$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/4AEAB70C615D11ECAC75D44DC4F9AE02.roa File: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (raw, json) Hash identifier: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss= Subject key identifier: 80:D7:DC:53:4E:C1:40:6E:FF:34:CA:01:AD:ED:DD:E2:11:7E:5F:DD Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 04C8 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/4AEAB70C615D11ECAC75D44DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:20:17 +0000 ROA not before: Sat 10 Jan 2026 23:19:23 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 149293 IP address blocks: 103.178.32.0/23 maxlen: 23 103.178.32.0/24 maxlen: 24 103.178.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Jan 10 23:19:23 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44b20-4a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6a:fb:55:3e:4e:ae:14:06:ac:d0:f8:6f:15: 9e:f9:da:7d:aa:4e:3e:81:63:ee:f3:9e:6c:92:c2: 96:d5:d3:9c:93:f3:1d:1c:78:6f:69:f9:f9:8a:68: ff:1d:70:79:92:ae:f4:4a:c2:41:2f:c6:67:36:db: 20:e0:89:dd:98:9d:cd:a3:de:de:64:45:04:54:b7: 55:de:7b:e4:56:fc:f8:86:fd:ed:09:dd:d5:c0:d7: 97:1e:87:eb:fc:73:a9:a3:81:cd:d1:5d:20:2f:42: f9:ce:cf:0e:2b:87:1a:49:11:d3:54:19:8e:76:28: a0:8f:1c:a6:7f:f4:f5:2d:fa:98:5c:4c:b6:8a:90: 28:f3:15:a8:a0:d6:0d:5b:33:1e:d9:92:26:ea:3e: 39:34:13:90:ee:97:13:9f:cc:b0:5a:db:c4:06:0e: 8b:65:c4:59:8f:ea:4a:49:ed:ed:be:67:18:f5:79: 74:40:39:0d:4d:4a:0a:18:1f:d4:fc:93:89:d9:8f: 35:1a:85:29:74:76:cc:62:59:32:dc:a2:fe:5b:c1: 02:a7:77:c7:ef:08:5c:b2:81:77:4b:83:64:db:47: f3:b3:d5:e8:54:63:58:5d:17:65:c6:1b:86:09:9e: be:86:c9:b9:46:0f:3e:8f:a4:57:bb:d1:47:82:0b: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:DC:53:4E:C1:40:6E:FF:34:CA:01:AD:ED:DD:E2:11:7E:5F:DD X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/4AEAB70C615D11ECAC75D44DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.178.32.0/23 Signature Algorithm: sha256WithRSAEncryption 18:38:22:c3:a1:59:ad:99:eb:36:9f:77:e8:2d:88:5b:08:1b: df:b8:8c:83:7c:2d:88:5f:75:cd:f3:c0:81:b3:de:1a:8a:ee: 65:99:30:87:da:e9:9b:94:aa:a3:f9:c6:79:33:01:ed:f7:ff: 21:b3:90:0d:5e:cd:0e:47:bf:3d:ad:58:22:7c:e4:07:87:81: 09:e8:a4:ba:19:81:91:49:83:cf:d9:29:f2:50:4c:b7:77:76: 89:64:d5:86:c0:dc:d9:b6:72:58:71:bc:2d:f1:31:ff:13:3b: c2:77:b6:77:00:4d:b1:2c:86:86:5d:50:c1:05:0a:3a:40:53: 84:5e:d5:84:fb:e8:a2:71:16:1e:a4:7d:3d:1b:86:c6:0a:18: b1:43:54:17:4e:67:de:13:27:5b:f9:83:f2:ce:ac:28:c5:cf: e7:cc:e3:ba:44:78:78:70:00:fe:d1:c6:e5:11:b0:97:4d:02: 4f:a9:d3:7b:73:d5:68:58:28:ae:3d:b2:2a:4f:a4:da:fd:63: 1f:8c:75:48:5a:df:20:14:b9:02:e8:52:fe:b7:cf:a0:0f:97: 6c:92:33:a9:74:4b:fe:a9:d7:66:16:9d:a7:37:2a:c3:59:ae: 02:db:aa:2d:ab:2a:ba:a2:1e:86:f3:87:42:01:9b:5f:aa:e3: 8a:8d:30:f1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjYwMTEwMjMxOTIzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGIyMC00YTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWr7VT5OrhQGrND4bxWe+dp9qk4+gWPu855sksKW1dOck/MdHHhvafn5imj/ HXB5kq70SsJBL8ZnNtsg4IndmJ3No97eZEUEVLdV3nvkVvz4hv3tCd3VwNeXHofr /HOpo4HN0V0gL0L5zs8OK4caSRHTVBmOdiigjxymf/T1LfqYXEy2ipAo8xWooNYN WzMe2ZIm6j45NBOQ7pcTn8ywWtvEBg6LZcRZj+pKSe3tvmcY9Xl0QDkNTUoKGB/U /JOJ2Y81GoUpdHbMYlky3KL+W8ECp3fH7whcsoF3S4Nk20fzs9XoVGNYXRdlxhuG CZ6+hsm5Rg8+j6RXu9FHggs94QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIDX3FNO wUBu/zTKAa3t3eIRfl/dMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0JFQjAvMTgxMTNENDQ2MTVCMTFFQ0JEOTlEMTRDQzRGOUFFMDIvNEFFQUI3MEM2 MTVEMTFFQ0FDNzVENDREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ7IgMA0GCSqGSIb3DQEBCwUAA4IBAQAYOCLDoVmtmes2n3foLYhb CBvfuIyDfC2IX3XN88CBs94aiu5lmTCH2umblKqj+cZ5MwHt9/8hs5ANXs0OR789 rVgifOQHh4EJ6KS6GYGRSYPP2SnyUEy3d3aJZNWGwNzZtnJYcbwt8TH/EzvCd7Z3 AE2xLIaGXVDBBQo6QFOEXtWE++iicRYepH09G4bGChixQ1QXTmfeEydb+YPyzqwo xc/nzOO6RHh4cAD+0cblEbCXTQJPqdN7c9VoWCiuPbIqT6Ta/WMfjHVIWt8gFLkC 6FL+t8+gD5dskjOpdEv+qddmFp2nNyrDWa4C26otqyq6oh6G84dCAZtfquOKjTDx -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:18 2026 by rpki-client