$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa File: 6602AEE2CD7411EFB3DC8110C4F9AE02.roa (raw, json) Hash identifier: C/SrkSyxC6zRVkJr/VHN4u2NMwkfLPcm1m72Nr1WtQ4= Subject key identifier: 90:E9:3D:2F:0E:CD:08:D7:C7:7A:72:41:25:74:AB:4A:1A:02:B4:6E Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Certificate serial: 0A02 Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:37:44 +0000 ROA not before: Sat 28 Feb 2026 21:17:41 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137199 IP address blocks: 103.101.234.0/23 maxlen: 23 103.115.12.0/23 maxlen: 23 103.115.13.0/24 maxlen: 24 203.13.35.0/24 maxlen: 24 203.20.104.0/24 maxlen: 24 2401:d6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25 Validity Not Before: Feb 28 21:17:41 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48778-9252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:38:ab:5d:6f:c6:74:21:02:9b:99:e9:67: 01:5b:9e:88:b3:ef:3a:d0:17:7c:8f:dc:bc:b2:ee: 62:11:37:8e:72:6f:5b:9d:d4:4d:ee:5b:5d:3b:d8: 0d:ee:bd:dd:57:06:39:48:7a:b7:e5:3a:39:64:9e: 91:44:0d:0b:a0:a7:a6:fc:4a:38:e8:46:ac:28:d0: b5:13:b4:ad:f3:e3:5d:0d:d0:e3:34:c8:f5:ba:10: b5:ee:67:87:52:17:bc:ef:74:b2:0a:a9:97:d8:90: 1b:6c:64:51:5c:11:9d:8f:33:aa:13:47:82:5a:9b: 16:56:9b:fe:9b:e0:71:da:15:ce:b7:e1:29:89:8a: 22:dc:05:b3:ea:2c:06:0e:2a:72:7b:45:65:93:e5: 4f:01:77:76:6b:f5:34:07:15:f7:be:17:67:1c:92: e6:36:04:2b:fe:0c:0f:fa:fe:65:f7:6b:43:04:cf: 40:bd:7a:eb:dd:d4:19:5f:a7:c4:f8:16:02:fb:66: f7:10:e4:4d:ca:cf:53:ca:05:dc:2e:39:de:f8:54: 5c:64:16:88:56:8e:46:28:3d:f3:35:b3:d6:52:78: 60:93:03:73:a9:37:33:d0:b0:93:52:4b:0e:da:1e: ef:3b:f7:dd:c9:ac:5d:f5:5f:a7:2f:a6:14:17:77: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:3D:2F:0E:CD:08:D7:C7:7A:72:41:25:74:AB:4A:1A:02:B4:6E X509v3 Authority Key Identifier: keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/6602AEE2CD7411EFB3DC8110C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.234.0/23 103.115.12.0/23 203.13.35.0/24 203.20.104.0/24 IPv6: 2401:d6c0::/32 Signature Algorithm: sha256WithRSAEncryption 9c:f2:8a:cc:e5:20:fe:29:96:81:1b:16:c2:4c:d7:f0:b0:06: 9f:f8:73:84:56:0f:d7:d8:0f:b1:a3:2f:4a:00:ef:48:49:df: 02:23:cf:12:e1:3a:e0:3e:3b:ea:da:0c:c3:91:dc:9c:f3:31: 23:ae:b5:7d:c9:9f:38:99:a7:53:91:fd:0e:d1:d4:c5:35:08: 13:81:be:00:fe:2a:26:9c:65:4f:6a:ef:dc:c6:e4:af:e1:f1: a7:41:9c:f3:4e:b7:07:17:d6:82:37:69:9e:fa:6c:b8:5d:3a: 8b:63:05:09:c8:ec:1d:d8:f2:09:76:5d:82:ab:ca:2a:d6:91: f3:2d:1f:42:3d:5b:b0:96:32:3d:a1:7d:fa:15:ab:68:da:e1: 9a:a2:c7:a7:04:4a:4d:90:4d:75:46:9a:a5:2d:38:59:e9:3f: 78:2c:03:34:ca:6c:aa:e7:e3:bb:12:69:28:ca:d1:bf:25:69: 2f:62:00:74:ed:19:4f:30:cf:84:5d:6a:b7:09:4e:40:c0:7e: 5a:fe:ac:73:84:36:a1:dc:a3:0c:41:42:8a:08:64:f5:26:60: 53:f2:5e:f6:3a:5d:70:5a:8b:9d:ce:9b:6d:06:e0:6a:0a:16: 6d:b8:39:17:84:ac:b1:84:03:db:51:91:9b:67:23:be:e2:6f: 18:83:82:a8 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGQTQxMTAvBgNVBAUTKDUxOTQyRDI1RURCQ0E1MURGQTU2Q0UwOUVEMzYxRUI3 QTI2REJEMjUwHhcNMjYwMjI4MjExNzQxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODc3OC05MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokI4q11vxnQhApuZ6WcBW56Is+860Bd8j9y8su5iETeOcm9bndRN7ltdO9gN 7r3dVwY5SHq35To5ZJ6RRA0LoKem/Eo46EasKNC1E7St8+NdDdDjNMj1uhC17meH Uhe873SyCqmX2JAbbGRRXBGdjzOqE0eCWpsWVpv+m+Bx2hXOt+EpiYoi3AWz6iwG Dipye0Vlk+VPAXd2a/U0BxX3vhdnHJLmNgQr/gwP+v5l92tDBM9AvXrr3dQZX6fE +BYC+2b3EORNys9TygXcLjne+FRcZBaIVo5GKD3zNbPWUnhgkwNzqTcz0LCTUksO 2h7vO/fdyaxd9V+nL6YUF3fPLwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFJDpPS8O zQjXx3pyQSV0q0oaArRuMB8GA1UdIwQYMBaAFFGULSXtvKUd+lbOCe02Hreibb0l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUZBNC9CNjc4NjJGQUFC OTUxMUVBQjI1NTlDNUJDNEY5QUUwMi9VWlF0SmUyOHBSMzZWczRKN1RZZXQ2SnR2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VaUXRKZTI4cFIzNlZzNEo3VFlldDZKdHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGQTQvQjY3ODYyRkFBQjk1MTFFQUIyNTU5QzVCQzRGOUFFMDIvNjYwMkFFRTJD RDc0MTFFRkIzREM4MTEwQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBZ2XqAwQBZ3MMAwQAyw0jAwQAyxRoMA0EAgACMAcDBQAkAdbAMA0G CSqGSIb3DQEBCwUAA4IBAQCc8orM5SD+KZaBGxbCTNfwsAaf+HOEVg/X2A+xoy9K AO9ISd8CI88S4TrgPjvq2gzDkdyc8zEjrrV9yZ84madTkf0O0dTFNQgTgb4A/iom nGVPau/cxuSv4fGnQZzzTrcHF9aCN2me+my4XTqLYwUJyOwd2PIJdl2Cq8oq1pHz LR9CPVuwljI9oX36Fato2uGaosenBEpNkE11RpqlLThZ6T94LAM0ymyq5+O7Emko ytG/JWkvYgB07RlPMM+EXWq3CU5AwH5a/qxzhDah3KMMQUKKCGT1JmBT8l72Ol1w WoudzpttBuBqChZtuDkXhKyxhAPbUZGbZyO+4m8Yg4Ko -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:23 2026 by rpki-client