$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/BDAC3ACA1E7111EB93874336C4F9AE02.roa File: BDAC3ACA1E7111EB93874336C4F9AE02.roa (raw, json) Hash identifier: Fs+wJCtSlXLyDLA5Jgh5KCmg3uh+8nfqlZjrLNA7VBQ= Subject key identifier: BA:23:1A:D3:B6:B9:3E:EA:D3:09:E0:6D:70:A5:99:43:00:1E:27:04 Certificate issuer: /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Certificate serial: 07F8 Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/BDAC3ACA1E7111EB93874336C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:08:54 +0000 ROA not before: Thu 08 Jan 2026 21:17:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134980 IP address blocks: 103.204.117.0/24 maxlen: 24 103.210.154.0/23 maxlen: 24 103.210.192.0/24 maxlen: 24 2001:df0:1600::/48 maxlen: 48 2406:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593 Validity Not Before: Jan 8 21:17:15 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44876-8c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:21:21:37:0d:42:01:0d:d4:82:0b:af:c6: 96:67:e0:22:41:ea:2b:45:8e:27:c0:2d:46:fb:50: 73:3c:72:db:4a:83:b7:2e:f2:f2:5f:8c:b8:30:a1: 93:5d:33:05:e2:1a:6e:6b:4d:b6:75:84:b5:36:3a: a1:35:84:a4:a9:ec:44:36:91:36:13:9c:52:e0:d8: 8b:22:a6:24:c1:2e:db:32:5f:2c:4f:ed:90:7f:2c: 72:33:df:e8:c8:ba:16:88:a7:18:79:63:80:85:af: eb:28:b4:72:a9:4a:81:6a:7f:08:c3:4e:6b:6a:e9: 90:ab:02:37:a9:76:b3:a0:c2:a6:c5:1d:a6:78:25: fc:9e:f4:58:34:10:b7:22:57:83:cd:e9:0e:34:34: 98:ff:1e:a1:87:5a:12:0c:52:62:68:b7:48:dc:f5: b7:59:86:2f:92:de:55:5a:08:88:25:23:5f:e5:0f: e5:de:c8:0b:19:5e:bb:d8:be:12:10:01:85:e4:79: cc:d8:53:3e:42:d9:93:9d:67:3b:7c:25:8f:ef:b4: 6f:14:69:8f:16:3f:10:13:c4:d2:d4:62:6a:60:f7: 68:fc:c0:17:b5:45:dd:34:b1:68:02:96:b2:a0:9b: df:83:5b:51:b6:0e:44:6c:24:7d:e8:92:b0:2b:a9: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:1A:D3:B6:B9:3E:EA:D3:09:E0:6D:70:A5:99:43:00:1E:27:04 X509v3 Authority Key Identifier: keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/BDAC3ACA1E7111EB93874336C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.117.0/24 103.210.154.0/23 103.210.192.0/24 IPv6: 2001:df0:1600::/48 2406:3d40::/32 Signature Algorithm: sha256WithRSAEncryption 69:ee:b8:75:ec:a0:46:fb:68:0a:ad:1c:5e:d6:6d:95:10:d6: d6:8e:46:88:d0:ef:73:2a:b6:e3:1a:46:5e:c4:6b:fb:b5:ed: 05:41:a0:4e:d7:6e:97:ce:1d:ff:b2:9c:c1:23:6c:79:0c:f1: 39:f8:ab:0c:25:49:b0:9f:08:53:cd:23:a0:54:8c:da:f7:a3: a0:68:21:8e:6c:49:30:b5:d4:b7:2f:bd:dd:70:ed:ff:0f:4b: eb:f2:2e:8d:03:bc:7f:28:8c:29:da:a4:ad:66:85:e8:a8:99: 0c:ee:ee:7f:a6:3f:ed:61:9f:95:2c:83:dc:69:83:a7:50:51: d3:8c:4f:26:23:e1:15:30:4e:63:3d:8c:8c:dc:dd:31:25:ab: 5a:75:ab:c5:b1:0d:be:28:87:c5:c2:44:44:fe:7c:47:91:75: 5c:f1:20:56:8d:1f:f6:ae:3a:c8:45:1a:e2:34:dd:e3:cf:52: ac:e5:c3:76:45:7e:b8:9e:50:2a:dc:78:26:b7:b4:0a:df:a3: 12:71:0f:f4:c2:80:05:4f:96:bd:67:62:59:8c:e2:7e:71:48: e0:fe:12:ba:3e:78:53:00:2d:1a:5e:35:a2:ff:27:cf:b0:8c: d5:8b:81:86:f2:a2:94:4f:d8:69:af:71:a2:de:b8:10:0a:0f: 50:3e:c2:0d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy MTBGM0M1OTMwHhcNMjYwMTA4MjExNzE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDg3Ni04YzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXYhITcNQgEN1IILr8aWZ+AiQeorRY4nwC1G+1BzPHLbSoO3LvLyX4y4MKGT XTMF4hpua022dYS1NjqhNYSkqexENpE2E5xS4NiLIqYkwS7bMl8sT+2QfyxyM9/o yLoWiKcYeWOAha/rKLRyqUqBan8Iw05raumQqwI3qXazoMKmxR2meCX8nvRYNBC3 IleDzekONDSY/x6hh1oSDFJiaLdI3PW3WYYvkt5VWgiIJSNf5Q/l3sgLGV672L4S EAGF5HnM2FM+QtmTnWc7fCWP77RvFGmPFj8QE8TS1GJqYPdo/MAXtUXdNLFoApay oJvfg1tRtg5EbCR96JKwK6lLxwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFLojGtO2 uT7q0wngbXClmUMAHicEMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU1MkIvRDgzRDYyOTQxRTZGMTFFQkFBMTM5RTMzQzRGOUFFMDIvQkRBQzNBQ0Ex RTcxMTFFQjkzODc0MzM2QzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAY BAIAATASAwQAZ8x1AwQBZ9KaAwQAZ9LAMBYEAgACMBADBwAgAQ3wFgADBQAkBj1A MA0GCSqGSIb3DQEBCwUAA4IBAQBp7rh17KBG+2gKrRxe1m2VENbWjkaI0O9zKrbj GkZexGv7te0FQaBO126Xzh3/spzBI2x5DPE5+KsMJUmwnwhTzSOgVIza96OgaCGO bEkwtdS3L73dcO3/D0vr8i6NA7x/KIwp2qStZoXoqJkM7u5/pj/tYZ+VLIPcaYOn UFHTjE8mI+EVME5jPYyM3N0xJatadavFsQ2+KIfFwkRE/nxHkXVc8SBWjR/2rjrI RRriNN3jz1Ks5cN2RX64nlAq3Hgmt7QK36MScQ/0woAFT5a9Z2JZjOJ+cUjg/hK6 PnhTAC0aXjWi/yfPsIzVi4GG8qKUT9hpr3Gi3rgQCg9QPsIN -----END CERTIFICATE-----Generated at Mon Mar 2 12:35:30 2026 by rpki-client