$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa File: A7982B82B88011F081A7B245C4F9AE02.roa (raw, json) Hash identifier: frHg8Rqf3UbnQBGUOe74YmnG+QDIBrzQNlMdFk4UK0g= Subject key identifier: C0:34:E1:7E:EC:9C:ED:6F:C1:5F:FB:1F:37:C3:DD:46:97:D8:9E:3E Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0BE8 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:34:44 +0000 ROA not before: Tue 20 Jan 2026 19:16:06 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138557 IP address blocks: 103.132.217.0/24 maxlen: 24 103.132.218.0/23 maxlen: 23 103.132.218.0/24 maxlen: 24 103.132.219.0/24 maxlen: 24 2404:4040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D, serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Jan 20 19:16:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a478b4-fb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:08:8c:ce:cd:4f:58:fa:f6:fe:4c:e4:94: 3b:0e:55:e8:99:f6:be:37:49:33:04:0c:b8:16:33: c8:18:f9:29:77:b4:81:16:84:08:d9:e8:27:b4:3e: 07:56:46:7a:9b:6c:e7:74:6a:82:59:c7:82:77:eb: 42:28:ec:df:a3:5b:80:33:ce:52:78:59:ca:bc:a9: 9f:fb:ca:1e:2d:58:96:b0:20:b5:23:20:c2:db:d2: f6:88:d7:5a:ef:b8:2e:c0:2c:2d:4a:ba:ee:ab:64: fa:00:fb:7a:a6:eb:48:9c:af:d7:ba:e2:9e:f9:75: a1:f1:b5:f7:eb:40:4e:fa:3b:f8:a3:1a:85:95:3a: 72:59:f6:c2:0b:fd:54:81:71:06:fc:d9:10:59:d2: 46:4d:8d:ca:fc:d4:5c:e9:5d:48:de:5f:37:41:c2: 9c:47:30:ce:70:dd:07:a2:ba:ce:11:b0:98:8b:6d: 70:ab:54:fa:6a:39:e3:0c:92:69:d1:81:c1:16:9f: 13:9b:84:1d:be:e5:02:00:ac:0f:18:6a:fa:63:26: 49:9f:05:52:bf:a1:71:a7:dc:26:0b:ef:b4:f5:91: 83:be:ba:9a:bb:3e:27:be:f6:d5:75:82:52:a8:23: 7f:c2:c6:3c:65:84:2d:6b:46:3d:7d:6b:52:98:b0: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:34:E1:7E:EC:9C:ED:6F:C1:5F:FB:1F:37:C3:DD:46:97:D8:9E:3E X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/A7982B82B88011F081A7B245C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.217.0-103.132.219.255 IPv6: 2404:4040::/32 Signature Algorithm: sha256WithRSAEncryption 42:fc:a8:eb:93:5b:4c:ed:7b:12:42:1c:4d:c9:60:d7:28:78: 23:a2:62:ad:15:1e:58:d3:4b:30:16:5a:12:b2:f3:d5:a9:a1: ae:77:59:2d:42:90:dc:3d:6a:7d:47:c6:1b:e0:8e:fc:50:db: 8b:6f:0c:c9:17:81:af:9e:38:4b:e6:c9:eb:8b:09:6d:00:3a: 18:65:c8:af:e0:f0:cb:b9:f3:84:d2:9f:b5:88:af:4b:81:98: 7b:5d:00:3f:a8:2a:e3:1e:7a:26:e6:45:46:75:c4:a1:96:4f: 04:d2:09:a8:dd:51:fe:01:11:6f:ff:c4:7f:8d:5a:1c:cc:7b: 66:a7:3e:05:13:a5:bc:e1:2d:1d:5c:43:b1:af:19:5e:8a:ed: 88:8b:f1:4e:67:fe:5d:6b:21:e2:d7:cd:68:e7:16:72:26:b3: 5f:81:61:94:50:45:79:21:47:87:c1:ec:62:d1:51:e4:06:52: 4d:2d:ff:01:40:fd:73:14:b4:10:25:7b:82:5b:0e:b7:88:40: 5d:73:b4:08:a4:ab:d5:75:16:26:a1:2f:f0:66:0a:ca:30:a4: 4f:03:fd:6a:bb:81:41:3e:38:6b:b4:45:54:60:3c:fc:93:16: e4:a4:9c:66:dc:d3:a0:6d:4c:d0:b7:ee:e5:23:b6:13:2d:42: 3d:85:14:90 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjYwMTIwMTkxNjA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzhiNC1mYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdkIjM7NT1j69v5M5JQ7DlXomfa+N0kzBAy4FjPIGPkpd7SBFoQI2egntD4H VkZ6m2zndGqCWceCd+tCKOzfo1uAM85SeFnKvKmf+8oeLViWsCC1IyDC29L2iNda 77guwCwtSrruq2T6APt6putInK/XuuKe+XWh8bX360BO+jv4oxqFlTpyWfbCC/1U gXEG/NkQWdJGTY3K/NRc6V1I3l83QcKcRzDOcN0HorrOEbCYi21wq1T6ajnjDJJp 0YHBFp8Tm4QdvuUCAKwPGGr6YyZJnwVSv6Fxp9wmC++09ZGDvrqauz4nvvbVdYJS qCN/wsY8ZYQta0Y9fWtSmLDIYQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMA04X7s nO1vwV/7HzfD3UaX2J4+MB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYyMkQvMkFBRkNDRUUzNjhFMTFFQTkyQTQ5RTdEQzRGOUFFMDIvQTc5ODJCODJC ODgwMTFGMDgxQTdCMjQ1QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBABnhNkDBAJnhNgwDQQCAAIwBwMFACQEQEAwDQYJKoZIhvcNAQEL BQADggEBAEL8qOuTW0ztexJCHE3JYNcoeCOiYq0VHljTSzAWWhKy89Wpoa53WS1C kNw9an1HxhvgjvxQ24tvDMkXga+eOEvmyeuLCW0AOhhlyK/g8Mu584TSn7WIr0uB mHtdAD+oKuMeeibmRUZ1xKGWTwTSCajdUf4BEW//xH+NWhzMe2anPgUTpbzhLR1c Q7GvGV6K7YiL8U5n/l1rIeLXzWjnFnIms1+BYZRQRXkhR4fB7GLRUeQGUk0t/wFA /XMUtBAle4JbDreIQF1ztAikq9V1FiahL/BmCsowpE8D/Wq7gUE+OGu0RVRgPPyT FuSknGbc06BtTNC37uUjthMtQj2FFJA= -----END CERTIFICATE-----Generated at Tue Mar 3 04:07:33 2026 by rpki-client