$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/2FF7E9A600BB11EA895E5253C4F9AE02.roa File: 2FF7E9A600BB11EA895E5253C4F9AE02.roa (raw, json) Hash identifier: hriHnwahZFQ690sRLwz6iRs8F4NGV9dzWdCEbvzLxNM= Subject key identifier: C3:40:BE:D8:F2:8D:65:76:B4:8A:70:CC:5D:A9:67:8E:76:F2:5F:07 Certificate issuer: /CN=A9142A39/serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Certificate serial: 2A66 Authority key identifier: 27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/2FF7E9A600BB11EA895E5253C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:38:31 +0000 ROA not before: Sun 02 Nov 2025 16:02:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133155 IP address blocks: 103.253.38.0/23 maxlen: 23 103.253.38.0/24 maxlen: 24 103.253.39.0/24 maxlen: 24 2001:df7:d000::/47 maxlen: 47 2001:df7:d000::/48 maxlen: 48 2001:df7:d001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10854 (0x2a66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A39, serialNumber=2732A99A863BD6203CD915CD7257B5D1D987EB28 Validity Not Before: Nov 2 16:02:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44157-29e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:81:62:00:49:df:69:cc:0d:31:4b:0f:79: 93:3a:75:8d:df:50:88:c0:ff:0e:ef:24:e8:ca:a6: 25:62:33:ab:14:d4:fd:69:61:ee:75:b9:c0:8c:bc: db:22:da:25:8a:63:f0:a8:50:42:80:e3:0b:ca:49: 65:bc:c6:25:3c:cc:95:bb:50:d4:be:b3:e5:b9:9b: 80:de:3a:ad:6a:e3:bc:58:9e:4c:73:52:35:27:89: 6a:15:f0:13:03:96:79:bd:7b:4a:0e:70:6b:34:f3: c1:dc:e0:39:ed:bc:90:88:2b:4e:14:e0:60:27:28: 97:af:45:73:d2:ff:c5:f2:f9:ea:f8:f3:ae:53:24: 15:b4:97:e1:3a:b1:ec:7f:3c:c1:2a:64:47:d6:99: 58:8e:87:0f:66:96:52:2b:54:e0:93:17:96:8f:15: 3a:57:a8:b8:2a:e5:7f:e8:95:4d:bc:29:28:52:74: 9e:48:73:f8:cc:5e:c2:75:bc:85:5a:32:5b:9e:8b: c5:fc:86:d1:f4:da:37:63:1c:96:2f:51:9a:15:41: 88:8e:aa:d2:d7:cd:2b:47:49:64:ba:70:7c:23:62: fc:34:12:5f:ed:37:db:60:66:42:0c:fa:f9:d3:57: dc:3e:10:4c:6e:f1:a6:cd:91:7f:74:da:35:cd:b0: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:40:BE:D8:F2:8D:65:76:B4:8A:70:CC:5D:A9:67:8E:76:F2:5F:07 X509v3 Authority Key Identifier: keyid:27:32:A9:9A:86:3B:D6:20:3C:D9:15:CD:72:57:B5:D1:D9:87:EB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/JzKpmoY71iA82RXNcle10dmH6yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzKpmoY71iA82RXNcle10dmH6yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A39/A65949B23BC411E4B5A63E3BC4F9AE02/2FF7E9A600BB11EA895E5253C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.38.0/23 IPv6: 2001:df7:d000::/47 Signature Algorithm: sha256WithRSAEncryption 4c:98:63:86:8c:f0:c7:a6:3e:bd:29:7d:f9:a0:c6:ce:39:cf: a8:d7:b2:93:1a:22:15:26:dc:2a:a5:e9:26:4a:ba:74:ae:f7: cd:4b:a3:da:19:4f:bc:b9:68:b8:1e:a4:81:6d:ef:ec:fb:39: 7d:f8:b8:b7:6c:c7:52:8e:2f:c7:0b:ad:3d:a9:5d:d4:59:dd: 23:01:ef:cc:11:c1:73:e8:b6:fe:90:77:22:eb:54:5b:74:18: fc:1d:90:66:73:c0:02:7e:d4:99:ff:b9:ca:46:5d:c0:06:08: da:8c:52:f9:02:7c:9e:ad:2f:7f:c6:72:79:9a:2d:19:f9:b7: 2d:90:58:96:e9:40:b6:15:bc:21:fb:5f:3b:41:0e:9f:eb:06: d3:10:b8:38:5f:69:01:b8:d4:36:c1:2a:c3:00:6c:5a:5b:db: c3:a9:b8:5d:53:e4:12:39:f7:83:fd:17:26:6b:4b:fe:73:71: 1f:d4:ec:92:fd:50:5d:e8:8d:b5:52:32:c2:b7:21:80:9d:aa: 40:dc:23:de:33:87:a4:9f:50:68:1a:ba:77:d0:7c:ba:21:b5: 76:d5:3c:d7:d8:a6:b9:ab:55:08:f7:13:01:ae:88:67:8f:4a: 9b:4d:15:d8:15:f8:07:de:0f:7f:73:f6:a3:3d:89:bd:11:39: 28:65:d5:51 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICKmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMzkxMTAvBgNVBAUTKDI3MzJBOTlBODYzQkQ2MjAzQ0Q5MTVDRDcyNTdCNUQx RDk4N0VCMjgwHhcNMjUxMTAyMTYwMjE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE1Ny0yOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtySBYgBJ32nMDTFLD3mTOnWN31CIwP8O7yToyqYlYjOrFNT9aWHudbnAjLzb ItolimPwqFBCgOMLykllvMYlPMyVu1DUvrPluZuA3jqtauO8WJ5Mc1I1J4lqFfAT A5Z5vXtKDnBrNPPB3OA57byQiCtOFOBgJyiXr0Vz0v/F8vnq+POuUyQVtJfhOrHs fzzBKmRH1plYjocPZpZSK1TgkxeWjxU6V6i4KuV/6JVNvCkoUnSeSHP4zF7CdbyF WjJbnovF/IbR9No3YxyWL1GaFUGIjqrS180rR0lkunB8I2L8NBJf7TfbYGZCDPr5 01fcPhBMbvGmzZF/dNo1zbBh+wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMNAvtjy jWV2tIpwzF2pZ4528l8HMB8GA1UdIwQYMBaAFCcyqZqGO9YgPNkVzXJXtdHZh+so MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkEzOS9BNjU5NDlCMjNC QzQxMUU0QjVBNjNFM0JDNEY5QUUwMi9KektwbW9ZNzFpQTgyUlhOY2xlMTBkbUg2 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p6S3Btb1k3MWlBODJSWE5jbGUxMGRtSDZ5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJBMzkvQTY1OTQ5QjIzQkM0MTFFNEI1QTYzRTNCQzRGOUFFMDIvMkZGN0U5QTYw MEJCMTFFQTg5NUU1MjUzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ/0mMA8EAgACMAkDBwEgAQ330AAwDQYJKoZIhvcNAQELBQADggEB AEyYY4aM8MemPr0pffmgxs45z6jXspMaIhUm3Cql6SZKunSu981Lo9oZT7y5aLge pIFt7+z7OX34uLdsx1KOL8cLrT2pXdRZ3SMB78wRwXPotv6QdyLrVFt0GPwdkGZz wAJ+1Jn/ucpGXcAGCNqMUvkCfJ6tL3/GcnmaLRn5ty2QWJbpQLYVvCH7XztBDp/r BtMQuDhfaQG41DbBKsMAbFpb28OpuF1T5BI594P9FyZrS/5zcR/U7JL9UF3ojbVS MsK3IYCdqkDcI94zh6SfUGgaunfQfLohtXbVPNfYprmrVQj3EwGuiGePSptNFdgV +AfeD39z9qM9ib0ROShl1VE= -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:14 2026 by rpki-client