$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa File: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (raw, json) Hash identifier: xtqs23pEGpn+9A+WHIc8NfV6fN9kv4Vyj6xQTqFc8lM= Subject key identifier: D2:3A:0C:6A:15:51:02:C2:0B:58:47:88:49:16:80:80:01:28:87:BC Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Certificate serial: 1345 Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:33:44 +0000 ROA not before: Thu 14 Aug 2025 17:26:19 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135419 IP address blocks: 103.120.112.0/22 maxlen: 22 103.120.112.0/24 maxlen: 24 103.120.113.0/24 maxlen: 24 103.120.114.0/24 maxlen: 24 103.120.115.0/24 maxlen: 24 2403:56c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4933 (0x1345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8 Validity Not Before: Aug 14 17:26:19 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42418-1c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:34:6c:67:84:3b:99:66:36:1c:74:15:9f: af:45:1e:d8:34:75:17:c8:e7:26:6b:94:e8:0a:95: d8:10:00:00:19:22:9f:95:65:1f:96:88:75:74:47: 9d:d6:42:59:92:0d:6c:7c:c7:65:3d:49:9e:4d:02: 44:cb:f0:c5:26:b3:0d:94:24:75:fc:a4:03:eb:38: a0:9d:b0:1f:9b:22:b7:34:96:da:b1:ca:e5:b9:7a: c5:e4:ac:1f:ff:c7:81:eb:36:80:c1:11:a0:f8:14: cb:38:a1:53:27:2f:e3:f5:d2:bb:c2:f5:73:b1:3e: 58:df:5b:f4:44:d0:c0:20:e9:58:34:09:02:57:b4: d7:9b:f4:3e:dc:0c:c2:da:de:02:27:6a:c3:d5:52: 8e:68:2b:e6:b1:90:22:10:aa:89:21:9a:f7:0d:b9: 71:b9:e4:48:7b:c4:63:e6:6a:78:45:fd:04:b1:5a: 82:e1:ee:33:c9:4e:bf:3d:e4:12:dc:b0:d1:e6:47: ae:0e:15:e9:80:3e:d0:49:78:45:92:a8:57:a1:89: a0:1d:38:10:9a:82:ff:1c:62:39:e7:ac:cc:cf:c9: e6:2c:79:62:74:d4:3a:a0:34:82:c5:98:5f:e7:59: 76:c5:d1:d9:3c:61:fd:d6:38:d8:c0:e6:ff:c9:f6: 87:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:0C:6A:15:51:02:C2:0B:58:47:88:49:16:80:80:01:28:87:BC X509v3 Authority Key Identifier: keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.112.0/22 IPv6: 2403:56c0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:97:1a:73:e2:d8:15:73:2d:d4:f3:d3:38:b6:ab:b1:05:c4: 48:68:54:05:08:70:88:c1:99:1c:c1:d1:47:cf:97:83:3c:db: 45:c6:47:94:9a:ea:80:5d:51:2e:15:82:9e:eb:d5:b1:52:42: 82:95:26:04:44:e9:7c:b6:de:53:b1:1a:1a:3c:aa:3c:e1:00: 85:f9:c5:83:57:33:19:05:28:3f:55:5e:46:32:0c:9e:56:e3: 60:05:54:53:20:84:96:68:8c:47:b6:89:af:3d:d2:5b:09:25: 7c:b5:52:00:d8:b7:1d:2e:05:2c:93:d2:24:88:c6:a7:94:92: 6c:b3:24:27:1e:99:d1:73:40:39:c5:2d:2b:9e:f0:ef:cf:cf: a4:62:ed:81:0c:fd:c3:ff:1f:c7:db:d8:50:70:ae:37:7f:3c: 6f:de:82:ba:5f:73:ce:cc:4b:f9:91:1a:ca:dd:cf:1f:36:63: 7c:77:32:c9:8d:87:7c:b7:83:82:ff:e4:12:29:50:29:79:79: 7f:45:ff:68:3d:ef:82:24:8d:b8:05:9f:7d:30:cd:0b:a7:a8: 6a:35:fb:fc:2e:3a:2f:86:85:c9:f3:2f:0f:64:b4:e0:8c:81: 05:32:95:a6:ea:56:a2:6c:f0:96:dc:6d:e8:ef:a8:d0:0a:d6: 11:06:0e:c2 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICE0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4 NDgyMEM2RTgwHhcNMjUwODE0MTcyNjE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjQxOC0xYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX80bGeEO5lmNhx0FZ+vRR7YNHUXyOcma5ToCpXYEAAAGSKflWUfloh1dEed 1kJZkg1sfMdlPUmeTQJEy/DFJrMNlCR1/KQD6zignbAfmyK3NJbascrluXrF5Kwf /8eB6zaAwRGg+BTLOKFTJy/j9dK7wvVzsT5Y31v0RNDAIOlYNAkCV7TXm/Q+3AzC 2t4CJ2rD1VKOaCvmsZAiEKqJIZr3DblxueRIe8Rj5mp4Rf0EsVqC4e4zyU6/PeQS 3LDR5keuDhXpgD7QSXhFkqhXoYmgHTgQmoL/HGI556zMz8nmLHlidNQ6oDSCxZhf 51l2xdHZPGH91jjYwOb/yfaHAQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNI6DGoV UQLCC1hHiEkWgIABKIe8MB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzYxOEYvRDI4RDc1QzBDMkRGMTFFOEE2NEVGRDJDQzRGOUFFMDIvMkZFNERBMUVD MkUxMTFFOEExOUNCNzJGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3hwMA0EAgACMAcDBQAkA1bAMA0GCSqGSIb3DQEBCwUAA4IBAQCf lxpz4tgVcy3U89M4tquxBcRIaFQFCHCIwZkcwdFHz5eDPNtFxkeUmuqAXVEuFYKe 69WxUkKClSYEROl8tt5TsRoaPKo84QCF+cWDVzMZBSg/VV5GMgyeVuNgBVRTIISW aIxHtomvPdJbCSV8tVIA2LcdLgUsk9IkiManlJJssyQnHpnRc0A5xS0rnvDvz8+k Yu2BDP3D/x/H29hQcK43fzxv3oK6X3POzEv5kRrK3c8fNmN8dzLJjYd8t4OC/+QS KVApeXl/Rf9oPe+CJI24BZ99MM0Lp6hqNfv8LjovhoXJ8y8PZLTgjIEFMpWm6lai bPCW3G3o76jQCtYRBg7C -----END CERTIFICATE-----Generated at Mon Mar 2 03:46:34 2026 by rpki-client