$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/E71AB92A7F7D11EE8C183162C4F9AE02.roa File: E71AB92A7F7D11EE8C183162C4F9AE02.roa (raw, json) Hash identifier: hKdbTMFjBDS3XXfZuB0+hdt0c8qX6Q+dGMG1HACFMQ0= Subject key identifier: 71:40:7D:79:35:B0:31:B0:9E:1D:8D:B4:F6:EA:E6:03:3B:37:FE:82 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 01BD Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/E71AB92A7F7D11EE8C183162C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:19:05 +0000 ROA not before: Tue 03 Jun 2025 04:42:49 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 149793 IP address blocks: 103.186.158.0/24 maxlen: 24 103.186.159.0/24 maxlen: 24 2400:72e0:9f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jun 3 04:42:49 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3f679-1f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:96:20:d7:d0:3e:e7:ea:68:ec:a2:f8:c3: 50:31:80:6c:dc:16:57:20:52:03:ec:c2:87:42:18: 89:15:39:0d:b7:e9:3e:68:f3:02:8b:a1:1e:7a:b4: b0:3e:5f:3f:21:4a:9c:39:7e:bf:ec:49:e2:09:8b: b2:b8:46:73:81:4e:3b:2b:89:43:e7:6f:27:c9:9e: 39:77:ea:2d:2f:c5:47:4b:d5:9f:44:02:8b:62:32: e8:1f:ef:e6:45:57:a0:b1:5d:87:71:64:c4:50:a9: 6c:91:0a:42:59:80:ab:77:aa:11:8c:e3:6d:67:97: 5d:0f:b5:3e:72:b9:2c:57:36:b7:a5:a9:26:f9:5c: 47:25:1e:3a:fe:96:b4:74:a2:39:c4:27:f1:b3:bc: 9e:a8:c4:d8:04:2a:58:82:44:18:6b:d8:51:30:a7: e9:a6:d7:fa:8b:9a:32:e1:23:65:31:c3:40:1f:06: fb:47:ff:f2:fd:a3:47:f5:87:67:70:df:bd:70:05: 13:56:02:a2:6b:0d:cd:b7:23:53:6b:c9:b2:2a:bc: 2c:3f:6d:87:24:8f:d6:3d:5f:46:da:c2:46:86:ac: ae:c5:bd:ea:04:e3:91:09:4f:81:96:9a:7a:e4:49: b0:31:08:dd:e0:6c:11:07:a5:39:75:d0:65:83:ac: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:7D:79:35:B0:31:B0:9E:1D:8D:B4:F6:EA:E6:03:3B:37:FE:82 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/E71AB92A7F7D11EE8C183162C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.158.0/23 IPv6: 2400:72e0:9f00::/40 Signature Algorithm: sha256WithRSAEncryption 05:29:2d:33:57:77:3d:3a:6f:13:41:9a:3d:2f:da:12:f9:14: 8d:a8:a4:2f:82:c6:2d:fe:b7:49:6c:57:4f:9b:ca:e2:61:17: 25:8e:cb:87:d6:ee:1d:04:83:82:d9:18:23:27:79:be:28:b4: a7:83:87:af:ea:b6:73:32:44:70:09:64:07:6b:c9:28:f4:63: a5:0b:8e:15:9f:a4:a0:51:cf:58:e6:57:12:0b:6a:52:ec:4e: e8:77:72:b5:a1:70:97:17:61:47:f8:80:4d:6e:15:05:11:b1: 32:7a:23:29:a5:0c:f4:4e:5a:c4:d7:d1:fb:d9:b8:54:d0:f1: 3c:a2:4b:74:0d:2f:39:bd:72:26:34:32:4b:12:21:f5:44:79: a5:c9:ad:90:0e:52:12:3b:5c:b3:1a:7e:95:f7:52:77:f6:31: 27:a6:d5:75:21:04:2e:72:45:51:cd:1a:9c:28:4c:12:7b:38: 9b:05:5d:4b:d9:99:d1:82:39:81:cb:30:bb:fd:ac:fa:3b:76: cd:dc:16:ef:90:c6:0e:7c:33:11:12:f8:28:93:bf:58:fb:14: 00:0a:ab:ba:f1:69:60:fd:f5:1b:00:ec:d6:0d:15:bd:de:55: 45:64:0a:b7:77:ef:30:7a:ae:8f:91:2e:c0:6a:11:77:88:34: 9a:4c:81:93 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjUwNjAzMDQ0MjQ5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjY3OS0xZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreWWINfQPufqaOyi+MNQMYBs3BZXIFID7MKHQhiJFTkNt+k+aPMCi6EeerSw Pl8/IUqcOX6/7EniCYuyuEZzgU47K4lD528nyZ45d+otL8VHS9WfRAKLYjLoH+/m RVegsV2HcWTEUKlskQpCWYCrd6oRjONtZ5ddD7U+crksVza3pakm+VxHJR46/pa0 dKI5xCfxs7yeqMTYBCpYgkQYa9hRMKfpptf6i5oy4SNlMcNAHwb7R//y/aNH9Ydn cN+9cAUTVgKiaw3NtyNTa8myKrwsP22HJI/WPV9G2sJGhqyuxb3qBOORCU+Blpp6 5EmwMQjd4GwRB6U5ddBlg6yy3wIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFHFAfXk1 sDGwnh2NtPbq5gM7N/6CMB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3Q0EvNENGN0YxNTg3RUI3MTFFRTk2MjNFOTFBQzRGOUFFMDIvRTcxQUI5MkE3 RjdEMTFFRThDMTgzMTYyQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ7qeMA4EAgACMAgDBgAkAHLgnzANBgkqhkiG9w0BAQsFAAOCAQEA BSktM1d3PTpvE0GaPS/aEvkUjaikL4LGLf63SWxXT5vK4mEXJY7Lh9buHQSDgtkY Iyd5vii0p4OHr+q2czJEcAlkB2vJKPRjpQuOFZ+koFHPWOZXEgtqUuxO6HdytaFw lxdhR/iATW4VBRGxMnojKaUM9E5axNfR+9m4VNDxPKJLdA0vOb1yJjQySxIh9UR5 pcmtkA5SEjtcsxp+lfdSd/YxJ6bVdSEELnJFUc0anChMEns4mwVdS9mZ0YI5gcsw u/2s+jt2zdwW75DGDnwzERL4KJO/WPsUAAqruvFpYP31GwDs1g0Vvd5VRWQKt3fv MHquj5EuwGoRd4g0mkyBkw== -----END CERTIFICATE-----Generated at Mon Mar 2 06:16:32 2026 by rpki-client