$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa File: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (raw, json) Hash identifier: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I= Subject key identifier: 86:C6:58:3A:9F:40:BD:2D:62:C6:BF:20:FA:2A:93:AF:F3:E5:2B:56 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 12C9 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:08:46 +0000 ROA not before: Tue 09 Dec 2025 03:39:36 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132110 IP address blocks: 103.200.114.0/24 maxlen: 24 103.200.115.0/24 maxlen: 24 124.108.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4809 (0x12c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Dec 9 03:39:36 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a480ae-b03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:1f:54:9e:1e:53:92:b1:8f:b8:0c:2f:99: 50:e4:99:e6:f8:46:40:59:9a:9a:1f:3e:0b:ad:db: 3b:55:75:70:44:3e:ab:72:ab:2e:8e:ff:e7:bf:1f: a6:6d:02:5b:3b:6b:72:f2:72:e3:6f:aa:fc:92:08: f4:b2:3f:8a:7a:6f:8a:35:0a:e6:3c:c7:2b:2c:f4: 29:5a:4f:03:3f:c3:cf:90:f6:06:21:1e:b0:08:be: 57:d6:c3:e7:33:4a:3d:19:a6:80:38:5e:79:61:98: 7f:5e:72:7a:55:08:50:70:42:38:f0:f9:17:c5:ab: 01:4f:40:e2:df:68:fb:07:77:ac:e7:9f:a4:23:35: dc:50:04:50:1e:da:ea:ce:ff:83:be:4a:94:b3:4a: dd:06:56:2a:a6:04:bf:d8:91:a0:b1:65:6f:54:e0: c8:91:cb:12:e4:29:b4:19:71:b7:21:a5:fd:91:34: 78:e8:ba:b5:1e:ef:66:90:0c:80:d1:fb:f5:e1:01: 58:38:69:13:8b:c8:87:af:38:7c:9f:71:d4:74:48: 46:62:52:67:80:21:ed:54:e9:be:35:3d:1d:3d:f3: f1:46:fb:fa:16:43:dc:67:5c:88:af:6d:e0:55:de: dc:ca:a5:91:4f:e6:15:a8:b2:7a:be:a6:55:3e:af: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C6:58:3A:9F:40:BD:2D:62:C6:BF:20:FA:2A:93:AF:F3:E5:2B:56 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/2DDAF496ABD811F08750DA6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.200.114.0/23 124.108.21.0/24 Signature Algorithm: sha256WithRSAEncryption 89:7c:b9:f6:5b:cd:99:eb:6a:94:5d:6b:9b:84:94:ba:d7:1b: 37:f3:3e:4b:1d:65:07:ea:54:d7:14:45:fd:94:9c:20:8b:71: ba:54:9a:b2:04:42:9e:22:ba:d7:20:31:22:66:00:d3:1e:a7: 68:19:1e:29:2a:e8:1e:3f:5a:22:3c:77:51:ff:7b:cf:0b:3d: 24:04:a7:49:fa:d1:91:17:68:52:03:25:62:7e:50:ac:2a:b1: 5a:a2:6e:ed:7f:22:c8:6b:d3:f9:e8:8a:21:3f:0d:55:d7:42: 39:e2:1a:81:f1:50:68:8b:b1:0c:6b:59:12:ba:e5:b4:93:75: 0f:5f:d0:74:6d:ef:61:6c:6d:02:81:5e:83:10:b0:3a:fa:52: 2f:bd:06:20:64:38:8a:55:77:bf:c8:38:1c:8f:8b:8a:fa:aa: 7e:ea:ab:31:52:8d:f6:65:8f:a7:a1:7b:c1:96:94:80:4e:fe: 31:01:d4:8d:d5:1f:1c:b4:30:61:b2:5b:70:35:0f:f0:29:fb: 73:9f:b7:12:80:49:a6:74:b8:c8:11:46:18:ba:46:e5:78:f1: a0:86:46:cd:02:5f:b1:be:01:84:0f:5a:c2:6e:49:b2:b0:9c: 3c:75:be:aa:ea:e1:10:e1:e9:a5:12:15:d2:11:22:fe:d6:90: 39:56:45:02 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICEskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUxMjA5MDMzOTM2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBhZS1iMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBsfVJ4eU5Kxj7gML5lQ5Jnm+EZAWZqaHz4Lrds7VXVwRD6rcqsujv/nvx+m bQJbO2ty8nLjb6r8kgj0sj+Kem+KNQrmPMcrLPQpWk8DP8PPkPYGIR6wCL5X1sPn M0o9GaaAOF55YZh/XnJ6VQhQcEI48PkXxasBT0Di32j7B3es55+kIzXcUARQHtrq zv+DvkqUs0rdBlYqpgS/2JGgsWVvVODIkcsS5Cm0GXG3IaX9kTR46Lq1Hu9mkAyA 0fv14QFYOGkTi8iHrzh8n3HUdEhGYlJngCHtVOm+NT0dPfPxRvv6FkPcZ1yIr23g Vd7cyqWRT+YVqLJ6vqZVPq9NDQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIbGWDqf QL0tYsa/IPoqk6/z5StWMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZFNzMvRjQxRDQwRjJFQTA5MTFFOEFEQTJFRDBDQzRGOUFFMDIvMkREQUY0OTZB QkQ4MTFGMDg3NTBEQTZDQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ8hyAwQAfGwVMA0GCSqGSIb3DQEBCwUAA4IBAQCJfLn2W82Z62qU XWubhJS61xs38z5LHWUH6lTXFEX9lJwgi3G6VJqyBEKeIrrXIDEiZgDTHqdoGR4p KugeP1oiPHdR/3vPCz0kBKdJ+tGRF2hSAyViflCsKrFaom7tfyLIa9P56IohPw1V 10I54hqB8VBoi7EMa1kSuuW0k3UPX9B0be9hbG0CgV6DELA6+lIvvQYgZDiKVXe/ yDgcj4uK+qp+6qsxUo32ZY+noXvBlpSATv4xAdSN1R8ctDBhsltwNQ/wKftzn7cS gEmmdLjIEUYYukblePGghkbNAl+xvgGED1rCbkmysJw8db6q6uEQ4emlEhXSESL+ 1pA5VkUC -----END CERTIFICATE-----Generated at Mon Mar 2 07:21:00 2026 by rpki-client