$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa File: 960C9032C72711F0BD856955C4F9AE02.roa (raw, json) Hash identifier: cBv/6LokTGCmDLCCMsP0N+FLbk6ypRUOowicFCdFSR4= Subject key identifier: 7B:4B:81:16:12:E5:00:89:AB:7B:C4:F4:59:1C:23:18:AA:0E:6B:4D Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 021A Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:55:16 +0000 ROA not before: Fri 21 Nov 2025 22:15:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151354 IP address blocks: 103.208.67.0/24 maxlen: 24 103.254.214.0/24 maxlen: 24 2001:df2:7ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Nov 21 22:15:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a46f73-4310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:60:fd:d8:03:13:c8:47:92:5b:12:ca:f9: b1:c9:0d:c3:21:47:cc:77:6e:65:8a:70:3e:ff:85: 0e:51:ae:38:bd:18:58:7f:31:2f:15:02:3e:2f:40: 41:81:87:ea:4e:b3:6c:56:1b:83:f2:06:04:a1:fd: c1:fe:9a:0e:85:c4:ce:6c:90:64:1c:a4:a3:c1:1b: a0:c5:3c:f3:6b:fb:8f:3b:c9:23:66:53:d5:af:ef: 20:24:45:2a:23:2b:a7:cd:8e:6b:22:a7:f1:61:2f: 2d:e4:e8:41:f6:ad:2e:b9:77:ec:9a:73:a7:8a:08: 99:3b:98:81:5d:7c:26:a0:ed:a4:9b:da:3c:d8:30: 66:08:38:47:ad:93:b3:00:c4:17:bd:01:bc:e9:ad: 39:3b:c5:89:2c:46:ae:c7:2d:30:c8:3a:b5:10:82: 46:0f:45:67:38:48:bb:c4:44:b9:74:59:da:da:ec: 12:c0:4b:a2:73:55:4b:2c:bf:c7:d6:2d:50:21:70: b3:3d:56:22:d0:f0:95:cb:6f:8f:bb:6c:a1:30:4e: 95:c6:70:f2:78:87:bc:01:4d:27:41:e4:fd:a7:6e: 03:92:54:a2:c3:1e:eb:7f:68:08:4f:99:55:02:e9: 4b:8c:0d:2a:0a:ef:ac:74:1c:0a:2f:c3:da:ab:74: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4B:81:16:12:E5:00:89:AB:7B:C4:F4:59:1C:23:18:AA:0E:6B:4D X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/960C9032C72711F0BD856955C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.208.67.0/24 103.254.214.0/24 IPv6: 2001:df2:7ec0::/48 Signature Algorithm: sha256WithRSAEncryption 96:1b:ee:d7:9f:cf:b0:86:95:d4:54:92:2f:12:66:ce:ec:f3: 80:62:67:13:51:54:13:d4:11:cb:8b:05:fe:6e:6e:1b:97:1e: 67:8a:3f:43:38:98:3d:8b:ab:be:85:53:49:27:a2:9d:bb:2d: 52:af:0b:b9:e0:c1:8e:9b:41:b9:7a:1f:22:3d:a8:39:b6:86: 07:db:58:41:b0:9e:15:dc:91:f1:b9:62:25:f5:ec:bf:3f:72: 15:d0:bc:9d:0e:0b:7f:de:0e:0a:d7:c5:56:9c:99:bf:a1:1f: 6a:17:0a:ff:ba:a8:22:7c:25:05:24:b9:27:a1:c2:aa:e2:0b: 12:10:93:49:63:ee:8d:66:59:96:ce:dc:c7:82:10:40:7d:33: 86:64:d4:43:b4:bc:c0:e7:8b:48:30:d3:cf:51:cd:74:fe:28: e4:f7:13:18:c0:d2:42:9b:3c:84:b0:27:63:22:58:16:67:b4: e5:81:28:2d:1c:f7:90:7c:15:19:b4:7e:cd:11:24:1f:3b:7f: d2:53:3e:d4:7c:87:a4:a3:d6:8c:17:c3:6c:12:6a:78:bd:4a: 46:12:a4:f1:e8:57:da:3f:d5:91:6b:59:f9:d3:48:97:52:5c: 74:d1:af:b5:6e:1c:24:d2:e6:71:a6:01:d1:5c:94:9d:cb:48: 7c:94:c0:35 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUxMTIxMjIxNTUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmY3My00MzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXVg/dgDE8hHklsSyvmxyQ3DIUfMd25linA+/4UOUa44vRhYfzEvFQI+L0BB gYfqTrNsVhuD8gYEof3B/poOhcTObJBkHKSjwRugxTzza/uPO8kjZlPVr+8gJEUq IyunzY5rIqfxYS8t5OhB9q0uuXfsmnOnigiZO5iBXXwmoO2km9o82DBmCDhHrZOz AMQXvQG86a05O8WJLEauxy0wyDq1EIJGD0VnOEi7xES5dFna2uwSwEuic1VLLL/H 1i1QIXCzPVYi0PCVy2+Pu2yhME6VxnDyeIe8AU0nQeT9p24DklSiwx7rf2gIT5lV AulLjA0qCu+sdBwKL8Paq3TUKQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFHtLgRYS 5QCJq3vE9FkcIxiqDmtNMB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEM3RjgvRTI1MTBFMUMxMjk1MTFFRTg0QkFENzQ2QzRGOUFFMDIvOTYwQzkwMzJD NzI3MTFGMEJEODU2OTU1QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ9BDAwQAZ/7WMA8EAgACMAkDBwAgAQ3yfsAwDQYJKoZIhvcNAQEL BQADggEBAJYb7tefz7CGldRUki8SZs7s84BiZxNRVBPUEcuLBf5ubhuXHmeKP0M4 mD2Lq76FU0knop27LVKvC7ngwY6bQbl6HyI9qDm2hgfbWEGwnhXckfG5YiX17L8/ chXQvJ0OC3/eDgrXxVacmb+hH2oXCv+6qCJ8JQUkuSehwqriCxIQk0lj7o1mWZbO 3MeCEEB9M4Zk1EO0vMDni0gw089RzXT+KOT3ExjA0kKbPISwJ2MiWBZntOWBKC0c 95B8FRm0fs0RJB87f9JTPtR8h6Sj1owXw2wSani9SkYSpPHoV9o/1ZFrWfnTSJdS XHTRr7VuHCTS5nGmAdFclJ3LSHyUwDU= -----END CERTIFICATE-----Generated at Mon Mar 2 23:39:28 2026 by rpki-client