$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa File: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (raw, json) Hash identifier: ZcreYCpZyWSjMYdhO/BQNJ+N4twNtDLduQjxj+MFalE= Subject key identifier: A9:51:72:0C:59:6C:6C:3A:CD:EC:2F:EE:7B:E5:81:48:91:C0:BE:03 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0CD3 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:44:02 +0000 ROA not before: Tue 24 Feb 2026 18:16:14 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139872 IP address blocks: 103.145.208.0/23 maxlen: 23 103.145.208.0/24 maxlen: 24 103.145.209.0/24 maxlen: 24 2001:df2:2780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:49:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Feb 24 18:16:14 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46cd2-de79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3d:bf:d6:36:e8:c9:ca:89:78:fd:64:fe:91: ec:5c:bd:c2:95:85:b7:97:3a:29:c7:26:28:55:59: 87:54:d4:76:c7:b1:fd:58:0b:32:41:8c:1e:54:14: b7:bd:46:44:6d:56:16:8a:f0:5d:03:88:53:07:56: e5:34:08:84:b3:8d:fb:f3:93:04:81:41:62:0a:45: 96:6d:f1:40:5a:57:f9:fa:2e:da:48:36:a4:ca:28: f8:d9:92:49:eb:c1:b6:6f:10:60:c5:b9:a7:d5:e8: ea:65:9d:03:12:26:b0:62:16:1a:b6:40:e8:53:3d: 0b:a3:f0:cd:3d:6e:d5:f6:ad:1d:69:cc:85:3a:42: ef:a6:5e:06:f2:dd:a1:76:5c:89:4a:7d:f9:b8:11: f7:4f:10:d1:22:31:17:8f:71:e2:1c:b6:4a:0a:8b: 24:fc:8e:54:e9:5b:f6:b5:36:cf:bb:cf:b7:3d:f9: 3a:64:7b:0e:66:6d:88:6e:10:c4:a0:69:e3:c0:d8: 26:39:03:7d:75:6e:6d:d2:17:75:f4:f0:ca:f5:fb: 97:aa:f3:5b:86:85:1f:77:98:59:05:36:00:65:0a: e4:bd:39:f6:e0:f9:98:07:4c:df:b9:10:28:68:17: 65:26:44:1e:36:64:af:2d:dc:de:32:df:17:f6:b1: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:72:0C:59:6C:6C:3A:CD:EC:2F:EE:7B:E5:81:48:91:C0:BE:03 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.145.208.0/23 IPv6: 2001:df2:2780::/48 Signature Algorithm: sha256WithRSAEncryption 61:da:eb:de:9a:f8:a3:95:d2:c5:64:1d:fd:65:16:d3:cd:bd: 6f:1a:19:1f:71:95:e2:28:73:da:13:ee:b7:8a:10:e4:b7:c3: 20:34:68:d4:97:dd:b8:c0:00:8d:9c:00:95:f2:e6:bf:08:88: 50:b4:d6:8a:4d:88:7e:77:11:a7:11:d4:ea:1b:a0:4c:c8:52: 6d:3f:39:e2:9e:51:51:56:eb:93:82:e4:28:cb:9e:9f:7e:b9: 42:11:43:44:63:7a:1e:d6:27:e7:14:58:c8:8a:af:b1:d4:a5: 2c:e0:8b:e7:05:69:bf:36:d0:34:45:d3:10:15:7b:cd:5e:5b: c0:97:38:25:4d:5c:70:e7:3b:99:d1:d3:d4:0b:f4:8a:75:91: 28:06:ac:25:da:06:b4:99:34:48:09:47:e7:e1:57:78:0a:f4: ca:aa:fe:46:36:c5:63:17:ed:5d:03:79:34:11:d1:f6:2d:69: bf:dd:b5:97:ea:98:8f:d7:65:0b:09:13:4a:f4:99:06:01:1d: 28:cd:41:41:29:8f:f7:53:de:16:02:50:7c:9e:06:2e:de:23: db:c9:d7:7a:49:d2:81:61:f8:c8:d2:ab:1e:85:98:3b:b1:04: 14:e7:17:1b:41:8a:a4:33:56:44:33:b6:30:51:4c:47:47:89: 99:23:52:a8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjYwMjI0MTgxNjE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNkMi1kZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7z2/1jboycqJeP1k/pHsXL3ClYW3lzopxyYoVVmHVNR2x7H9WAsyQYweVBS3 vUZEbVYWivBdA4hTB1blNAiEs43785MEgUFiCkWWbfFAWlf5+i7aSDakyij42ZJJ 68G2bxBgxbmn1ejqZZ0DEiawYhYatkDoUz0Lo/DNPW7V9q0dacyFOkLvpl4G8t2h dlyJSn35uBH3TxDRIjEXj3HiHLZKCosk/I5U6Vv2tTbPu8+3Pfk6ZHsOZm2IbhDE oGnjwNgmOQN9dW5t0hd19PDK9fuXqvNbhoUfd5hZBTYAZQrkvTn24PmYB0zfuRAo aBdlJkQeNmSvLdzeMt8X9rH9TQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKlRcgxZ bGw6zewv7nvlgUiRwL4DMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4MkQvQURGNjY1QzAxMjc4MTFFQTlCOEVEMDM0QzRGOUFFMDIvNDAzRkRERDBE RjM1MTFFRDhGQkE4MjNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5HQMA8EAgACMAkDBwAgAQ3yJ4AwDQYJKoZIhvcNAQELBQADggEB AGHa696a+KOV0sVkHf1lFtPNvW8aGR9xleIoc9oT7reKEOS3wyA0aNSX3bjAAI2c AJXy5r8IiFC01opNiH53EacR1OoboEzIUm0/OeKeUVFW65OC5CjLnp9+uUIRQ0Rj eh7WJ+cUWMiKr7HUpSzgi+cFab820DRF0xAVe81eW8CXOCVNXHDnO5nR09QL9Ip1 kSgGrCXaBrSZNEgJR+fhV3gK9Mqq/kY2xWMX7V0DeTQR0fYtab/dtZfqmI/XZQsJ E0r0mQYBHSjNQUEpj/dT3hYCUHyeBi7eI9vJ13pJ0oFh+MjSqx6FmDuxBBTnFxtB iqQzVkQztjBRTEdHiZkjUqg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:49:09 2026 by rpki-client