$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa File: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (raw, json) Hash identifier: 3C64H5TTmCuYQdL00baZE5DrSlLKNNzObsXzg0r0ppM= Subject key identifier: A9:DA:39:10:51:D5:3F:6C:B0:34:AC:87:6F:E9:2C:A2:BD:DD:55:16 Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Certificate serial: 1918 Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:55:24 +0000 ROA not before: Tue 04 Nov 2025 16:34:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9512 IP address blocks: 103.101.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6424 (0x1918) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902 Validity Not Before: Nov 4 16:34:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5183b-505a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:ff:77:83:a1:37:ff:34:55:a5:70:e0:06: a9:15:24:79:6b:57:59:10:7a:14:a7:02:8f:0a:c7: 4a:fb:2e:d8:d9:99:99:9f:e4:c5:dd:a3:f9:1a:c4: d7:30:3c:06:55:e2:d1:d5:99:61:12:ab:03:0a:24: e5:53:35:e8:9d:d3:d1:40:2f:c9:0f:85:ae:db:f1: 7c:70:25:2b:3b:38:2b:35:6a:21:7b:63:9a:0f:6d: 21:69:ba:a2:4e:65:26:40:a7:24:0a:36:59:e9:e7: 70:52:48:a5:62:eb:5a:0c:7c:37:8c:59:8f:3a:39: 0f:32:a6:49:0e:d7:41:cc:7e:26:83:b0:5a:ca:49: c4:41:b3:86:10:24:9b:e1:31:e9:b3:88:d9:3b:b6: 3c:59:a2:e3:fb:8b:ae:7a:e5:22:0e:ce:74:fb:d2: 98:24:83:90:f1:ef:54:10:6d:33:c3:4b:1f:46:fb: a9:ac:c2:9c:2d:69:a8:07:aa:91:8d:db:78:3c:64: c9:14:17:03:f2:ce:4d:74:7a:77:b5:2b:32:07:6d: d8:01:7e:e2:89:51:18:9c:22:0f:59:7b:39:28:6c: c1:c0:45:5c:bc:57:fa:1c:c6:d8:57:78:81:7f:85: a8:f7:ce:d1:38:e3:7e:56:ab:a5:32:8c:68:f6:98: b6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:39:10:51:D5:3F:6C:B0:34:AC:87:6F:E9:2C:A2:BD:DD:55:16 X509v3 Authority Key Identifier: keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.248.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:03:08:02:36:f5:35:4e:33:94:b5:2d:93:92:6c:71:da:1e: d7:e1:81:4e:b9:53:e3:fe:2a:65:c5:68:da:0d:4b:d7:8d:ae: 71:31:0d:03:01:dc:9e:93:1a:41:8e:f3:d5:4a:3b:58:24:9a: fd:70:5f:5d:aa:db:18:5e:6b:90:99:0b:b0:08:f9:4d:8c:59: 57:79:c7:99:3b:9d:d8:b6:fa:d7:9e:d9:89:6d:cd:c3:42:a0: 60:b4:00:83:51:99:30:66:4c:7d:ba:6c:62:4b:60:e0:e0:2b: 6f:8a:a6:06:77:80:6c:19:1b:70:a8:70:77:ee:89:1b:4d:32: 05:ce:06:d2:1e:ab:84:17:ae:7b:30:b4:fc:78:3b:11:a7:54: b2:51:38:78:bd:0b:bd:d1:9e:12:20:d2:fc:7c:46:cb:fc:af: c8:8e:17:35:17:96:47:30:04:14:3c:e4:4d:5b:12:80:0c:18: 1d:ad:d0:a4:0c:14:86:51:1d:07:f4:ee:c5:41:ba:77:69:b7: 86:55:79:c7:35:05:0f:0c:28:44:0a:bd:1f:75:8e:40:51:fa: 1d:af:3b:45:89:02:32:6d:c8:f1:2d:49:49:27:67:eb:68:d8: 0b:a0:5b:da:17:fc:ce:15:4e:7c:b2:ef:2d:43:ab:8d:30:f1: d1:1c:ee:01 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw MUNFM0Q5MDIwHhcNMjUxMTA0MTYzNDUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTgzYi01MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHj/d4OhN/80VaVw4AapFSR5a1dZEHoUpwKPCsdK+y7Y2ZmZn+TF3aP5GsTX MDwGVeLR1ZlhEqsDCiTlUzXondPRQC/JD4Wu2/F8cCUrOzgrNWohe2OaD20habqi TmUmQKckCjZZ6edwUkilYutaDHw3jFmPOjkPMqZJDtdBzH4mg7BayknEQbOGECSb 4THps4jZO7Y8WaLj+4uueuUiDs50+9KYJIOQ8e9UEG0zw0sfRvuprMKcLWmoB6qR jdt4PGTJFBcD8s5NdHp3tSsyB23YAX7iiVEYnCIPWXs5KGzBwEVcvFf6HMbYV3iB f4Wo987ROON+VqulMoxo9pi2MwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKnaORBR 1T9ssDSsh2/pLKK93VUWMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZCQ0YvNEFCNTc2QkVBQTVBMTFFN0FFNDM2RjMyQzRGOUFFMDIvQzJCRTcxRThB QTlBMTFFN0I0Nzc2RTUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2X4MA0GCSqGSIb3DQEBCwUAA4IBAQBOAwgCNvU1TjOUtS2Tkmxx 2h7X4YFOuVPj/iplxWjaDUvXja5xMQ0DAdyekxpBjvPVSjtYJJr9cF9dqtsYXmuQ mQuwCPlNjFlXeceZO53YtvrXntmJbc3DQqBgtACDUZkwZkx9umxiS2Dg4CtviqYG d4BsGRtwqHB37okbTTIFzgbSHquEF657MLT8eDsRp1SyUTh4vQu90Z4SINL8fEbL /K/Ijhc1F5ZHMAQUPORNWxKADBgdrdCkDBSGUR0H9O7FQbp3abeGVXnHNQUPDChE Cr0fdY5AUfodrztFiQIybcjxLUlJJ2fraNgLoFvaF/zOFU58su8tQ6uNMPHRHO4B -----END CERTIFICATE-----Generated at Sun Mar 22 20:16:16 2026 by rpki-client