$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa File: CEEBA382BD1511EB9E873260C4F9AE02.roa (raw, json) Hash identifier: 7GG4HXVAAliKVWU1/QAGmEXY38iid1/8BMRmSndCqBc= Subject key identifier: 06:5F:35:1C:1A:D2:66:98:64:D9:BA:A1:BF:DA:9A:5C:A5:22:FC:45 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 0664 Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:15:16 +0000 ROA not before: Tue 06 Jan 2026 22:18:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 131202 IP address blocks: 103.103.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Jan 6 22:18:43 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a449f3-0e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:8c:4b:50:8a:d4:fe:29:19:f0:07:d9:ad: 45:87:89:63:34:da:3c:c5:1f:28:4f:ed:84:32:3f: 7e:5e:f0:5a:72:a6:17:ae:4b:f7:cd:4e:24:41:51: 5a:d2:71:4e:81:ae:46:ce:22:c0:97:5c:b4:25:3d: 7d:5e:82:cc:9b:0e:ab:e8:ea:cc:53:64:92:8e:88: 05:ab:91:ad:53:b2:e7:8c:e0:d2:8f:43:76:54:24: dc:b0:33:bf:3b:b9:aa:5d:bc:95:75:e2:68:e9:b2: fd:fe:57:d0:c1:76:81:15:a9:37:71:f9:00:7c:64: a5:c1:a1:df:8c:2d:99:21:31:7e:de:ee:66:b6:4d: 6f:48:9b:29:db:52:5f:72:bc:56:13:a8:8d:c0:5b: dd:ef:3a:b0:c6:b5:4a:f1:b6:e0:b0:f1:d0:c8:b5: ba:e6:43:c5:05:df:49:a3:0c:96:76:c5:93:d5:d8: 83:db:28:61:19:dc:1b:9d:ae:a7:bd:d0:df:30:be: f0:c7:92:ad:5b:66:14:77:fa:3c:3a:57:94:a1:c5: 88:05:94:2f:b2:11:fc:64:b1:dd:e1:53:eb:61:c6: 38:07:e1:ae:c8:48:a0:ab:9f:8d:a4:0a:c4:c7:ba: 68:4e:df:cc:29:03:73:e4:c9:8e:a0:28:78:53:2e: 41:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5F:35:1C:1A:D2:66:98:64:D9:BA:A1:BF:DA:9A:5C:A5:22:FC:45 X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.218.0/24 Signature Algorithm: sha256WithRSAEncryption a6:a7:1b:29:ee:a4:01:58:4c:02:52:28:1a:fe:d4:51:d7:05: f3:9e:24:ed:fc:af:96:09:ad:d7:84:09:e7:b7:c3:93:a0:12: 9f:4a:37:8c:e7:6b:d5:ae:eb:83:b0:bb:95:e8:a7:50:57:12: 88:5b:3e:dd:30:74:5b:34:2f:eb:bb:06:67:12:dd:0c:64:68: 1f:78:be:9e:65:10:27:56:5e:e4:68:72:bf:44:a7:12:ac:f4: 71:3d:28:bd:8f:59:00:89:e5:02:a2:3d:15:62:b1:c7:cb:5c: ac:28:fa:44:21:45:87:51:dd:1d:77:c4:72:e5:f6:c1:dc:f4: c5:53:a5:f7:d3:ad:71:09:6e:31:9a:59:53:9d:55:cf:a8:43: d6:60:2b:6f:88:8b:e6:68:2d:aa:42:39:b1:52:05:34:c5:2f: 93:c6:49:9f:42:40:1f:c0:58:a9:01:25:66:80:1c:6e:2b:55: b4:5d:39:51:95:65:7c:7f:5a:bd:c8:58:91:fb:68:4a:9c:42: a0:7e:a8:61:38:dd:c0:50:6c:93:3d:45:90:5b:bc:dc:30:67: a5:df:fa:df:7d:a3:fa:a2:4d:38:7b:77:1e:e9:0b:2f:0e:c7: 46:7d:3e:97:e2:dd:c4:4a:17:8b:34:7d:ca:c7:a1:7f:f4:f4: 04:e4:ef:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjYwMTA2MjIxODQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDlmMy0wZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc+MS1CK1P4pGfAH2a1Fh4ljNNo8xR8oT+2EMj9+XvBacqYXrkv3zU4kQVFa 0nFOga5GziLAl1y0JT19XoLMmw6r6OrMU2SSjogFq5GtU7LnjODSj0N2VCTcsDO/ O7mqXbyVdeJo6bL9/lfQwXaBFak3cfkAfGSlwaHfjC2ZITF+3u5mtk1vSJsp21Jf crxWE6iNwFvd7zqwxrVK8bbgsPHQyLW65kPFBd9JowyWdsWT1diD2yhhGdwbna6n vdDfML7wx5KtW2YUd/o8OleUocWIBZQvshH8ZLHd4VPrYcY4B+GuyEigq5+NpArE x7poTt/MKQNz5MmOoCh4Uy5BfQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAZfNRwa 0maYZNm6ob/amlylIvxFMB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVCMDIvOTVBMzhFRjZCRDE0MTFFQkI1RUVGRDVGQzRGOUFFMDIvQ0VFQkEzODJC RDE1MTFFQjlFODczMjYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2faMA0GCSqGSIb3DQEBCwUAA4IBAQCmpxsp7qQBWEwCUiga/tRR 1wXzniTt/K+WCa3XhAnnt8OToBKfSjeM52vVruuDsLuV6KdQVxKIWz7dMHRbNC/r uwZnEt0MZGgfeL6eZRAnVl7kaHK/RKcSrPRxPSi9j1kAieUCoj0VYrHHy1ysKPpE IUWHUd0dd8Ry5fbB3PTFU6X3061xCW4xmllTnVXPqEPWYCtviIvmaC2qQjmxUgU0 xS+TxkmfQkAfwFipASVmgBxuK1W0XTlRlWV8f1q9yFiR+2hKnEKgfqhhON3AUGyT PUWQW7zcMGel3/rffaP6ok04e3ce6QsvDsdGfT6X4t3ESheLNH3Kx6F/9PQE5O/g -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:19 2026 by rpki-client