$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2BF876B43C6411F098BE6F2EC4F9AE02.roa File: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (raw, json) Hash identifier: 1banGzm3MHHPGNLwGEl4a4TqEDqIBnphlYgtOeIrAtM= Subject key identifier: B6:AB:4B:5A:C3:9E:E3:06:39:30:7C:9F:A7:3A:D5:75:DC:47:C9:40 Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0DFD Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2BF876B43C6411F098BE6F2EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:39:50 +0000 ROA not before: Tue 20 Jan 2026 18:15:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134806 IP address blocks: 103.89.26.0/24 maxlen: 24 103.89.27.0/24 maxlen: 24 103.126.216.0/22 maxlen: 24 103.200.36.0/22 maxlen: 22 103.200.36.0/23 maxlen: 23 103.200.36.0/24 maxlen: 24 103.200.37.0/24 maxlen: 24 103.200.38.0/23 maxlen: 23 103.200.38.0/24 maxlen: 24 103.200.39.0/24 maxlen: 24 123.253.64.0/22 maxlen: 24 2401:1040::/32 maxlen: 32 2401:1040::/40 maxlen: 40 2401:1040::/48 maxlen: 48 2401:1040:1::/48 maxlen: 48 2401:1040:2::/48 maxlen: 48 2401:1040:3::/48 maxlen: 48 2401:1040:100::/40 maxlen: 40 2401:1040:100::/48 maxlen: 48 2401:1040:101::/48 maxlen: 48 2401:1040:102::/48 maxlen: 48 2401:1040:103::/48 maxlen: 48 2401:1040:300::/40 maxlen: 40 2401:1040:301::/48 maxlen: 48 2401:1040:8100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Jan 20 18:15:13 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a479e6-1256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:b6:99:34:b9:fe:fd:2a:19:9a:86:da:ae: 31:11:62:47:e8:78:a0:3e:f7:c6:07:69:ff:6c:e0: f7:3b:69:15:f0:8d:c0:b3:e0:6d:86:d5:4c:98:f2: 0e:2d:3a:41:e5:c9:f7:d6:37:3d:6e:61:3f:bd:e1: 99:70:af:0c:c2:9b:a1:a7:06:82:e3:a6:9d:0e:a4: bb:95:66:f2:4f:2f:d0:54:c2:87:10:d3:2b:22:ef: 3b:cb:43:64:6c:5a:c8:36:72:20:45:7e:b4:95:ea: cc:13:ef:44:6c:2d:2f:d7:58:05:1b:d0:d4:ce:b4: ce:de:4c:27:db:05:e3:49:45:19:33:3a:e5:b3:ac: c2:7f:1a:6c:20:fe:5f:8a:fe:68:50:fd:bf:cd:2b: 2a:ec:0d:29:5b:52:7b:4e:ee:5a:ca:94:35:ee:a6: 0c:21:ff:fc:6e:9b:7b:3d:c0:21:33:43:8a:e2:c3: 5e:5b:a5:bc:3a:87:d0:01:43:b6:e3:79:ec:01:22: cc:70:dc:6a:88:ec:b0:ef:ad:fa:b3:5d:3c:23:f3: 3b:2c:7d:1b:30:fc:b2:41:64:87:55:5c:3d:f6:1a: 33:f9:07:2a:13:e5:4c:ed:96:42:27:a0:1c:42:68: 7e:f7:ad:ff:48:a0:a6:51:41:8d:d6:64:64:c6:c9: 30:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AB:4B:5A:C3:9E:E3:06:39:30:7C:9F:A7:3A:D5:75:DC:47:C9:40 X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/2BF876B43C6411F098BE6F2EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.89.26.0/23 103.126.216.0/22 103.200.36.0/22 123.253.64.0/22 IPv6: 2401:1040::/32 Signature Algorithm: sha256WithRSAEncryption 61:cf:27:b1:1b:eb:f1:e0:e1:f1:9b:ac:af:07:90:1f:f0:72: 9b:b7:6b:6f:30:27:12:2e:e2:5e:a4:81:1b:22:61:df:eb:dc: c0:ca:39:90:20:30:ab:46:3f:93:2e:6c:f7:b9:11:b9:f9:09: 8e:15:e6:87:e7:d3:a4:6f:d3:99:87:0a:ae:33:f7:32:6c:8e: 94:1c:30:d7:d4:59:33:67:02:b7:36:6b:02:d8:41:3f:17:e3: b9:23:ab:97:ca:ab:cc:7d:a1:7f:08:51:79:72:c5:4b:12:51: f2:70:e2:27:37:a1:0e:c7:53:88:83:30:e8:e9:0f:7c:af:27: b6:8a:92:2b:33:c4:57:3f:fd:ea:af:94:ec:d7:1b:fd:6e:2f: 43:22:29:50:16:8f:11:20:42:9a:81:bf:7c:40:cc:dd:b2:9e: 65:87:49:4f:b6:86:a4:a7:45:93:ce:36:eb:a9:86:5d:50:f2: 08:b1:44:ef:6e:10:f0:d4:96:bd:ec:5d:8e:20:6d:b8:0f:18: a6:06:e3:29:95:b1:0f:d2:21:61:ee:4d:51:44:01:45:dc:23: 33:e7:b9:0f:e0:17:6d:df:84:46:2f:4f:90:71:31:df:ad:d0: 91:e2:24:56:69:db:27:7a:60:b1:b3:7f:03:a3:3e:0a:f8:b0: 82:b3:d8:46 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjYwMTIwMTgxNTEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzllNi0xMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08S2mTS5/v0qGZqG2q4xEWJH6HigPvfGB2n/bOD3O2kV8I3As+BthtVMmPIO LTpB5cn31jc9bmE/veGZcK8MwpuhpwaC46adDqS7lWbyTy/QVMKHENMrIu87y0Nk bFrINnIgRX60lerME+9EbC0v11gFG9DUzrTO3kwn2wXjSUUZMzrls6zCfxpsIP5f iv5oUP2/zSsq7A0pW1J7Tu5aypQ17qYMIf/8bpt7PcAhM0OK4sNeW6W8OofQAUO2 43nsASLMcNxqiOyw7636s108I/M7LH0bMPyyQWSHVVw99hoz+QcqE+VM7ZZCJ6Ac Qmh+963/SKCmUUGN1mRkxskwlwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFLarS1rD nuMGOTB8n6c61XXcR8lAMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMkJGODc2QjQz QzY0MTFGMDk4QkU2RjJFQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBZ1kaAwQCZ37YAwQCZ8gkAwQCe/1AMA0EAgACMAcDBQAkARBAMA0G CSqGSIb3DQEBCwUAA4IBAQBhzyexG+vx4OHxm6yvB5Af8HKbt2tvMCcSLuJepIEb ImHf69zAyjmQIDCrRj+TLmz3uRG5+QmOFeaH59Okb9OZhwquM/cybI6UHDDX1Fkz ZwK3NmsC2EE/F+O5I6uXyqvMfaF/CFF5csVLElHycOInN6EOx1OIgzDo6Q98rye2 ipIrM8RXP/3qr5Ts1xv9bi9DIilQFo8RIEKagb98QMzdsp5lh0lPtoakp0WTzjbr qYZdUPIIsUTvbhDw1Ja97F2OIG24DximBuMplbEP0iFh7k1RRAFF3CMz57kP4Bdt 34RGL0+QcTHfrdCR4iRWadsnemCxs38Doz4K+LCCs9hG -----END CERTIFICATE-----Generated at Mon Mar 2 10:51:29 2026 by rpki-client