$ rpki-client -vvf rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/D7BBDE18D3AB11EFB022202CC4F9AE02.roa File: D7BBDE18D3AB11EFB022202CC4F9AE02.roa (raw, json) Hash identifier: t58wU/pXz+iEQ4RAW3H0lzuZf3qpTPHdtZHwx3xgStE= Subject key identifier: 74:31:1E:BC:9C:5B:6F:F7:0A:97:3A:39:7F:9C:1E:06:00:89:51:63 Certificate issuer: /CN=A916A504/serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Certificate serial: DC Authority key identifier: 9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/D7BBDE18D3AB11EFB022202CC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:35:52 +0000 ROA not before: Wed 08 Oct 2025 00:59:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132257 IP address blocks: 103.8.236.0/23 maxlen: 24 2001:df0:2b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A504, serialNumber=9DCCD080F072DE24EF842C6AA292499EF1369BF4 Validity Not Before: Oct 8 00:59:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a58427-06ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:51:49:46:eb:45:dc:48:95:87:1b:81:f9: ff:2d:db:20:20:c9:99:a7:33:6b:30:33:1d:ea:0c: f5:27:44:67:03:f4:8e:92:d7:7f:18:93:9e:7f:9b: da:3b:e6:f1:15:c0:0b:ed:3a:b5:14:0e:1a:d8:f9: c1:e6:4f:26:47:3e:5c:45:80:1e:78:5c:c9:9c:ec: fe:35:97:ed:eb:84:6c:07:2e:94:48:9c:a5:e3:51: 55:e2:49:34:75:09:36:45:b3:8b:a0:47:9d:77:34: 71:d9:0b:79:36:f3:43:d2:b2:ef:d2:00:89:34:12: c6:f3:3e:44:36:35:d0:0a:74:97:4c:79:79:25:d5: e0:6a:f5:ff:e9:46:54:e7:4f:e4:e7:32:5a:c1:97: 59:20:2e:ab:c2:99:e0:d4:c9:6b:a8:63:e4:97:e6: 6a:84:0f:92:9e:a4:b2:9a:01:eb:3b:2a:38:59:96: a6:12:d3:f1:8a:5a:5b:18:c1:cf:0d:71:7f:0f:9d: bb:0a:d1:65:f0:f2:10:1b:53:fe:f8:57:7f:7d:93: 88:c4:b8:b8:26:d0:84:8a:e0:6a:6b:b2:04:a5:e4: 24:1c:58:5a:d8:e7:99:ca:95:05:fd:35:80:b5:db: 1a:e8:b9:a6:3d:9c:c5:7e:b8:50:c6:46:b6:2d:c7: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:31:1E:BC:9C:5B:6F:F7:0A:97:3A:39:7F:9C:1E:06:00:89:51:63 X509v3 Authority Key Identifier: keyid:9D:CC:D0:80:F0:72:DE:24:EF:84:2C:6A:A2:92:49:9E:F1:36:9B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/nczQgPBy3iTvhCxqopJJnvE2m_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nczQgPBy3iTvhCxqopJJnvE2m_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A504/321BC48CD3AB11EF8EBD0C2BC4F9AE02/D7BBDE18D3AB11EFB022202CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.8.236.0/23 IPv6: 2001:df0:2b1::/48 Signature Algorithm: sha256WithRSAEncryption 4f:0b:fc:dd:eb:ca:ed:02:ac:24:9d:cc:1a:80:ab:43:c0:c6: cd:5c:a5:9e:a3:d1:55:c8:aa:7a:72:d9:58:ec:f1:2a:29:39: 9f:19:40:6a:74:b8:1c:ec:39:9c:16:58:35:b1:9d:3c:8c:84: 03:15:76:e8:ca:6d:6f:3c:34:16:8b:bc:f9:7e:6d:3a:06:8f: 87:3b:4b:75:5c:cd:ec:e9:a4:28:ed:3f:eb:16:91:82:96:47: a6:0e:aa:ec:f1:f4:84:e8:99:49:45:1a:b6:2a:04:f0:7c:3b: a5:40:92:3c:6e:7a:f9:bb:56:83:71:0c:84:f6:15:dc:4d:54: 63:a8:e2:3c:75:69:e9:b2:8b:88:b8:66:e1:05:1d:dd:8f:0c: ca:ab:fa:22:eb:13:7b:ed:96:b3:73:5a:eb:6e:53:ba:78:0a: c5:8f:be:db:19:76:ee:78:59:b1:72:42:01:c9:eb:b3:ef:5a: 28:60:85:dd:04:ba:39:36:74:4f:25:47:00:fb:20:5e:b5:6a: 70:8e:3e:5b:12:67:1a:3e:b1:9b:9c:47:21:fd:91:9a:a5:6a: 38:9c:49:b1:9b:f6:cb:56:c8:55:83:e4:f6:ce:bf:43:95:58: 8b:6d:8c:1f:c0:eb:b3:df:0c:d4:e4:77:ba:f3:ad:45:09:56: 07:32:dc:03 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE1MDQxMTAvBgNVBAUTKDlEQ0NEMDgwRjA3MkRFMjRFRjg0MkM2QUEyOTI0OTlF RjEzNjlCRjQwHhcNMjUxMDA4MDA1OTI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODQyNy0wNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73FRSUbrRdxIlYcbgfn/LdsgIMmZpzNrMDMd6gz1J0RnA/SOktd/GJOef5va O+bxFcAL7Tq1FA4a2PnB5k8mRz5cRYAeeFzJnOz+NZft64RsBy6USJyl41FV4kk0 dQk2RbOLoEeddzRx2Qt5NvND0rLv0gCJNBLG8z5ENjXQCnSXTHl5JdXgavX/6UZU 50/k5zJawZdZIC6rwpng1MlrqGPkl+ZqhA+SnqSymgHrOyo4WZamEtPxilpbGMHP DXF/D527CtFl8PIQG1P++Fd/fZOIxLi4JtCEiuBqa7IEpeQkHFha2OeZypUF/TWA tdsa6LmmPZzFfrhQxka2LccMLQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHQxHryc W2/3Cpc6OX+cHgYAiVFjMB8GA1UdIwQYMBaAFJ3M0IDwct4k74QsaqKSSZ7xNpv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNC8zMjFCQzQ4Q0Qz QUIxMUVGOEVCRDBDMkJDNEY5QUUwMi9uY3pRZ1BCeTNpVHZoQ3hxb3BKSm52RTJt X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25jelFnUEJ5M2lUdmhDeHFvcEpKbnZFMm1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE1MDQvMzIxQkM0OENEM0FCMTFFRjhFQkQwQzJCQzRGOUFFMDIvRDdCQkRFMThE M0FCMTFFRkIwMjIyMDJDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZwjsMA8EAgACMAkDBwAgAQ3wArEwDQYJKoZIhvcNAQELBQADggEB AE8L/N3ryu0CrCSdzBqAq0PAxs1cpZ6j0VXIqnpy2Vjs8SopOZ8ZQGp0uBzsOZwW WDWxnTyMhAMVdujKbW88NBaLvPl+bToGj4c7S3VczezppCjtP+sWkYKWR6YOquzx 9ITomUlFGrYqBPB8O6VAkjxuevm7VoNxDIT2FdxNVGOo4jx1aemyi4i4ZuEFHd2P DMqr+iLrE3vtlrNzWutuU7p4CsWPvtsZdu54WbFyQgHJ67PvWihghd0Eujk2dE8l RwD7IF61anCOPlsSZxo+sZucRyH9kZqlajicSbGb9stWyFWD5PbOv0OVWIttjB/A 67PfDNTkd7rzrUUJVgcy3AM= -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:31 2026 by rpki-client