$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/2A0CFF60000811EC9CB70449C4F9AE02.roa File: 2A0CFF60000811EC9CB70449C4F9AE02.roa (raw, json) Hash identifier: LTCbHauhqctukaxsBI7is9dw2rGH9a0l7IrT+OZtZLU= Subject key identifier: 8D:37:E2:51:A8:D1:04:71:61:FB:BC:B9:76:7D:E4:F0:44:E5:ED:9E Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 08A4 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/2A0CFF60000811EC9CB70449C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:43:01 +0000 ROA not before: Sat 04 Oct 2025 20:51:23 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 141014 IP address blocks: 103.154.234.0/23 maxlen: 23 103.154.234.0/24 maxlen: 24 103.154.235.0/24 maxlen: 24 2406:5ec0::/32 maxlen: 32 2406:5ec0:1::/48 maxlen: 48 2406:5ec0:2::/48 maxlen: 48 2406:5ec0:3::/48 maxlen: 48 2406:5ec0:4::/48 maxlen: 48 2406:5ec0:5::/48 maxlen: 48 2406:5ec0:6::/48 maxlen: 48 2406:5ec0:7::/48 maxlen: 48 2406:5ec0:8::/48 maxlen: 48 2406:5ec0:9::/48 maxlen: 48 2406:5ec0:a::/48 maxlen: 48 2406:5ec0:b::/48 maxlen: 48 2406:5ec0:c::/48 maxlen: 48 2406:5ec0:d::/48 maxlen: 48 2406:5ec0:e::/48 maxlen: 48 2406:5ec0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Oct 4 20:51:23 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a45e84-a815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:98:9b:92:45:0f:1c:a2:79:78:74:57:99: bc:36:4c:f1:d1:a1:f4:c0:c0:cc:78:52:ae:18:da: 20:46:9f:9a:7c:c4:2d:99:6d:d7:3d:90:0e:16:0c: a7:b2:3e:16:f3:36:e7:aa:14:72:1d:7c:33:6d:b5: c7:2e:c4:e4:5a:6e:e8:eb:78:20:9e:57:65:ae:27: 68:1e:19:08:8a:21:d0:b0:ce:56:00:38:1a:4d:60: cb:a6:9c:0d:c3:89:80:ae:82:e5:6e:e5:a4:bf:fa: 89:dc:b5:1a:74:9e:05:cb:31:af:74:11:19:91:08: cb:c6:94:c3:3f:66:6e:67:50:23:8f:d2:59:a6:18: cf:0e:b8:e1:ce:72:9a:ed:62:b6:3b:fb:b1:69:35: ff:27:e8:9d:67:24:fd:60:20:88:7f:8c:1f:32:4b: 75:6e:b9:14:d7:7e:a9:16:bf:98:dd:76:d5:68:c9: 43:00:24:8f:5c:70:a9:fe:02:ae:df:82:bc:ba:41: f8:47:69:24:ef:11:04:4e:eb:9f:aa:82:03:95:71: c2:70:78:c4:07:5b:48:9b:c1:86:16:38:55:11:8c: 8a:4c:77:db:b8:7c:52:cc:a9:24:7d:c2:5f:70:84: 1b:05:f4:98:ed:16:5f:7f:01:b0:08:b8:1d:66:2d: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:E2:51:A8:D1:04:71:61:FB:BC:B9:76:7D:E4:F0:44:E5:ED:9E X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/2A0CFF60000811EC9CB70449C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.234.0/23 IPv6: 2406:5ec0::/32 Signature Algorithm: sha256WithRSAEncryption 49:93:c2:0c:d8:46:04:eb:e8:af:19:3d:e2:9e:4a:ae:34:08: cf:ac:fb:c9:50:85:cf:96:07:14:a9:a6:02:4d:5a:50:86:b7: ac:d4:84:42:1d:ae:83:c8:29:25:c2:bc:52:51:95:d6:3e:72: cb:f3:83:5d:1d:d9:56:3e:74:9f:0d:83:d8:34:d6:55:02:3a: 2d:d0:b4:72:d4:8b:83:e0:9c:9e:57:00:c0:df:0e:ca:39:1d: e7:76:d4:d6:7a:61:d8:af:98:b9:9c:2c:43:25:5b:56:ac:6b: d3:ef:60:86:ff:d8:54:dd:3b:68:13:11:a4:81:a0:63:73:a2: 42:35:3a:f8:1c:4d:57:f4:a4:0e:ea:bc:8c:2d:9b:40:20:4a: 78:69:58:64:f7:ee:75:92:e1:92:f5:e7:e1:54:ed:46:f3:63: 54:58:91:47:83:dc:41:d8:79:6f:29:f6:b1:5c:72:70:9e:f9: be:0d:76:b3:74:ae:ac:ad:06:90:62:5c:bb:e4:e4:a2:30:87: 72:e6:0b:12:eb:3c:e8:b9:f9:51:ca:17:4a:94:7b:52:c4:2c: a5:ec:ad:e8:cf:f2:22:33:71:c9:36:11:d0:ab:14:5c:d3:f2: f4:f8:51:9b:e2:56:7a:36:4b:36:b7:30:2b:2f:43:26:d6:63: 63:9c:3f:00 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjUxMDA0MjA1MTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU4NC1hODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCiYm5JFDxyieXh0V5m8Nkzx0aH0wMDMeFKuGNogRp+afMQtmW3XPZAOFgyn sj4W8zbnqhRyHXwzbbXHLsTkWm7o63ggnldlridoHhkIiiHQsM5WADgaTWDLppwN w4mAroLlbuWkv/qJ3LUadJ4FyzGvdBEZkQjLxpTDP2ZuZ1Ajj9JZphjPDrjhznKa 7WK2O/uxaTX/J+idZyT9YCCIf4wfMkt1brkU136pFr+Y3XbVaMlDACSPXHCp/gKu 34K8ukH4R2kk7xEETuufqoIDlXHCcHjEB1tIm8GGFjhVEYyKTHfbuHxSzKkkfcJf cIQbBfSY7RZffwGwCLgdZi2AnQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFI034lGo 0QRxYfu8uXZ95PBE5e2eMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVDODIvNDAyNTgwN0NFMUU4MTFFQTlFODMzQTUzQzRGOUFFMDIvMkEwQ0ZGNjAw MDA4MTFFQzlDQjcwNDQ5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5rqMA0EAgACMAcDBQAkBl7AMA0GCSqGSIb3DQEBCwUAA4IBAQBJ k8IM2EYE6+ivGT3inkquNAjPrPvJUIXPlgcUqaYCTVpQhres1IRCHa6DyCklwrxS UZXWPnLL84NdHdlWPnSfDYPYNNZVAjot0LRy1IuD4JyeVwDA3w7KOR3ndtTWemHY r5i5nCxDJVtWrGvT72CG/9hU3TtoExGkgaBjc6JCNTr4HE1X9KQO6ryMLZtAIEp4 aVhk9+51kuGS9efhVO1G82NUWJFHg9xB2HlvKfaxXHJwnvm+DXazdK6srQaQYly7 5OSiMIdy5gsS6zzouflRyhdKlHtSxCyl7K3oz/IiM3HJNhHQqxRc0/L0+FGb4lZ6 Nks2tzArL0Mm1mNjnD8A -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:35 2026 by rpki-client