$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/F3862312575011EDA38B8A6DC4F9AE02.roa File: F3862312575011EDA38B8A6DC4F9AE02.roa (raw, json) Hash identifier: yRsHtOtkcP87y51iv1i87DcAL67JPvvxdU9k9JvZehA= Subject key identifier: 92:78:C3:0C:4D:31:6B:64:11:95:6B:42:BB:D6:B1:8C:AF:55:81:4F Certificate issuer: /CN=A916EDC4/serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Certificate serial: 02EF Authority key identifier: C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/F3862312575011EDA38B8A6DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:07:04 +0000 ROA not before: Thu 25 Sep 2025 02:20:23 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 142278 IP address blocks: 103.108.178.0/23 maxlen: 23 103.108.178.0/24 maxlen: 24 103.108.179.0/24 maxlen: 24 2400:a020::/32 maxlen: 36 2400:a020:1000::/48 maxlen: 48 2400:a020:2000::/48 maxlen: 48 2400:a020:3000::/48 maxlen: 48 2400:a020:4000::/48 maxlen: 48 2400:a020:5000::/48 maxlen: 48 2400:a020:6000::/48 maxlen: 48 2400:a020:7000::/48 maxlen: 48 2400:a020:8000::/48 maxlen: 48 2400:a020:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EDC4, serialNumber=C0DE9D846B217C78DD64855A9ED79AC3D271108E Validity Not Before: Sep 25 02:20:23 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42be8-5b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:07:b7:ee:70:9a:d7:3e:8c:e1:9a:e2:7b:33: 83:85:f3:58:07:c2:e5:8a:b7:01:0c:61:f4:e1:54: 4c:77:17:74:7c:3a:30:26:18:ff:59:80:91:37:c8: ce:4e:c9:c0:8a:af:c7:67:7d:f1:8f:c8:f8:8a:db: 3b:19:4b:4a:92:fc:96:ce:a7:2b:df:37:4e:b8:f4: 44:86:fa:59:92:4a:8f:12:3d:cc:05:7c:32:88:da: d4:c9:2f:a1:4d:d3:fa:d5:11:41:2a:8c:b7:ac:53: 5e:e4:9d:9c:55:e6:9e:24:44:7b:3b:ed:03:cc:34: 2d:34:c5:52:31:f2:e9:d0:cd:26:bd:97:c6:e6:9e: 76:89:88:3d:58:1f:ce:55:ca:3a:cf:aa:22:6f:9e: e4:76:2d:ad:a1:7b:d0:64:b4:12:ef:18:f4:f0:f0: 9c:9f:3b:0b:93:d1:b5:0f:6c:18:49:0d:3f:ed:02: a5:24:90:79:cb:37:3f:e3:ee:62:85:0a:8d:30:18: 60:9d:cd:16:6b:d0:91:8d:14:53:1d:81:dd:79:ca: 2c:4e:a8:41:89:d9:68:2e:ca:53:98:9b:fd:9e:f2: e2:b5:08:b5:56:4b:e8:51:90:3e:3a:c8:03:01:79: ba:81:4b:1c:6c:48:23:bf:61:28:21:48:1d:b6:cd: 92:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:78:C3:0C:4D:31:6B:64:11:95:6B:42:BB:D6:B1:8C:AF:55:81:4F X509v3 Authority Key Identifier: keyid:C0:DE:9D:84:6B:21:7C:78:DD:64:85:5A:9E:D7:9A:C3:D2:71:10:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/wN6dhGshfHjdZIVanteaw9JxEI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wN6dhGshfHjdZIVanteaw9JxEI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC4/0B22A6F81BAB11ED9C362F78C4F9AE02/F3862312575011EDA38B8A6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.178.0/23 IPv6: 2400:a020::/32 Signature Algorithm: sha256WithRSAEncryption 85:37:cc:54:a1:58:32:cd:e6:0b:7c:f5:b0:36:0e:15:db:31: bd:c1:6e:b6:dc:d2:7b:e9:b0:02:1c:62:1e:25:a6:f8:e9:f2: 3a:3e:cc:a9:c0:03:3c:24:3e:08:27:7c:94:f6:de:bb:73:44: 27:52:97:1f:04:ba:c9:4b:50:da:ed:6b:40:e6:00:dc:f5:81: db:03:f6:d3:0d:0d:ac:40:27:dc:a0:06:55:c1:bb:31:3c:e5: 5b:d6:74:5d:37:0e:e3:f3:e9:c2:d4:80:ab:32:4f:fb:4e:2e: 7a:68:3f:a5:5a:f2:db:32:d0:81:ba:c4:8b:c2:07:cc:d9:03: 51:c2:8f:05:f6:bf:50:04:ae:fc:4a:19:11:8b:7c:ce:0e:f8: 8f:f2:9d:a6:8f:d4:22:b1:08:e3:0c:16:8f:4e:e5:0a:72:63: 2f:46:30:3f:9a:57:a2:6d:73:e2:b9:ed:95:9a:de:50:a0:f7: 3b:8d:17:70:21:44:17:2b:86:9b:28:2f:47:37:aa:ca:a0:99: 8c:a0:1d:2b:53:9f:c8:a5:f9:05:38:ed:ab:39:bc:eb:c9:a7: 99:40:19:f6:e3:07:65:59:13:39:bb:39:e3:cd:6f:00:bc:05: 07:88:21:e4:7c:cb:bd:20:e7:3a:47:f1:b5:6f:fe:fb:60:65: 90:e3:83:ac -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEQzQxMTAvBgNVBAUTKEMwREU5RDg0NkIyMTdDNzhERDY0ODU1QTlFRDc5QUMz RDI3MTEwOEUwHhcNMjUwOTI1MDIyMDIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmJlOC01YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwe37nCa1z6M4ZriezODhfNYB8LlircBDGH04VRMdxd0fDowJhj/WYCRN8jO TsnAiq/HZ33xj8j4its7GUtKkvyWzqcr3zdOuPREhvpZkkqPEj3MBXwyiNrUyS+h TdP61RFBKoy3rFNe5J2cVeaeJER7O+0DzDQtNMVSMfLp0M0mvZfG5p52iYg9WB/O Vco6z6oib57kdi2toXvQZLQS7xj08PCcnzsLk9G1D2wYSQ0/7QKlJJB5yzc/4+5i hQqNMBhgnc0Wa9CRjRRTHYHdecosTqhBidloLspTmJv9nvLitQi1VkvoUZA+OsgD AXm6gUscbEgjv2EoIUgdts2ScwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJJ4wwxN MWtkEZVrQrvWsYyvVYFPMB8GA1UdIwQYMBaAFMDenYRrIXx43WSFWp7XmsPScRCO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RURDNC8wQjIyQTZGODFC QUIxMUVEOUMzNjJGNzhDNEY5QUUwMi93TjZkaEdzaGZIamRaSVZhbnRlYXc5SnhF STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dONmRoR3NoZkhqZFpJVmFudGVhdzlKeEVJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVEQzQvMEIyMkE2RjgxQkFCMTFFRDlDMzYyRjc4QzRGOUFFMDIvRjM4NjIzMTI1 NzUwMTFFREEzOEI4QTZEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2yyMA0EAgACMAcDBQAkAKAgMA0GCSqGSIb3DQEBCwUAA4IBAQCF N8xUoVgyzeYLfPWwNg4V2zG9wW623NJ76bACHGIeJab46fI6PsypwAM8JD4IJ3yU 9t67c0QnUpcfBLrJS1Da7WtA5gDc9YHbA/bTDQ2sQCfcoAZVwbsxPOVb1nRdNw7j 8+nC1ICrMk/7Ti56aD+lWvLbMtCBusSLwgfM2QNRwo8F9r9QBK78ShkRi3zODviP 8p2mj9QisQjjDBaPTuUKcmMvRjA/mleibXPiue2Vmt5QoPc7jRdwIUQXK4abKC9H N6rKoJmMoB0rU5/IpfkFOO2rObzryaeZQBn24wdlWRM5uznjzW8AvAUHiCHkfMu9 IOc6R/G1b/77YGWQ44Os -----END CERTIFICATE-----Generated at Mon Mar 2 21:10:51 2026 by rpki-client