$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2C3DCE420F7F11F0B174675DC4F9AE02.roa File: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (raw, json) Hash identifier: Ltcec8YUrhHMlW0eJHKnBLOWsEySWjWoXSf22fFRz1Y= Subject key identifier: 52:32:1C:B8:6E:DD:CE:02:70:16:3D:00:5D:9D:61:F2:43:98:F1:1B Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 09A2 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2C3DCE420F7F11F0B174675DC4F9AE02.roa Signing time: Sat 10 Oct 2026 22:44:05 +0000 ROA not before: Sat 10 Oct 2026 22:44:05 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 150706 IP address blocks: 103.20.220.0/23 maxlen: 23 103.20.220.0/24 maxlen: 24 103.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Oct 10 22:44:05 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6acabfb5-75fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:72:5d:f8:e7:77:f3:29:10:2e:03:a5:aa: 19:4e:f3:db:14:33:46:11:7c:99:99:00:84:3e:f3: ce:b9:a0:10:3c:13:a7:62:49:8d:74:00:de:50:78: 36:48:b0:c5:63:16:ff:00:46:c8:ab:81:87:cd:fe: 23:56:b7:13:45:a9:00:6e:9e:46:4f:13:00:03:f3: b0:43:d0:e1:7c:04:df:bf:48:1f:b8:28:d0:bb:e0: d2:05:ea:da:3c:39:eb:05:4c:e4:ca:a9:05:95:a6: 6d:da:0d:67:2d:5e:27:48:86:94:e6:8d:22:cc:ac: 58:ea:22:0d:a2:0b:38:c7:91:14:a5:72:dd:d8:2e: a3:ba:92:d1:bb:c0:a1:bd:db:ba:30:00:95:4f:60: 4b:6d:0e:5a:52:59:c0:30:b6:90:c9:13:a8:ba:d5: 2d:a6:03:18:bc:27:57:9f:76:1f:2b:7e:6d:53:d7: 6d:fa:76:4a:35:4c:38:12:bc:51:f3:83:dc:84:56: 46:4d:4f:a9:12:9f:58:11:96:02:53:9b:50:37:6a: 92:f4:f9:df:36:50:e8:48:9f:d1:b2:12:b1:0d:95: 3a:1a:91:02:f9:49:c1:52:31:43:88:80:d8:f9:f8: 91:bd:ea:33:95:46:b3:de:b0:b2:b5:8d:0d:69:19: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:32:1C:B8:6E:DD:CE:02:70:16:3D:00:5D:9D:61:F2:43:98:F1:1B X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/2C3DCE420F7F11F0B174675DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.220.0/23 Signature Algorithm: sha256WithRSAEncryption 75:f4:7f:06:df:91:e5:74:33:35:b4:a2:b7:cb:23:43:78:78: 03:f6:52:df:9e:1d:6f:34:f8:a3:84:03:e4:e7:8b:d2:70:0a: 0c:98:37:39:a6:8b:18:06:79:75:4b:01:b5:c8:23:78:80:2b: 31:be:b6:f2:91:7f:ab:a4:de:76:f6:89:17:8b:38:2e:95:1a: 67:d0:cd:42:8a:70:06:69:9e:89:ae:8d:61:ac:77:f6:31:61: 8b:1f:20:6c:34:c3:fb:5d:0a:9b:b0:82:6b:fc:ce:21:c2:b1: 5b:d6:b0:45:8c:57:f0:b8:9e:ef:fe:15:0f:ce:4d:58:6e:21: 14:63:c6:9f:46:e9:a4:76:bf:d5:19:2b:67:15:11:6c:09:8a: 4d:a7:d9:9f:1e:47:d3:98:23:9f:ba:cd:cb:f1:b9:e3:5a:47: 2a:bb:f6:4e:cc:f8:1e:3a:6d:bc:47:d6:29:80:5d:60:c1:2b: 2c:23:e7:6b:68:0e:db:a2:83:4b:cf:2c:27:c3:f6:ad:61:2e: 26:eb:22:2c:92:d9:f1:14:15:55:1b:f6:ae:c6:3b:89:03:dc: 89:6f:55:8c:aa:ac:68:2a:b6:e7:f7:35:c2:5e:63:8e:2f:1e: 1e:c7:d9:77:50:da:98:c6:0f:5c:91:15:dd:b4:70:0f:a1:08: a9:9f:f3:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjYxMDEwMjI0NDA1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWNhYmZiNS03NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryRyXfjnd/MpEC4DpaoZTvPbFDNGEXyZmQCEPvPOuaAQPBOnYkmNdADeUHg2 SLDFYxb/AEbIq4GHzf4jVrcTRakAbp5GTxMAA/OwQ9DhfATfv0gfuCjQu+DSBera PDnrBUzkyqkFlaZt2g1nLV4nSIaU5o0izKxY6iINogs4x5EUpXLd2C6jupLRu8Ch vdu6MACVT2BLbQ5aUlnAMLaQyROoutUtpgMYvCdXn3YfK35tU9dt+nZKNUw4ErxR 84PchFZGTU+pEp9YEZYCU5tQN2qS9PnfNlDoSJ/RshKxDZU6GpEC+UnBUjFDiIDY +fiRveozlUaz3rCytY0NaRlN5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFIyHLhu 3c4CcBY9AF2dYfJDmPEbMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvMkMzRENFNDIw RjdGMTFGMEIxNzQ2NzVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZxTcMA0GCSqGSIb3DQEBCwUAA4IBAQB19H8G35HldDM1tKK3yyND eHgD9lLfnh1vNPijhAPk54vScAoMmDc5posYBnl1SwG1yCN4gCsxvrbykX+rpN52 9okXizgulRpn0M1CinAGaZ6Jro1hrHf2MWGLHyBsNMP7XQqbsIJr/M4hwrFb1rBF jFfwuJ7v/hUPzk1YbiEUY8afRumkdr/VGStnFRFsCYpNp9mfHkfTmCOfus3L8bnj Wkcqu/ZOzPgeOm28R9YpgF1gwSssI+draA7booNLzywnw/atYS4m6yIsktnxFBVV G/auxjuJA9yJb1WMqqxoKrbn9zXCXmOOLx4ex9l3UNqYxg9ckRXdtHAPoQipn/Nc -----END CERTIFICATE-----Generated at Fri Oct 23 07:19:20 2026 by rpki-client