$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa File: D25A6970F40911EA8A5C9E70C4F9AE02.roa (raw, json) Hash identifier: X+7xi8ucS3fgs8IMY8mWHVyiqI68xFhirEd+62e8Rek= Subject key identifier: E0:9B:F9:5E:F8:FF:34:BA:77:53:86:78:D7:73:30:43:B8:C5:C6:E0 Certificate issuer: /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Certificate serial: 0871 Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:43:34 +0000 ROA not before: Sat 30 Aug 2025 21:42:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141155 IP address blocks: 103.155.119.0/24 maxlen: 24 2406:6dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE Validity Not Before: Aug 30 21:42:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45ea6-cf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:87:8a:28:c9:8e:8f:30:89:f8:44:b8:ee: a6:67:7b:f3:3c:38:b3:e4:1c:24:a8:0e:0d:11:04: 6e:ad:17:e2:32:70:83:54:ae:60:11:5b:68:9c:7a: fa:47:96:a3:f5:e4:1a:97:e8:b8:65:6e:9d:e5:9f: 24:19:11:e8:d9:e1:59:3f:ea:c9:de:2b:89:0c:e1: d5:e9:c8:a1:1d:89:16:ac:f4:ea:97:14:94:b2:d3: e9:60:ca:50:c4:a7:4a:c6:7d:3f:20:39:b7:23:05: e0:c3:f6:58:ae:fa:32:4e:b3:75:22:82:4f:08:8b: 78:be:2d:3a:88:3c:10:e9:2a:5f:a7:43:44:6b:b0: e8:57:02:cc:b9:79:30:f4:5b:28:e8:b3:07:c2:43: 6d:a1:34:53:fa:dd:09:6d:13:16:a3:82:3b:88:2c: 31:e3:63:75:af:6f:b8:27:9e:d7:bd:25:25:0c:2b: 10:d8:c3:2c:7e:aa:95:f9:b5:16:c5:73:6b:aa:da: 47:42:45:55:32:82:4b:3c:20:9c:6b:9d:7d:c8:cd: 97:00:a9:51:23:16:26:d5:50:8e:e6:0e:48:91:c3: 69:fd:fc:e8:01:67:e4:e2:74:12:95:08:06:cd:da: 94:39:78:88:23:ac:30:d9:2d:69:c5:9c:48:e4:80: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9B:F9:5E:F8:FF:34:BA:77:53:86:78:D7:73:30:43:B8:C5:C6:E0 X509v3 Authority Key Identifier: keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D25A6970F40911EA8A5C9E70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.155.119.0/24 IPv6: 2406:6dc0::/32 Signature Algorithm: sha256WithRSAEncryption 52:31:79:94:bd:9f:b7:17:a2:1d:bf:f7:f5:4b:20:23:b4:d7: d4:a1:48:a7:04:16:5d:94:14:89:ae:70:e5:2d:03:12:57:7d: 73:cd:8a:04:c3:08:aa:aa:e9:b2:eb:99:4e:75:69:97:6e:82: 77:55:59:5e:32:01:24:c0:0d:c3:af:1a:9c:2a:53:4f:2d:5a: f0:31:81:26:0b:03:5d:b9:14:b6:05:70:8e:fb:b6:81:e6:18: 98:79:60:43:0e:18:bd:de:d6:54:55:61:31:8b:21:8f:97:5b: df:eb:e5:4f:1b:21:b8:b5:4b:cb:e5:1d:7d:98:56:51:33:29: 57:17:5d:49:33:a8:ad:41:c5:25:a4:e6:39:12:d9:bf:5b:8d: d9:22:0e:d3:ef:a8:76:3b:eb:8c:57:7d:25:83:f0:42:a5:1f: 49:14:28:93:c2:53:52:3c:2e:a1:f7:fb:e4:21:65:cf:e4:cd: af:83:83:d8:af:15:1a:de:d0:5c:da:3d:22:df:7e:e0:39:32: b9:7e:27:e6:52:7c:c3:fd:0d:e1:eb:02:86:d8:65:10:75:76: fc:1c:3d:bb:41:b6:99:c9:fe:e9:e8:e1:47:2a:64:0e:5c:bd: 59:c1:db:47:73:25:54:d9:5d:c2:be:cd:1d:65:03:54:ae:a8: 5c:d6:0a:25 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0 MjFBQUU1RkUwHhcNMjUwODMwMjE0MjM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWVhNi1jZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NGHiijJjo8wifhEuO6mZ3vzPDiz5BwkqA4NEQRurRfiMnCDVK5gEVtonHr6 R5aj9eQal+i4ZW6d5Z8kGRHo2eFZP+rJ3iuJDOHV6cihHYkWrPTqlxSUstPpYMpQ xKdKxn0/IDm3IwXgw/ZYrvoyTrN1IoJPCIt4vi06iDwQ6Spfp0NEa7DoVwLMuXkw 9Fso6LMHwkNtoTRT+t0JbRMWo4I7iCwx42N1r2+4J57XvSUlDCsQ2MMsfqqV+bUW xXNrqtpHQkVVMoJLPCCca519yM2XAKlRIxYm1VCO5g5IkcNp/fzoAWfk4nQSlQgG zdqUOXiII6ww2S1pxZxI5ICT1QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOCb+V74 /zS6d1OGeNdzMEO4xcbgMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0 MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDI1QTY5NzBG NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ5t3MA0EAgACMAcDBQAkBm3AMA0GCSqGSIb3DQEBCwUAA4IBAQBS MXmUvZ+3F6Idv/f1SyAjtNfUoUinBBZdlBSJrnDlLQMSV31zzYoEwwiqqumy65lO dWmXboJ3VVleMgEkwA3DrxqcKlNPLVrwMYEmCwNduRS2BXCO+7aB5hiYeWBDDhi9 3tZUVWExiyGPl1vf6+VPGyG4tUvL5R19mFZRMylXF11JM6itQcUlpOY5Etm/W43Z Ig7T76h2O+uMV30lg/BCpR9JFCiTwlNSPC6h9/vkIWXP5M2vg4PYrxUa3tBc2j0i 337gOTK5fifmUnzD/Q3h6wKG2GUQdXb8HD27QbaZyf7p6OFHKmQOXL1ZwdtHcyVU 2V3Cvs0dZQNUrqhc1gol -----END CERTIFICATE-----Generated at Mon Mar 2 03:14:50 2026 by rpki-client