$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa File: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (raw, json) Hash identifier: yRuMjkJY7861fzcVGv0Va6v2zLkwCqNxTWoR9XdAafE= Subject key identifier: EA:FA:39:24:F0:75:2D:68:DC:DB:55:D0:1C:0F:75:4A:0C:CA:58:77 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0CBA Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa Signing time: Fri 30 Jan 2026 19:15:38 +0000 ROA not before: Fri 30 Jan 2026 19:15:38 +0000 ROA not after: Tue 02 Jun 2026 00:00:00 +0000 asID: 139872 IP address blocks: 103.145.208.0/23 maxlen: 23 103.145.208.0/24 maxlen: 24 103.145.209.0/24 maxlen: 24 2001:df2:2780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 18:10:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Jan 30 19:15:38 2026 GMT Not After : Jun 2 00:00:00 2026 GMT Subject: CN=697d035a-e217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a2:5c:f0:fc:55:cc:b8:f1:62:77:03:f2:b4: ad:53:09:d8:e7:f5:49:44:49:a9:28:d9:ac:f3:9d: 8b:08:7e:ef:5b:57:81:87:da:b4:35:7a:de:e5:fd: 2d:16:58:d4:c4:ee:c2:db:e5:2a:e3:fa:10:48:67: e0:92:0c:52:f4:d5:30:38:2d:df:55:e7:eb:7b:aa: 98:da:c6:a5:54:93:3d:08:16:b6:e2:a7:47:09:f1: b4:6f:c4:28:be:a4:d8:c8:0d:2e:08:0d:5e:70:c1: d3:83:62:7c:01:51:4b:62:bc:3b:3c:6d:e7:58:96: 07:96:4c:7a:f7:50:c8:6a:6d:3d:c6:43:d9:7c:5f: 64:11:9a:7d:a1:de:35:4e:ec:92:68:76:15:f5:fb: 18:34:3a:01:f1:1d:f9:c6:3c:f1:54:76:55:8f:97: c6:f3:8b:14:b7:2b:bf:88:91:8e:5d:91:59:cc:b8: 03:90:82:6c:d8:b4:95:c2:15:75:30:33:dc:4b:af: a9:16:14:45:8d:54:8b:64:2f:b0:99:af:9a:59:69: 59:48:09:8a:86:33:a6:90:29:b6:3d:bb:ca:d8:ab: 57:0d:66:66:1d:8e:ee:58:ca:0b:d2:b9:ae:17:3d: 33:a4:f7:5f:71:ff:bf:01:7b:42:96:3f:f3:79:8a: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FA:39:24:F0:75:2D:68:DC:DB:55:D0:1C:0F:75:4A:0C:CA:58:77 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/403FDDD0DF3511ED8FBA823DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.145.208.0/23 IPv6: 2001:df2:2780::/48 Signature Algorithm: sha256WithRSAEncryption a2:01:8f:50:f3:24:04:ef:29:dc:12:82:35:ed:ac:2c:7e:ce: 5a:f3:c4:fa:8f:16:57:4a:34:8d:90:e7:c7:b1:0f:71:6e:73: 4d:0d:e4:07:13:11:af:87:ec:8f:a8:0d:8e:bc:1c:84:65:95: 55:18:22:ce:ed:2e:3e:f8:f0:44:dd:f2:f9:cc:5a:28:db:5b: b3:a1:2e:15:a4:af:5c:2f:36:1b:df:0f:9a:9f:90:92:c3:94: aa:4c:fb:3d:d1:cc:ac:15:e1:9f:59:b1:9d:62:f3:13:0e:98: e2:67:b6:78:de:ca:75:e9:8b:d7:04:df:08:ce:07:d7:2a:ab: f9:1f:29:bc:59:f6:b9:0c:c1:e7:4f:05:3e:46:73:ce:70:4a: e6:a5:e4:a2:09:62:33:ac:5c:8b:ed:26:83:b5:1c:c4:9e:a9: 3b:9d:39:c0:40:37:94:e5:f9:0b:da:50:41:11:80:91:f0:ee: de:57:5a:36:8c:84:c2:ef:eb:46:d1:33:61:ec:7d:1c:9d:c1: dc:a0:ee:3b:4b:9b:3c:7c:04:f3:a7:ec:ff:92:13:fc:30:15: 86:d1:7b:1d:1a:1d:cc:0b:3e:e9:a8:66:b4:20:4a:56:72:07: 73:f9:6b:31:72:f4:73:69:78:19:14:ef:14:23:10:bb:1f:1b: 18:75:cb:cb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjYwMTMwMTkxNTM4WhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdkMDM1YS1lMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+KJc8PxVzLjxYncD8rStUwnY5/VJREmpKNms852LCH7vW1eBh9q0NXre5f0t FljUxO7C2+Uq4/oQSGfgkgxS9NUwOC3fVefre6qY2salVJM9CBa24qdHCfG0b8Qo vqTYyA0uCA1ecMHTg2J8AVFLYrw7PG3nWJYHlkx691DIam09xkPZfF9kEZp9od41 TuySaHYV9fsYNDoB8R35xjzxVHZVj5fG84sUtyu/iJGOXZFZzLgDkIJs2LSVwhV1 MDPcS6+pFhRFjVSLZC+wma+aWWlZSAmKhjOmkCm2PbvK2KtXDWZmHY7uWMoL0rmu Fz0zpPdfcf+/AXtClj/zeYoqDwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOr6OSTw dS1o3NtV0BwPdUoMylh3MB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4MkQvQURGNjY1QzAxMjc4MTFFQTlCOEVEMDM0QzRGOUFFMDIvNDAzRkRERDBE RjM1MTFFRDhGQkE4MjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnkdAwDwQCAAIwCQMHACABDfIngDANBgkqhkiG9w0BAQsF AAOCAQEAogGPUPMkBO8p3BKCNe2sLH7OWvPE+o8WV0o0jZDnx7EPcW5zTQ3kBxMR r4fsj6gNjrwchGWVVRgizu0uPvjwRN3y+cxaKNtbs6EuFaSvXC82G98Pmp+QksOU qkz7PdHMrBXhn1mxnWLzEw6Y4me2eN7KdemL1wTfCM4H1yqr+R8pvFn2uQzB508F PkZzznBK5qXkogliM6xci+0mg7UcxJ6pO505wEA3lOX5C9pQQRGAkfDu3ldaNoyE wu/rRtEzYex9HJ3B3KDuO0ubPHwE86fs/5IT/DAVhtF7HRodzAs+6ahmtCBKVnIH c/lrMXL0c2l4GRTvFCMQux8bGHXLyw== -----END CERTIFICATE-----Generated at Fri Feb 20 01:30:50 2026 by rpki-client