$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2A3ED0C0314811EA82EC6962C4F9AE02.roa File: 2A3ED0C0314811EA82EC6962C4F9AE02.roa (raw, json) Hash identifier: 9Se8AzJ2S0OMOS52xsBXFU/0an6sPAwe5L3LfUeQdT8= Subject key identifier: C2:51:6B:17:1E:5E:EE:C3:27:88:A5:97:AB:03:D6:3D:91:BA:F4:76 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3A65 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2A3ED0C0314811EA82EC6962C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:22:27 +0000 ROA not before: Fri 16 Jan 2026 16:13:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38767 IP address blocks: 103.234.208.0/22 maxlen: 22 103.234.208.0/23 maxlen: 23 103.234.208.0/24 maxlen: 24 103.234.209.0/24 maxlen: 24 103.234.210.0/23 maxlen: 23 103.234.210.0/24 maxlen: 24 103.234.211.0/24 maxlen: 24 2001:df7:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14949 (0x3a65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jan 16 16:13:34 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4ae13-b69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:70:96:8f:dc:97:57:51:73:11:9f:08:b7: e2:a8:a1:78:49:33:ce:2e:ba:6a:6d:3a:32:8a:10: 44:c0:96:dd:2e:c7:5e:e0:65:0d:9c:7c:43:37:b8: e6:14:64:03:59:5e:4d:17:d6:43:05:42:8c:2b:ce: 6a:aa:a3:51:b1:da:0d:b9:72:5d:10:dc:5e:f8:0b: 24:69:75:63:fc:42:6f:56:2d:e4:95:b0:33:a8:7b: b8:b5:43:ef:bc:c0:f7:51:a9:d6:f4:10:6a:1a:3a: 5b:ef:ff:85:af:43:2b:3e:95:60:f6:94:d0:b8:75: 53:78:f4:a0:14:4c:2e:f3:1f:04:1d:20:1a:f8:0a: b1:8d:89:00:05:db:64:ed:9e:b4:a9:ef:a6:20:ca: 5e:8b:34:f7:e1:ea:80:9d:c2:1a:63:eb:68:86:a1: 4c:44:12:8b:e1:63:31:a7:1d:5b:b2:1d:4f:04:4a: e7:e7:6d:2d:ec:b9:38:0b:3c:10:f7:02:4e:1a:a9: 12:72:3c:8d:8f:88:98:39:5f:0c:e3:e3:f1:5f:e8: 25:8b:e8:d5:72:ab:15:6d:82:9a:0e:bb:55:08:5e: 3b:e2:9c:37:30:39:25:be:28:e4:a4:5d:08:6f:d0: 68:3f:01:d0:e5:57:af:cc:42:87:af:2d:bd:be:e3: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:6B:17:1E:5E:EE:C3:27:88:A5:97:AB:03:D6:3D:91:BA:F4:76 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2A3ED0C0314811EA82EC6962C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.208.0/22 IPv6: 2001:df7:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 70:e8:31:29:57:d9:75:52:48:c7:b6:82:94:68:46:44:29:01: ae:04:11:51:ef:5d:ed:33:5b:a1:84:b7:77:53:bc:9d:05:41: 25:d7:22:05:fc:48:93:96:8d:de:bc:f9:2f:71:19:cb:3c:c9: 3d:6e:66:94:d8:ba:f1:a6:a3:51:7c:42:ff:41:c8:53:5d:5e: da:64:45:07:ae:5b:40:fe:35:78:af:1c:60:30:e3:fb:9f:02: 5c:41:da:41:8d:a2:01:34:50:6d:88:52:d5:03:5c:82:84:87: 29:9a:f5:27:d9:34:f1:bc:a5:d1:76:64:c0:0f:7f:0e:8f:9a: 3e:df:60:3c:c7:41:88:bc:8e:60:7e:d6:28:37:b4:ec:f0:1e: a1:06:c4:bf:3a:f5:52:8c:9b:94:1e:ca:ce:91:a0:ea:80:0e: 73:bd:01:a4:3c:11:56:b7:1f:4f:54:9a:97:6a:40:79:27:f9: a1:fa:9e:95:7e:88:0a:a6:19:a7:5a:d3:54:8e:39:86:01:95: 9e:d6:9b:ac:8b:4f:f2:5b:f3:fe:f5:d2:3c:c5:11:5e:a7:2a: 3b:80:6a:07:4d:d3:4c:f1:e1:d0:02:cf:68:79:a4:ff:f2:b7: 28:ac:b1:10:9c:d3:ad:0e:83:ea:18:1b:00:6d:dd:e4:6d:4c: 29:38:84:74 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICOmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWUxMy1iNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuy9wlo/cl1dRcxGfCLfiqKF4STPOLrpqbToyihBEwJbdLsde4GUNnHxDN7jm FGQDWV5NF9ZDBUKMK85qqqNRsdoNuXJdENxe+AskaXVj/EJvVi3klbAzqHu4tUPv vMD3UanW9BBqGjpb7/+Fr0MrPpVg9pTQuHVTePSgFEwu8x8EHSAa+AqxjYkABdtk 7Z60qe+mIMpeizT34eqAncIaY+tohqFMRBKL4WMxpx1bsh1PBErn520t7Lk4CzwQ 9wJOGqkScjyNj4iYOV8M4+PxX+gli+jVcqsVbYKaDrtVCF474pw3MDklvijkpF0I b9BoPwHQ5VevzEKHry29vuMIYwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMJRaxce Xu7DJ4ill6sD1j2RuvR2MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMkEzRUQwQzAz MTQ4MTFFQTgyRUM2OTYyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ+rQMA8EAgACMAkDBwAgAQ33PAAwDQYJKoZIhvcNAQELBQADggEB AHDoMSlX2XVSSMe2gpRoRkQpAa4EEVHvXe0zW6GEt3dTvJ0FQSXXIgX8SJOWjd68 +S9xGcs8yT1uZpTYuvGmo1F8Qv9ByFNdXtpkRQeuW0D+NXivHGAw4/ufAlxB2kGN ogE0UG2IUtUDXIKEhyma9SfZNPG8pdF2ZMAPfw6Pmj7fYDzHQYi8jmB+1ig3tOzw HqEGxL869VKMm5Qeys6RoOqADnO9AaQ8EVa3H09UmpdqQHkn+aH6npV+iAqmGada 01SOOYYBlZ7Wm6yLT/Jb8/710jzFEV6nKjuAagdN00zx4dACz2h5pP/ytyissRCc 060Og+oYGwBt3eRtTCk4hHQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:02 2026 by rpki-client