$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/21A84DDAB4C811EE98BFC52CC4F9AE02.roa File: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (raw, json) Hash identifier: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk= Subject key identifier: 84:7B:90:8D:76:38:42:22:C1:B6:B0:D0:C4:42:BD:45:95:FE:8A:C6 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 086B Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/21A84DDAB4C811EE98BFC52CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:22:29 +0000 ROA not before: Tue 02 Sep 2025 21:41:13 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 64073 IP address blocks: 103.193.136.0/22 maxlen: 22 103.193.136.0/24 maxlen: 24 103.193.137.0/24 maxlen: 24 103.193.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Sep 2 21:41:13 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42f85-f198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:bc:f8:e8:83:74:fe:cd:4f:ec:46:ef:86: 69:26:27:c9:4b:c4:04:32:93:56:bf:0a:b2:49:25: 62:02:3c:39:00:70:12:99:e0:2b:5b:06:7c:c8:11: a2:f0:d2:49:37:c7:d0:cb:f6:3c:23:ed:ac:11:a1: d8:e2:4e:31:94:2c:e3:3d:41:a9:4c:98:9a:f6:f8: b6:6d:97:40:77:59:73:e2:12:23:18:d9:c2:e1:78: 91:96:4b:70:eb:a8:bf:a6:a4:58:54:5e:fc:71:95: 5f:ea:2a:17:9e:da:b5:0a:c6:af:ec:19:c9:06:9d: 08:37:f8:2e:26:65:02:be:7f:48:a3:07:4f:26:60: 53:30:7c:48:2e:0e:cf:76:6f:8b:52:90:53:5a:26: 70:c0:c8:09:6f:8f:5b:29:c7:ed:91:99:34:00:a4: ca:d0:8c:e3:59:81:4f:06:f5:86:95:34:75:79:70: 74:1d:16:cc:98:3f:89:62:1a:f2:fc:33:27:6c:1f: 16:90:60:c7:0f:e7:b3:6b:61:92:c2:62:1d:90:82: 72:6a:49:13:9f:ad:47:c8:0e:37:ba:cf:3b:d0:1b: 3d:7f:94:4f:d0:6c:14:7f:82:7e:6a:47:5f:d6:0f: 94:64:c3:3c:c6:29:5a:30:0a:d8:29:f4:12:2b:47: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7B:90:8D:76:38:42:22:C1:B6:B0:D0:C4:42:BD:45:95:FE:8A:C6 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/21A84DDAB4C811EE98BFC52CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.193.136.0/22 Signature Algorithm: sha256WithRSAEncryption b7:55:ac:1a:bc:ce:6e:c9:34:92:0b:b7:fb:c7:a5:5c:41:aa: 12:81:08:64:18:18:a6:cb:f2:1e:8d:38:5c:2c:9a:4a:90:41: 5a:e7:76:60:a4:1a:f1:cb:c3:19:1e:24:53:8b:b4:06:4c:63: ab:9e:d7:20:09:a4:d8:55:f6:5b:e2:c3:66:89:aa:bd:cd:bf: 7b:b9:9e:02:28:ad:47:1f:1e:eb:35:7d:69:0f:a2:59:40:ba: f8:fc:e8:3e:2e:76:46:a4:5e:f6:82:ea:ab:1f:18:e8:e6:2b: 67:fb:cf:14:00:d0:c2:b0:26:42:f0:1b:75:bc:0c:ce:e8:d4: 44:b2:89:f9:d7:07:46:8d:77:c5:dd:1b:83:e9:33:d1:d2:df: eb:14:b3:a8:b4:79:4e:b2:de:18:ac:1d:cd:af:5a:13:6b:3f: cc:6d:3a:69:e8:75:3c:97:17:07:9a:ae:fc:58:a3:e4:85:54: 7a:67:93:00:72:c0:10:66:e7:85:9b:5c:f8:18:46:4a:dd:56: 81:c4:19:40:f6:9b:81:c0:89:b4:90:e7:8b:0b:cc:4a:34:ad: 88:80:34:a7:2b:bd:20:ef:6f:eb:3e:a0:6f:ff:54:d2:9b:41: df:48:e4:57:d7:fd:72:41:40:7d:c9:66:bd:25:8d:fa:36:a6: f0:ae:97:72 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUwOTAyMjE0MTEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmY4NS1mMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNe8+OiDdP7NT+xG74ZpJifJS8QEMpNWvwqySSViAjw5AHASmeArWwZ8yBGi 8NJJN8fQy/Y8I+2sEaHY4k4xlCzjPUGpTJia9vi2bZdAd1lz4hIjGNnC4XiRlktw 66i/pqRYVF78cZVf6ioXntq1Csav7BnJBp0IN/guJmUCvn9IowdPJmBTMHxILg7P dm+LUpBTWiZwwMgJb49bKcftkZk0AKTK0IzjWYFPBvWGlTR1eXB0HRbMmD+JYhry /DMnbB8WkGDHD+eza2GSwmIdkIJyakkTn61HyA43us870Bs9f5RP0GwUf4J+akdf 1g+UZMM8xilaMArYKfQSK0dGHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIR7kI12 OEIiwbaw0MRCvUWV/orGMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUYzMTYvMjgxQjlENjBGNkQxMTFFQUE2OURFNDI5QzRGOUFFMDIvMjFBODREREFC NEM4MTFFRTk4QkZDNTJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8GIMA0GCSqGSIb3DQEBCwUAA4IBAQC3VawavM5uyTSSC7f7x6Vc QaoSgQhkGBimy/IejThcLJpKkEFa53ZgpBrxy8MZHiRTi7QGTGOrntcgCaTYVfZb 4sNmiaq9zb97uZ4CKK1HHx7rNX1pD6JZQLr4/Og+LnZGpF72guqrHxjo5itn+88U ANDCsCZC8Bt1vAzO6NREson51wdGjXfF3RuD6TPR0t/rFLOotHlOst4YrB3Nr1oT az/MbTpp6HU8lxcHmq78WKPkhVR6Z5MAcsAQZueFm1z4GEZK3VaBxBlA9puBwIm0 kOeLC8xKNK2IgDSnK70g72/rPqBv/1TSm0HfSORX1/1yQUB9yWa9JY36Nqbwrpdy -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:17 2026 by rpki-client