$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa File: 218CF3401F9411F083A54B70C4F9AE02.roa (raw, json) Hash identifier: N5mJJjPLK714usB1Auj1jXAnw3X85CmNICNXmMMuj+Y= Subject key identifier: DE:19:AC:74:7E:3D:9A:3F:F2:E3:64:4D:AE:53:9A:89:67:01:93:52 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0FDD Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:02:13 +0000 ROA not before: Wed 04 Jun 2025 18:00:14 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 398704 IP address blocks: 103.232.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4061 (0xfdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Jun 4 18:00:14 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47f25-2fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b0:b8:af:05:d4:61:12:a4:80:0f:b4:01:3b: 7d:e7:71:78:98:ae:33:89:6f:c3:f0:5f:29:df:ab: e1:d1:f9:47:5f:bb:d1:14:7d:53:15:b8:de:c8:56: 84:77:ba:ac:96:eb:42:85:d9:74:b1:3d:c1:02:ce: 7b:bb:0a:e6:9a:ea:32:f3:6e:35:6f:98:20:29:c3: c0:db:35:ff:56:23:80:4f:7e:7b:98:65:44:24:33: 47:0e:59:aa:19:0a:aa:56:cc:f5:0e:2f:84:ba:67: a1:27:91:45:b9:a0:cc:01:cc:49:bc:4f:5d:cc:a8: 89:94:a1:51:a8:db:47:c5:72:ba:39:c7:bf:60:53: 66:50:9f:a5:fd:4c:1e:26:a2:2e:68:1e:9b:34:d6: 69:62:e0:1d:cb:5e:46:64:2e:85:e8:dd:61:45:2b: f0:6e:2f:ad:e1:a4:77:73:e4:57:f9:40:fb:1c:44: b1:a4:e8:f5:ea:85:95:6b:25:59:7e:fa:56:af:dc: 35:b5:a3:2b:66:c5:88:4a:cd:f4:ee:8d:81:9c:81: 35:79:1e:7f:7d:71:47:81:5e:9b:f7:10:32:98:25: d0:5f:6f:b5:db:01:2b:d6:7c:c7:e2:94:51:19:80: 79:02:05:64:25:aa:12:90:ba:7e:f2:9b:94:6a:eb: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:19:AC:74:7E:3D:9A:3F:F2:E3:64:4D:AE:53:9A:89:67:01:93:52 X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.232.214.0/23 Signature Algorithm: sha256WithRSAEncryption 55:d1:11:df:bc:45:c0:53:2f:86:34:50:2d:da:13:fd:e8:a2: 91:2d:3b:e0:cc:d0:9b:f1:6e:d2:1f:c9:75:cb:71:b0:af:e9: 14:41:41:7e:e3:81:92:66:14:96:cd:eb:10:4f:69:e1:b7:0d: c8:9c:82:94:11:84:a0:ea:a9:8e:9c:de:af:9e:1e:13:0a:e5: 5e:05:9f:a5:22:95:50:f8:0b:99:ad:3a:dd:b1:66:e0:e1:23: 19:05:a4:84:c4:69:d1:08:eb:d4:f5:fd:a5:61:ac:d0:fc:52: 9e:23:cb:c1:80:1c:be:20:40:53:0a:46:0b:b6:67:b3:dd:27: 1b:cd:e9:20:d0:48:98:7d:83:b8:d6:3d:09:07:7d:7c:03:f3: 29:54:26:7f:14:13:8f:9e:5f:a7:bc:a6:e2:b4:be:66:b2:12: 0f:9d:00:e0:bc:0a:9d:6e:88:6e:19:85:e3:cf:aa:f5:1b:1c: 8f:c1:c9:9e:60:3e:95:85:1e:9c:d1:71:06:ce:95:77:f8:b5: e2:e6:ce:08:ad:3a:24:df:5c:dc:d6:2b:43:56:a4:6f:a7:a3: f6:cf:0c:4a:00:53:1d:22:c1:77:9a:82:18:87:bc:18:bc:aa: 2e:6c:94:ee:fd:40:1a:9e:ea:db:c1:f6:5d:91:92:81:68:55: 26:fe:4d:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNjA0MTgwMDE0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2YyNS0yZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bC4rwXUYRKkgA+0ATt953F4mK4ziW/D8F8p36vh0flHX7vRFH1TFbjeyFaE d7qslutChdl0sT3BAs57uwrmmuoy8241b5ggKcPA2zX/ViOAT357mGVEJDNHDlmq GQqqVsz1Di+EumehJ5FFuaDMAcxJvE9dzKiJlKFRqNtHxXK6Oce/YFNmUJ+l/Uwe JqIuaB6bNNZpYuAdy15GZC6F6N1hRSvwbi+t4aR3c+RX+UD7HESxpOj16oWVayVZ fvpWr9w1taMrZsWISs307o2BnIE1eR5/fXFHgV6b9xAymCXQX2+12wEr1nzH4pRR GYB5AgVkJaoSkLp+8puUausqgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN4ZrHR+ PZo/8uNkTa5TmolnAZNSMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvMjE4Q0YzNDAx Rjk0MTFGMDgzQTU0QjcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+jWMA0GCSqGSIb3DQEBCwUAA4IBAQBV0RHfvEXAUy+GNFAt2hP9 6KKRLTvgzNCb8W7SH8l1y3Gwr+kUQUF+44GSZhSWzesQT2nhtw3InIKUEYSg6qmO nN6vnh4TCuVeBZ+lIpVQ+AuZrTrdsWbg4SMZBaSExGnRCOvU9f2lYazQ/FKeI8vB gBy+IEBTCkYLtmez3Scbzekg0EiYfYO41j0JB318A/MpVCZ/FBOPnl+nvKbitL5m shIPnQDgvAqdbohuGYXjz6r1GxyPwcmeYD6VhR6c0XEGzpV3+LXi5s4IrTok31zc 1itDVqRvp6P2zwxKAFMdIsF3moIYh7wYvKoubJTu/UAanurbwfZdkZKBaFUm/k1O -----END CERTIFICATE-----Generated at Mon Mar 2 13:55:30 2026 by rpki-client