$ rpki-client -vvf rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/214B85D87C0311EBB2F8C86CC4F9AE02.roa File: 214B85D87C0311EBB2F8C86CC4F9AE02.roa (raw, json) Hash identifier: XRI5mHaTfsQ5P4tZOTRljrYvxsKQSjEVMe5uuC/lXuc= Subject key identifier: C8:A0:09:29:AF:89:10:11:6A:6F:66:24:AD:F0:32:02:C1:AC:AD:7B Certificate issuer: /CN=A912BAA5/serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Certificate serial: 3529 Authority key identifier: A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/214B85D87C0311EBB2F8C86CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:30:52 +0000 ROA not before: Wed 31 Dec 2025 15:10:55 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 24556 IP address blocks: 103.199.108.0/22 maxlen: 24 137.59.48.0/22 maxlen: 24 202.191.120.0/21 maxlen: 24 2404:3f80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13609 (0x3529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BAA5, serialNumber=A5367BE14241559C1EB87D0D5EA3EEC593EDCFEC Validity Not Before: Dec 31 15:10:55 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44d9c-4329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:dc:1e:4a:6a:59:70:3d:ad:6a:d4:37:cd: f1:a1:3c:54:0f:17:d0:1e:a8:1f:87:82:00:8e:a7: dd:e4:9b:8a:9a:30:a2:46:df:21:d0:7b:ca:fb:a9: e0:01:90:65:18:3b:65:27:56:2e:8a:4a:b7:b7:18: 21:76:9d:f7:0b:af:b4:a4:16:5d:83:db:3a:e1:3d: 9e:29:cd:a1:2a:13:55:3b:4f:f0:3b:e7:2e:dc:c1: 22:c8:9b:90:e2:5f:49:5d:5e:34:41:4f:71:76:87: 4f:86:c0:26:04:52:f8:da:a3:ae:cb:94:19:13:70: e0:31:9e:42:5e:94:ec:24:dc:8d:6f:00:bb:50:19: ff:0c:91:67:d6:25:2d:79:82:ab:b8:19:ff:84:c5: 91:ed:6d:61:bf:d0:06:7b:e1:8b:7f:58:0d:28:b5: ad:70:ce:c5:c0:08:cd:b2:e3:61:da:fe:a8:3e:5c: 01:d4:cd:e2:36:94:b4:37:ea:05:48:0b:3d:b1:2e: 47:78:cc:39:8a:27:1d:7a:a9:f4:37:67:39:24:d6: b6:ad:14:17:ca:e2:91:33:33:b0:85:cc:d2:78:35: 0d:16:7d:ad:d1:3a:ba:a0:23:8e:7c:93:74:aa:62: 13:4b:df:0f:df:a0:97:f6:5b:72:fd:72:18:47:36: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:09:29:AF:89:10:11:6A:6F:66:24:AD:F0:32:02:C1:AC:AD:7B X509v3 Authority Key Identifier: keyid:A5:36:7B:E1:42:41:55:9C:1E:B8:7D:0D:5E:A3:EE:C5:93:ED:CF:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/pTZ74UJBVZweuH0NXqPuxZPtz-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pTZ74UJBVZweuH0NXqPuxZPtz-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BAA5/E67F63641D8F11E2B54E43EF08B02CD2/214B85D87C0311EBB2F8C86CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.199.108.0/22 137.59.48.0/22 202.191.120.0/21 IPv6: 2404:3f80::/32 Signature Algorithm: sha256WithRSAEncryption 7b:b3:ea:48:7b:de:15:c7:29:46:c6:e4:2d:21:35:63:2b:da: e6:13:4f:61:c3:7f:df:08:ed:16:e5:bc:c4:eb:7d:7c:b2:a1: 90:09:94:19:39:6b:1d:1b:95:ea:1a:ec:f9:6f:97:58:fc:46: 24:c4:14:97:29:1b:58:bb:7c:21:95:a5:9d:2d:bc:78:ca:12: 52:a2:81:fa:bb:ee:86:07:8e:99:fd:d6:52:4c:ae:01:40:a8: 4f:cd:64:fc:4e:11:cb:74:9c:0c:db:a3:55:63:ee:06:58:fd: 86:57:9d:18:64:cd:6a:8e:96:6c:83:cf:af:0b:69:67:f3:20: 43:17:70:3f:cc:22:3f:18:26:14:93:de:29:f1:92:9e:71:2d: e3:fd:75:53:f2:03:23:a8:56:84:c8:27:62:e9:95:5d:62:11: a3:4e:c3:8b:62:8c:20:6e:96:5d:cd:70:5b:f3:6d:c8:53:a4: 36:4f:81:04:e7:78:14:b3:4d:5c:97:ae:2e:f3:cd:5d:b8:0a: 88:81:12:c2:fe:f0:c8:2a:8d:68:82:aa:16:92:e9:29:fe:64: 07:80:72:a9:e7:3e:cc:b6:2b:f9:53:f2:75:9b:9e:35:eb:a1: 37:7f:15:8a:8b:8e:b6:47:60:da:62:4b:f6:20:8d:cd:3d:34: 95:d3:88:87 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICNSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBQTUxMTAvBgNVBAUTKEE1MzY3QkUxNDI0MTU1OUMxRUI4N0QwRDVFQTNFRUM1 OTNFRENGRUMwHhcNMjUxMjMxMTUxMDU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGQ5Yy00MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mrcHkpqWXA9rWrUN83xoTxUDxfQHqgfh4IAjqfd5JuKmjCiRt8h0HvK+6ng AZBlGDtlJ1Yuikq3txghdp33C6+0pBZdg9s64T2eKc2hKhNVO0/wO+cu3MEiyJuQ 4l9JXV40QU9xdodPhsAmBFL42qOuy5QZE3DgMZ5CXpTsJNyNbwC7UBn/DJFn1iUt eYKruBn/hMWR7W1hv9AGe+GLf1gNKLWtcM7FwAjNsuNh2v6oPlwB1M3iNpS0N+oF SAs9sS5HeMw5iicdeqn0N2c5JNa2rRQXyuKRMzOwhczSeDUNFn2t0Tq6oCOOfJN0 qmITS98P36CX9lty/XIYRzYTrQIDAQABo4ICezCCAncwHQYDVR0OBBYEFMigCSmv iRARam9mJK3wMgLBrK17MB8GA1UdIwQYMBaAFKU2e+FCQVWcHrh9DV6j7sWT7c/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkFBNS9FNjdGNjM2NDFE OEYxMUUyQjU0RTQzRUYwOEIwMkNEMi9wVFo3NFVKQlZad2V1SDBOWHFQdXhaUHR6 LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BUWjc0VUpCVlp3ZXVIME5YcVB1eFpQdHotdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkJBQTUvRTY3RjYzNjQxRDhGMTFFMkI1NEU0M0VGMDhCMDJDRDIvMjE0Qjg1RDg3 QzAzMTFFQkIyRjhDODZDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ8dsAwQCiTswAwQDyr94MA0EAgACMAcDBQAkBD+AMA0GCSqGSIb3 DQEBCwUAA4IBAQB7s+pIe94VxylGxuQtITVjK9rmE09hw3/fCO0W5bzE6318sqGQ CZQZOWsdG5XqGuz5b5dY/EYkxBSXKRtYu3whlaWdLbx4yhJSooH6u+6GB46Z/dZS TK4BQKhPzWT8ThHLdJwM26NVY+4GWP2GV50YZM1qjpZsg8+vC2ln8yBDF3A/zCI/ GCYUk94p8ZKecS3j/XVT8gMjqFaEyCdi6ZVdYhGjTsOLYowgbpZdzXBb823IU6Q2 T4EE53gUs01cl64u881duAqIgRLC/vDIKo1ogqoWkukp/mQHgHKp5z7Mtiv5U/J1 m54166E3fxWKi462R2DaYkv2II3NPTSV04iH -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:57 2026 by rpki-client