$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/8A6AA178556111EDB7E45424C4F9AE02.roa File: 8A6AA178556111EDB7E45424C4F9AE02.roa (raw, json) Hash identifier: 8/8PcrmV+dwN59za9XSdrEpWpmGqQRkF6xxNtxvBqyg= Subject key identifier: 94:18:83:F0:C7:76:FD:67:A6:17:AE:12:94:B5:CC:5C:D4:C2:E4:E4 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0A54 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/8A6AA178556111EDB7E45424C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:48:55 +0000 ROA not before: Fri 02 May 2025 20:30:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45267 IP address blocks: 103.88.144.0/22 maxlen: 23 103.88.144.0/23 maxlen: 24 103.88.146.0/24 maxlen: 24 203.96.248.0/22 maxlen: 24 2400:e3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2644 (0xa54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: May 2 20:30:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a427a7-3804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:42:08:3d:11:3d:d3:05:21:26:1a:fb:e2: bc:bc:35:37:49:31:ee:aa:93:45:21:46:54:16:81: 84:b6:2b:84:f5:c5:48:d2:3a:6b:a3:9b:3d:a6:e9: 38:47:0a:16:54:cf:da:0c:02:c8:36:01:72:ce:a3: 62:69:20:a8:01:08:d2:5d:fc:c1:dd:92:c9:5b:51: 4d:ac:df:63:84:b7:35:20:aa:ed:dd:72:40:ea:64: 28:cd:eb:ae:13:52:1a:a0:9a:bb:47:b8:62:11:48: c5:5c:17:25:c6:78:97:ab:8c:c2:b6:ca:e4:f7:99: e7:f1:35:60:54:1f:34:65:5d:d3:84:8e:f0:a4:c7: 53:f7:f8:5c:66:ef:c1:e4:e7:e5:04:5f:73:76:06: 37:6e:ac:89:71:ff:18:69:aa:6e:31:bc:5a:44:5b: e5:ce:ee:ab:02:9a:d9:91:1e:6c:00:58:b3:e4:19: 65:e6:4d:5c:ee:8c:52:92:3d:75:05:04:3d:dd:fa: 5b:25:05:1c:ee:a1:77:e4:35:bd:46:93:75:81:7b: 17:76:01:41:58:4e:5e:b3:c5:01:df:5d:35:89:12: e9:65:17:33:b6:1c:e3:a5:04:d5:ca:b9:1b:96:15: b5:34:97:32:ba:88:e0:cb:0a:ca:bc:c5:31:6b:b2: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:83:F0:C7:76:FD:67:A6:17:AE:12:94:B5:CC:5C:D4:C2:E4:E4 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/8A6AA178556111EDB7E45424C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.144.0/22 203.96.248.0/22 IPv6: 2400:e3c0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:f2:a0:61:12:92:fb:2a:7b:b5:b3:6e:93:a8:7b:f1:2e:3e: 8f:78:6e:ad:d8:81:50:7f:e3:ee:cd:ce:d9:bf:e9:80:bd:1b: 02:28:f4:36:a3:b8:ec:21:bc:6d:d1:03:e8:c4:0f:30:b4:63: 4f:b3:0b:15:95:1f:3c:ed:d2:80:1c:dc:53:22:ca:10:dd:f2: 64:82:44:c7:da:1a:99:a9:b5:41:40:a2:9e:28:9c:51:2b:40: 4a:ae:07:df:ff:f3:dd:35:c7:26:39:c7:bb:22:b8:39:20:7a: d1:04:10:2d:d8:72:9d:be:7f:d4:e9:b8:39:2d:47:b1:ec:98: 81:25:54:38:4d:84:a4:5f:97:97:dc:91:9e:43:1c:cb:1f:19: 49:bd:79:39:2d:3d:d7:05:cd:25:67:55:5f:9f:51:79:f0:e6: e1:3d:a8:45:51:c8:07:cd:07:d5:c4:0d:60:59:a2:be:2c:47: a3:6c:52:16:c5:8f:99:8d:60:51:e4:e8:bb:75:e7:6c:84:44: 29:18:76:fd:ec:d0:e3:fd:05:ed:78:7b:cd:55:78:5c:80:9d: 90:e1:a5:09:af:bf:15:10:e6:65:a1:9c:78:fb:7f:98:4d:f8: a0:5a:54:32:d6:d3:55:0e:8c:63:75:1a:60:3e:74:15:96:9d: 6f:59:58:52 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjUwNTAyMjAzMDIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjdhNy0zODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7zRCCD0RPdMFISYa++K8vDU3STHuqpNFIUZUFoGEtiuE9cVI0jpro5s9puk4 RwoWVM/aDALINgFyzqNiaSCoAQjSXfzB3ZLJW1FNrN9jhLc1IKrt3XJA6mQozeuu E1IaoJq7R7hiEUjFXBclxniXq4zCtsrk95nn8TVgVB80ZV3ThI7wpMdT9/hcZu/B 5OflBF9zdgY3bqyJcf8YaapuMbxaRFvlzu6rAprZkR5sAFiz5Bll5k1c7oxSkj11 BQQ93fpbJQUc7qF35DW9RpN1gXsXdgFBWE5es8UB3101iRLpZRczthzjpQTVyrkb lhW1NJcyuojgywrKvMUxa7LoewIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJQYg/DH dv1npheuEpS1zFzUwuTkMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y4NzkvQUFGQ0VGMEE4MzQ5MTFFQTg5REU2OTdCQzRGOUFFMDIvOEE2QUExNzg1 NTYxMTFFREI3RTQ1NDI0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1iQAwQCy2D4MA0EAgACMAcDBQAkAOPAMA0GCSqGSIb3DQEBCwUA A4IBAQA98qBhEpL7Knu1s26TqHvxLj6PeG6t2IFQf+Puzc7Zv+mAvRsCKPQ2o7js Ibxt0QPoxA8wtGNPswsVlR887dKAHNxTIsoQ3fJkgkTH2hqZqbVBQKKeKJxRK0BK rgff//PdNccmOce7Irg5IHrRBBAt2HKdvn/U6bg5LUex7JiBJVQ4TYSkX5eX3JGe QxzLHxlJvXk5LT3XBc0lZ1Vfn1F58ObhPahFUcgHzQfVxA1gWaK+LEejbFIWxY+Z jWBR5Oi7dedshEQpGHb97NDj/QXteHvNVXhcgJ2Q4aUJr78VEOZloZx4+3+YTfig WlQy1tNVDoxjdRpgPnQVlp1vWVhS -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:09 2026 by rpki-client