$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa File: 210E6234639E11EB81185C31C4F9AE02.roa (raw, json) Hash identifier: ndkRuUmo0nNBtfOzNOLEtbI2AMbhZXxVszDdEJMg1Nk= Subject key identifier: F2:CF:9D:AA:47:F0:5A:62:7F:38:FD:51:63:B4:6E:93:23:1D:6F:3A Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 0749 Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:41:22 +0000 ROA not before: Fri 28 Feb 2025 23:41:15 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140037 IP address blocks: 103.147.166.0/23 maxlen: 23 103.147.166.0/24 maxlen: 24 103.147.167.0/24 maxlen: 24 2001:df0:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1865 (0x749) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Validity Not Before: Feb 28 23:41:15 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3fbb2-85cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:b0:24:e3:4e:07:8d:73:8e:e7:ad:7c:26: ab:d5:35:4f:34:0c:1c:ba:51:19:70:f1:85:a6:04: f2:16:e7:4f:f1:f7:db:f6:fd:a1:58:8f:56:a4:70: 61:42:78:2e:9f:67:c1:8f:32:da:d5:cb:26:18:93: c1:8d:48:9c:b6:32:4d:79:86:ef:93:1b:57:1c:28: a2:97:56:99:22:a4:d1:57:14:fd:03:42:7a:f1:5f: 14:95:71:c8:15:88:fa:04:32:08:91:59:02:a5:2e: f4:f2:e4:e3:cc:46:3f:e7:ce:59:bc:e8:e6:dd:84: 98:80:5f:33:4f:b7:fd:1b:21:09:0e:78:c7:7b:82: 01:c5:30:5f:c1:98:56:42:b9:3e:22:b9:c7:a0:60: b5:3e:8a:8b:75:e3:d0:72:84:b5:4e:72:1d:7b:d0: 81:39:d4:cb:4e:a4:d2:4a:98:c8:4e:28:9b:7e:1c: 6b:57:58:1e:65:be:e3:87:7d:d1:04:c7:04:c1:a5: 00:5d:61:81:b0:e3:7a:35:f1:f7:9c:5a:07:b3:c0: f3:df:bf:3d:b8:1b:b1:7a:37:dc:2e:bd:72:dc:62: 8c:a7:f4:e4:a1:55:6a:f4:7c:15:fa:f8:99:f0:67: a1:88:79:6b:08:e6:ce:72:7b:2c:28:67:52:08:ad: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CF:9D:AA:47:F0:5A:62:7F:38:FD:51:63:B4:6E:93:23:1D:6F:3A X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.166.0/23 IPv6: 2001:df0:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 71:7c:c7:50:f7:78:d5:7a:6a:d3:17:e4:7e:48:9c:2e:cd:69: b5:f3:38:f8:c4:21:5c:b3:9a:56:80:1b:e2:10:51:b6:a8:07: 46:d9:e9:9a:50:99:f5:9a:e4:90:f3:8d:f6:b9:df:66:44:f2: f5:3f:29:c8:4e:54:19:45:e1:5f:e6:dc:db:da:9c:cd:97:cb: 16:81:2a:9e:7a:54:d7:95:d9:69:ca:05:ef:f0:77:81:11:52: cd:7d:3b:e1:da:61:02:96:1f:2d:e1:40:e4:8c:d5:cc:4d:72: e9:31:a2:5b:82:c3:77:72:ad:b4:80:af:05:6f:9d:ab:f7:6f: de:8c:1b:69:bf:9f:6e:72:44:bf:0b:7b:c3:1b:85:ee:f6:7e: 33:f2:df:b2:50:dc:b1:5c:1c:ee:14:1e:01:3a:7c:cd:6b:9d: ff:49:52:07:d3:58:bf:c5:71:4a:6e:19:7e:8f:fa:1a:78:c0: e1:b3:42:f2:e4:c5:d2:e1:d3:78:02:cb:78:3f:06:07:77:6a: b4:3e:27:54:6d:3a:6e:63:5d:4e:65:0b:f9:20:f4:ad:a4:7d: 77:9f:a0:93:17:f4:fb:25:31:e5:24:29:f8:b3:03:3a:5d:7a: 1a:d9:f2:06:2a:7b:f6:da:9f:48:d1:7f:62:bc:68:b3:d3:ed: 87:ce:83:fc -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjUwMjI4MjM0MTE1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmJiMi04NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjuwJONOB41zjuetfCar1TVPNAwculEZcPGFpgTyFudP8ffb9v2hWI9WpHBh Qngun2fBjzLa1csmGJPBjUictjJNeYbvkxtXHCiil1aZIqTRVxT9A0J68V8UlXHI FYj6BDIIkVkCpS708uTjzEY/585ZvOjm3YSYgF8zT7f9GyEJDnjHe4IBxTBfwZhW Qrk+IrnHoGC1PoqLdePQcoS1TnIde9CBOdTLTqTSSpjITiibfhxrV1geZb7jh33R BMcEwaUAXWGBsON6NfH3nFoHs8Dz3789uBuxejfcLr1y3GKMp/TkoVVq9HwV+viZ 8GehiHlrCObOcnssKGdSCK0RWQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPLPnapH 8Fpifzj9UWO0bpMjHW86MB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxQ0MvNUZFRkRBOEU2MzlDMTFFQjkwQjgzMDEzQzRGOUFFMDIvMjEwRTYyMzQ2 MzlFMTFFQjgxMTg1QzMxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5OmMA8EAgACMAkDBwAgAQ3woMAwDQYJKoZIhvcNAQELBQADggEB AHF8x1D3eNV6atMX5H5InC7NabXzOPjEIVyzmlaAG+IQUbaoB0bZ6ZpQmfWa5JDz jfa532ZE8vU/KchOVBlF4V/m3NvanM2XyxaBKp56VNeV2WnKBe/wd4ERUs19O+Ha YQKWHy3hQOSM1cxNcukxoluCw3dyrbSArwVvnav3b96MG2m/n25yRL8Le8Mbhe72 fjPy37JQ3LFcHO4UHgE6fM1rnf9JUgfTWL/FcUpuGX6P+hp4wOGzQvLkxdLh03gC y3g/Bgd3arQ+J1RtOm5jXU5lC/kg9K2kfXefoJMX9PslMeUkKfizAzpdehrZ8gYq e/ban0jRf2K8aLPT7YfOg/w= -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:34 2026 by rpki-client