$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/BE9174768DDE11ED97AFDA82C4F9AE02.roa File: BE9174768DDE11ED97AFDA82C4F9AE02.roa (raw, json) Hash identifier: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI= Subject key identifier: A7:33:3C:C0:9B:70:F6:4A:02:4C:90:73:06:E6:B1:84:E7:CE:65:EB Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 0259 Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/BE9174768DDE11ED97AFDA82C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:07:11 +0000 ROA not before: Sat 29 Nov 2025 00:57:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141342 IP address blocks: 103.157.40.0/24 maxlen: 24 103.157.41.0/24 maxlen: 24 2400:8220::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Nov 29 00:57:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a40fcf-82ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:8f:99:fc:f9:de:0e:82:39:22:2a:83:68: 1f:93:77:4b:59:c7:48:f6:5f:06:07:df:47:9e:e0: 41:42:37:42:1b:20:9f:3c:c5:63:00:c4:de:14:5b: d9:62:71:28:8a:19:79:1b:cc:36:76:e9:35:ac:8a: 02:ae:62:36:1d:87:b8:b4:49:70:35:84:06:85:b7: 5d:d5:87:91:db:fc:15:86:de:4f:78:59:0f:dd:25: 5d:bb:5d:fd:ce:a1:5c:2f:3e:ea:4c:e4:3d:e8:61: 32:34:7f:39:6d:08:22:0a:63:3d:7a:c9:61:3b:63: 54:e3:f5:f0:f8:c2:44:0c:94:e2:d3:42:30:37:dd: ba:77:db:c0:41:c8:29:e4:53:97:ae:52:c4:ce:8c: 51:76:74:86:6c:0a:54:fc:5f:a4:c0:b8:e4:4e:52: 73:a9:f6:eb:4e:3a:7c:65:cc:d9:92:e2:72:01:4f: 2a:1c:1a:9b:81:6f:08:da:7f:a6:3e:c6:c5:ff:70: 2a:06:d8:ff:b8:6a:36:7b:ad:13:66:c7:c7:ed:0c: 6c:ae:b0:a7:23:44:1b:3f:f1:36:de:8d:3d:b5:30: d7:2d:41:ac:8f:f3:de:a1:f2:55:8a:2f:39:90:7a: 4c:73:1a:73:5b:45:6d:be:66:95:c7:36:c4:b7:69: ce:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:3C:C0:9B:70:F6:4A:02:4C:90:73:06:E6:B1:84:E7:CE:65:EB X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/BE9174768DDE11ED97AFDA82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.157.40.0/23 IPv6: 2400:8220::/32 Signature Algorithm: sha256WithRSAEncryption ad:2e:87:73:a4:f6:40:4e:29:84:9e:98:4f:b0:79:e0:f9:92: 93:63:a2:e9:bd:81:43:8b:06:07:9a:14:5f:fb:39:e4:c8:6c: b7:a5:73:25:be:f2:48:3a:1b:b5:a5:ea:5e:31:93:c4:87:b7: d5:e6:d6:9e:84:58:9f:f9:e8:c3:8b:d3:c0:fe:f0:6c:31:c7: 97:d3:d0:92:f0:de:38:a1:68:b9:e8:db:cc:78:7b:1c:48:f3: c1:fc:da:20:6b:ec:4a:d0:85:ec:0a:13:dc:aa:09:67:67:2b: f0:a7:6f:15:35:f5:3d:68:9a:1a:38:bd:9a:92:60:80:34:8a: 9a:30:33:02:1f:35:1a:51:ac:4a:6b:e0:3a:de:58:45:6a:41: 6f:d9:ba:ee:5a:d2:cc:1e:6d:37:d7:5b:9a:57:87:1f:d7:ac: 11:de:19:b0:27:85:e7:e3:28:5e:4e:ed:91:70:d1:b7:0c:ad: 55:20:01:ea:67:42:d1:6d:86:4c:ee:35:e2:4e:60:aa:a3:60: 16:fa:2c:4c:8e:af:a7:1d:04:24:45:99:75:07:2c:7e:e4:26: e2:10:a5:64:a5:26:13:d5:2f:16:19:32:db:aa:c8:1d:68:fd: cd:80:40:e1:39:cf:69:e9:2b:5b:0e:bb:68:fb:1a:fc:2e:b7: 64:c0:74:70 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjUxMTI5MDA1NzQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGZjZi04MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2KPmfz53g6COSIqg2gfk3dLWcdI9l8GB99HnuBBQjdCGyCfPMVjAMTeFFvZ YnEoihl5G8w2duk1rIoCrmI2HYe4tElwNYQGhbdd1YeR2/wVht5PeFkP3SVdu139 zqFcLz7qTOQ96GEyNH85bQgiCmM9eslhO2NU4/Xw+MJEDJTi00IwN926d9vAQcgp 5FOXrlLEzoxRdnSGbApU/F+kwLjkTlJzqfbrTjp8ZczZkuJyAU8qHBqbgW8I2n+m PsbF/3AqBtj/uGo2e60TZsfH7QxsrrCnI0QbP/E23o09tTDXLUGsj/PeofJVii85 kHpMcxpzW0VtvmaVxzbEt2nOtQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKczPMCb cPZKAkyQcwbmsYTnzmXrMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk2MEQvQkQwQjY0QzY4RERBMTFFRDg3M0E3NDg3QzRGOUFFMDIvQkU5MTc0NzY4 RERFMTFFRDk3QUZEQTgyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ50oMA0EAgACMAcDBQAkAIIgMA0GCSqGSIb3DQEBCwUAA4IBAQCt LodzpPZATimEnphPsHng+ZKTY6LpvYFDiwYHmhRf+znkyGy3pXMlvvJIOhu1pepe MZPEh7fV5taehFif+ejDi9PA/vBsMceX09CS8N44oWi56NvMeHscSPPB/Noga+xK 0IXsChPcqglnZyvwp28VNfU9aJoaOL2akmCANIqaMDMCHzUaUaxKa+A63lhFakFv 2bruWtLMHm0311uaV4cf16wR3hmwJ4Xn4yheTu2RcNG3DK1VIAHqZ0LRbYZM7jXi TmCqo2AW+ixMjq+nHQQkRZl1Byx+5CbiEKVkpSYT1S8WGTLbqsgdaP3NgEDhOc9p 6StbDrto+xr8LrdkwHRw -----END CERTIFICATE-----Generated at Mon Mar 2 04:04:54 2026 by rpki-client