$ rpki-client -vvf rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/D725AC5C091411EABBFC8739C4F9AE02.roa File: D725AC5C091411EABBFC8739C4F9AE02.roa (raw, json) Hash identifier: zDxsuRndlq0lJuspimIYJwOxaHSsP7u9+ZEkGQ4K8fQ= Subject key identifier: 4B:43:B7:A4:0C:3D:93:A1:9B:E8:8C:CF:D7:3F:43:9D:36:17:95:44 Certificate issuer: /CN=A917148B/serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Certificate serial: 0CC7 Authority key identifier: 22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/D725AC5C091411EABBFC8739C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:41:36 +0000 ROA not before: Thu 26 Feb 2026 18:15:59 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135071 IP address blocks: 103.208.132.0/22 maxlen: 24 137.59.152.0/22 maxlen: 24 2402:c0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917148B, serialNumber=22DF3175B1DD323117E0C19F3F6D6A1E771F9C1F Validity Not Before: Feb 26 18:15:59 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45020-7a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:4f:b0:db:10:80:d0:95:17:0e:45:61:aa: 61:b1:cd:ea:ae:c5:4a:5c:a6:2e:32:44:87:2f:73: b5:1c:28:77:e5:88:ea:af:c4:09:4c:57:fd:56:c7: ff:d8:b2:f0:fe:0d:12:79:23:22:96:c0:5a:df:f8: 0a:39:dc:0f:56:cb:b2:df:f1:68:49:65:ca:0a:d2: bd:70:06:db:8a:6e:3a:ed:85:c8:ef:87:be:47:c3: 35:21:73:e6:a7:ca:45:4c:eb:86:c2:13:70:52:af: b4:85:92:f7:de:bf:b9:e8:b5:22:21:ad:d4:28:a6: 25:c8:4c:54:6f:5d:2e:c0:33:5d:b4:b3:ee:d6:2d: ce:b0:0e:0e:44:5e:22:bb:19:85:b5:b8:cf:37:d4: e4:a6:b0:22:46:20:33:d4:39:27:4e:7e:b7:e7:9e: 7c:01:56:47:c0:a0:91:c0:a1:d2:db:ca:9b:bf:fc: 11:a3:3d:b6:20:2f:b3:42:4a:19:6f:25:40:a0:df: e9:33:a4:8f:45:c6:4b:07:0a:76:5a:41:cc:5d:54: e3:63:c8:cd:b7:ae:84:b1:44:9f:ff:86:c1:ca:78: 58:01:02:8f:7d:ff:7f:c6:28:48:c4:de:90:2c:b4: b8:1f:ef:26:83:31:b9:8b:2a:e3:d4:62:ed:37:60: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:43:B7:A4:0C:3D:93:A1:9B:E8:8C:CF:D7:3F:43:9D:36:17:95:44 X509v3 Authority Key Identifier: keyid:22:DF:31:75:B1:DD:32:31:17:E0:C1:9F:3F:6D:6A:1E:77:1F:9C:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/It8xdbHdMjEX4MGfP21qHncfnB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It8xdbHdMjEX4MGfP21qHncfnB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917148B/049410AE091311EABA41C735C4F9AE02/D725AC5C091411EABBFC8739C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.208.132.0/22 137.59.152.0/22 IPv6: 2402:c0c0::/32 Signature Algorithm: sha256WithRSAEncryption 52:dd:8b:40:da:c9:84:8d:ae:47:bf:3a:2b:ac:cf:ae:07:69: 45:36:0e:c9:a3:d2:5a:bd:12:ac:ed:55:00:e4:df:b3:3e:4e: 46:f4:24:e1:4f:6a:20:e1:c5:54:3f:99:cf:12:b0:b1:a5:92: e5:2f:bf:a8:cc:e8:0d:db:d3:32:94:9e:f4:2a:0f:20:12:19: b3:b7:87:e5:b5:67:4e:0d:6c:ce:27:78:3d:e3:75:fc:4b:c7: 12:2c:b5:3d:6a:e2:b4:a1:9e:8d:82:26:be:b7:03:12:48:d9: ec:4e:20:f0:4c:29:ac:48:72:78:e6:11:8f:3c:54:94:c3:04: 55:1a:f1:5d:f3:21:2a:05:0d:ac:52:eb:b3:b2:89:da:3c:44: 86:61:9a:18:c4:8e:81:0b:0a:3d:d2:51:ac:41:a8:99:cd:aa: ec:e9:9f:ef:ee:23:40:d1:6b:5e:1a:79:44:46:f6:ed:c3:1a: 2c:5c:63:80:1e:c3:e0:24:48:2a:7d:bb:6d:73:56:7b:10:7d: 60:39:fd:eb:58:aa:87:b0:e4:96:36:19:55:66:ed:d4:68:12: 77:57:c3:f9:e9:96:c3:b0:3e:82:a8:56:0d:3b:38:dc:01:b6: 52:33:ad:d9:e5:6d:c3:ea:f1:a5:e3:39:4d:4c:08:28:42:21: ab:66:4f:ef -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE0OEIxMTAvBgNVBAUTKDIyREYzMTc1QjFERDMyMzExN0UwQzE5RjNGNkQ2QTFF NzcxRjlDMUYwHhcNMjYwMjI2MTgxNTU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTAyMC03YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugFPsNsQgNCVFw5FYaphsc3qrsVKXKYuMkSHL3O1HCh35Yjqr8QJTFf9Vsf/ 2LLw/g0SeSMilsBa3/gKOdwPVsuy3/FoSWXKCtK9cAbbim467YXI74e+R8M1IXPm p8pFTOuGwhNwUq+0hZL33r+56LUiIa3UKKYlyExUb10uwDNdtLPu1i3OsA4ORF4i uxmFtbjPN9TkprAiRiAz1DknTn635558AVZHwKCRwKHS28qbv/wRoz22IC+zQkoZ byVAoN/pM6SPRcZLBwp2WkHMXVTjY8jNt66EsUSf/4bBynhYAQKPff9/xihIxN6Q LLS4H+8mgzG5iyrj1GLtN2DDbwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEtDt6QM PZOhm+iMz9c/Q502F5VEMB8GA1UdIwQYMBaAFCLfMXWx3TIxF+DBnz9tah53H5wf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTQ4Qi8wNDk0MTBBRTA5 MTMxMUVBQkE0MUM3MzVDNEY5QUUwMi9JdDh4ZGJIZE1qRVg0TUdmUDIxcUhuY2Zu QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0OHhkYkhkTWpFWDRNR2ZQMjFxSG5jZm5COC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE0OEIvMDQ5NDEwQUUwOTEzMTFFQUJBNDFDNzM1QzRGOUFFMDIvRDcyNUFDNUMw OTE0MTFFQUJCRkM4NzM5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9CEAwQCiTuYMA0EAgACMAcDBQAkAsDAMA0GCSqGSIb3DQEBCwUA A4IBAQBS3YtA2smEja5HvzorrM+uB2lFNg7Jo9JavRKs7VUA5N+zPk5G9CThT2og 4cVUP5nPErCxpZLlL7+ozOgN29MylJ70Kg8gEhmzt4fltWdODWzOJ3g943X8S8cS LLU9auK0oZ6Ngia+twMSSNnsTiDwTCmsSHJ45hGPPFSUwwRVGvFd8yEqBQ2sUuuz sonaPESGYZoYxI6BCwo90lGsQaiZzars6Z/v7iNA0WteGnlERvbtwxosXGOAHsPg JEgqfbttc1Z7EH1gOf3rWKqHsOSWNhlVZu3UaBJ3V8P56ZbDsD6CqFYNOzjcAbZS M63Z5W3D6vGl4zlNTAgoQiGrZk/v -----END CERTIFICATE-----Generated at Mon Mar 2 07:49:43 2026 by rpki-client