$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/D6AEA2D20DE311EFA1E24F25C4F9AE02.roa File: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (raw, json) Hash identifier: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0= Subject key identifier: CD:D0:0B:54:91:2C:6C:AD:DB:E6:AD:26:55:3A:8D:50:1C:D9:BE:5E Certificate issuer: /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Certificate serial: 015A Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/D6AEA2D20DE311EFA1E24F25C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:05:55 +0000 ROA not before: Fri 09 Jan 2026 04:23:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 131268 IP address blocks: 103.35.92.0/24 maxlen: 24 103.35.93.0/24 maxlen: 24 103.35.94.0/24 maxlen: 24 103.35.95.0/24 maxlen: 24 202.4.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Validity Not Before: Jan 9 04:23:13 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41d93-2833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:3e:f7:f2:9d:ad:92:5c:9d:75:c5:38:99: 00:90:09:f3:52:3e:c3:44:56:52:c4:93:d1:f5:50: c4:0e:56:37:97:6d:7d:20:f6:d1:ce:6b:09:9d:48: a2:0f:c0:ec:69:1e:0d:fe:fe:c0:58:32:f5:0c:fd: 9a:9a:68:b4:00:c9:83:81:a6:4c:e8:12:cb:b4:8c: c5:3f:f6:3a:33:63:80:cc:9b:c3:ab:33:9c:e4:65: 4b:36:cb:b3:6a:50:7a:61:77:f1:0d:7b:d7:75:31: 6e:3e:ce:f7:46:c9:76:2f:3e:79:34:66:74:4e:6f: c3:48:af:d1:f5:29:d4:79:8c:81:1c:2d:88:fc:6e: c9:c5:07:da:b0:c7:8f:3d:52:b8:16:48:63:e4:e9: 9a:bc:d7:6e:10:ec:f4:83:b2:30:4a:08:01:d6:2c: f7:be:a1:2e:4c:e5:9a:f4:ff:83:dc:74:2f:96:89: 12:5e:4b:12:f2:72:3e:cc:26:5e:4e:93:f3:c8:f6: df:2e:0e:be:55:c6:77:a1:ce:81:9b:b8:32:86:4a: 85:57:f3:f5:c8:80:24:76:72:f3:4c:3c:1a:06:ed: db:51:61:eb:a9:83:73:92:c6:16:ba:fe:c6:03:40: 28:7a:77:5c:71:4f:b6:91:3a:84:e5:2a:4e:b7:f0: 88:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D0:0B:54:91:2C:6C:AD:DB:E6:AD:26:55:3A:8D:50:1C:D9:BE:5E X509v3 Authority Key Identifier: keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/D6AEA2D20DE311EFA1E24F25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.35.92.0/22 202.4.188.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:16:bb:e5:f2:6c:69:d0:ec:31:52:90:05:2e:44:e0:32:b2: 71:cc:d7:31:b4:c4:4a:af:df:4e:0b:79:37:7b:72:11:7a:ee: ee:74:af:91:bd:76:84:ab:fa:66:43:85:92:9f:60:2b:c8:9b: 9b:b4:d2:24:16:c5:58:30:68:b3:3e:ad:cd:8e:fd:eb:d7:ac: 5a:1c:43:1d:12:83:4b:90:6e:19:5c:03:c1:0a:79:94:1d:73: c7:f7:a8:aa:1a:95:d9:9e:e8:23:fd:2e:d4:35:bd:63:8d:73: 56:c0:3e:bf:60:a1:7b:8c:c7:11:52:54:d4:31:fa:5c:43:6c: 5e:1d:71:8e:66:80:5c:dd:b0:0e:9a:7e:06:2e:81:d3:f0:1c: ee:1f:18:97:c7:08:e5:c3:2d:b5:ee:27:5d:b1:a8:71:51:d9: 6e:e0:c7:3c:c0:64:9d:55:b4:d2:58:93:5f:34:9f:57:e5:9b: 69:c6:e8:4a:0c:c9:c1:08:8c:e3:33:eb:8c:b4:c7:24:48:d5: 11:71:fd:18:55:c8:7e:8b:f8:fa:a0:dd:33:c7:0d:2e:82:30: 78:58:1c:b0:3d:cb:35:82:3c:42:b5:71:28:04:ef:4c:48:41: 8f:1e:1b:82:b8:63:80:75:ab:69:e8:9a:05:f1:e8:ed:1f:c8: f6:33:bb:df -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyQjIxMTAvBgNVBAUTKEI3MERFQTZDNzdCOUU4RUNDRTU4MzkxMzI4MTlFRjkx MzczRkM1MjcwHhcNMjYwMTA5MDQyMzEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWQ5My0yODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3to+9/KdrZJcnXXFOJkAkAnzUj7DRFZSxJPR9VDEDlY3l219IPbRzmsJnUii D8DsaR4N/v7AWDL1DP2ammi0AMmDgaZM6BLLtIzFP/Y6M2OAzJvDqzOc5GVLNsuz alB6YXfxDXvXdTFuPs73Rsl2Lz55NGZ0Tm/DSK/R9SnUeYyBHC2I/G7JxQfasMeP PVK4Fkhj5OmavNduEOz0g7IwSggB1iz3vqEuTOWa9P+D3HQvlokSXksS8nI+zCZe TpPzyPbfLg6+VcZ3oc6Bm7gyhkqFV/P1yIAkdnLzTDwaBu3bUWHrqYNzksYWuv7G A0AoendccU+2kTqE5SpOt/CIkQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM3QC1SR LGyt2+atJlU6jVAc2b5eMB8GA1UdIwQYMBaAFLcN6mx3uejszlg5EygZ75E3P8Un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTJCMi8yQjQ2RUE1ODBE RTMxMUVGODAzRjZGMEVDNEY5QUUwMi90dzNxYkhlNTZPek9XRGtUS0JudmtUY194 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3M3FiSGU1Nk96T1dEa1RLQm52a1RjX3hTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEUyQjIvMkI0NkVBNTgwREUzMTFFRjgwM0Y2RjBFQzRGOUFFMDIvRDZBRUEyRDIw REUzMTFFRkExRTI0RjI1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZyNcAwQAygS8MA0GCSqGSIb3DQEBCwUAA4IBAQA6Frvl8mxp0Owx UpAFLkTgMrJxzNcxtMRKr99OC3k3e3IReu7udK+RvXaEq/pmQ4WSn2AryJubtNIk FsVYMGizPq3Njv3r16xaHEMdEoNLkG4ZXAPBCnmUHXPH96iqGpXZnugj/S7UNb1j jXNWwD6/YKF7jMcRUlTUMfpcQ2xeHXGOZoBc3bAOmn4GLoHT8BzuHxiXxwjlwy21 7iddsahxUdlu4Mc8wGSdVbTSWJNfNJ9X5ZtpxuhKDMnBCIzjM+uMtMckSNURcf0Y Vch+i/j6oN0zxw0ugjB4WBywPcs1gjxCtXEoBO9MSEGPHhuCuGOAdatp6JoF8ejt H8j2M7vf -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:53 2026 by rpki-client