE1MTQ2MkJGMTFFQUFBM0E4OTQ1QzRGOUFFMDIvNjc2QTJERTI1 NjQ5MTFGMDgzNTNCNDQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5U9MA0GCSqGSIb3DQEBCwUAA4IBAQCKSehOcKcpAXBTXm7AFIgx QJ1V8SIP1uy1kX7tgfg0joC7hUJVLRdliSgqwG6VkWRQD8saMBuFO1Ik2bYPF7hq cYzoZNvCG626UDO31iFuft12ei49Cpvx0X3p0dNJfjyfgjJQldeXfubtQ3xAOs2q QyT02vjqujB/p11mvNJvOyiGXfYXk/oR/qxjFkB1w33LuaIjif18PLOuKWA3jC5w 0y9u/KtxKewpRqxTEumkgo8k3pBUUqZr64dwPblC7e67WpkdtEOqg/7cUUdzGdQP Mv/kFsquqw+ji16cOfJcKiANq6tbx87ViLCOcK3jg57e0HQglST9aslflwNS2ezW -----END CERTIFICATE-----Generated at Mon Apr 6 10:30:25 2026 by rpki-client