$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/7D211148F64911EEBE36B826C4F9AE02.roa File: 7D211148F64911EEBE36B826C4F9AE02.roa (raw, json) Hash identifier: n2jHi+IzKuE6vCNNROyZOm3S+36+qDTlT61YfIYPyEg= Subject key identifier: 2E:7F:B7:49:E4:3A:D3:C3:80:F2:E0:BA:2A:CD:A1:F1:CA:8B:66:E3 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: 0171 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/7D211148F64911EEBE36B826C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:44:42 +0000 ROA not before: Sat 11 Oct 2025 09:15:47 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152685 IP address blocks: 103.98.76.0/23 maxlen: 23 103.98.76.0/24 maxlen: 24 103.98.77.0/24 maxlen: 24 2001:df3:a940::/48 maxlen: 48 2001:df3:a940::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Oct 11 09:15:47 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a5863a-8e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2c:e0:2b:bc:81:7e:fa:47:5c:c2:c2:ef:ce: 10:aa:99:96:7a:77:4d:26:9a:10:4c:17:46:62:ab: 29:9a:93:27:3d:61:ad:35:4a:22:7d:08:87:fa:23: 10:1e:b0:d9:d7:2d:ab:33:27:cd:7a:65:77:19:7d: 16:0e:cc:e0:35:68:26:99:69:f7:46:3e:ab:1b:42: 59:35:44:75:e6:7d:01:3c:aa:9e:d4:bf:4e:e9:c3: 7e:f0:79:4a:2d:43:6d:58:dc:ad:ad:ec:38:c0:fe: 82:f9:35:df:09:0f:e0:4a:d7:2b:bb:25:d7:f9:c9: bd:17:48:97:88:b4:68:b1:b9:12:50:f8:56:9c:be: c3:cc:6d:d0:92:d1:ad:1a:87:09:b0:2a:91:53:d8: b5:fe:ac:f0:7a:a9:b6:4c:32:48:72:3e:24:7d:28: dc:25:13:da:b1:71:cb:ea:4b:d6:ca:09:10:ec:c9: 20:b4:de:96:b8:1f:f9:72:11:4b:3d:08:0d:24:66: 31:93:3b:33:b0:99:a1:f3:35:26:0b:ec:1c:e3:6f: 85:f7:e8:52:8d:44:f0:78:78:f0:4e:89:93:8e:1f: 56:8f:8f:0d:19:bb:0b:d4:66:39:4e:0a:f4:f3:e2: 3b:84:9f:dc:0e:3d:18:a1:a0:91:c6:ed:d8:ec:eb: c2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7F:B7:49:E4:3A:D3:C3:80:F2:E0:BA:2A:CD:A1:F1:CA:8B:66:E3 X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/7D211148F64911EEBE36B826C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.76.0/23 IPv6: 2001:df3:a940::/48 Signature Algorithm: sha256WithRSAEncryption ad:6b:f9:be:41:cc:1b:e2:ea:e9:1f:62:41:15:ee:26:cb:42: ed:c8:b0:70:b8:a4:0b:51:ef:2c:a2:49:11:57:1b:3e:36:6c: a0:c2:7d:f4:0f:ff:05:61:0e:8a:a3:e4:1b:3c:af:ce:9d:38: db:44:76:e7:c9:b5:23:0c:70:5a:b1:db:c3:78:83:bf:d1:69: 7f:65:cd:19:40:5c:3e:8c:17:0d:dd:b5:2f:89:0e:f7:c7:05: 1a:4f:f0:b2:02:57:f6:ca:03:89:a0:0f:8a:e9:ce:6b:df:50: 3e:4e:5f:f1:92:bb:6b:13:ac:82:b8:74:58:6b:e0:c7:71:18: 59:05:74:8f:ea:d7:0d:05:e3:4c:35:f9:bd:38:54:26:4f:ed: 7d:f1:b5:67:3b:ec:a1:9b:ab:97:fc:a1:84:37:c7:e7:76:d5: cd:43:ef:4a:2b:be:57:d9:b9:71:4e:2f:d3:6a:77:fe:4e:cb: 85:78:bb:f3:a2:49:19:3a:a9:83:d0:5f:eb:73:58:2b:19:5a: d5:8c:bf:dc:01:95:42:1b:d9:15:dc:9c:cf:3f:d9:00:76:b4: bc:aa:be:49:24:f9:90:aa:4e:89:9f:5a:fb:6a:29:6e:54:7b: d6:f3:3d:8c:4a:8a:2e:e7:3b:b9:94:c1:b0:9c:c6:f2:d1:ed: 50:6b:40:f4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUxMDExMDkxNTQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODYzYS04ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5izgK7yBfvpHXMLC784QqpmWendNJpoQTBdGYqspmpMnPWGtNUoifQiH+iMQ HrDZ1y2rMyfNemV3GX0WDszgNWgmmWn3Rj6rG0JZNUR15n0BPKqe1L9O6cN+8HlK LUNtWNytrew4wP6C+TXfCQ/gStcruyXX+cm9F0iXiLRosbkSUPhWnL7DzG3QktGt GocJsCqRU9i1/qzweqm2TDJIcj4kfSjcJRPasXHL6kvWygkQ7MkgtN6WuB/5chFL PQgNJGYxkzszsJmh8zUmC+wc42+F9+hSjUTweHjwTomTjh9Wj48NGbsL1GY5Tgr0 8+I7hJ/cDj0YoaCRxu3Y7OvCYQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFC5/t0nk OtPDgPLguirNofHKi2bjMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI3M0MvQ0JENjIxMUNGNjQ4MTFFRUE0QTZGRTBFQzRGOUFFMDIvN0QyMTExNDhG NjQ5MTFFRUJFMzZCODI2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ2JMMA8EAgACMAkDBwAgAQ3zqUAwDQYJKoZIhvcNAQELBQADggEB AK1r+b5BzBvi6ukfYkEV7ibLQu3IsHC4pAtR7yyiSRFXGz42bKDCffQP/wVhDoqj 5Bs8r86dONtEdufJtSMMcFqx28N4g7/RaX9lzRlAXD6MFw3dtS+JDvfHBRpP8LIC V/bKA4mgD4rpzmvfUD5OX/GSu2sTrIK4dFhr4MdxGFkFdI/q1w0F40w1+b04VCZP 7X3xtWc77KGbq5f8oYQ3x+d21c1D70orvlfZuXFOL9Nqd/5Oy4V4u/OiSRk6qYPQ X+tzWCsZWtWMv9wBlUIb2RXcnM8/2QB2tLyqvkkk+ZCqTomfWvtqKW5Ue9bzPYxK ii7nO7mUwbCcxvLR7VBrQPQ= -----END CERTIFICATE-----Generated at Mon Mar 2 19:50:01 2026 by rpki-client