$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa File: CBB9F6766CE211EEA9499734C4F9AE02.roa (raw, json) Hash identifier: ntABWtYa9f0IkqV7PvPk9+2uIJ5vBaIf+7hA4+vUAmM= Subject key identifier: 94:23:73:78:3C:76:94:4C:75:84:F8:5E:F5:B6:F7:2E:1B:F4:C5:6F Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Certificate serial: 05EA Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:12:57 +0000 ROA not before: Tue 29 Jul 2025 00:06:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 137845 IP address blocks: 103.115.168.0/22 maxlen: 22 103.115.168.0/24 maxlen: 24 103.115.169.0/24 maxlen: 24 2403:1840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53 Validity Not Before: Jul 29 00:06:10 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47399-695b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:5d:65:16:f7:a8:ce:bd:92:a5:6d:e4:ac: 76:a5:8d:86:1c:36:35:5d:81:56:8d:7a:8a:5c:7e: 67:1c:15:08:91:1a:f1:bf:7f:a1:80:ab:5e:5c:18: 2c:3b:7f:6b:da:0a:b5:4e:0c:70:3e:f5:4a:36:b3: 70:a5:cf:6f:98:f0:32:13:83:7f:49:ad:41:f2:f4: ba:f1:f0:19:2b:fe:bd:6e:c9:bc:22:90:08:bb:62: 63:23:4d:df:18:43:8a:df:cf:b4:53:52:df:f7:ff: e5:4e:df:a3:49:27:2c:37:91:5a:82:bf:ba:2c:9f: d0:6a:7e:fa:2b:c5:74:9f:0c:b5:8d:3a:32:20:0e: 3d:55:89:c0:b1:dc:20:1d:c9:24:0e:30:02:ed:21: 53:27:2d:94:24:d1:47:c8:2b:76:6d:d6:07:94:38: f9:dd:68:fd:9f:e9:10:a4:ae:28:1b:8c:2c:18:0b: 55:25:d3:50:ee:d3:10:a8:0b:5a:20:02:01:24:8d: 86:97:ba:6e:1c:1a:bd:d2:2f:ab:f8:c8:6d:4a:c8: 4c:a0:7b:fa:97:74:d9:bc:db:90:70:f0:02:6f:0d: d3:48:4e:d1:c0:10:b6:f5:94:ad:7b:8b:5e:53:3d: fa:7c:91:c3:00:92:ae:45:5f:84:18:ff:d3:c5:2e: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:23:73:78:3C:76:94:4C:75:84:F8:5E:F5:B6:F7:2E:1B:F4:C5:6F X509v3 Authority Key Identifier: keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/CBB9F6766CE211EEA9499734C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.168.0/22 IPv6: 2403:1840::/32 Signature Algorithm: sha256WithRSAEncryption 33:56:d4:9f:79:bd:f6:ee:ed:7b:cd:1f:eb:3e:13:06:44:ea: bb:95:0e:e4:99:53:b8:e1:c6:02:41:c1:cc:8b:18:20:09:6b: aa:08:e3:86:cc:56:96:2f:69:15:a5:4c:f8:c0:fc:c1:0a:9e: c2:cf:b2:b2:00:b2:d4:37:59:88:c9:bc:47:8c:65:3c:6f:3c: 13:13:52:d6:b2:5c:c5:87:15:bd:1b:2f:5c:6b:7d:05:0a:34: 2c:de:23:b8:bf:db:f0:da:a5:11:45:72:9c:aa:28:32:38:51: bb:35:6a:5e:dc:96:28:78:96:7b:ee:e0:77:ba:0f:45:a5:eb: 0e:b6:fd:22:8a:9e:ca:85:69:fb:f4:3b:9b:c3:d6:d8:69:ab: 64:44:5a:77:d3:a2:09:09:ce:16:0f:d0:8d:50:68:91:6a:a5: 5b:f8:30:ee:8b:49:7e:08:a2:f3:a9:c2:6f:3c:40:67:8d:17: 65:0a:64:70:e8:41:89:0f:4a:9a:2c:7a:03:e9:9b:53:45:2a: 32:c8:de:63:42:63:b6:04:49:59:bf:a7:14:5b:58:25:92:bd: 33:10:a7:69:fd:c5:4d:9a:58:72:c0:24:00:97:75:89:d5:15: e6:7d:d7:69:34:ef:c5:5a:f5:b7:27:64:57:39:be:1a:63:b2: 3d:eb:c5:be -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxNTExMTAvBgNVBAUTKDBDRDY0RTRCRDZGQUQzOTdDNzQ3MTExOEEyODAzQjg3 REQyQzFENTMwHhcNMjUwNzI5MDAwNjEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzM5OS02OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPpdZRb3qM69kqVt5Kx2pY2GHDY1XYFWjXqKXH5nHBUIkRrxv3+hgKteXBgs O39r2gq1TgxwPvVKNrNwpc9vmPAyE4N/Sa1B8vS68fAZK/69bsm8IpAIu2JjI03f GEOK38+0U1Lf9//lTt+jSScsN5Fagr+6LJ/Qan76K8V0nwy1jToyIA49VYnAsdwg HckkDjAC7SFTJy2UJNFHyCt2bdYHlDj53Wj9n+kQpK4oG4wsGAtVJdNQ7tMQqAta IAIBJI2Gl7puHBq90i+r+MhtSshMoHv6l3TZvNuQcPACbw3TSE7RwBC29ZSte4te Uz36fJHDAJKuRV+EGP/TxS6oEQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJQjc3g8 dpRMdYT4XvW29y4b9MVvMB8GA1UdIwQYMBaAFAzWTkvW+tOXx0cRGKKAO4fdLB1T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTE1MS8xMkFDRDZCQUY0 REMxMUVCOEY3REI5NDlDNEY5QUUwMi9ETlpPUzliNjA1ZkhSeEVZb29BN2g5MHNI Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ROWk9TOWI2MDVmSFJ4RVlvb0E3aDkwc0hWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UxNTEvMTJBQ0Q2QkFGNERDMTFFQjhGN0RCOTQ5QzRGOUFFMDIvQ0JCOUY2NzY2 Q0UyMTFFRUE5NDk5NzM0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3OoMA0EAgACMAcDBQAkAxhAMA0GCSqGSIb3DQEBCwUAA4IBAQAz VtSfeb327u17zR/rPhMGROq7lQ7kmVO44cYCQcHMixggCWuqCOOGzFaWL2kVpUz4 wPzBCp7Cz7KyALLUN1mIybxHjGU8bzwTE1LWslzFhxW9Gy9ca30FCjQs3iO4v9vw 2qURRXKcqigyOFG7NWpe3JYoeJZ77uB3ug9FpesOtv0iip7KhWn79Dubw9bYaatk RFp306IJCc4WD9CNUGiRaqVb+DDui0l+CKLzqcJvPEBnjRdlCmRw6EGJD0qaLHoD 6ZtTRSoyyN5jQmO2BElZv6cUW1glkr0zEKdp/cVNmlhywCQAl3WJ1RXmfddpNO/F WvW3J2RXOb4aY7I968W+ -----END CERTIFICATE-----Generated at Mon Mar 2 12:34:43 2026 by rpki-client