$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa File: BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa (raw, json) Hash identifier: jtFTS9OP/+u/oNYJ/JAlDkEQWUYXsmjAi8mzzAzLUmY= Subject key identifier: ED:1B:7C:17:16:28:AE:4C:C6:E4:ED:44:1B:37:39:DD:88:DF:A7:C6 Certificate issuer: /CN=A914D2E1/serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Certificate serial: 0247 Authority key identifier: 3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:32:21 +0000 ROA not before: Mon 03 Mar 2025 04:56:53 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 150788 IP address blocks: 103.203.240.0/24 maxlen: 24 103.206.98.0/24 maxlen: 24 203.0.139.0/24 maxlen: 24 2001:df2:10c0::/48 maxlen: 48 2400:e760:100::/48 maxlen: 48 2400:e760:200::/48 maxlen: 48 2400:e760:300::/48 maxlen: 48 2400:e760:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2E1, serialNumber=3C651524B4F91A350D1ECFBBA66CABD1B48FB7C5 Validity Not Before: Mar 3 04:56:53 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3dd75-d796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:eb:65:69:8a:8b:81:7c:e3:34:8e:04:7d: c5:ac:0e:0f:19:4f:2c:f9:5e:65:70:67:97:bd:60: 8e:b0:b5:a2:48:96:e3:cc:33:31:30:ef:b5:d8:66: 1f:83:56:e1:7e:e6:bc:50:69:c9:7f:38:ab:51:cf: a4:fd:af:6e:7d:1c:b0:72:dc:94:0c:de:4d:33:f5: 3d:79:b5:5c:b3:a4:4b:69:4d:3b:69:08:dc:9b:01: 4d:59:fe:1a:15:3f:9e:88:da:57:85:f8:0a:a1:c6: d4:9e:4b:62:78:c6:58:24:81:4d:d1:21:c6:d3:ce: 8f:98:a9:9e:9b:bc:03:94:84:f7:4f:99:0c:fe:c8: bc:62:b4:fe:d0:df:be:eb:55:ce:da:7f:37:ba:5c: 61:e8:ae:f0:c6:4b:3c:49:16:76:35:dd:f5:28:aa: 34:d1:91:d5:d4:44:ac:2e:0e:57:fe:cc:7a:ba:dc: 1c:3e:0b:e1:9a:1a:e8:0b:1c:3f:ed:10:3b:89:d1: f5:58:6b:55:f8:8b:be:3a:74:3b:f8:95:67:b7:99: bc:9d:4c:a6:23:f2:23:8d:6b:79:d6:d6:b4:81:b5: 7e:55:31:62:22:3f:17:86:82:c5:38:9c:98:7f:70: ed:cb:e6:40:a3:11:db:6b:c5:f8:31:c7:20:75:77: 3e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:7C:17:16:28:AE:4C:C6:E4:ED:44:1B:37:39:DD:88:DF:A7:C6 X509v3 Authority Key Identifier: keyid:3C:65:15:24:B4:F9:1A:35:0D:1E:CF:BB:A6:6C:AB:D1:B4:8F:B7:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/PGUVJLT5GjUNHs-7pmyr0bSPt8U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGUVJLT5GjUNHs-7pmyr0bSPt8U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2E1/DA86B616BA6E11EDB9CEA43AC4F9AE02/BCB2FFCEBA7211EDB0F5AE53C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.203.240.0/24 103.206.98.0/24 203.0.139.0/24 IPv6: 2001:df2:10c0::/48 2400:e760:100::/48 2400:e760:200::/48 2400:e760:300::/48 2400:e760:400::/48 Signature Algorithm: sha256WithRSAEncryption 3e:77:d5:19:6b:9f:d0:78:80:b6:6d:2c:0c:d1:b2:14:50:31: 6c:8b:04:9a:f6:1c:f3:8c:90:fd:e2:80:35:3e:e7:b7:ee:be: df:c5:39:20:c6:1e:a6:4e:6a:86:9b:dc:36:5a:ff:e3:a8:23: fa:f3:a8:8a:67:9c:6d:72:83:79:c7:1b:19:ba:67:da:83:89: 95:9a:14:9d:1b:f0:6d:11:28:02:d4:31:b8:9c:8a:9d:23:71: d3:d8:47:42:58:a5:53:e6:42:c7:fb:e7:d1:65:1a:06:7b:0a: 16:b9:56:33:a5:9b:6b:b1:42:ef:b1:da:8b:f3:da:f6:71:6d: 7c:b1:1c:90:4b:bc:6a:9c:db:47:84:a9:72:74:9b:71:1d:71: af:bb:a6:96:bd:3c:90:38:7c:c5:04:7f:e3:c3:4b:03:85:7d: ad:af:be:29:a3:83:35:e0:f7:10:7c:68:dd:5d:9d:05:6f:63: 87:92:df:dc:c9:ea:2b:ad:ec:ef:a6:dc:f2:90:3a:1a:1d:9e: 72:8b:ea:a2:8d:c7:86:22:98:49:be:4c:bd:63:25:8c:a9:ba: 06:0a:1a:5a:b2:6c:74:27:ca:99:1a:40:f2:66:2b:e6:44:66: 54:0e:1f:98:d8:c6:18:6b:93:2a:0f:29:4a:a7:9b:7d:aa:61: 18:87:16:d5 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyRTExMTAvBgNVBAUTKDNDNjUxNTI0QjRGOTFBMzUwRDFFQ0ZCQkE2NkNBQkQx QjQ4RkI3QzUwHhcNMjUwMzAzMDQ1NjUzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGQ3NS1kNzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnazrZWmKi4F84zSOBH3FrA4PGU8s+V5lcGeXvWCOsLWiSJbjzDMxMO+12GYf g1bhfua8UGnJfzirUc+k/a9ufRywctyUDN5NM/U9ebVcs6RLaU07aQjcmwFNWf4a FT+eiNpXhfgKocbUnktieMZYJIFN0SHG086PmKmem7wDlIT3T5kM/si8YrT+0N++ 61XO2n83ulxh6K7wxks8SRZ2Nd31KKo00ZHV1ESsLg5X/sx6utwcPgvhmhroCxw/ 7RA7idH1WGtV+Iu+OnQ7+JVnt5m8nUymI/IjjWt51ta0gbV+VTFiIj8XhoLFOJyY f3Dty+ZAoxHba8X4MccgdXc+fwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFO0bfBcW KK5MxuTtRBs3Od2I36fGMB8GA1UdIwQYMBaAFDxlFSS0+Ro1DR7Pu6Zsq9G0j7fF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJFMS9EQTg2QjYxNkJB NkUxMUVEQjlDRUE0M0FDNEY5QUUwMi9QR1VWSkxUNUdqVU5Icy03cG15cjBiU1B0 OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHVVZKTFQ1R2pVTkhzLTdwbXlyMGJTUHQ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQyRTEvREE4NkI2MTZCQTZFMTFFREI5Q0VBNDNBQzRGOUFFMDIvQkNCMkZGQ0VC QTcyMTFFREIwRjVBRTUzQzRGOUFFMDIucm9hMGAGCCsGAQUFBwEHAQH/BFEwTzAY BAIAATASAwQAZ8vwAwQAZ85iAwQAywCLMDMEAgACMC0DBwAgAQ3yEMADBwAkAOdg AQADBwAkAOdgAgADBwAkAOdgAwADBwAkAOdgBAAwDQYJKoZIhvcNAQELBQADggEB AD531Rlrn9B4gLZtLAzRshRQMWyLBJr2HPOMkP3igDU+57fuvt/FOSDGHqZOaoab 3DZa/+OoI/rzqIpnnG1yg3nHGxm6Z9qDiZWaFJ0b8G0RKALUMbicip0jcdPYR0JY pVPmQsf759FlGgZ7Cha5VjOlm2uxQu+x2ovz2vZxbXyxHJBLvGqc20eEqXJ0m3Ed ca+7ppa9PJA4fMUEf+PDSwOFfa2vvimjgzXg9xB8aN1dnQVvY4eS39zJ6iut7O+m 3PKQOhodnnKL6qKNx4YimEm+TL1jJYypugYKGlqybHQnypkaQPJmK+ZEZlQOH5jY xhhrkyoPKUqnm32qYRiHFtU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:43:31 2026 by rpki-client