$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/2DF8935CAFB411ED8D33ED1FC4F9AE02.roa File: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (raw, json) Hash identifier: +5NtTIbwxadnHyBDEpFgjHeGeTXoY+U2ZLT+JTTuGQA= Subject key identifier: 58:88:29:EB:5A:B1:A0:4B:54:CF:51:91:BE:98:CC:72:EE:39:A2:6E Certificate issuer: /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Certificate serial: 023D Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/2DF8935CAFB411ED8D33ED1FC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:09:53 +0000 ROA not before: Wed 31 Dec 2025 01:22:04 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140106 IP address blocks: 103.178.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B Validity Not Before: Dec 31 01:22:04 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41071-3bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:28:ec:a6:e8:53:4c:4f:45:e3:b6:7d:f8:69: 68:74:ae:a3:2c:25:3a:91:98:72:6b:79:bc:2a:00: b3:26:8e:74:2e:5c:fb:05:cf:ee:ae:bd:3e:4d:e4: 7f:79:88:77:16:48:2a:e6:e4:f0:43:ff:05:19:95: 8e:e1:5b:84:d6:94:2c:6b:02:95:c6:f6:9a:0a:00: 0c:f9:ad:31:02:0c:9b:8a:70:b0:e7:cc:89:bc:b5: 13:99:64:1b:41:7c:cf:ba:25:f0:59:4a:3a:d8:2f: 92:8b:79:97:e4:a6:a4:43:22:8d:9c:7e:76:ff:fa: 9e:0e:78:99:1f:1a:38:47:d1:09:ed:e6:c9:d8:fc: b1:42:f0:90:d6:0e:bc:04:67:51:cd:07:b6:f1:9c: 38:db:e6:ec:eb:8b:ed:25:b4:b3:78:ed:5f:fe:02: 1e:22:65:ee:f2:35:80:10:f5:e3:31:a8:43:f6:69: 00:6b:9f:f6:80:a3:5d:c9:e4:97:24:17:ab:8e:a8: 96:66:58:68:c1:93:e1:46:c3:bf:f5:a5:12:27:cd: 15:83:9e:b5:88:ee:ba:b1:2a:a2:40:0b:e2:58:72: 7e:c2:90:1d:40:d3:fe:05:79:a2:d0:f3:d4:82:15: 74:be:a5:de:08:de:66:88:b5:72:91:f0:87:c3:10: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:88:29:EB:5A:B1:A0:4B:54:CF:51:91:BE:98:CC:72:EE:39:A2:6E X509v3 Authority Key Identifier: keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/2DF8935CAFB411ED8D33ED1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.178.97.0/24 Signature Algorithm: sha256WithRSAEncryption 24:1c:03:95:b8:d4:24:37:1c:f0:ac:fd:f0:7b:fd:85:bb:37: 2e:06:fd:59:bf:dd:82:fa:53:b5:aa:94:75:d3:a5:6b:80:5a: 0b:40:65:ee:94:ce:fe:6a:45:c6:fa:af:c0:06:c4:42:94:12: c9:20:09:8f:17:e3:36:d0:a4:5b:7a:15:05:19:15:c1:04:61: 09:e4:a1:2e:8e:83:80:5c:15:34:e9:d9:25:10:60:63:81:50: ac:14:d7:23:e8:1a:d5:c4:bf:87:87:2f:b8:c1:55:5d:3b:9c: b8:c2:93:69:0b:b5:26:da:cd:7e:eb:c3:1c:46:c1:77:ad:01: fa:96:c6:ef:65:aa:c9:31:0d:c8:07:fb:32:70:9c:f0:f9:f4: 78:78:62:7c:03:1b:a4:f5:13:42:8e:c5:a7:e6:d1:2b:84:29: c1:79:ae:3e:12:a0:13:d5:8d:a7:1c:11:19:39:03:65:6f:26: e0:fb:42:cb:42:b1:53:cc:5a:18:f2:22:2a:40:23:07:35:c6: fc:78:d9:7e:15:0b:15:b7:d8:c4:e8:75:4d:92:49:85:0b:30: d1:29:28:56:30:b4:bc:ec:64:51:bc:23:e6:4c:4f:25:46:b0: 3c:62:12:16:18:9e:07:1a:be:31:b8:04:36:37:5a:9a:8f:e2: fd:e5:d9:2b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2MDIxMTAvBgNVBAUTKDgxODM1OUJDQTBGNjczQjc4MTYwMDNGQkI4OUI2NTM3 QTk0ODA3NUIwHhcNMjUxMjMxMDEyMjA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTA3MS0zYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjCjspuhTTE9F47Z9+GlodK6jLCU6kZhya3m8KgCzJo50Llz7Bc/urr0+TeR/ eYh3Fkgq5uTwQ/8FGZWO4VuE1pQsawKVxvaaCgAM+a0xAgybinCw58yJvLUTmWQb QXzPuiXwWUo62C+Si3mX5KakQyKNnH52//qeDniZHxo4R9EJ7ebJ2PyxQvCQ1g68 BGdRzQe28Zw42+bs64vtJbSzeO1f/gIeImXu8jWAEPXjMahD9mkAa5/2gKNdyeSX JBerjqiWZlhowZPhRsO/9aUSJ80Vg561iO66sSqiQAviWHJ+wpAdQNP+BXmi0PPU ghV0vqXeCN5miLVykfCHwxBRWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFiIKeta saBLVM9Rkb6YzHLuOaJuMB8GA1UdIwQYMBaAFIGDWbyg9nO3gWAD+7ibZTepSAdb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDYwMi9GQkNDODk3Q0FG QjAxMUVEQjJGMjA0MUJDNEY5QUUwMi9nWU5adktEMmM3ZUJZQVA3dUp0bE42bElC MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZTlp2S0QyYzdlQllBUDd1SnRsTjZsSUIxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA2MDIvRkJDQzg5N0NBRkIwMTFFREIyRjIwNDFCQzRGOUFFMDIvMkRGODkzNUNB RkI0MTFFRDhEMzNFRDFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ7JhMA0GCSqGSIb3DQEBCwUAA4IBAQAkHAOVuNQkNxzwrP3we/2F uzcuBv1Zv92C+lO1qpR106VrgFoLQGXulM7+akXG+q/ABsRClBLJIAmPF+M20KRb ehUFGRXBBGEJ5KEujoOAXBU06dklEGBjgVCsFNcj6BrVxL+Hhy+4wVVdO5y4wpNp C7Um2s1+68McRsF3rQH6lsbvZarJMQ3IB/sycJzw+fR4eGJ8Axuk9RNCjsWn5tEr hCnBea4+EqAT1Y2nHBEZOQNlbybg+0LLQrFTzFoY8iIqQCMHNcb8eNl+FQsVt9jE 6HVNkkmFCzDRKShWMLS87GRRvCPmTE8lRrA8YhIWGJ4HGr4xuAQ2N1qaj+L95dkr -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:58 2026 by rpki-client