$ rpki-client -vvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa File: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (raw, json) Hash identifier: m8HrRpjyvQWeBhp94E8HFgt5mQuokJM0t43Pm2rxy7M= Subject key identifier: F0:F3:2E:4C:DB:90:F8:FC:A6:13:BC:3C:9A:F5:F3:F3:13:FB:BD:A7 Certificate issuer: /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Certificate serial: 0486 Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:49:09 +0000 ROA not before: Thu 04 Dec 2025 23:06:46 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 147314 IP address blocks: 103.174.214.0/23 maxlen: 24 2400:1620::/32 maxlen: 32 2400:1620:c000::/35 maxlen: 35 2400:1620:c000::/48 maxlen: 48 2400:1620:c001::/48 maxlen: 48 2400:1620:c002::/48 maxlen: 48 2400:1620:fa01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 23:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847 Validity Not Before: Dec 4 23:06:46 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a435c4-12ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:aa:4c:24:91:72:93:d7:ed:06:36:89:3c: 58:12:3f:5d:d8:36:fd:4f:97:54:0c:a5:b7:18:ee: 27:29:0f:59:2c:28:0d:ee:f3:27:60:bd:aa:63:fc: 65:48:0b:8c:35:a0:6e:19:32:a0:da:2d:50:79:63: 03:37:27:59:87:a8:8c:5b:fb:d1:d8:a4:c4:6d:f9: 30:f3:5e:ce:c8:52:c0:52:9c:48:3f:c9:d9:ff:65: 33:54:5a:9e:f5:8f:a1:1b:13:dc:96:d6:ee:45:55: 1f:d8:44:1a:30:1f:fe:1d:2d:58:b4:6a:ec:64:6b: b7:43:89:ca:b3:e9:f5:ce:d1:cb:34:bd:a2:b7:0c: 56:c5:25:58:fb:3d:48:dc:8c:06:93:ca:f7:9f:00: cd:bf:19:26:39:17:61:86:86:ac:be:79:9f:7c:f0: e3:cc:f4:4e:0d:f8:c9:b7:0c:e1:ce:1a:db:6c:a5: b4:d9:28:68:20:57:1a:0c:a8:25:47:89:f2:2e:f4: 1d:66:da:55:c3:94:7d:40:8f:cb:d1:8e:b7:ea:1b: d1:13:d6:2c:58:fd:15:8a:44:23:1c:c8:cc:46:f0: 47:63:c3:49:89:8a:0a:00:d9:6b:ca:cb:84:7c:a1: fb:b8:fa:06:b4:b2:cf:9a:79:de:94:b9:25:50:d0: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F3:2E:4C:DB:90:F8:FC:A6:13:BC:3C:9A:F5:F3:F3:13:FB:BD:A7 X509v3 Authority Key Identifier: keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.214.0/23 IPv6: 2400:1620::/32 Signature Algorithm: sha256WithRSAEncryption b5:57:6a:23:33:76:fa:34:53:78:f5:b4:bf:42:e1:ca:93:4c: 41:02:26:98:fe:5d:56:a0:91:91:7f:b1:73:de:ec:13:b5:d9: 4d:0e:0e:37:93:00:c2:5d:1f:09:ce:5e:ef:59:13:c2:43:1e: 43:aa:ac:97:94:39:21:1c:ee:88:30:ad:42:d0:7a:34:4a:70: af:ff:21:fc:35:61:e1:3e:9d:6d:de:53:f2:47:ef:ee:26:e0: 35:fe:cc:b4:a1:60:52:97:3f:ba:4c:cb:e0:a2:f1:67:64:12: cc:61:3b:17:8e:94:72:26:56:eb:3d:a3:e1:1b:40:45:f4:9c: 5b:b2:fd:91:dd:75:c6:69:c1:cb:da:cf:62:0b:96:cb:6a:e9: 21:d6:20:1b:7d:ce:56:89:e6:a8:ce:00:9a:51:cf:c3:83:16: f9:ba:a7:23:3e:8e:1c:43:82:e2:c3:79:22:d3:24:66:73:8b: f6:97:83:25:9a:a8:ab:db:76:92:e9:90:2c:b4:35:74:ce:bd: ef:a6:eb:b7:26:eb:e9:7a:66:c9:cc:88:26:9b:7c:ec:2f:ff: 59:c4:f8:c5:37:c7:f6:5f:b2:e1:97:92:06:24:83:cc:8f:27: 64:37:89:d7:37:1f:99:f9:06:3b:ca:65:31:8f:92:9a:ff:e5: 8a:81:63:f3 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND MzYyMEY4NDcwHhcNMjUxMjA0MjMwNjQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzVjNC0xMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmeOqTCSRcpPX7QY2iTxYEj9d2Db9T5dUDKW3GO4nKQ9ZLCgN7vMnYL2qY/xl SAuMNaBuGTKg2i1QeWMDNydZh6iMW/vR2KTEbfkw817OyFLAUpxIP8nZ/2UzVFqe 9Y+hGxPcltbuRVUf2EQaMB/+HS1YtGrsZGu3Q4nKs+n1ztHLNL2itwxWxSVY+z1I 3IwGk8r3nwDNvxkmORdhhoasvnmffPDjzPRODfjJtwzhzhrbbKW02ShoIFcaDKgl R4nyLvQdZtpVw5R9QI/L0Y636hvRE9YsWP0VikQjHMjMRvBHY8NJiYoKANlrysuE fKH7uPoGtLLPmnnelLklUNAsSwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPDzLkzb kPj8phO8PJr18/MT+72nMB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQwNkIvRDYzODI3QUU3QzI5MTFFQzhFRTM2MTBEQzRGOUFFMDIvRUNFNUQ3MkM3 QzJEMTFFQzhDQUQ5NjYyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ67WMA0EAgACMAcDBQAkABYgMA0GCSqGSIb3DQEBCwUAA4IBAQC1 V2ojM3b6NFN49bS/QuHKk0xBAiaY/l1WoJGRf7Fz3uwTtdlNDg43kwDCXR8Jzl7v WRPCQx5DqqyXlDkhHO6IMK1C0Ho0SnCv/yH8NWHhPp1t3lPyR+/uJuA1/sy0oWBS lz+6TMvgovFnZBLMYTsXjpRyJlbrPaPhG0BF9Jxbsv2R3XXGacHL2s9iC5bLaukh 1iAbfc5WieaozgCaUc/Dgxb5uqcjPo4cQ4Liw3ki0yRmc4v2l4Mlmqir23aS6ZAs tDV0zr3vpuu3JuvpembJzIgmm3zsL/9ZxPjFN8f2X7Lhl5IGJIPMjydkN4nXNx+Z +QY7ymUxj5Ka/+WKgWPz -----END CERTIFICATE-----Generated at Fri Mar 13 13:34:52 2026 by rpki-client