$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa File: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (raw, json) Hash identifier: jnfPIPnbj8UH8ywNxN8KKwG7Kyd3mOWwDkCemwVHNFc= Subject key identifier: E3:EB:26:A8:55:79:1F:84:B3:91:D5:2C:1B:09:68:B7:22:0B:10:7E Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 41 Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:08:22 +0000 ROA not before: Wed 12 Nov 2025 18:05:39 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 16524 IP address blocks: 103.177.88.0/24 maxlen: 24 103.177.89.0/24 maxlen: 24 2400:3f20::/48 maxlen: 48 2400:3f20:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Nov 12 18:05:39 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d7d6-9ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:42:da:ae:40:21:f6:7e:bb:1e:88:20:cf: b1:01:5d:d6:9e:ac:6b:cb:89:a7:75:0a:ce:49:3e: 47:74:58:30:8c:a9:fb:b0:cc:9e:69:3d:c4:06:e2: 4e:35:77:4f:c3:4b:0b:7f:4c:33:39:33:5e:e3:a0: e0:d4:2a:11:2c:54:17:7b:b0:15:b1:f2:77:e6:76: 0b:40:c1:d7:98:6d:31:7e:b3:87:3b:c3:e4:99:59: 97:5e:b3:fb:b5:7a:79:e5:22:4d:4d:19:a9:d3:52: b2:9c:12:b9:44:b8:ff:58:46:54:5a:c6:e5:a8:78: 5c:6a:e5:4e:4d:a9:70:31:61:7a:3e:f5:1a:dc:5b: b8:b6:c0:e7:2b:f6:b2:96:ce:c2:23:06:ff:e7:25: a5:26:b4:87:c6:5d:9a:53:ec:22:c2:8a:8f:07:6f: 4c:09:52:26:d1:38:c4:2f:88:7e:e3:55:04:8d:f3: 2c:c7:f4:f2:9a:e1:19:fc:fe:38:05:10:ab:9e:57: 8c:29:1d:c9:b7:1b:5d:5e:8d:72:23:32:4b:0b:4e: 11:e4:49:02:93:75:2a:89:e8:3f:4a:3f:6e:8a:5b: 22:f1:c9:53:94:61:cd:58:70:84:a5:93:d6:f8:a4: 7f:76:36:99:0a:9b:d0:45:ad:2e:af:10:db:82:24: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EB:26:A8:55:79:1F:84:B3:91:D5:2C:1B:09:68:B7:22:0B:10:7E X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.177.88.0/23 IPv6: 2400:3f20::/47 Signature Algorithm: sha256WithRSAEncryption 7f:b4:2e:73:3f:41:ac:88:10:c9:cf:52:6d:a3:c7:fc:92:aa: 7e:bd:48:69:5f:b0:23:f6:b3:43:8a:23:ae:bb:a9:0b:6c:ca: 54:d5:f0:2b:d0:6a:45:84:57:eb:f8:b6:bf:b4:79:92:e3:d5: 53:b3:a6:1e:a3:ab:60:b9:0e:ba:8a:4b:c8:89:c8:c7:e8:e1: 22:b1:bf:3a:55:13:66:d3:ed:84:6d:f2:47:d8:3e:60:cf:f1: 1a:4f:2c:67:a8:f9:9a:ef:2b:53:ae:da:32:e9:b3:55:de:aa: 92:0c:23:a7:49:04:0c:14:c0:66:ab:4c:81:1a:fd:00:36:96: 0f:73:99:22:67:4e:60:4f:85:26:09:4c:2a:16:02:cd:0a:36: ed:3f:fd:d4:16:e1:b6:ac:57:ed:b1:46:96:d9:11:a4:84:f7: 66:fa:d0:2a:c2:fa:bd:dd:4b:52:1b:9a:86:89:e9:7a:af:30: 4a:62:96:fe:f0:0c:43:5b:8e:79:ef:a3:4c:38:22:5a:fe:67: e7:0c:85:50:8d:0b:1f:10:52:a0:26:80:04:4e:46:c0:2e:b1: 54:c4:4e:d5:5d:af:fb:a8:21:38:14:85:89:25:22:31:4a:9d: 15:e7:d8:42:66:c3:31:17:cd:24:16:3a:4f:31:6c:1f:1c:a1: 4f:62:44:a4 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNTExMTIxODA1MzlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkN2Q2LTlmZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPpkLarkAh9n67Hoggz7EBXdaerGvLiad1Cs5JPkd0WDCMqfuwzJ5pPcQG4k41 d0/DSwt/TDM5M17joODUKhEsVBd7sBWx8nfmdgtAwdeYbTF+s4c7w+SZWZdes/u1 ennlIk1NGanTUrKcErlEuP9YRlRaxuWoeFxq5U5NqXAxYXo+9RrcW7i2wOcr9rKW zsIjBv/nJaUmtIfGXZpT7CLCio8Hb0wJUibROMQviH7jVQSN8yzH9PKa4Rn8/jgF EKueV4wpHcm3G11ejXIjMksLThHkSQKTdSqJ6D9KP26KWyLxyVOUYc1YcISlk9b4 pH92NpkKm9BFrS6vENuCJA7lAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU4+smqFV5 H4SzkdUsGwlotyILEH4wHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTkzQi83REJBRDFFRUJGMDAxMUYwQkNDMTVENURDNEY5QUUwMi9ERUVEOEZBMEJG MDExMUYwQTBERTNENjJDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE AgABMAYDBAFnsVgwDwQCAAIwCQMHASQAPyAAADANBgkqhkiG9w0BAQsFAAOCAQEA f7Qucz9BrIgQyc9SbaPH/JKqfr1IaV+wI/azQ4ojrrupC2zKVNXwK9BqRYRX6/i2 v7R5kuPVU7OmHqOrYLkOuopLyInIx+jhIrG/OlUTZtPthG3yR9g+YM/xGk8sZ6j5 mu8rU67aMumzVd6qkgwjp0kEDBTAZqtMgRr9ADaWD3OZImdOYE+FJglMKhYCzQo2 7T/91BbhtqxX7bFGltkRpIT3ZvrQKsL6vd1LUhuahonpeq8wSmKW/vAMQ1uOee+j TDgiWv5n5wyFUI0LHxBSoCaABE5GwC6xVMRO1V2v+6ghOBSFiSUiMUqdFefYQmbD MRfNJBY6TzFsHxyhT2JEpA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:51:34 2026 by rpki-client