$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14517BA8322511F0BF239621C4F9AE02.roa File: 14517BA8322511F0BF239621C4F9AE02.roa (raw, json) Hash identifier: itC18UxIMTlh6xgHTjndxzjJgrQrSW/TfXhjZm2urbo= Subject key identifier: 21:F9:CC:EB:D7:1B:AA:5E:4D:D7:CD:D3:BA:97:61:78:5F:83:9F:D4 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: DB2A Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14517BA8322511F0BF239621C4F9AE02.roa Signing time: Sun 01 Mar 2026 23:07:06 +0000 ROA not before: Tue 17 Feb 2026 11:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133271 IP address blocks: 103.90.211.0/24 maxlen: 24 103.148.206.0/24 maxlen: 24 103.152.179.0/24 maxlen: 24 103.158.242.0/24 maxlen: 24 103.165.63.0/24 maxlen: 24 103.172.254.0/23 maxlen: 24 2001:df1:c540::/48 maxlen: 48 2001:df7:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 07:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56106 (0xdb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Feb 17 11:31:29 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c69a-42f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1f:2d:3a:95:09:4c:b3:65:90:06:31:b9:ec: 1a:c3:e5:b6:d7:3f:18:cb:ce:9a:1e:86:0b:9b:b2: cf:0e:77:f2:4d:71:ae:8c:d5:5a:af:f2:11:de:10: e1:da:60:aa:b1:0e:6d:8e:16:f6:8f:a5:cf:28:14: 8d:2b:eb:af:33:2d:7e:3a:6e:e9:f6:88:b7:d7:63: 7b:82:b3:47:23:1e:a4:c4:4c:2f:d8:ef:ff:34:24: 6a:30:03:3d:2f:76:d4:35:b4:43:9e:e3:36:36:e7: 23:e6:9d:93:a0:75:5f:69:1d:b5:42:23:5d:55:a7: 24:ff:12:d8:7f:b2:69:41:fd:3e:1a:07:cf:52:3b: ff:91:31:c4:95:55:04:78:3a:79:19:f2:9d:db:13: 33:fe:db:bf:ce:5d:67:00:1d:06:75:43:5d:15:5d: 0b:d5:b0:1d:6f:93:24:9d:72:a0:55:4c:c4:8b:86: 15:a2:48:18:39:8f:ef:38:08:74:8d:58:29:65:77: 2e:75:0c:dd:97:01:b0:0a:f4:bc:13:99:46:51:4d: 25:d1:50:37:a8:0a:4c:11:4d:24:94:de:f5:43:e3: 9b:37:f6:98:56:4c:5e:bf:35:6f:55:ed:44:b6:e3: 7f:d8:f0:26:04:3c:c9:20:6d:cb:30:76:9f:37:60: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F9:CC:EB:D7:1B:AA:5E:4D:D7:CD:D3:BA:97:61:78:5F:83:9F:D4 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14517BA8322511F0BF239621C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.90.211.0/24 103.148.206.0/24 103.152.179.0/24 103.158.242.0/24 103.165.63.0/24 103.172.254.0/23 IPv6: 2001:df1:c540::/48 2001:df7:8180::/48 Signature Algorithm: sha256WithRSAEncryption 63:4c:31:9c:6f:ba:71:f0:82:06:41:4a:fc:b0:9b:89:4e:72: 6b:15:46:0f:0c:6d:14:97:48:60:79:6d:7b:85:12:b4:1f:95: 24:e7:c4:04:d9:fe:db:e8:9f:7f:de:50:c1:db:51:76:f7:b8: 20:79:9b:75:83:09:d6:a3:47:af:1f:1c:87:df:b2:91:77:98: e6:8d:2c:bd:b1:8f:03:f2:1d:2e:c6:67:c8:79:24:ea:f2:17: 67:ae:d9:59:5b:d9:0e:14:85:bc:33:79:a2:d9:82:00:35:0c: 25:48:73:5c:81:40:50:86:80:3c:b0:07:59:d9:88:7d:af:6d: a2:93:4b:b5:6d:72:c3:ea:a2:0d:f1:44:e9:51:c3:06:7e:de: 5d:2b:7e:b3:81:c8:ae:0b:81:11:99:25:12:92:ad:e0:80:22: 4a:a6:65:1a:e2:9a:02:9e:33:b7:b1:08:bc:2f:aa:9a:9c:af: cc:f9:a8:88:66:f1:f5:b8:24:b7:08:72:8b:4e:35:84:9d:76: 94:95:7d:c6:ec:3c:e9:cb:ae:e6:ff:d0:ce:56:63:da:55:b5: d0:ef:db:8e:99:47:78:08:5d:5c:a7:39:be:45:db:f1:af:13: ff:55:ee:ce:38:85:1a:08:1c:60:fb:1e:5a:52:e3:b6:cc:8c: 65:50:11:f9 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDANsqMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI2MDIxNzExMzEyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjlhNGM2OWEtNDJmNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYfLTqVCUyzZZAGMbnsGsPlttc/GMvOmh6GC5uyzw538k1xrozVWq/yEd4Q 4dpgqrEObY4W9o+lzygUjSvrrzMtfjpu6faIt9dje4KzRyMepMRML9jv/zQkajAD PS921DW0Q57jNjbnI+adk6B1X2kdtUIjXVWnJP8S2H+yaUH9PhoHz1I7/5ExxJVV BHg6eRnyndsTM/7bv85dZwAdBnVDXRVdC9WwHW+TJJ1yoFVMxIuGFaJIGDmP7zgI dI1YKWV3LnUM3ZcBsAr0vBOZRlFNJdFQN6gKTBFNJJTe9UPjmzf2mFZMXr81b1Xt RLbjf9jwJgQ8ySBtyzB2nzdgdCcCAwEAAaOCApgwggKUMB0GA1UdDgQWBBQh+czr 1xuqXk3XzdO6l2F4X4Of1DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0NTE3QkE4 MzIyNTExRjBCRjIzOTYyMUM0RjlBRTAyLnJvYTBXBggrBgEFBQcBBwEB/wRIMEYw KgQCAAEwJAMEAGda0wMEAGeUzgMEAGeYswMEAGee8gMEAGelPwMEAWes/jAYBAIA AjASAwcAIAEN8cVAAwcAIAEN94GAMA0GCSqGSIb3DQEBCwUAA4IBAQBjTDGcb7px 8IIGQUr8sJuJTnJrFUYPDG0Ul0hgeW17hRK0H5Uk58QE2f7b6J9/3lDB21F297gg eZt1gwnWo0evHxyH37KRd5jmjSy9sY8D8h0uxmfIeSTq8hdnrtlZW9kOFIW8M3mi 2YIANQwlSHNcgUBQhoA8sAdZ2Yh9r22ik0u1bXLD6qIN8UTpUcMGft5dK36zgciu C4ERmSUSkq3ggCJKpmUa4poCnjO3sQi8L6qanK/M+aiIZvH1uCS3CHKLTjWEnXaU lX3G7Dzpy67m/9DOVmPaVbXQ79uOmUd4CF1cpzm+RdvxrxP/Ve7OOIUaCBxg+x5a UuO2zIxlUBH5 -----END CERTIFICATE-----Generated at Mon Mar 2 11:09:40 2026 by rpki-client