$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/8620180E00EE11EDBC60AA4FC4F9AE02.roa File: 8620180E00EE11EDBC60AA4FC4F9AE02.roa (raw, json) Hash identifier: e3j53flGD9hMNQO/70Yk/I1hHA67u/vAc36dfKcOIAE= Subject key identifier: D9:7D:E9:3D:CB:67:21:C8:84:70:32:C4:0A:A0:CF:A3:8C:E9:4F:32 Certificate issuer: /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Certificate serial: 033B Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/8620180E00EE11EDBC60AA4FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:27:02 +0000 ROA not before: Wed 17 Sep 2025 02:08:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150111 IP address blocks: 103.23.95.0/24 maxlen: 24 103.190.199.0/24 maxlen: 24 2001:df0:f1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 827 (0x33b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D Validity Not Before: Sep 17 02:08:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44cb6-a40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:95:8b:39:09:76:b1:76:ba:a4:a3:64:3b: f0:30:ad:ef:07:9b:c9:21:76:07:3a:2e:27:a5:d6: c5:1d:f7:0f:90:df:1a:94:f4:5b:cb:1c:02:7a:2d: 87:fc:df:0d:aa:29:6c:86:bd:ca:e7:2a:41:5c:d4: 1d:b2:3d:7f:ed:a5:10:3b:90:d6:e6:ff:4a:69:92: ff:40:99:72:14:17:37:00:95:13:87:0d:dd:f4:2a: 10:c5:dd:70:31:86:1a:03:d3:f3:ae:4c:18:30:ab: a3:41:67:77:4d:41:c9:93:50:9d:43:89:b6:27:f4: 39:c2:a0:de:28:20:05:7b:56:0a:f7:e7:46:45:e0: 10:da:49:4d:f4:47:b8:10:25:03:b6:bf:9e:b2:d5: 72:9f:26:7f:40:30:0f:bd:7a:bc:cf:34:43:34:6b: e2:07:22:4d:41:bf:02:af:57:8b:a5:6f:8d:64:c4: ab:28:90:b8:fe:ec:d0:82:0c:c1:d3:4d:ce:4d:df: 3d:54:2e:42:90:7a:26:ae:65:1b:7c:3e:15:ea:a9: 97:97:27:75:66:59:00:1e:1f:87:dd:9b:f4:82:62: 86:cb:7b:aa:25:9f:64:d6:79:8c:f1:f6:3d:c4:38: ff:44:0f:c2:d0:82:6b:fd:4d:a8:25:57:03:b8:85: 67:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:E9:3D:CB:67:21:C8:84:70:32:C4:0A:A0:CF:A3:8C:E9:4F:32 X509v3 Authority Key Identifier: keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/8620180E00EE11EDBC60AA4FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.23.95.0/24 103.190.199.0/24 IPv6: 2001:df0:f1c0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:de:29:dc:ea:67:5b:6e:49:3d:84:0f:61:1f:b1:c6:bf:f3: a5:4a:eb:7c:92:ab:d4:44:62:41:47:80:30:e4:1f:b5:c5:41: 93:59:9f:3b:ec:ab:73:04:44:d3:a2:ce:63:b5:0c:e1:4e:fd: 6d:ab:09:6f:17:cc:8e:9e:9d:01:1f:7e:39:ce:75:7e:55:61: e1:8a:4c:72:d9:90:33:73:2e:2f:af:df:49:de:a2:b9:bb:3b: 7c:6c:bc:60:f6:fa:ef:78:64:e6:81:ea:32:fe:2b:ce:f7:83: 2e:3d:a2:b5:61:68:8a:99:91:59:36:0c:d9:58:4d:97:ae:36: 6d:38:5d:30:fb:bd:4a:bb:be:56:64:1e:ac:84:11:19:f5:73: 6f:62:3d:c6:91:c7:b1:ca:ab:34:e9:b1:ca:7b:61:53:6e:90: f7:46:63:a7:96:f4:87:3e:91:a0:e7:80:a5:ef:47:fe:1d:12: a1:16:13:37:95:29:cd:4c:3d:b6:b3:b9:71:1d:d6:cc:b2:50: e1:53:cc:68:20:e3:1b:3f:56:a1:63:ec:93:27:17:42:4f:55: 73:c9:35:87:6b:d1:bf:64:32:ed:18:cb:0e:5f:44:07:db:be: af:61:e5:6c:56:c8:c9:b2:a6:16:d0:70:03:7f:95:94:76:2e: 72:bf:52:5b -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNEExMTAvBgNVBAUTKDI3MkNBRTVGMjFDOEJGNkI2QjQ5MTVBRjAwMDRDN0VG Q0ZDN0RCM0QwHhcNMjUwOTE3MDIwODMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGNiNi1hNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqiVizkJdrF2uqSjZDvwMK3vB5vJIXYHOi4npdbFHfcPkN8alPRbyxwCei2H /N8Nqilshr3K5ypBXNQdsj1/7aUQO5DW5v9KaZL/QJlyFBc3AJUThw3d9CoQxd1w MYYaA9PzrkwYMKujQWd3TUHJk1CdQ4m2J/Q5wqDeKCAFe1YK9+dGReAQ2klN9Ee4 ECUDtr+estVynyZ/QDAPvXq8zzRDNGviByJNQb8Cr1eLpW+NZMSrKJC4/uzQggzB 003OTd89VC5CkHomrmUbfD4V6qmXlyd1ZlkAHh+H3Zv0gmKGy3uqJZ9k1nmM8fY9 xDj/RA/C0IJr/U2oJVcDuIVn5wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFNl96T3L ZyHIhHAyxAqgz6OM6U8yMB8GA1UdIwQYMBaAFCcsrl8hyL9ra0kVrwAEx+/Px9s9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE0QS81RUY4QTkxNjAw RUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYydHJTUld2QUFUSDc4X0gy ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p5eXVYeUhJdjJ0clNSV3ZBQVRINzhfSDJ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMxNEEvNUVGOEE5MTYwMEVBMTFFRDlDMENCMzMyQzRGOUFFMDIvODYyMDE4MEUw MEVFMTFFREJDNjBBQTRGQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZxdfAwQAZ77HMA8EAgACMAkDBwAgAQ3w8cAwDQYJKoZIhvcNAQEL BQADggEBAIveKdzqZ1tuST2ED2Efsca/86VK63ySq9REYkFHgDDkH7XFQZNZnzvs q3MERNOizmO1DOFO/W2rCW8XzI6enQEffjnOdX5VYeGKTHLZkDNzLi+v30neorm7 O3xsvGD2+u94ZOaB6jL+K873gy49orVhaIqZkVk2DNlYTZeuNm04XTD7vUq7vlZk HqyEERn1c29iPcaRx7HKqzTpscp7YVNukPdGY6eW9Ic+kaDngKXvR/4dEqEWEzeV Kc1MPbazuXEd1syyUOFTzGgg4xs/VqFj7JMnF0JPVXPJNYdr0b9kMu0Yyw5fRAfb vq9h5WxWyMmyphbQcAN/lZR2LnK/Uls= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:33 2026 by rpki-client