$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2A3ED0C0314811EA82EC6962C4F9AE02.roa File: 2A3ED0C0314811EA82EC6962C4F9AE02.roa (raw, json) Hash identifier: vtwVDwbgwoft53AKIsEldhJAMNYT0pNdS73BjWj9Ce8= Subject key identifier: 2C:7A:DD:C6:37:B2:1F:16:DE:64:71:11:96:79:8B:37:89:E0:06:C2 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3BA2 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2A3ED0C0314811EA82EC6962C4F9AE02.roa Signing time: Thu 20 Aug 2026 16:24:10 +0000 ROA not before: Thu 20 Aug 2026 16:24:10 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38767 IP address blocks: 103.234.208.0/22 maxlen: 22 103.234.208.0/23 maxlen: 23 103.234.208.0/24 maxlen: 24 103.234.209.0/24 maxlen: 24 103.234.210.0/23 maxlen: 23 103.234.210.0/24 maxlen: 24 103.234.211.0/24 maxlen: 24 2001:df7:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 15:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15266 (0x3ba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Aug 20 16:24:10 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a872a2a-9dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:d3:c2:38:aa:40:02:f1:19:9d:84:94:57: c9:15:16:db:d3:d7:c9:c7:6a:96:d6:7a:cf:64:b2: e7:89:22:e0:63:9a:23:45:e2:a4:37:c5:1b:c8:00: 3f:d1:8f:87:66:3a:24:15:dd:2c:eb:ae:2c:9d:51: 6c:9e:36:ab:89:df:fc:28:4c:43:93:de:a8:cc:82: 3f:31:f0:6d:71:82:15:ab:cc:4f:8c:f4:49:31:16: 8c:e5:63:d4:e3:5c:f7:54:f6:08:7a:c6:8c:9d:96: 51:88:af:5f:3f:8b:c9:72:a1:10:8c:e9:9c:d5:54: a3:72:bb:1e:e9:d8:7a:55:27:4f:c3:e3:6a:a9:75: 22:0c:50:30:f2:02:7a:55:ea:e5:c5:02:bc:23:31: 70:13:a3:62:6b:f9:5d:85:7c:5f:f2:60:c1:7f:1b: bd:be:ff:75:2d:19:45:40:a3:96:a8:1e:4e:0e:f9: be:67:44:a7:ee:94:51:aa:ed:ab:a1:be:12:e8:22: d5:eb:c1:3c:d4:e9:f6:c7:aa:37:34:d8:05:80:17: 48:29:5f:0e:bc:cd:e9:3e:2d:d0:be:16:6c:34:79: 64:79:c6:15:be:cf:00:a9:a2:09:f2:88:05:d2:89: 68:bd:72:04:20:72:5a:b6:27:76:1b:b0:bc:17:e7: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:DD:C6:37:B2:1F:16:DE:64:71:11:96:79:8B:37:89:E0:06:C2 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/2A3ED0C0314811EA82EC6962C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.208.0/22 IPv6: 2001:df7:3c00::/48 Signature Algorithm: sha256WithRSAEncryption 60:0a:ef:7f:bc:17:dd:0e:ac:8f:ad:69:23:df:de:4a:6f:57: d2:d6:54:97:ce:8d:73:87:78:47:66:06:76:db:a1:a0:c3:f8: 6c:bf:aa:38:6f:27:3f:b4:6e:26:06:2e:f4:d2:95:4c:da:5e: fc:86:0e:12:23:69:06:0f:2f:80:3b:57:4f:fd:79:41:ba:be: bb:31:90:0b:fc:8d:19:c4:a9:6b:6e:c7:60:23:f0:c3:4e:ab: bd:80:d1:4a:32:24:ff:88:f4:a0:8b:73:eb:82:5e:6a:dd:7e: 63:46:94:aa:89:39:0c:78:de:cf:f2:63:dc:37:dc:f4:85:79: 9b:d6:df:e0:cf:08:45:e0:86:3b:ec:f2:8a:0e:dc:1e:73:c8: 98:70:17:12:5f:fe:9f:34:e2:f4:36:0f:1f:8a:a7:8f:3a:cd: 01:42:26:6b:53:79:9c:16:61:ce:80:9a:81:eb:78:a6:27:8a: 75:96:87:5f:f3:a7:1a:f4:2f:c8:fd:f0:11:c4:4b:d2:68:f9: f1:a0:5f:dd:f7:53:52:69:ee:01:72:f1:d7:3b:71:96:a0:8b: 18:a0:00:2d:75:dd:72:fe:f2:86:70:10:39:a3:0c:8f:f9:6f: cd:05:c0:34:e2:ed:09:e1:e2:5e:f6:39:69:e2:ac:6c:0b:34: 81:85:a4:39 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICO6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjYwODIwMTYyNDEwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3MmEyYS05ZGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAHTwjiqQALxGZ2ElFfJFRbb09fJx2qW1nrPZLLniSLgY5ojReKkN8UbyAA/ 0Y+HZjokFd0s664snVFsnjarid/8KExDk96ozII/MfBtcYIVq8xPjPRJMRaM5WPU 41z3VPYIesaMnZZRiK9fP4vJcqEQjOmc1VSjcrse6dh6VSdPw+NqqXUiDFAw8gJ6 VerlxQK8IzFwE6Nia/ldhXxf8mDBfxu9vv91LRlFQKOWqB5ODvm+Z0Sn7pRRqu2r ob4S6CLV68E81On2x6o3NNgFgBdIKV8OvM3pPi3QvhZsNHlkecYVvs8AqaIJ8ogF 0olovXIEIHJatid2G7C8F+evhwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCx63cY3 sh8W3mRxEZZ5izeJ4AbCMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMkEzRUQwQzAz MTQ4MTFFQTgyRUM2OTYyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ+rQMA8EAgACMAkDBwAgAQ33PAAwDQYJKoZIhvcNAQELBQADggEB AGAK73+8F90OrI+taSPf3kpvV9LWVJfOjXOHeEdmBnbboaDD+Gy/qjhvJz+0biYG LvTSlUzaXvyGDhIjaQYPL4A7V0/9eUG6vrsxkAv8jRnEqWtux2Aj8MNOq72A0Uoy JP+I9KCLc+uCXmrdfmNGlKqJOQx43s/yY9w33PSFeZvW3+DPCEXghjvs8ooO3B5z yJhwFxJf/p804vQ2Dx+Kp486zQFCJmtTeZwWYc6AmoHreKYninWWh1/zpxr0L8j9 8BHES9Jo+fGgX933U1Jp7gFy8dc7cZagixigAC113XL+8oZwEDmjDI/5b80FwDTi 7Qnh4l72OWnirGwLNIGFpDk= -----END CERTIFICATE-----Generated at Thu Sep 10 21:11:18 2026 by rpki-client