$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa File: DE6603CAEBD711F092381BAE6B6F56BC.roa (raw, json) Hash identifier: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718= Subject key identifier: 7E:8A:8C:AF:63:4B:1A:E6:56:AF:C3:76:A8:BA:E6:8A:B5:BD:4C:D3 Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0628 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa Signing time: Mon 02 Mar 2026 13:08:13 +0000 ROA not before: Wed 07 Jan 2026 14:48:03 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 401160 IP address blocks: 103.135.208.0/22 maxlen: 24 103.172.110.0/23 maxlen: 24 125.3.192.0/21 maxlen: 24 203.168.128.0/22 maxlen: 24 203.168.192.0/20 maxlen: 24 222.167.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 23:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Jan 7 14:48:03 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a58bbc-1492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:cf:7c:b6:03:ba:a3:98:b8:14:6a:99:68: 03:7b:c5:c4:67:9a:94:9b:a0:84:78:f1:66:6c:63: 50:d7:4b:6a:3e:a0:60:fc:c6:26:db:e6:7a:12:06: ff:4c:85:7a:94:1e:82:65:e6:8a:8c:85:56:4c:ca: b9:cc:00:25:38:69:7d:12:db:e5:bd:19:dd:2f:5f: 6d:bc:53:c2:e8:f4:dc:db:cf:2d:07:9f:41:db:95: ca:84:7a:09:57:63:9a:f2:b8:97:28:24:1c:5e:43: 60:af:28:97:16:0e:dc:45:21:d1:d3:bf:77:56:77: e2:b7:da:e4:8d:c4:39:60:26:5f:f0:ec:08:16:6a: 53:bc:79:4e:cc:a1:eb:80:e3:31:5f:fd:47:86:ed: ce:de:1c:df:6c:7b:dc:53:c3:f5:7b:b3:59:7f:f4: 56:23:9b:d5:5f:63:1e:74:f0:c2:0b:89:50:b3:b4: 9a:aa:c9:d7:5b:e3:b2:0e:f6:d3:b7:75:77:0e:a2: 6a:ea:85:6c:d4:bd:16:7f:f5:b7:03:04:ac:cd:26: be:4c:3a:79:2c:62:d8:d7:01:af:ea:dd:28:b2:d3: 92:67:93:80:2f:24:1e:63:55:48:6c:5c:9f:76:4c: 7b:cd:62:bb:17:a0:6b:b2:fa:38:a1:d1:8e:ad:36: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8A:8C:AF:63:4B:1A:E6:56:AF:C3:76:A8:BA:E6:8A:B5:BD:4C:D3 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.135.208.0/22 103.172.110.0/23 125.3.192.0/21 203.168.128.0/22 203.168.192.0/20 222.167.32.0/22 Signature Algorithm: sha256WithRSAEncryption 44:f6:c7:02:a0:9b:2a:99:b8:c3:72:81:96:91:f5:65:9e:d5: c8:0b:8f:d4:ea:05:f6:dd:34:69:2b:07:34:d4:ad:e7:ec:8c: 20:d0:68:ea:e4:83:73:b1:77:dd:8b:a9:c5:07:93:f7:07:67: 3d:d6:49:a6:00:4e:ff:5c:ec:96:60:25:1d:08:67:fe:82:c2: 9c:41:a7:75:fb:67:b0:72:1c:c2:17:ce:c1:40:27:ad:68:df: b3:d5:43:d7:8f:50:51:ba:9a:bc:6a:3f:5a:73:e5:e9:a6:14: 46:a4:c2:07:0e:94:c8:f3:df:4e:a9:35:3a:ab:0b:3b:c2:35: a6:1d:cb:58:c8:6b:4a:81:15:43:64:57:44:ce:eb:85:0e:e9: 2a:2e:d6:63:f8:fb:30:a0:d4:3f:e6:84:aa:36:a1:05:dc:38: 60:a4:98:04:c3:37:8d:8c:b3:52:fa:9b:16:0f:c0:e6:be:8b: d7:21:80:f2:b9:c6:1f:13:0f:73:b8:45:24:08:14:c7:fe:85: 5a:57:c1:02:2f:2d:73:31:0d:b8:1e:3f:d9:33:b7:99:0c:e8: bc:4d:a3:d2:4e:f2:de:21:9b:ed:87:3a:1b:45:1e:fa:32:cf: 9b:34:66:39:7b:79:b0:18:48:d4:26:ba:bf:5b:78:a8:8b:dd: c1:da:53:c6 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwMTA3MTQ0ODAzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGJiYy0xNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoc7PfLYDuqOYuBRqmWgDe8XEZ5qUm6CEePFmbGNQ10tqPqBg/MYm2+Z6Egb/ TIV6lB6CZeaKjIVWTMq5zAAlOGl9EtvlvRndL19tvFPC6PTc288tB59B25XKhHoJ V2Oa8riXKCQcXkNgryiXFg7cRSHR0793Vnfit9rkjcQ5YCZf8OwIFmpTvHlOzKHr gOMxX/1Hhu3O3hzfbHvcU8P1e7NZf/RWI5vVX2MedPDCC4lQs7SaqsnXW+OyDvbT t3V3DqJq6oVs1L0Wf/W3AwSszSa+TDp5LGLY1wGv6t0ostOSZ5OALyQeY1VIbFyf dkx7zWK7F6Brsvo4odGOrTbZkwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFH6KjK9j SxrmVq/Ddqi65oq1vUzTMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvREU2NjAzQ0FF QkQ3MTFGMDkyMzgxQkFFNkI2RjU2QkMucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQCZ4fQAwQBZ6xuAwQDfQPAAwQCy6iAAwQEy6jAAwQC3qcgMA0GCSqG SIb3DQEBCwUAA4IBAQBE9scCoJsqmbjDcoGWkfVlntXIC4/U6gX23TRpKwc01K3n 7Iwg0Gjq5INzsXfdi6nFB5P3B2c91kmmAE7/XOyWYCUdCGf+gsKcQad1+2ewchzC F87BQCetaN+z1UPXj1BRupq8aj9ac+XpphRGpMIHDpTI899OqTU6qws7wjWmHctY yGtKgRVDZFdEzuuFDukqLtZj+PswoNQ/5oSqNqEF3DhgpJgEwzeNjLNS+psWD8Dm vovXIYDyucYfEw9zuEUkCBTH/oVaV8ECLy1zMQ24Hj/ZM7eZDOi8TaPSTvLeIZvt hzobRR76Ms+bNGY5e3mwGEjUJrq/W3ioi93B2lPG -----END CERTIFICATE-----Generated at Wed Mar 4 17:50:42 2026 by rpki-client