$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/AEF266ECD34811EDAD96D95DC4F9AE02.roa File: AEF266ECD34811EDAD96D95DC4F9AE02.roa (raw, json) Hash identifier: ftma0mej/dOtkA9i9qpY2iDBlCF8N3tlglYqa45f8z0= Subject key identifier: 0F:11:8D:63:D7:39:CD:17:A7:5D:1E:6B:D6:85:71:F2:CF:E2:7E:D1 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 024A Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/AEF266ECD34811EDAD96D95DC4F9AE02.roa Signing time: Sat 25 Apr 2026 02:35:41 +0000 ROA not before: Sat 25 Apr 2026 02:35:41 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 150315 IP address blocks: 103.99.132.0/24 maxlen: 24 103.99.133.0/24 maxlen: 24 2001:df2:d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 02:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Apr 25 02:35:41 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ec287d-7d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:60:92:68:76:a5:b2:13:2e:72:4c:67:96: 40:1e:ce:c7:74:47:26:83:2d:9c:37:76:52:b9:cb: 85:e8:6d:1a:6d:fe:b6:fa:ae:23:bc:bf:d0:03:f9: 23:d3:22:0e:1d:6c:bd:92:5e:41:e3:08:98:a8:0f: ef:99:6d:67:3a:33:cd:a2:36:cc:49:a9:43:0c:8f: 65:cb:33:15:22:2f:89:7c:0c:b6:47:60:63:41:b5: a2:59:9c:d0:79:a7:aa:93:56:bf:e0:39:84:bf:a5: 11:3d:28:53:00:e9:94:33:0e:d6:1f:4d:ee:7b:37: 41:58:d6:f0:dd:6c:e6:db:ce:4f:f3:33:51:eb:16: 28:cf:95:67:03:72:ab:53:66:33:b4:d5:6e:99:06: fc:95:19:52:c2:9b:04:f8:9b:8d:97:5c:06:d3:5c: ff:85:4d:8b:30:75:49:71:41:37:c3:5f:27:b3:6d: 42:ba:44:59:b3:c3:40:0f:5f:1f:7a:4f:89:69:40: 81:c5:0e:73:bd:9e:3b:df:28:5b:5d:b5:e4:8a:65: 60:42:64:d0:c6:94:45:f6:78:76:5d:d2:4d:f6:20: 71:8e:04:42:2f:04:39:74:f4:41:41:3f:57:fc:04: 7d:1b:80:70:0b:ee:55:3c:13:b2:e5:3b:bb:5f:db: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:11:8D:63:D7:39:CD:17:A7:5D:1E:6B:D6:85:71:F2:CF:E2:7E:D1 X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/AEF266ECD34811EDAD96D95DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.132.0/23 IPv6: 2001:df2:d40::/48 Signature Algorithm: sha256WithRSAEncryption 68:f1:a8:cd:c2:e1:ac:3e:1e:4b:67:f8:f0:45:72:8c:74:8a: 2e:ea:f8:cb:d1:d8:57:a0:f2:57:2c:a7:e9:2b:fe:cb:63:81: d1:18:01:b4:3f:b2:aa:7a:fa:f6:59:79:7e:7a:45:4b:d6:fb: ef:2b:7a:08:17:4b:b9:d8:88:bc:f5:b8:90:88:70:cb:19:03: af:54:6e:d3:db:73:89:64:f3:b3:c1:10:05:15:fe:4b:b3:77: 79:0c:d0:6e:43:fd:a4:11:70:2b:88:f6:a8:ba:28:9a:79:91: 8a:c6:73:06:e8:a4:74:ef:c6:3f:24:8f:5a:2a:c9:fc:17:d4: 08:15:b0:70:b0:ff:80:db:99:72:67:fa:26:08:dc:43:ba:7e: f6:a2:e3:4d:8f:00:b3:29:7d:a4:65:1d:e0:15:9c:09:35:31: 4e:b6:90:1f:aa:7d:c7:ec:19:86:ba:c4:3e:d0:a5:d4:b6:9c: ca:91:1d:ed:3b:bd:4d:a3:54:f9:98:7b:05:8e:e9:bc:fc:15: 3a:ba:1c:e3:81:b9:e4:2a:54:ce:64:75:65:b3:c7:2d:54:87: 22:5a:d5:1f:7c:15:db:99:8e:1a:b4:ca:7d:cc:f8:15:d1:26: 2f:93:f9:d4:05:cc:e8:8a:2e:c1:db:b8:fc:20:61:d5:fb:65: d2:c7:d5:bf -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjYwNDI1MDIzNTQxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWVjMjg3ZC03ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtChgkmh2pbITLnJMZ5ZAHs7HdEcmgy2cN3ZSucuF6G0abf62+q4jvL/QA/kj 0yIOHWy9kl5B4wiYqA/vmW1nOjPNojbMSalDDI9lyzMVIi+JfAy2R2BjQbWiWZzQ eaeqk1a/4DmEv6URPShTAOmUMw7WH03uezdBWNbw3Wzm285P8zNR6xYoz5VnA3Kr U2YztNVumQb8lRlSwpsE+JuNl1wG01z/hU2LMHVJcUE3w18ns21CukRZs8NAD18f ek+JaUCBxQ5zvZ473yhbXbXkimVgQmTQxpRF9nh2XdJN9iBxjgRCLwQ5dPRBQT9X /AR9G4BwC+5VPBOy5Tu7X9ueHwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFA8RjWPX Oc0Xp10ea9aFcfLP4n7RMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEQyQkYvMkE3MUU2QkNEMzQ0MTFFRDhFMkM1NDY0QzRGOUFFMDIvQUVGMjY2RUNE MzQ4MTFFREFEOTZEOTVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ2OEMA8EAgACMAkDBwAgAQ3yDUAwDQYJKoZIhvcNAQELBQADggEB AGjxqM3C4aw+Hktn+PBFcox0ii7q+MvR2Feg8lcsp+kr/stjgdEYAbQ/sqp6+vZZ eX56RUvW++8reggXS7nYiLz1uJCIcMsZA69UbtPbc4lk87PBEAUV/kuzd3kM0G5D /aQRcCuI9qi6KJp5kYrGcwbopHTvxj8kj1oqyfwX1AgVsHCw/4DbmXJn+iYI3EO6 fvai402PALMpfaRlHeAVnAk1MU62kB+qfcfsGYa6xD7QpdS2nMqRHe07vU2jVPmY ewWO6bz8FTq6HOOBueQqVM5kdWWzxy1UhyJa1R98FduZjhq0yn3M+BXRJi+T+dQF zOiKLsHbuPwgYdX7ZdLH1b8= -----END CERTIFICATE-----Generated at Mon Apr 27 21:25:08 2026 by rpki-client