$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa File: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (raw, json) Hash identifier: 415aT/obMJjSH780K/K390shhJpsFr+sPe3d3m1bO1g= Subject key identifier: C2:72:70:59:03:C3:FB:C2:D5:B1:7D:06:92:02:CF:E3:3D:2E:1B:FA Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Certificate serial: 02BD Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:07:35 +0000 ROA not before: Fri 17 Oct 2025 04:07:43 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 150299 IP address blocks: 103.214.178.0/23 maxlen: 23 103.214.178.0/24 maxlen: 24 103.214.179.0/24 maxlen: 24 2001:df1:3b40::/48 maxlen: 48 2001:df1:3b40::/51 maxlen: 51 2001:df1:3b40:2000::/51 maxlen: 51 2001:df1:3b40:4000::/51 maxlen: 51 2001:df1:3b40:6000::/51 maxlen: 51 2001:df1:3b40:8000::/51 maxlen: 51 2001:df1:3b40:a000::/51 maxlen: 51 2001:df1:3b40:c000::/51 maxlen: 51 2001:df1:3b40:e000::/51 maxlen: 51 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125758, serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Validity Not Before: Oct 17 04:07:43 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42c07-e8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7d:95:99:f0:5e:46:f6:bc:81:62:2f:ad:20: 80:3b:98:5d:ec:df:6b:2c:11:e3:06:5a:94:7b:e4: 3e:75:73:04:cc:a0:18:fd:56:c7:69:e8:50:82:a4: 4f:9a:05:74:35:a4:fb:97:db:37:74:18:a3:66:25: 2f:7d:51:73:e2:23:89:e7:b3:72:ae:c9:b7:b7:f9: 5d:7f:92:61:c6:83:e4:56:9a:0b:4f:86:c3:ff:bf: 2f:98:d4:9a:ea:47:3c:19:44:17:e5:46:9e:0f:d7: 61:df:42:a8:a9:97:4f:a5:8b:29:9b:37:81:ed:b2: 24:fa:f7:5d:5b:7b:bf:f7:53:9d:37:1c:79:2c:cf: 5d:b3:09:f9:a3:7d:e7:b1:8b:d8:eb:c9:8c:e6:aa: 01:1a:68:b0:3f:e2:72:6b:0a:ea:4a:0a:ec:1e:31: 88:18:7d:be:13:ce:b3:9a:75:1a:74:bc:49:ef:68: 14:4c:6b:79:fa:1d:2c:55:df:36:4d:d3:4e:03:8d: 78:7c:dc:59:4a:9a:8b:32:d0:1d:65:60:f5:4d:8c: 91:b7:80:02:61:93:d2:fe:23:00:8e:97:3c:ed:eb: c5:43:2d:0f:4a:5d:9b:dc:e3:fb:c3:4f:89:85:ce: ca:46:a4:5c:08:00:81:61:34:5e:cb:83:12:68:0f: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:70:59:03:C3:FB:C2:D5:B1:7D:06:92:02:CF:E3:3D:2E:1B:FA X509v3 Authority Key Identifier: keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/117300B62CDB11EDB2E1DD0DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.178.0/23 IPv6: 2001:df1:3b40::/48 Signature Algorithm: sha256WithRSAEncryption 90:17:bd:4c:f0:25:3c:30:65:7e:ef:33:7f:16:7c:2b:cd:bd: 1a:a2:3b:70:ea:3c:fe:3f:d5:ac:ec:67:07:a5:31:4d:41:3b: 87:f4:38:62:e6:30:09:4e:6f:e5:58:0e:76:63:03:f6:df:66: fe:97:dc:2e:7e:0f:f9:a0:b7:45:e1:80:e1:8e:f3:de:09:b9: fb:05:8e:c9:2d:03:aa:66:9b:19:9b:83:e1:ed:f8:6b:d1:55: 4b:d1:d7:f7:c8:92:37:ff:55:d5:5e:21:26:5a:3b:19:19:89: 1d:20:59:3e:85:21:47:65:a4:5a:71:ee:70:cd:af:f2:85:c3: 34:b5:fd:2c:98:5a:4e:b4:02:6b:45:d7:77:8e:af:c9:e9:10: 67:5b:99:24:6a:a7:34:a3:12:d3:60:00:a8:d1:18:bf:be:49: 76:ad:66:c4:78:b3:53:18:69:91:34:0c:87:7e:70:41:b1:3c: d8:ba:3d:7c:fd:72:ec:48:b7:1b:ee:fc:2e:6c:ad:7a:13:f3: e1:53:25:71:74:c9:cc:8e:42:cd:5f:7c:3f:42:b0:fa:11:19: 47:14:6d:08:7f:4b:75:ab:58:71:fd:17:79:46:ce:75:4c:35: 2c:2e:c8:8a:2b:73:92:d3:02:b6:f8:c2:50:4d:8d:53:d2:24: 14:da:3d:e4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE N0IyNDY2RTUwHhcNMjUxMDE3MDQwNzQzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmMwNy1lOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw32VmfBeRva8gWIvrSCAO5hd7N9rLBHjBlqUe+Q+dXMEzKAY/VbHaehQgqRP mgV0NaT7l9s3dBijZiUvfVFz4iOJ57Nyrsm3t/ldf5JhxoPkVpoLT4bD/78vmNSa 6kc8GUQX5UaeD9dh30KoqZdPpYspmzeB7bIk+vddW3u/91OdNxx5LM9dswn5o33n sYvY68mM5qoBGmiwP+JyawrqSgrsHjGIGH2+E86zmnUadLxJ72gUTGt5+h0sVd82 TdNOA414fNxZSpqLMtAdZWD1TYyRt4ACYZPS/iMAjpc87evFQy0PSl2b3OP7w0+J hc7KRqRcCACBYTRey4MSaA++1wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMJycFkD w/vC1bF9BpICz+M9Lhv6MB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU3NTgvNzFFQkU3QzIyQ0Q3MTFFREIwMkIxRDE5QzRGOUFFMDIvMTE3MzAwQjYy Q0RCMTFFREIyRTFERDBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ9ayMA8EAgACMAkDBwAgAQ3xO0AwDQYJKoZIhvcNAQELBQADggEB AJAXvUzwJTwwZX7vM38WfCvNvRqiO3DqPP4/1azsZwelMU1BO4f0OGLmMAlOb+VY DnZjA/bfZv6X3C5+D/mgt0XhgOGO894JufsFjsktA6pmmxmbg+Ht+GvRVUvR1/fI kjf/VdVeISZaOxkZiR0gWT6FIUdlpFpx7nDNr/KFwzS1/SyYWk60AmtF13eOr8np EGdbmSRqpzSjEtNgAKjRGL++SXatZsR4s1MYaZE0DId+cEGxPNi6PXz9cuxItxvu /C5srXoT8+FTJXF0ycyOQs1ffD9CsPoRGUcUbQh/S3WrWHH9F3lGznVMNSwuyIor c5LTArb4wlBNjVPSJBTaPeQ= -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:56 2026 by rpki-client