$ rpki-client -vvf rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa File: 2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa (raw, json) Hash identifier: 7FS9CMEH86Q4mtI2dPXmjRzPoofyBrffIFPKi5A84jA= Subject key identifier: 18:54:45:A7:94:9E:C0:83:9D:A8:26:6A:9E:94:18:74:79:67:F1:72 Certificate issuer: /CN=A9189E7C/serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Certificate serial: 08A3 Authority key identifier: 49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:50:34 +0000 ROA not before: Mon 02 Feb 2026 20:17:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132512 IP address blocks: 103.244.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189E7C, serialNumber=49EE09786F6EDA4235C7575CA696DBA099D547CC Validity Not Before: Feb 2 20:17:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4523a-94b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:dc:8f:7d:da:f1:2a:db:cc:aa:43:74:f3:e1: a0:d5:de:13:f3:43:cf:ce:7c:6c:18:01:3b:b7:7c: 63:ec:04:79:bb:90:69:15:1d:b5:a2:6d:f4:60:85: 2f:52:a5:7f:67:48:69:9c:e2:cb:8e:fb:73:ee:bd: 7f:85:8b:51:d0:f9:44:9a:90:1d:69:2a:fd:47:c3: 03:b5:1f:dd:02:24:86:04:a1:02:aa:85:8b:e2:80: 73:be:e3:2c:b8:c7:0f:66:60:d7:98:4a:73:f3:f9: 29:c6:ce:44:e5:72:09:aa:6a:2c:c2:9b:2e:79:22: a1:42:bf:d7:1e:da:2a:c6:3b:d7:f2:41:bf:73:ef: ab:bf:58:0a:e5:70:6f:e3:c5:74:5e:96:ce:fa:84: e1:e1:2f:56:66:c9:07:57:35:fc:a0:da:2f:e0:3a: 8c:bf:3b:da:26:bd:df:b0:b1:c5:90:a5:a1:df:9e: 6f:59:91:b9:a8:ee:2e:0c:5a:ab:54:2a:d7:d0:f6: 65:85:82:38:59:7e:a4:a6:63:83:a7:0f:22:0a:08: a1:80:a4:9c:da:12:29:e3:f4:44:cb:ff:a0:b6:f5: a7:a0:c9:d9:cf:ad:b2:11:2d:2e:8d:4d:42:e5:d8: ff:09:98:6b:d8:b7:e8:a0:8d:68:1c:19:2a:07:f0: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:54:45:A7:94:9E:C0:83:9D:A8:26:6A:9E:94:18:74:79:67:F1:72 X509v3 Authority Key Identifier: keyid:49:EE:09:78:6F:6E:DA:42:35:C7:57:5C:A6:96:DB:A0:99:D5:47:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/Se4JeG9u2kI1x1dcppbboJnVR8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Se4JeG9u2kI1x1dcppbboJnVR8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189E7C/FC1EB70CDBA911EA8A01707DC4F9AE02/2EC0C96ADBAB11EABFC1AC7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.244.191.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:37:b9:96:b7:a1:e0:1e:a2:1a:2c:bf:db:8b:c7:63:1f:03: 2b:ed:14:9a:82:38:5e:e7:c7:35:3e:ff:65:f4:79:33:24:1a: 43:ef:ad:61:77:d0:d1:06:86:78:d9:b2:2a:2c:79:e9:81:eb: f3:99:dd:34:26:d6:6b:e5:5d:fc:d5:cb:9a:32:b2:76:52:57: 84:3d:a7:e9:6e:42:a0:67:e4:f1:58:c8:43:7e:75:66:48:55: b3:30:d6:7e:da:8b:4d:ce:dd:3c:a7:da:c6:43:c0:01:b4:39: 27:bf:b5:3f:23:5c:05:c0:18:f6:f6:e2:1b:a8:08:e6:1d:a6: 97:d2:86:77:c7:81:bc:32:a6:e5:93:ef:3b:a3:c9:05:74:10: 58:a2:e8:31:65:67:c9:92:01:1a:29:c7:6d:28:a4:85:ba:5b: 77:08:cd:82:89:bf:f7:98:51:44:60:88:b9:3f:b0:a2:62:9e: 5b:6a:cc:39:c5:65:0f:10:c2:b4:60:95:eb:d5:79:0c:f1:cc: 68:ec:f7:89:7d:e5:27:11:05:f8:2f:be:5e:8e:08:9f:b6:db: de:34:93:ce:18:07:96:a4:cb:19:f0:d2:cd:ea:24:ad:88:31: 51:c5:5c:c9:c8:87:bd:29:3e:b1:58:bf:e7:8b:b7:b2:14:7b: 30:99:e0:f3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFN0MxMTAvBgNVBAUTKDQ5RUUwOTc4NkY2RURBNDIzNUM3NTc1Q0E2OTZEQkEw OTlENTQ3Q0MwHhcNMjYwMjAyMjAxNzM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTIzYS05NGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9yPfdrxKtvMqkN08+Gg1d4T80PPznxsGAE7t3xj7AR5u5BpFR21om30YIUv UqV/Z0hpnOLLjvtz7r1/hYtR0PlEmpAdaSr9R8MDtR/dAiSGBKECqoWL4oBzvuMs uMcPZmDXmEpz8/kpxs5E5XIJqmoswpsueSKhQr/XHtoqxjvX8kG/c++rv1gK5XBv 48V0XpbO+oTh4S9WZskHVzX8oNov4DqMvzvaJr3fsLHFkKWh355vWZG5qO4uDFqr VCrX0PZlhYI4WX6kpmODpw8iCgihgKSc2hIp4/REy/+gtvWnoMnZz62yES0ujU1C 5dj/CZhr2LfooI1oHBkqB/DnxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBhURaeU nsCDnagmap6UGHR5Z/FyMB8GA1UdIwQYMBaAFEnuCXhvbtpCNcdXXKaW26CZ1UfM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUU3Qy9GQzFFQjcwQ0RC QTkxMUVBOEEwMTcwN0RDNEY5QUUwMi9TZTRKZUc5dTJrSTF4MWRjcHBiYm9KblZS OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NlNEplRzl1MmtJMXgxZGNwcGJib0puVlI4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODlFN0MvRkMxRUI3MENEQkE5MTFFQThBMDE3MDdEQzRGOUFFMDIvMkVDMEM5NkFE QkFCMTFFQUJGQzFBQzdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ/S/MA0GCSqGSIb3DQEBCwUAA4IBAQAcN7mWt6HgHqIaLL/bi8dj HwMr7RSagjhe58c1Pv9l9HkzJBpD761hd9DRBoZ42bIqLHnpgevzmd00JtZr5V38 1cuaMrJ2UleEPafpbkKgZ+TxWMhDfnVmSFWzMNZ+2otNzt08p9rGQ8ABtDknv7U/ I1wFwBj29uIbqAjmHaaX0oZ3x4G8Mqblk+87o8kFdBBYougxZWfJkgEaKcdtKKSF ult3CM2Cib/3mFFEYIi5P7CiYp5basw5xWUPEMK0YJXr1XkM8cxo7PeJfeUnEQX4 L75ejgifttveNJPOGAeWpMsZ8NLN6iStiDFRxVzJyIe9KT6xWL/ni7eyFHswmeDz -----END CERTIFICATE-----Generated at Mon Mar 2 20:57:14 2026 by rpki-client