$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa File: EDAA86E4AD6D11EE83DA6253C4F9AE02.roa (raw, json) Hash identifier: RuIzPpPmU5SYBxbzVmTPm1exsa1irL+SD8QrPzFj6WU= Subject key identifier: BA:D8:11:27:CB:BB:77:5F:F4:0D:42:79:92:7B:57:63:C7:1B:81:68 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0204 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:58:58 +0000 ROA not before: Sat 03 Jan 2026 03:25:50 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 40065 IP address blocks: 103.94.185.0/24 maxlen: 24 103.99.115.0/24 maxlen: 24 103.99.178.0/24 maxlen: 24 103.99.179.0/24 maxlen: 24 202.91.33.0/24 maxlen: 24 202.91.34.0/24 maxlen: 24 202.91.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Jan 3 03:25:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47e62-72b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:99:71:58:3f:1b:5b:de:f8:04:92:81:53: a1:98:d9:84:b1:0f:1e:dd:4d:58:91:5b:21:57:e5: 15:6f:91:7b:3f:73:ca:2b:34:0c:b6:7a:01:58:bf: 72:1a:97:25:c6:88:b3:07:a5:12:27:73:96:62:17: 18:51:ff:25:4b:99:49:3f:b3:80:70:68:f4:e8:66: f5:c5:29:8e:d0:67:ab:58:91:8e:4c:7e:c8:95:7d: 74:bd:fc:ce:29:56:df:1e:e1:60:cf:64:82:b5:d1: 1d:23:bb:bb:90:89:af:a5:61:3c:77:14:42:98:47: 99:c3:68:c0:5d:fb:a7:b4:88:92:f2:74:fd:99:93: 72:cc:1d:8b:a8:b0:a0:e8:72:ce:2f:8e:0c:b2:51: 8a:8c:8d:a8:93:42:42:31:41:61:29:77:20:8e:f2: 11:09:f1:03:60:9a:22:63:30:96:7d:b5:c6:e2:c0: aa:9d:63:85:3f:6b:65:05:48:e7:70:6e:d4:d2:10: 66:91:9a:b6:9a:80:75:81:52:42:38:32:76:d0:d2: d5:47:e2:73:4f:b1:c5:83:28:28:99:22:15:67:bb: 93:75:af:3d:49:3e:f1:a4:15:fe:65:fa:57:3d:84: 20:73:e9:a0:56:84:35:e8:25:40:73:7d:ab:4a:aa: e9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D8:11:27:CB:BB:77:5F:F4:0D:42:79:92:7B:57:63:C7:1B:81:68 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/EDAA86E4AD6D11EE83DA6253C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.185.0/24 103.99.115.0/24 103.99.178.0/23 202.91.33.0-202.91.35.255 Signature Algorithm: sha256WithRSAEncryption 81:47:7d:f5:b8:08:4c:70:99:88:2b:44:00:97:83:08:c9:d7: b6:91:b1:73:67:aa:03:32:82:6d:31:97:64:b8:03:e9:48:ea: f4:c9:66:30:8e:09:a2:3c:d6:85:7b:20:27:1e:0f:1b:8e:d1: 3a:56:dc:11:93:06:fd:e3:a2:4b:b6:9b:7f:62:93:87:21:38: 90:8c:2c:20:6f:59:1c:b2:70:8e:7b:31:75:da:0e:30:90:0e: 0e:5e:3a:93:c1:20:1f:71:d4:6e:c0:c9:9a:a7:a2:99:34:93: b2:26:58:1f:d2:b3:f2:70:5f:f2:1b:9e:d8:e8:93:65:d8:3f: de:23:86:02:f7:f7:af:47:d1:79:9f:4c:3d:0a:4c:f7:cf:81: a8:37:78:c4:2b:8a:38:3d:44:29:7e:4f:05:b4:ab:69:ea:8b: 60:8a:28:8a:c8:d5:3e:cd:db:8c:e7:73:87:c6:f7:94:a4:54: 5b:3a:32:d5:13:05:68:72:57:01:ad:0f:97:d6:d8:cf:f3:9e: 63:7c:ac:ac:11:c2:ac:fa:a5:16:e5:e2:e1:c6:cb:cd:e2:23: 2d:8d:38:60:5d:26:a9:47:18:c7:23:77:66:82:90:ae:e0:e3: ac:43:35:c7:7d:b7:d3:16:c5:77:14:07:1d:0d:1f:f7:1e:0c: 5d:b8:6a:78 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYwMTAzMDMyNTUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2U2Mi03MmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFCZcVg/G1ve+ASSgVOhmNmEsQ8e3U1YkVshV+UVb5F7P3PKKzQMtnoBWL9y GpclxoizB6USJ3OWYhcYUf8lS5lJP7OAcGj06Gb1xSmO0GerWJGOTH7IlX10vfzO KVbfHuFgz2SCtdEdI7u7kImvpWE8dxRCmEeZw2jAXfuntIiS8nT9mZNyzB2LqLCg 6HLOL44MslGKjI2ok0JCMUFhKXcgjvIRCfEDYJoiYzCWfbXG4sCqnWOFP2tlBUjn cG7U0hBmkZq2moB1gVJCODJ20NLVR+JzT7HFgygomSIVZ7uTda89ST7xpBX+ZfpX PYQgc+mgVoQ16CVAc32rSqrpdwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFLrYESfL u3df9A1CeZJ7V2PHG4FoMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvRURBQTg2RTRB RDZEMTFFRTgzREE2MjUzQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQAZ165AwQAZ2NzAwQBZ2OyMAwDBADKWyEDBALKWyAwDQYJKoZIhvcN AQELBQADggEBAIFHffW4CExwmYgrRACXgwjJ17aRsXNnqgMygm0xl2S4A+lI6vTJ ZjCOCaI81oV7ICceDxuO0TpW3BGTBv3joku2m39ik4chOJCMLCBvWRyycI57MXXa DjCQDg5eOpPBIB9x1G7AyZqnopk0k7ImWB/Ss/JwX/Ibntjok2XYP94jhgL3969H 0XmfTD0KTPfPgag3eMQrijg9RCl+TwW0q2nqi2CKKIrI1T7N24znc4fG95SkVFs6 MtUTBWhyVwGtD5fW2M/znmN8rKwRwqz6pRbl4uHGy83iIy2NOGBdJqlHGMcjd2aC kK7g46xDNcd9t9MWxXcUBx0NH/ceDF24ang= -----END CERTIFICATE-----Generated at Mon Mar 2 05:07:57 2026 by rpki-client