$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/BC19A604053E11EABC1E707AC4F9AE02.roa File: BC19A604053E11EABC1E707AC4F9AE02.roa (raw, json) Hash identifier: 3NtaFMmRSGiQ779f2aTB3zcvMfuQOTWoqKAG2Y4TQQc= Subject key identifier: DA:91:4D:3E:7C:B3:1B:AE:8A:20:05:61:3B:EB:AA:B8:18:7D:38:CB Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0CE5 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/BC19A604053E11EABC1E707AC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:35:29 +0000 ROA not before: Wed 18 Feb 2026 18:15:58 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58813 IP address blocks: 103.17.36.0/22 maxlen: 24 163.53.180.0/22 maxlen: 24 2405:d440::/32 maxlen: 32 2405:d440:100::/48 maxlen: 48 2405:d440:1fb::/48 maxlen: 48 2405:d440:1fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Feb 18 18:15:58 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a59220-1b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:b3:82:60:96:f7:bf:be:72:9a:83:bc:d2: 01:a4:1d:6a:2e:a1:fe:96:22:7c:70:62:22:46:18: 1a:44:f8:4b:ed:42:69:24:f6:78:39:91:a0:bb:27: 59:e4:af:e9:3c:ed:9d:8d:e9:a5:d6:34:35:96:84: 16:47:7a:25:64:3a:74:04:7e:29:9e:f6:df:f8:87: 20:c1:35:bc:2a:b4:1a:cd:ef:87:95:53:83:6d:12: 1d:37:46:22:18:10:02:3a:c7:7c:5b:23:35:d3:19: 40:9f:36:5c:d0:fb:52:54:9d:ab:14:4a:14:25:2a: 8a:46:83:38:fc:33:65:e5:e4:01:d5:99:d8:34:19: 81:83:2d:84:f2:65:ae:d5:36:44:be:27:bf:17:44: f3:e2:93:f8:d1:5f:7a:0f:30:c4:0b:a4:91:83:c6: fa:67:95:8d:9a:ba:2e:82:bd:87:dc:03:2d:f4:f4: f2:87:f9:4b:3f:70:f2:18:66:75:45:a1:c5:8c:f0: a5:0c:96:c7:46:12:7f:2b:ab:bd:5c:e7:71:9c:cc: 32:10:37:a7:51:de:93:f7:bf:3e:18:f2:c0:2f:3a: 2f:63:38:c0:7e:6f:7a:22:6d:90:bc:ea:8f:91:b8: a6:1a:26:a4:5a:21:81:48:93:26:d2:d9:ff:a2:11: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:4D:3E:7C:B3:1B:AE:8A:20:05:61:3B:EB:AA:B8:18:7D:38:CB X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/BC19A604053E11EABC1E707AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.17.36.0/22 163.53.180.0/22 IPv6: 2405:d440::/32 Signature Algorithm: sha256WithRSAEncryption 26:98:af:a2:14:ec:d8:f6:9e:03:d0:7e:2f:16:c0:72:37:7f: ad:8a:2b:3a:b5:33:6b:1b:7e:aa:58:0e:45:34:59:d3:79:66: 69:70:5c:da:a6:62:7e:f1:08:b8:87:d8:3e:53:fc:67:e9:7f: be:62:0d:45:a9:bc:b5:04:7a:85:80:65:c5:86:1b:2e:66:fb: ed:e3:88:90:e1:7a:37:fb:0c:0c:06:da:a8:c5:ce:0d:94:14: 07:66:b6:4b:90:20:c7:c9:2e:a9:45:34:91:73:65:d2:b6:0f: fe:dd:24:8c:83:11:a3:3b:c0:e2:58:3a:33:fd:ad:5a:dc:0c: 20:ba:75:6c:e9:e8:a4:99:69:a8:a0:62:5a:0a:8c:8d:10:b8: a2:c3:83:95:92:cd:e8:01:77:89:d8:7d:47:6d:20:cf:2f:94: ea:b7:91:1b:f6:a8:17:29:75:c0:57:ce:5d:55:1d:ae:1b:b6: 48:05:2d:8c:de:4a:f0:1e:e3:85:b6:02:04:92:ff:c0:ed:9f: e8:d5:e4:ca:4f:a9:60:5d:19:49:8a:02:4c:56:41:b4:9d:91: a7:c0:53:ad:06:4d:67:18:54:e8:43:87:5f:c8:ff:21:8d:d0: 5e:7b:21:b8:76:79:27:d0:e4:81:f9:ea:f1:00:38:82:c1:1a: bd:b6:71:2f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjYwMjE4MTgxNTU4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTIyMC0xYjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXezgmCW97++cpqDvNIBpB1qLqH+liJ8cGIiRhgaRPhL7UJpJPZ4OZGguydZ 5K/pPO2djeml1jQ1loQWR3olZDp0BH4pnvbf+IcgwTW8KrQaze+HlVODbRIdN0Yi GBACOsd8WyM10xlAnzZc0PtSVJ2rFEoUJSqKRoM4/DNl5eQB1ZnYNBmBgy2E8mWu 1TZEvie/F0Tz4pP40V96DzDEC6SRg8b6Z5WNmrougr2H3AMt9PTyh/lLP3DyGGZ1 RaHFjPClDJbHRhJ/K6u9XOdxnMwyEDenUd6T978+GPLALzovYzjAfm96Im2QvOqP kbimGiakWiGBSJMm0tn/ohEI/wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFNqRTT58 sxuuiiAFYTvrqrgYfTjLMB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNGOTkvQjczODQwMTAwNTNEMTFFQTlCNjZCRTc4QzRGOUFFMDIvQkMxOUE2MDQw NTNFMTFFQUJDMUU3MDdBQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZxEkAwQCozW0MA0EAgACMAcDBQAkBdRAMA0GCSqGSIb3DQEBCwUA A4IBAQAmmK+iFOzY9p4D0H4vFsByN3+tiis6tTNrG36qWA5FNFnTeWZpcFzapmJ+ 8Qi4h9g+U/xn6X++Yg1Fqby1BHqFgGXFhhsuZvvt44iQ4Xo3+wwMBtqoxc4NlBQH ZrZLkCDHyS6pRTSRc2XStg/+3SSMgxGjO8DiWDoz/a1a3AwgunVs6eikmWmooGJa CoyNELiiw4OVks3oAXeJ2H1HbSDPL5Tqt5Eb9qgXKXXAV85dVR2uG7ZIBS2M3krw HuOFtgIEkv/A7Z/o1eTKT6lgXRlJigJMVkG0nZGnwFOtBk1nGFToQ4dfyP8hjdBe eyG4dnkn0OSB+erxADiCwRq9tnEv -----END CERTIFICATE-----Generated at Mon Mar 2 20:17:36 2026 by rpki-client