$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa File: 7E8D9A52895411E6B3538424C4F9AE02.roa (raw, json) Hash identifier: JuvAoXwq2q+25weckrh5AmxWev3ZprGRD1R3ygjTn5E= Subject key identifier: 93:EF:E3:03:3F:BD:6D:8F:7A:BB:A0:4F:FF:E2:5D:3D:65:0D:DC:09 Certificate issuer: /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Certificate serial: 1EA3 Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:14:27 +0000 ROA not before: Fri 06 Jun 2025 16:35:07 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135524 IP address blocks: 103.221.252.0/22 maxlen: 22 103.221.252.0/23 maxlen: 23 103.221.252.0/24 maxlen: 24 103.221.253.0/24 maxlen: 24 103.221.254.0/23 maxlen: 23 103.221.254.0/24 maxlen: 24 103.221.255.0/24 maxlen: 24 2405:ac80::/32 maxlen: 36 2405:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7843 (0x1ea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209 Validity Not Before: Jun 6 16:35:07 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40373-64e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:00:5f:ce:26:db:e9:b5:76:76:a0:ef:8a: 59:3e:c9:c0:43:5e:83:75:1b:14:9b:7d:ca:73:0a: 5e:83:1a:8e:00:27:28:20:60:98:76:67:0d:e0:34: 92:d0:b8:ad:d0:fe:4d:a1:2d:71:38:e3:a5:d5:d5: 55:76:fb:b2:6e:50:01:63:50:0b:f4:c1:2d:11:ac: 9f:5e:dc:87:25:b2:fa:a9:17:cf:58:54:60:ad:82: de:a7:37:40:e9:ad:9f:54:a4:ff:68:5c:da:0e:e2: eb:d8:1d:f1:61:f1:77:7c:c1:0c:bf:74:b4:7c:1c: 49:67:ab:27:98:59:b7:b2:54:36:bf:38:14:52:aa: b8:53:2d:7e:b2:d8:4c:1f:ef:e3:d6:23:29:73:51: ce:ab:a5:de:d2:03:d2:5c:8c:e8:dc:31:13:d2:41: 55:61:f3:b6:ea:1d:92:08:bf:11:a6:0d:19:de:86: b7:be:37:4e:a6:fe:39:4c:c1:ef:be:c1:b4:c7:56: 4e:44:95:e9:25:dc:3f:a0:40:37:2f:fd:e2:bb:d5: a0:1c:fb:e2:df:e3:f6:28:aa:a4:7c:b4:a4:0d:c5: 34:f8:25:c0:f7:2d:b1:2d:b3:66:f1:37:20:db:a3: d0:51:f6:59:b6:15:6c:1c:0c:e2:46:ab:7d:b5:7d: 6a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:E3:03:3F:BD:6D:8F:7A:BB:A0:4F:FF:E2:5D:3D:65:0D:DC:09 X509v3 Authority Key Identifier: keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/7E8D9A52895411E6B3538424C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.221.252.0/22 IPv6: 2405:ac80::/32 Signature Algorithm: sha256WithRSAEncryption 12:91:30:b2:24:f5:2c:f1:86:c1:d5:c9:28:d4:04:66:36:f0: 9c:87:15:1b:d8:8a:3f:c3:9d:c1:9b:25:9d:a6:82:db:e1:88: dc:1d:3a:fc:17:57:70:6a:59:ab:6a:b9:a6:b9:8f:20:c4:1b: cf:c9:ec:3b:0c:e2:6c:fa:65:04:57:cf:6f:36:60:47:67:a6: 82:df:71:bd:8e:2a:9b:56:9a:2a:f4:29:7f:28:42:6e:ab:c0: 87:1c:74:91:6a:44:60:f9:16:b6:a9:32:6d:97:ec:b7:28:bf: c9:fe:25:f3:0e:fe:03:37:8f:e6:72:2e:5f:2f:8f:f8:fe:f7: a1:4c:73:b8:36:26:17:46:7e:05:4f:88:fb:26:d8:f2:c6:86: 6e:0a:93:f0:f9:aa:89:f0:0c:f4:dc:92:e7:04:e4:1a:48:9f: 4e:e0:27:10:44:cc:e0:d9:ed:53:13:07:3c:e7:eb:8b:a6:fd: 2b:d4:1a:38:70:94:6c:cc:73:e0:db:3f:4e:eb:f2:18:70:e2: 83:43:12:ef:03:92:9f:35:59:b4:c3:66:ac:74:06:32:e9:5f: af:cd:57:0a:6e:27:28:9d:f8:10:9d:74:5f:27:3c:5b:57:d9: 19:dd:f2:b3:3d:7e:73:0f:dd:a9:4c:95:5f:e4:54:74:b5:97: 33:2a:c4:d6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICHqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw QkZCQkMyMDkwHhcNMjUwNjA2MTYzNTA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDM3My02NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+8AX84m2+m1dnag74pZPsnAQ16DdRsUm33KcwpegxqOACcoIGCYdmcN4DSS 0Lit0P5NoS1xOOOl1dVVdvuyblABY1AL9MEtEayfXtyHJbL6qRfPWFRgrYLepzdA 6a2fVKT/aFzaDuLr2B3xYfF3fMEMv3S0fBxJZ6snmFm3slQ2vzgUUqq4Uy1+sthM H+/j1iMpc1HOq6Xe0gPSXIzo3DET0kFVYfO26h2SCL8Rpg0Z3oa3vjdOpv45TMHv vsG0x1ZORJXpJdw/oEA3L/3iu9WgHPvi3+P2KKqkfLSkDcU0+CXA9y2xLbNm8Tcg 26PQUfZZthVsHAziRqt9tX1q0wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJPv4wM/ vW2PerugT//iXT1lDdwJMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5 NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRCM0YvRDM5MTAxMzQ4OTUzMTFFNjhBODU0OTIzQzRGOUFFMDIvN0U4RDlBNTI4 OTU0MTFFNkIzNTM4NDI0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ938MA0EAgACMAcDBQAkBayAMA0GCSqGSIb3DQEBCwUAA4IBAQAS kTCyJPUs8YbB1cko1ARmNvCchxUb2Io/w53BmyWdpoLb4YjcHTr8F1dwalmrarmm uY8gxBvPyew7DOJs+mUEV89vNmBHZ6aC33G9jiqbVpoq9Cl/KEJuq8CHHHSRakRg +Ra2qTJtl+y3KL/J/iXzDv4DN4/mci5fL4/4/vehTHO4NiYXRn4FT4j7JtjyxoZu CpPw+aqJ8Az03JLnBOQaSJ9O4CcQRMzg2e1TEwc85+uLpv0r1Bo4cJRszHPg2z9O 6/IYcOKDQxLvA5KfNVm0w2asdAYy6V+vzVcKbiconfgQnXRfJzxbV9kZ3fKzPX5z D92pTJVf5FR0tZczKsTW -----END CERTIFICATE-----Generated at Mon Mar 2 13:51:44 2026 by rpki-client