$ rpki-client -vvf rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/C2EECBA0E85C11EBA2171A25C4F9AE02.roa File: C2EECBA0E85C11EBA2171A25C4F9AE02.roa (raw, json) Hash identifier: 3ijGtnKRZtAGtvocDeUrSBYus200G7y6Dr0KE05wtXM= Subject key identifier: DD:66:0E:30:B0:68:46:F5:7F:6E:50:68:72:74:25:78:49:3B:3F:59 Certificate issuer: /CN=A917DBF2/serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Certificate serial: 1DDB Authority key identifier: 1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/C2EECBA0E85C11EBA2171A25C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:49:13 +0000 ROA not before: Wed 18 Feb 2026 16:13:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 42962 IP address blocks: 103.81.184.0/22 maxlen: 24 202.144.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7643 (0x1ddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DBF2, serialNumber=1B17AC3DC96CA234525023EFD3627E92CD884748 Validity Not Before: Feb 18 16:13:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47c19-d587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:5c:0a:8a:d9:9f:47:5c:18:41:4f:8d:49: bf:f4:44:a6:54:b2:e4:3c:86:79:5d:6c:5c:01:b9: 86:92:4f:d5:96:28:0a:1c:12:3c:b8:b2:6f:02:4f: 8e:d4:43:0c:af:e1:6b:48:a9:ee:aa:47:45:4e:b9: a6:91:a0:e4:1e:23:40:57:30:5f:0a:c5:74:36:89: c1:70:f1:5b:d0:46:a4:5d:66:2e:34:0a:e6:b9:40: 5f:01:97:a3:8c:91:17:a9:6d:94:48:e8:4a:78:fd: 28:9c:97:e2:7a:fc:77:a9:3f:5f:9d:fe:c7:2a:72: 14:57:c9:7d:d8:8f:e3:9b:f8:53:23:1b:be:18:93: 04:0c:01:be:54:66:f9:84:f6:fb:4b:8f:7b:83:6b: 0c:26:22:7f:cd:1e:0a:b8:ec:ce:da:23:7c:7a:0b: 10:42:3a:74:de:49:6e:7f:39:ae:eb:fe:ad:6b:0d: ce:b8:6f:39:26:cf:da:53:63:87:e6:10:ff:02:58: e7:58:23:a2:a0:9b:0c:0d:1d:11:60:23:a5:d7:0d: 20:71:cf:a9:2f:d9:0c:a1:f9:5f:6f:a2:90:bf:c4: 8c:3a:5d:dd:54:92:3c:ac:79:4b:50:5b:f7:0e:7c: 7b:77:32:dc:02:8d:c0:70:c8:c8:97:04:b0:a9:7a: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:66:0E:30:B0:68:46:F5:7F:6E:50:68:72:74:25:78:49:3B:3F:59 X509v3 Authority Key Identifier: keyid:1B:17:AC:3D:C9:6C:A2:34:52:50:23:EF:D3:62:7E:92:CD:88:47:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/GxesPclsojRSUCPv02J-ks2IR0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GxesPclsojRSUCPv02J-ks2IR0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DBF2/E3445016C2F811E6997AEB6BC4F9AE02/C2EECBA0E85C11EBA2171A25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.81.184.0/22 202.144.196.0/22 Signature Algorithm: sha256WithRSAEncryption 65:3b:30:4e:6e:16:9a:b8:d1:88:95:b8:fd:1d:94:2f:ed:81: 6f:cd:e6:ac:fa:60:91:80:14:3c:a0:d4:3d:48:65:d0:61:7b: 9a:09:c6:36:1b:e6:c0:9f:13:7e:fa:0a:fd:bc:a0:cc:9e:1a: a6:cf:3d:23:80:24:98:34:c2:40:74:88:45:c8:11:15:fc:eb: 85:eb:0a:ec:b2:64:e3:29:38:6d:18:bd:ff:e3:d6:f3:c6:8a: e2:0e:17:92:a5:7c:1a:e0:3c:55:f3:cf:f2:98:b9:4c:22:30: c5:6d:53:df:95:c5:c6:c4:ca:fe:c2:47:5a:fd:cc:18:c1:2e: 8a:43:7c:06:74:e1:3e:f7:93:13:28:4c:be:22:5a:98:5b:eb: bf:db:02:3c:2c:bb:9d:c4:96:1b:82:a3:da:88:40:3a:20:51: 04:dd:1c:ef:22:48:8d:79:6d:57:4a:bb:6a:52:4a:3b:46:45: cf:76:83:5e:22:42:59:a3:f5:65:f1:14:63:08:77:bd:66:ab: f6:37:b9:94:1f:2c:af:24:3b:5c:ff:26:f6:ce:95:4a:9d:4c: f7:27:b9:be:69:bc:f1:35:7f:e7:93:ec:2a:c1:59:49:8b:c7: f9:ad:e2:4b:37:43:aa:40:14:c7:e5:4a:4f:ff:0d:1c:7a:72: 03:41:d6:b0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICHdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCRjIxMTAvBgNVBAUTKDFCMTdBQzNEQzk2Q0EyMzQ1MjUwMjNFRkQzNjI3RTky Q0Q4ODQ3NDgwHhcNMjYwMjE4MTYxMzUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2MxOS1kNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXtcCorZn0dcGEFPjUm/9ESmVLLkPIZ5XWxcAbmGkk/VligKHBI8uLJvAk+O 1EMMr+FrSKnuqkdFTrmmkaDkHiNAVzBfCsV0NonBcPFb0EakXWYuNArmuUBfAZej jJEXqW2USOhKeP0onJfievx3qT9fnf7HKnIUV8l92I/jm/hTIxu+GJMEDAG+VGb5 hPb7S497g2sMJiJ/zR4KuOzO2iN8egsQQjp03klufzmu6/6taw3OuG85Js/aU2OH 5hD/AljnWCOioJsMDR0RYCOl1w0gcc+pL9kMoflfb6KQv8SMOl3dVJI8rHlLUFv3 Dnx7dzLcAo3AcMjIlwSwqXrNXwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN1mDjCw aEb1f25QaHJ0JXhJOz9ZMB8GA1UdIwQYMBaAFBsXrD3JbKI0UlAj79NifpLNiEdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REJGMi9FMzQ0NTAxNkMy RjgxMUU2OTk3QUVCNkJDNEY5QUUwMi9HeGVzUGNsc29qUlNVQ1B2MDJKLWtzMklS MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d4ZXNQY2xzb2pSU1VDUHYwMkota3MySVIwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0RCRjIvRTM0NDUwMTZDMkY4MTFFNjk5N0FFQjZCQzRGOUFFMDIvQzJFRUNCQTBF ODVDMTFFQkEyMTcxQTI1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1G4AwQCypDEMA0GCSqGSIb3DQEBCwUAA4IBAQBlOzBObhaauNGI lbj9HZQv7YFvzeas+mCRgBQ8oNQ9SGXQYXuaCcY2G+bAnxN++gr9vKDMnhqmzz0j gCSYNMJAdIhFyBEV/OuF6wrssmTjKThtGL3/49bzxoriDheSpXwa4DxV88/ymLlM IjDFbVPflcXGxMr+wkda/cwYwS6KQ3wGdOE+95MTKEy+IlqYW+u/2wI8LLudxJYb gqPaiEA6IFEE3RzvIkiNeW1XSrtqUko7RkXPdoNeIkJZo/Vl8RRjCHe9Zqv2N7mU HyyvJDtc/yb2zpVKnUz3J7m+abzxNX/nk+wqwVlJi8f5reJLN0OqQBTH5UpP/w0c enIDQdaw -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:27 2026 by rpki-client