$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/2E7B4D90ACD411EBA8C2F944C4F9AE02.roa File: 2E7B4D90ACD411EBA8C2F944C4F9AE02.roa (raw, json) Hash identifier: FsTz5TTUfDYS0H4BupsjoQcF/WpnmvqvKgeWcC0+iAI= Subject key identifier: FA:5D:23:F3:4D:7D:07:B0:DE:5D:96:A3:0A:4F:95:1E:2C:D5:42:C4 Certificate issuer: /CN=A917C11F/serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Certificate serial: 0687 Authority key identifier: C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/2E7B4D90ACD411EBA8C2F944C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:47:36 +0000 ROA not before: Wed 14 May 2025 23:13:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142122 IP address blocks: 103.166.152.0/23 maxlen: 23 103.166.152.0/24 maxlen: 24 103.166.153.0/24 maxlen: 24 2001:df6:9480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11F, serialNumber=C05AE9534FD39D648C28443C48D511BBA9A8CAFE Validity Not Before: May 14 23:13:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3fd28-1623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:60:33:51:c8:c7:1b:60:4f:64:55:76:e4: 0f:0b:10:7d:f3:c8:91:50:59:b7:56:e6:e2:e4:db: fd:80:37:13:b5:38:4f:c8:c5:40:13:4c:f0:46:8b: 3a:e2:12:7b:c7:88:36:9a:13:bb:73:e2:df:4d:34: df:96:7a:a6:11:03:4d:9f:05:c6:67:bf:ae:07:62: 99:59:d7:d3:49:a9:cb:12:60:08:a7:b7:57:ed:22: fe:b1:f8:68:06:37:c4:b9:2d:6a:72:88:19:62:33: 06:99:6a:61:0e:4f:0c:10:92:1b:28:44:2e:39:6a: b5:32:33:18:73:03:a3:82:a0:10:69:cc:f5:a5:5e: 2f:4e:bc:40:08:62:90:6a:fb:e9:18:cc:41:b9:77: fe:8c:69:0d:c2:68:e4:6b:0d:b9:20:de:33:c3:e0: ed:43:68:8c:ef:45:09:9a:c5:84:72:ec:a1:be:61: d1:a0:62:d5:aa:25:c2:88:3e:da:70:3a:c3:ac:86: eb:35:c6:e3:0b:f7:5d:b0:50:89:c6:32:39:41:fb: cb:56:ff:d6:67:58:77:d8:99:02:3b:5f:c0:da:b0: ee:be:58:87:ef:13:c7:ec:ce:b9:a6:0e:01:56:8e: 47:8b:ba:f2:d8:c6:d7:0c:29:a9:5d:dd:ac:1d:24: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5D:23:F3:4D:7D:07:B0:DE:5D:96:A3:0A:4F:95:1E:2C:D5:42:C4 X509v3 Authority Key Identifier: keyid:C0:5A:E9:53:4F:D3:9D:64:8C:28:44:3C:48:D5:11:BB:A9:A8:CA:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/wFrpU0_TnWSMKEQ8SNURu6moyv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFrpU0_TnWSMKEQ8SNURu6moyv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11F/9E88AE18ACD211EB98FE6940C4F9AE02/2E7B4D90ACD411EBA8C2F944C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.152.0/23 IPv6: 2001:df6:9480::/48 Signature Algorithm: sha256WithRSAEncryption 6b:01:56:8a:b4:d9:0e:d0:84:c1:bd:28:cd:bf:d2:b8:05:d3: 65:c2:e0:8d:81:49:7a:7a:10:2d:a5:86:d9:8d:d6:2e:5b:ef: 63:34:cd:57:47:86:3a:a9:f9:60:65:91:ad:da:6b:33:69:a3: 81:62:96:c7:70:03:bf:a1:e9:e3:b7:71:59:1c:ad:10:bd:55: 5d:81:8f:10:45:82:c6:75:07:3b:55:8b:d3:f0:1c:c2:97:0c: 32:a2:ef:b0:92:01:7a:ca:4b:02:e5:0f:fa:53:40:3e:d0:a4: 31:d8:8d:d2:48:2f:4c:8f:70:f6:84:bb:af:2a:00:3e:e2:38: 08:6b:61:21:3c:73:f1:3b:74:54:6d:8e:26:43:f6:8a:a2:89: f4:05:00:61:e3:68:b0:ae:5a:f0:2f:ce:2a:f6:44:44:b2:16: 24:c2:0e:91:41:af:ce:20:2d:85:7e:c5:76:87:82:9c:46:a7: ba:09:2a:f1:85:70:6c:62:de:01:8b:0f:ba:01:e7:54:19:93: 87:e9:95:fb:1a:e1:f4:1e:e7:7b:43:13:14:c0:48:5f:b6:c5: a6:43:b0:7c:0b:d3:ed:56:77:a5:c9:26:05:ed:8b:53:c7:1c: 78:10:cf:bc:2e:c8:aa:94:36:84:78:00:34:fe:d8:a4:2b:0f: b2:bb:e6:2a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUYxMTAvBgNVBAUTKEMwNUFFOTUzNEZEMzlENjQ4QzI4NDQzQzQ4RDUxMUJC QTlBOENBRkUwHhcNMjUwNTE0MjMxMzAxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmQyOC0xNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9JgM1HIxxtgT2RVduQPCxB988iRUFm3Vubi5Nv9gDcTtThPyMVAE0zwRos6 4hJ7x4g2mhO7c+LfTTTflnqmEQNNnwXGZ7+uB2KZWdfTSanLEmAIp7dX7SL+sfho BjfEuS1qcogZYjMGmWphDk8MEJIbKEQuOWq1MjMYcwOjgqAQacz1pV4vTrxACGKQ avvpGMxBuXf+jGkNwmjkaw25IN4zw+DtQ2iM70UJmsWEcuyhvmHRoGLVqiXCiD7a cDrDrIbrNcbjC/ddsFCJxjI5QfvLVv/WZ1h32JkCO1/A2rDuvliH7xPH7M65pg4B Vo5Hi7ry2MbXDCmpXd2sHSTowwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPpdI/NN fQew3l2WowpPlR4s1ULEMB8GA1UdIwQYMBaAFMBa6VNP051kjChEPEjVEbupqMr+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExRi85RTg4QUUxOEFD RDIxMUVCOThGRTY5NDBDNEY5QUUwMi93RnJwVTBfVG5XU01LRVE4U05VUnU2bW95 djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGcnBVMF9UbldTTUtFUThTTlVSdTZtb3l2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0MxMUYvOUU4OEFFMThBQ0QyMTFFQjk4RkU2OTQwQzRGOUFFMDIvMkU3QjREOTBB Q0Q0MTFFQkE4QzJGOTQ0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6aYMA8EAgACMAkDBwAgAQ32lIAwDQYJKoZIhvcNAQELBQADggEB AGsBVoq02Q7QhMG9KM2/0rgF02XC4I2BSXp6EC2lhtmN1i5b72M0zVdHhjqp+WBl ka3aazNpo4FilsdwA7+h6eO3cVkcrRC9VV2BjxBFgsZ1BztVi9PwHMKXDDKi77CS AXrKSwLlD/pTQD7QpDHYjdJIL0yPcPaEu68qAD7iOAhrYSE8c/E7dFRtjiZD9oqi ifQFAGHjaLCuWvAvzir2RESyFiTCDpFBr84gLYV+xXaHgpxGp7oJKvGFcGxi3gGL D7oB51QZk4fplfsa4fQe53tDExTASF+2xaZDsHwL0+1Wd6XJJgXti1PHHHgQz7wu yKqUNoR4ADT+2KQrD7K75io= -----END CERTIFICATE-----Generated at Mon Mar 2 18:26:39 2026 by rpki-client