$ rpki-client -vvf rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/CCD6FD9AC92E11ED931E6469C4F9AE02.roa File: CCD6FD9AC92E11ED931E6469C4F9AE02.roa (raw, json) Hash identifier: iuEGM5sJyxTcHsJjbcci7wnj/yq4o+HmmSlZprFPloE= Subject key identifier: 2A:DA:C3:92:36:F3:05:C8:52:C0:B9:73:96:A6:27:A2:00:C0:23:9B Certificate issuer: /CN=A918CEC7/serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Certificate serial: 023C Authority key identifier: 41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/CCD6FD9AC92E11ED931E6469C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:28:36 +0000 ROA not before: Thu 21 Aug 2025 03:10:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 142120 IP address blocks: 103.166.150.0/23 maxlen: 23 103.166.150.0/24 maxlen: 24 103.166.151.0/24 maxlen: 24 2001:df2:29c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CEC7, serialNumber=41618AE13A41F999C5790428B716FCAE5424A891 Validity Not Before: Aug 21 03:10:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3eaa4-2737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:73:ec:e2:cf:5f:55:4c:18:05:a6:e9:89: 3e:34:18:1d:51:0d:7c:6b:2f:54:3b:b6:06:33:e0: af:7b:c9:f5:24:5b:2c:76:bd:62:9d:93:75:f5:40: 5a:e6:a9:8a:8a:48:44:7d:a2:ac:27:8e:27:52:cb: 0d:26:9b:59:96:84:a4:48:fe:f8:a9:ea:38:14:f8: c9:39:68:0a:fc:c1:34:34:40:1c:c1:be:4e:01:ab: 78:92:64:1b:d6:41:47:02:6c:ee:0c:aa:fb:4d:00: 27:05:f4:f6:0f:51:e8:65:3e:bf:ff:fa:1e:6f:60: ce:38:c1:46:7c:11:59:23:38:2b:c3:a5:92:70:5c: 8c:1a:c3:1c:1e:61:2a:2f:b5:3f:12:32:d5:41:c1: 60:30:e5:72:07:5e:35:9e:c7:f9:12:d8:38:3f:79: e5:ba:ca:40:4e:f8:02:9b:a1:02:63:94:0b:0d:2d: 6a:64:99:2a:30:70:b9:c2:26:30:5f:3b:28:a9:eb: de:1e:f7:2a:1c:01:83:8b:9b:5b:2c:ab:1b:db:a8: af:7b:65:78:60:79:27:52:fa:da:98:45:7d:d1:0c: 3d:b2:7b:b5:90:ce:41:37:b0:a8:bf:45:d2:72:8a: e2:e0:74:c9:e9:3f:7d:b5:b8:e8:76:fb:4c:16:e1: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DA:C3:92:36:F3:05:C8:52:C0:B9:73:96:A6:27:A2:00:C0:23:9B X509v3 Authority Key Identifier: keyid:41:61:8A:E1:3A:41:F9:99:C5:79:04:28:B7:16:FC:AE:54:24:A8:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/QWGK4TpB-ZnFeQQotxb8rlQkqJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWGK4TpB-ZnFeQQotxb8rlQkqJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CEC7/9BB4EAB4C87B11EDA6132A40C4F9AE02/CCD6FD9AC92E11ED931E6469C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.150.0/23 IPv6: 2001:df2:29c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:3f:6f:f3:45:56:b1:59:e3:48:12:37:af:2a:ff:5b:0a:d1: 56:f7:be:19:e8:45:12:8c:2c:1d:91:f4:00:fa:ea:61:58:83: 8e:de:5b:a4:aa:ff:20:7c:81:0e:d2:14:78:81:b8:f6:3b:d4: a7:d9:80:93:be:72:29:e0:41:62:91:d9:a8:97:f5:9b:6d:80: c5:6e:79:c6:d5:d5:13:2d:87:d5:54:c4:3a:ff:1d:82:20:f7: 05:87:3d:a7:86:c2:1d:b5:a6:2a:14:f9:f7:c4:be:aa:3e:10: 10:48:f2:6c:1a:6b:37:b3:a6:ca:d3:91:76:d3:0e:c2:2f:83: fc:a9:ea:5f:42:72:38:ef:f8:90:d4:eb:ba:e6:05:26:0d:9c: 24:9b:8c:16:b4:7c:be:0e:ab:fe:11:e4:46:c9:06:1a:47:ca: c7:34:89:8e:6f:9c:88:ad:b2:b3:e9:c6:1c:a4:23:a0:f4:44: 94:64:92:bf:0b:bf:e6:c1:5a:a5:3e:57:d2:40:9a:67:48:cc: 93:b8:70:8f:31:3b:51:21:53:ae:40:6a:6b:9d:f9:f7:db:97: 01:fd:2c:6b:c1:55:93:28:5b:92:8d:d2:52:9d:73:8c:e2:1a: fc:a4:16:d9:ca:3f:2d:4c:70:aa:7b:ad:99:49:35:5f:88:be: 0b:90:7f:82 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENFQzcxMTAvBgNVBAUTKDQxNjE4QUUxM0E0MUY5OTlDNTc5MDQyOEI3MTZGQ0FF NTQyNEE4OTEwHhcNMjUwODIxMDMxMDE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWFhNC0yNzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzVz7OLPX1VMGAWm6Yk+NBgdUQ18ay9UO7YGM+Cve8n1JFssdr1inZN19UBa 5qmKikhEfaKsJ44nUssNJptZloSkSP74qeo4FPjJOWgK/ME0NEAcwb5OAat4kmQb 1kFHAmzuDKr7TQAnBfT2D1HoZT6///oeb2DOOMFGfBFZIzgrw6WScFyMGsMcHmEq L7U/EjLVQcFgMOVyB141nsf5Etg4P3nluspATvgCm6ECY5QLDS1qZJkqMHC5wiYw XzsoqeveHvcqHAGDi5tbLKsb26ive2V4YHknUvramEV90Qw9snu1kM5BN7Cov0XS cori4HTJ6T99tbjodvtMFuHRiQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCraw5I2 8wXIUsC5c5amJ6IAwCObMB8GA1UdIwQYMBaAFEFhiuE6QfmZxXkEKLcW/K5UJKiR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0VDNy85QkI0RUFCNEM4 N0IxMUVEQTYxMzJBNDBDNEY5QUUwMi9RV0dLNFRwQi1abkZlUVFvdHhiOHJsUWtx SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FXR0s0VHBCLVpuRmVRUW90eGI4cmxRa3FKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OENFQzcvOUJCNEVBQjRDODdCMTFFREE2MTMyQTQwQzRGOUFFMDIvQ0NENkZEOUFD OTJFMTFFRDkzMUU2NDY5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6aWMA8EAgACMAkDBwAgAQ3yKcAwDQYJKoZIhvcNAQELBQADggEB AIc/b/NFVrFZ40gSN68q/1sK0Vb3vhnoRRKMLB2R9AD66mFYg47eW6Sq/yB8gQ7S FHiBuPY71KfZgJO+cingQWKR2aiX9ZttgMVuecbV1RMth9VUxDr/HYIg9wWHPaeG wh21pioU+ffEvqo+EBBI8mwaazezpsrTkXbTDsIvg/yp6l9Ccjjv+JDU67rmBSYN nCSbjBa0fL4Oq/4R5EbJBhpHysc0iY5vnIitsrPpxhykI6D0RJRkkr8Lv+bBWqU+ V9JAmmdIzJO4cI8xO1EhU65Aamud+ffblwH9LGvBVZMoW5KN0lKdc4ziGvykFtnK Py1McKp7rZlJNV+IvguQf4I= -----END CERTIFICATE-----Generated at Tue Mar 3 02:11:43 2026 by rpki-client