$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa File: 2B535080E79B11EFB484D12EC4F9AE02.roa (raw, json) Hash identifier: +Eoq4+89wRh0v+HdfB6B0APK4N9lNIjSZM3PypGxmXk= Subject key identifier: D5:B8:0A:B6:5A:0B:C5:63:DB:24:BB:BC:F1:7E:C8:39:D2:07:6D:66 Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Certificate serial: 2975 Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa Signing time: Mon 09 Mar 2026 08:49:55 +0000 ROA not before: Mon 09 Mar 2026 08:49:55 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 206264 IP address blocks: 103.217.252.0/24 maxlen: 24 103.217.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10613 (0x2975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93 Validity Not Before: Mar 9 08:49:55 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69ae89b3-f1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:46:70:13:5b:5b:a1:6a:77:6d:55:9e:73: f1:47:36:fa:42:e8:fa:53:88:3d:d0:48:ea:e8:50: 2a:04:9b:ee:ae:a0:bb:aa:71:1a:b4:8b:40:41:79: d6:16:23:62:74:b4:0b:4b:42:49:af:23:00:32:ca: 92:cc:e0:72:c5:1e:25:d6:32:bf:3a:9a:bb:75:f1: 84:95:4c:88:bb:06:16:e8:61:28:5a:a3:7b:a6:d1: bf:c7:50:19:e9:4f:34:05:0e:83:dc:3b:96:c2:c3: cf:c0:4f:f4:51:6d:c4:01:c9:6a:a3:ee:01:ec:47: 93:fe:44:b4:dc:ec:8c:ad:15:fd:96:e9:3f:d2:55: 2f:be:1b:de:d0:2c:11:c5:93:20:09:01:38:fb:0a: 42:49:67:8a:a5:0f:7a:47:87:b8:ae:13:dc:bb:47: 2d:45:97:27:12:85:92:fb:a6:b7:9a:0c:2f:26:40: a4:bb:07:c7:b9:d3:9f:b5:d5:92:1d:30:02:64:3c: 04:0f:fc:b4:28:db:8b:68:a2:eb:16:a0:50:df:67: 17:ec:d1:d6:71:f0:61:fb:ba:94:a1:14:9b:73:a5: f7:8c:af:68:5f:af:c4:90:93:1d:e0:45:54:d4:80: fc:20:2b:50:b9:eb:c7:c2:cf:21:d6:f5:91:47:fc: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:0A:B6:5A:0B:C5:63:DB:24:BB:BC:F1:7E:C8:39:D2:07:6D:66 X509v3 Authority Key Identifier: keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2B535080E79B11EFB484D12EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.217.252.0/23 Signature Algorithm: sha256WithRSAEncryption 71:36:cf:e6:44:9b:65:0c:f2:ae:fb:54:80:ca:4e:4d:e9:7e: 12:1f:f9:98:4b:99:e0:1c:4e:76:6d:ca:e9:c4:98:10:00:86: a5:7d:24:66:7a:6a:3c:01:d1:53:eb:c0:a2:b4:fb:0c:7b:5d: 5f:e7:3f:e2:29:f1:5d:ec:b2:3d:8c:9d:4c:02:70:1f:be:47: 6c:2d:6f:5f:4e:73:f7:5f:e1:e7:93:1c:86:d5:d0:dd:a1:a4: 3e:19:54:1e:d0:7c:f8:e3:b4:ac:23:15:23:a6:8a:4e:65:4f: 89:c1:94:04:5c:e6:cb:e3:e9:73:a1:7a:a5:d1:06:6b:14:de: 4f:97:a4:83:70:cd:f5:d0:3a:e6:8b:dc:17:38:15:67:11:bd: 2e:1e:22:b9:f2:70:34:aa:0d:fd:6f:ab:ce:1c:d5:cc:e2:49: 0a:4c:a9:68:6f:5a:d9:35:fe:28:ba:81:5d:22:0e:b1:08:59: fb:5a:9a:b7:38:3b:34:c7:8d:68:b2:8c:9c:7b:40:41:e4:b2: ad:56:93:21:29:89:3f:81:5e:d6:43:29:a6:05:ba:26:e4:0b: 27:08:12:0d:6d:c1:af:8f:f9:c9:8d:f8:91:3d:35:10:17:4f: 74:f1:f5:62:20:ed:2b:7a:a9:44:2f:32:8a:6b:52:3f:24:97: 65:d8:b1:7d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICKXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw ODYzRDNEOTMwHhcNMjYwMzA5MDg0OTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlODliMy1mMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqBGcBNbW6Fqd21VnnPxRzb6Quj6U4g90Ejq6FAqBJvurqC7qnEatItAQXnW FiNidLQLS0JJryMAMsqSzOByxR4l1jK/Opq7dfGElUyIuwYW6GEoWqN7ptG/x1AZ 6U80BQ6D3DuWwsPPwE/0UW3EAclqo+4B7EeT/kS03OyMrRX9luk/0lUvvhve0CwR xZMgCQE4+wpCSWeKpQ96R4e4rhPcu0ctRZcnEoWS+6a3mgwvJkCkuwfHudOftdWS HTACZDwED/y0KNuLaKLrFqBQ32cX7NHWcfBh+7qUoRSbc6X3jK9oX6/EkJMd4EVU 1ID8ICtQuevHws8h1vWRR/wRgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNW4CrZa C8Vj2yS7vPF+yDnSB21mMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMkI1MzUwODBF NzlCMTFFRkI0ODREMTJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ9n8MA0GCSqGSIb3DQEBCwUAA4IBAQBxNs/mRJtlDPKu+1SAyk5N 6X4SH/mYS5ngHE52bcrpxJgQAIalfSRmemo8AdFT68CitPsMe11f5z/iKfFd7LI9 jJ1MAnAfvkdsLW9fTnP3X+HnkxyG1dDdoaQ+GVQe0Hz447SsIxUjpopOZU+JwZQE XObL4+lzoXql0QZrFN5Pl6SDcM310Drmi9wXOBVnEb0uHiK58nA0qg39b6vOHNXM 4kkKTKlob1rZNf4ouoFdIg6xCFn7Wpq3ODs0x41osoyce0BB5LKtVpMhKYk/gV7W QymmBbom5AsnCBINbcGvj/nJjfiRPTUQF0908fViIO0reqlELzKKa1I/JJdl2LF9 -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:49 2026 by rpki-client