$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/2512D04C22BE11EC9240097DC4F9AE02.roa File: 2512D04C22BE11EC9240097DC4F9AE02.roa (raw, json) Hash identifier: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs= Subject key identifier: 78:CF:56:76:9E:1A:9F:FC:E7:F7:B2:7F:77:EB:07:32:4E:6C:94:4E Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Certificate serial: 0B65 Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/2512D04C22BE11EC9240097DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:59:38 +0000 ROA not before: Sat 06 Dec 2025 19:00:39 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9650 IP address blocks: 45.64.68.0/22 maxlen: 22 45.64.68.0/24 maxlen: 24 45.64.69.0/24 maxlen: 24 45.64.70.0/24 maxlen: 24 103.233.236.0/22 maxlen: 22 203.5.10.0/24 maxlen: 24 203.9.184.0/22 maxlen: 22 203.15.124.0/22 maxlen: 22 203.15.125.0/24 maxlen: 24 203.18.108.0/23 maxlen: 23 203.21.12.0/24 maxlen: 24 203.62.216.0/22 maxlen: 22 2406:3c00::/32 maxlen: 32 2406:3c00:6000::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E Validity Not Before: Dec 6 19:00:39 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4464a-6893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:aa:5e:ab:0d:bf:9a:c8:41:f6:21:32:c8:c8: 18:f5:5e:46:72:14:df:9b:b7:16:15:ba:4c:70:09: 1e:ad:31:b7:eb:ec:dc:a2:64:de:11:26:28:bb:d0: 49:be:3f:1e:e7:65:16:1e:de:42:72:29:e1:1b:de: 3d:46:37:35:96:eb:60:0d:a4:d8:1c:77:e4:b2:88: f3:d2:39:68:d1:58:af:98:8c:ad:78:a8:91:dd:a8: 67:b9:ad:4d:f9:4f:64:33:fa:27:f7:1b:8b:7e:b9: 85:6f:44:a6:80:c3:8f:13:a7:07:eb:5c:b8:e6:ee: 96:d7:e0:6c:4b:ad:6b:66:2d:66:1e:ee:78:fe:21: da:31:93:43:fc:04:4b:73:69:73:79:ba:c6:de:c0: c4:5a:b4:6c:83:5a:46:6c:1f:07:29:ae:15:00:df: ef:b8:00:38:1b:fd:b1:0e:f5:37:64:6e:9e:81:74: 1f:17:70:d8:14:45:dc:49:c2:7d:ed:cb:45:ad:7e: ba:bd:5c:38:15:ee:ed:56:e8:bd:63:96:56:9c:94: c0:69:90:75:56:2b:74:f4:6f:38:69:6a:4a:bc:a9: f0:8c:cf:94:0d:9a:53:92:40:27:d0:b1:b0:19:9a: 1b:c6:52:75:00:b8:72:9a:94:60:81:0f:4c:c6:d3: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CF:56:76:9E:1A:9F:FC:E7:F7:B2:7F:77:EB:07:32:4E:6C:94:4E X509v3 Authority Key Identifier: keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/2512D04C22BE11EC9240097DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.64.68.0/22 103.233.236.0/22 203.5.10.0/24 203.9.184.0/22 203.15.124.0/22 203.18.108.0/23 203.21.12.0/24 203.62.216.0/22 IPv6: 2406:3c00::/32 Signature Algorithm: sha256WithRSAEncryption 0d:92:b1:06:2c:b6:2c:f7:d6:74:77:6d:19:f8:21:d6:bd:82: 9a:44:d3:87:bc:86:99:b0:54:29:04:06:74:9c:32:20:be:82: 1c:bc:70:cb:01:d3:0d:51:f4:f2:37:7a:d7:5a:9e:41:94:81: e7:91:2b:52:87:b6:5f:da:aa:42:55:91:01:96:3a:e6:69:72: 1c:90:9c:d4:76:53:98:1c:f4:b8:c4:fe:93:8c:d4:a6:93:64: 4e:80:81:37:b4:13:6d:94:b4:3b:75:f5:64:84:eb:87:f1:83: 28:fd:70:c8:c5:10:3a:e2:c6:3e:23:02:2d:90:62:e3:3c:50: 90:53:6e:c0:91:7d:6e:c4:55:a1:81:ce:f1:69:5c:2e:68:67: 12:3c:68:87:48:74:ce:8e:d9:60:9d:de:9c:3d:ff:ca:ac:89: 55:fb:d4:3a:5f:07:4e:af:d4:34:27:5e:76:8b:01:77:93:07: a0:64:28:9f:06:ea:41:78:90:6d:9c:6c:65:6b:26:a0:13:de: 0a:05:cc:4a:88:eb:a3:8d:84:95:9c:3b:32:88:d6:27:2a:5e: 99:42:4e:91:5a:84:c1:67:1e:c5:66:a5:98:ab:15:ab:e0:6f: 7c:12:14:d5:57:81:97:06:78:10:66:b7:ad:17:94:25:06:8f: a8:04:e9:f4 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE Q0E5ODQwOEUwHhcNMjUxMjA2MTkwMDM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDY0YS02ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj6peqw2/mshB9iEyyMgY9V5GchTfm7cWFbpMcAkerTG36+zcomTeESYou9BJ vj8e52UWHt5CcinhG949Rjc1lutgDaTYHHfksojz0jlo0VivmIyteKiR3ahnua1N +U9kM/on9xuLfrmFb0SmgMOPE6cH61y45u6W1+BsS61rZi1mHu54/iHaMZND/ARL c2lzebrG3sDEWrRsg1pGbB8HKa4VAN/vuAA4G/2xDvU3ZG6egXQfF3DYFEXcScJ9 7ctFrX66vVw4Fe7tVui9Y5ZWnJTAaZB1Vit09G84aWpKvKnwjM+UDZpTkkAn0LGw GZobxlJ1ALhympRggQ9MxtND4wIDAQABo4ICmTCCApUwHQYDVR0OBBYEFHjPVnae Gp/85/eyf3frBzJObJROMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U0QkEvRDA2QkYzMjg1MkRDMTFFQTgyNjAxQjBGQzRGOUFFMDIvMjUxMkQwNEMy MkJFMTFFQzkyNDAwOTdEQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzA2 BAIAATAwAwQCLUBEAwQCZ+nsAwQAywUKAwQCywm4AwQCyw98AwQByxJsAwQAyxUM AwQCyz7YMA0EAgACMAcDBQAkBjwAMA0GCSqGSIb3DQEBCwUAA4IBAQANkrEGLLYs 99Z0d20Z+CHWvYKaRNOHvIaZsFQpBAZ0nDIgvoIcvHDLAdMNUfTyN3rXWp5BlIHn kStSh7Zf2qpCVZEBljrmaXIckJzUdlOYHPS4xP6TjNSmk2ROgIE3tBNtlLQ7dfVk hOuH8YMo/XDIxRA64sY+IwItkGLjPFCQU27AkX1uxFWhgc7xaVwuaGcSPGiHSHTO jtlgnd6cPf/KrIlV+9Q6XwdOr9Q0J152iwF3kwegZCifBupBeJBtnGxlayagE94K BcxKiOujjYSVnDsyiNYnKl6ZQk6RWoTBZx7FZqWYqxWr4G98EhTVV4GXBngQZret F5QlBo+oBOn0 -----END CERTIFICATE-----Generated at Mon Mar 2 12:39:59 2026 by rpki-client