$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/2486E3E0D4B011F0A4E6361AC4F9AE02.roa File: 2486E3E0D4B011F0A4E6361AC4F9AE02.roa (raw, json) Hash identifier: ZW6jL59jikFz0FLaafnNnq4L3V9q7AF9K/n1i2MST+s= Subject key identifier: B2:F8:66:21:9C:26:3C:12:BA:73:10:D2:1E:5D:70:11:FF:64:E6:EB Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Certificate serial: E6 Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/2486E3E0D4B011F0A4E6361AC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:11:34 +0000 ROA not before: Tue 09 Dec 2025 03:35:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 131090 IP address blocks: 61.7.128.0/18 maxlen: 24 103.10.228.0/22 maxlen: 22 103.10.228.0/24 maxlen: 24 103.10.229.0/24 maxlen: 24 103.10.230.0/24 maxlen: 24 103.10.231.0/24 maxlen: 24 110.77.128.0/18 maxlen: 24 110.77.192.0/18 maxlen: 24 110.78.128.0/18 maxlen: 24 116.58.224.0/19 maxlen: 24 119.42.64.0/18 maxlen: 24 2001:c38:b000::/36 maxlen: 36 2001:c38:b010::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391 Validity Not Before: Dec 9 03:35:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a48f66-aa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:7d:95:6f:2c:3d:ec:02:09:27:f4:7f:15: a3:bd:07:c7:c0:63:67:1b:06:3b:06:10:76:e5:65: 43:03:99:44:80:82:c9:cb:17:41:08:53:0a:32:20: c2:52:4e:84:85:bc:4b:56:91:23:69:de:d4:d1:93: 64:0a:07:1b:70:ca:b2:db:ea:ce:04:f3:a2:1a:de: c2:3d:25:ec:2c:bf:2e:ac:7d:fc:ed:5e:66:50:ea: 1d:b1:0d:26:a4:4f:63:36:c8:f2:1e:53:dc:63:10: e2:ca:83:94:00:61:12:f1:c4:50:f8:56:94:c1:e4: ef:44:3d:a5:d3:d5:2e:8c:53:6e:f3:ef:83:b5:09: 2d:ff:f8:40:50:fd:8f:33:9a:2c:a6:38:c0:31:79: 80:0b:d8:98:1a:b0:cb:4b:33:0d:78:e9:2d:9c:f5: 44:9b:2b:4e:d4:76:7e:ae:92:33:a2:b4:b5:1f:d3: 82:71:cc:22:ec:ac:13:87:82:5b:e3:de:23:82:5d: bc:c6:05:35:50:39:40:56:cf:0e:00:86:54:3b:bc: 12:6d:ee:01:9d:ac:83:26:69:19:55:13:18:93:c2: b0:86:af:ce:49:cb:1d:76:39:10:ed:0d:c7:75:e8: 6b:46:e8:6d:17:4e:28:fa:f6:13:41:1d:40:ee:d7: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F8:66:21:9C:26:3C:12:BA:73:10:D2:1E:5D:70:11:FF:64:E6:EB X509v3 Authority Key Identifier: keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/2486E3E0D4B011F0A4E6361AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.7.128.0/18 103.10.228.0/22 110.77.128.0/17 110.78.128.0/18 116.58.224.0/19 119.42.64.0/18 IPv6: 2001:c38:b000::/36 Signature Algorithm: sha256WithRSAEncryption a5:b8:b0:a1:98:81:85:f4:c9:d2:74:2a:e0:5c:60:ac:2f:01: de:d2:2d:83:c5:62:d5:98:ba:b6:c7:b0:03:76:6a:8b:c9:a3: 68:87:b2:b5:02:a5:c5:19:e3:ff:20:29:6f:0e:4b:83:c3:fa: 27:ea:a6:9d:cf:cf:ad:b6:ad:df:36:bf:52:56:e6:a6:5d:25: c0:38:88:ba:27:96:0a:79:55:4e:85:2c:f8:46:61:41:38:4c: 4d:fe:62:78:87:99:25:c5:43:30:22:48:47:78:46:6a:91:df: bc:67:3e:be:13:e6:f5:d6:ec:1d:c4:21:88:8e:df:7d:7f:8b: db:36:af:35:d1:42:c6:16:a7:8b:06:50:2f:87:8a:fb:ba:e9: 28:a3:38:e8:ec:df:9b:e2:de:b7:36:27:2c:db:f6:80:08:05: 2b:25:4f:d2:76:97:19:62:69:8b:d1:13:3f:b3:90:70:b8:c8: 5b:d0:19:14:05:7e:2f:6f:30:9c:fa:db:cb:28:23:7b:da:5e: 29:0b:40:84:1a:9a:98:ef:7f:91:7c:43:df:50:41:d8:35:f2: 6d:a6:f4:d7:9f:63:7a:d3:8d:6f:ec:49:30:58:5c:ab:7a:a8: 18:5f:b1:89:41:97:c6:3c:48:81:41:2d:05:0b:41:7f:4d:f7: 08:1b:14:88 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx MDBDODUzOTEwHhcNMjUxMjA5MDMzNTQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGY2Ni1hYTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mZ9lW8sPewCCSf0fxWjvQfHwGNnGwY7BhB25WVDA5lEgILJyxdBCFMKMiDC Uk6EhbxLVpEjad7U0ZNkCgcbcMqy2+rOBPOiGt7CPSXsLL8urH387V5mUOodsQ0m pE9jNsjyHlPcYxDiyoOUAGES8cRQ+FaUweTvRD2l09UujFNu8++DtQkt//hAUP2P M5ospjjAMXmAC9iYGrDLSzMNeOktnPVEmytO1HZ+rpIzorS1H9OCccwi7KwTh4Jb 494jgl28xgU1UDlAVs8OAIZUO7wSbe4BnayDJmkZVRMYk8Kwhq/OScsddjkQ7Q3H dehrRuhtF04o+vYTQR1A7tfT8QIDAQABo4ICjjCCAoowHQYDVR0OBBYEFLL4ZiGc JjwSunMQ0h5dcBH/ZObrMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4 RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvMjQ4NkUzRTBE NEIwMTFGMEE0RTYzNjFBQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAq BAIAATAkAwQGPQeAAwQCZwrkAwQHbk2AAwQGbk6AAwQFdDrgAwQGdypAMA4EAgAC MAgDBgQgAQw4sDANBgkqhkiG9w0BAQsFAAOCAQEApbiwoZiBhfTJ0nQq4FxgrC8B 3tItg8Vi1Zi6tsewA3Zqi8mjaIeytQKlxRnj/yApbw5Lg8P6J+qmnc/Prbat3za/ Ulbmpl0lwDiIuieWCnlVToUs+EZhQThMTf5ieIeZJcVDMCJIR3hGapHfvGc+vhPm 9dbsHcQhiI7ffX+L2zavNdFCxhaniwZQL4eK+7rpKKM46Ozfm+LetzYnLNv2gAgF KyVP0naXGWJpi9ETP7OQcLjIW9AZFAV+L28wnPrbyygje9peKQtAhBqamO9/kXxD 31BB2DXybab0159jetONb+xJMFhcq3qoGF+xiUGXxjxIgUEtBQtBf033CBsUiA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:40 2026 by rpki-client