$ rpki-client -vvf rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa File: CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa (raw, json) Hash identifier: hPLmNaEpUGBOielXjPQ12dxqTWiu2MctRveJnDfMrGs= Subject key identifier: 33:DF:E2:4F:47:94:2C:81:8F:8D:74:CD:3E:4A:7B:27:C4:09:7A:46 Certificate issuer: /CN=A918C10A/serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Certificate serial: 084B Authority key identifier: 76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:23:22 +0000 ROA not before: Wed 10 Dec 2025 20:13:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139903 IP address blocks: 103.146.250.0/23 maxlen: 23 2001:df2:7580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C10A, serialNumber=761A8E8FEB7601498C9EA67887FDC1054176D9FC Validity Not Before: Dec 10 20:13:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a42fba-6ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:5f:6a:5d:76:28:27:77:f0:f3:12:bd:cb: 96:54:98:c1:ac:5a:e2:8b:15:80:59:71:d2:5e:64: 34:ce:fb:4e:8a:aa:9b:1f:5e:d4:12:7f:4c:f3:34: 36:6a:19:89:3c:2f:46:04:4d:fe:3d:6a:ad:b6:14: c0:8f:d7:d2:78:e2:51:c4:e3:cc:bd:a9:00:10:92: 38:ed:cb:df:1a:5e:91:65:7c:bb:46:34:0e:24:01: 59:4b:45:98:a0:e3:36:25:7e:70:81:35:c2:01:81: 40:1e:50:35:51:e2:5c:90:ab:bd:39:bf:8b:3f:68: ad:b6:a6:a4:10:79:5a:ab:69:15:c2:f2:85:8e:b5: 70:e9:e8:05:ff:a1:96:b0:01:52:36:58:f2:56:5f: 6c:ae:0b:4e:89:3d:ea:7d:36:28:c3:b2:27:7e:1f: 31:0b:ac:ba:b0:ba:d9:22:1e:2e:0c:f6:e6:42:ce: a2:38:d1:00:91:33:88:c3:a0:a1:98:85:fb:91:22: c7:f1:0b:8a:8b:e9:f0:a1:65:7b:2c:ac:2e:69:1a: 77:9f:fe:75:8c:a9:0f:bc:91:e2:e1:55:63:fc:3d: bc:90:db:9c:bd:62:3a:7e:31:01:91:a9:d7:2e:f2: 46:9d:66:08:27:d0:a7:cc:6f:ed:b5:f5:81:ba:e9: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DF:E2:4F:47:94:2C:81:8F:8D:74:CD:3E:4A:7B:27:C4:09:7A:46 X509v3 Authority Key Identifier: keyid:76:1A:8E:8F:EB:76:01:49:8C:9E:A6:78:87:FD:C1:05:41:76:D9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/dhqOj-t2AUmMnqZ4h_3BBUF22fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhqOj-t2AUmMnqZ4h_3BBUF22fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C10A/9916984AFDAB11EA950B6F3AC4F9AE02/CCFEC19AFDAC11EAB7B8A13BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.250.0/23 IPv6: 2001:df2:7580::/48 Signature Algorithm: sha256WithRSAEncryption aa:2a:d1:54:b8:fb:54:f9:a8:23:6e:6c:17:2a:8e:b8:dc:d1: 68:a8:87:3a:ef:aa:5e:f0:e6:ab:8e:51:51:82:33:de:ee:7d: 80:2f:77:84:30:82:59:86:1d:20:19:e6:e5:44:9f:af:a1:29: 0a:84:70:33:fc:9a:9b:95:7c:08:e0:99:55:8d:e4:3b:d1:75: d9:86:51:75:ce:fd:9a:b6:ff:51:7d:56:b1:55:1a:aa:0d:61: e7:5f:6a:5f:26:39:4f:11:05:7a:09:29:e2:0e:0c:97:ab:7b: 17:be:d6:71:82:d8:d1:6f:c5:fc:6c:4e:64:81:86:9e:a9:6c: 3d:8e:c6:46:43:bc:d5:06:09:38:e5:6c:d1:e8:89:3f:f9:0e: d1:fe:b4:50:67:a0:58:fd:69:b2:9f:ed:4b:ce:26:4e:f6:0b: bb:f4:aa:a6:e7:7e:c5:00:71:bd:e9:3a:a6:6c:56:6e:f6:ec: 9b:78:eb:6b:e7:59:b0:d2:17:8f:51:88:ab:a7:44:73:2e:c8: be:7c:b1:b2:f1:f3:63:ea:0d:af:fb:98:ef:46:f2:4e:5c:ef: f6:4e:5a:7d:9a:bd:cb:e2:2d:56:f5:c0:c0:b8:b7:cb:cb:c6: 4b:ce:b2:d4:db:55:e9:3a:b6:1f:9b:31:7f:29:5c:34:bb:ec: e4:69:c4:79 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxMEExMTAvBgNVBAUTKDc2MUE4RThGRUI3NjAxNDk4QzlFQTY3ODg3RkRDMTA1 NDE3NkQ5RkMwHhcNMjUxMjEwMjAxMzQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmZiYS02ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfhfal12KCd38PMSvcuWVJjBrFriixWAWXHSXmQ0zvtOiqqbH17UEn9M8zQ2 ahmJPC9GBE3+PWqtthTAj9fSeOJRxOPMvakAEJI47cvfGl6RZXy7RjQOJAFZS0WY oOM2JX5wgTXCAYFAHlA1UeJckKu9Ob+LP2ittqakEHlaq2kVwvKFjrVw6egF/6GW sAFSNljyVl9srgtOiT3qfTYow7Infh8xC6y6sLrZIh4uDPbmQs6iONEAkTOIw6Ch mIX7kSLH8QuKi+nwoWV7LKwuaRp3n/51jKkPvJHi4VVj/D28kNucvWI6fjEBkanX LvJGnWYIJ9CnzG/ttfWBuumIuwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDPf4k9H lCyBj410zT5KeyfECXpGMB8GA1UdIwQYMBaAFHYajo/rdgFJjJ6meIf9wQVBdtn8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzEwQS85OTE2OTg0QUZE QUIxMUVBOTUwQjZGM0FDNEY5QUUwMi9kaHFPai10MkFVbU1ucVo0aF8zQkJVRjIy ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RocU9qLXQyQVVtTW5xWjRoXzNCQlVGMjJmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEMxMEEvOTkxNjk4NEFGREFCMTFFQTk1MEI2RjNBQzRGOUFFMDIvQ0NGRUMxOUFG REFDMTFFQUI3QjhBMTNCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5L6MA8EAgACMAkDBwAgAQ3ydYAwDQYJKoZIhvcNAQELBQADggEB AKoq0VS4+1T5qCNubBcqjrjc0Wiohzrvql7w5quOUVGCM97ufYAvd4QwglmGHSAZ 5uVEn6+hKQqEcDP8mpuVfAjgmVWN5DvRddmGUXXO/Zq2/1F9VrFVGqoNYedfal8m OU8RBXoJKeIODJerexe+1nGC2NFvxfxsTmSBhp6pbD2OxkZDvNUGCTjlbNHoiT/5 DtH+tFBnoFj9abKf7UvOJk72C7v0qqbnfsUAcb3pOqZsVm727Jt462vnWbDSF49R iKunRHMuyL58sbLx82PqDa/7mO9G8k5c7/ZOWn2avcviLVb1wMC4t8vLxkvOstTb Vek6th+bMX8pXDS77ORpxHk= -----END CERTIFICATE-----Generated at Mon Mar 2 22:52:40 2026 by rpki-client