$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa File: 21151EF0A8C411EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: iceccqvc3kg29socz/RRWvyJpHDglBn90E6v9vB2qCg= Subject key identifier: EC:FC:8C:AC:F4:43:F6:D0:AB:B0:A6:B8:37:9C:60:17:61:3E:6F:8F Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Certificate serial: 1132 Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa Signing time: Mon 02 Mar 2026 17:21:37 +0000 ROA not before: Mon 02 Mar 2026 17:21:37 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137385 IP address blocks: 103.132.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4402 (0x1132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AF0B, serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F Validity Not Before: Mar 2 17:21:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a5c721-4d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c1:8b:98:70:22:c0:b2:04:97:80:0b:82:76: e9:8e:7b:53:0a:0f:f6:95:1f:96:7f:b4:22:59:91: 9b:6c:86:66:8d:24:45:de:8f:37:98:74:2c:27:67: 17:c2:83:64:07:1a:5b:da:b0:e7:f5:d3:fb:18:48: 37:8c:c5:fb:91:0b:2f:41:b2:eb:4c:f7:12:03:4a: 81:73:79:d1:06:92:93:ee:7f:fe:ef:bd:49:95:55: 7c:07:67:66:45:02:8b:76:eb:78:fa:aa:b3:9f:19: fe:db:b4:ea:57:49:3d:c1:94:ec:3a:46:5f:73:52: b8:c9:94:02:03:30:c4:48:e0:5e:76:8a:25:65:4a: d0:c9:89:97:9d:40:70:2a:6a:0f:d2:27:7d:d3:d8: 92:63:33:78:2e:7c:1c:18:e6:fb:29:91:22:83:2c: 26:2b:1b:ab:0b:41:a8:07:a8:aa:a6:f5:de:ba:b7: 54:ce:a5:00:d5:97:fe:17:0f:5f:a6:50:d4:e0:8d: b2:73:29:2a:ba:5c:e4:9c:4c:6b:f8:a8:99:12:34: 5d:8d:f3:1d:a4:1e:dd:33:d6:1f:40:d4:16:04:46: 66:7a:16:51:78:0e:57:30:ee:25:25:2e:54:f8:d0: db:ef:e7:c6:54:c4:83:5e:a7:b4:db:06:45:60:de: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FC:8C:AC:F4:43:F6:D0:AB:B0:A6:B8:37:9C:60:17:61:3E:6F:8F X509v3 Authority Key Identifier: keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/21151EF0A8C411EC8F560C42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.183.0/24 Signature Algorithm: sha256WithRSAEncryption 86:81:44:4a:8e:bb:83:e2:f2:27:50:01:4b:59:8f:18:be:b7: ac:6f:47:44:5b:f1:4f:f8:a6:38:eb:d1:71:24:4e:66:1b:9b: 15:6f:d5:66:4d:0a:2f:1c:ec:e7:c5:8e:e0:ec:fe:56:57:90: 88:1b:53:11:6e:f2:8b:2e:fc:6f:da:c3:d9:46:fd:ac:6d:55: f4:57:5a:67:0c:66:16:d6:92:bb:4c:42:0d:92:b6:fc:91:d0: 00:de:5f:4e:08:49:18:08:4a:69:4a:5d:72:28:66:9d:2c:8b: ad:59:14:da:42:e8:e8:f8:63:92:69:0c:e6:0a:c1:3c:8a:55: e3:a4:40:6c:a1:55:52:ba:d2:a1:42:65:0c:24:ae:de:6d:71: b6:dc:6a:58:57:db:0d:7e:81:26:53:57:04:76:1e:1d:88:16: 75:c1:aa:c6:4e:85:e4:76:b4:16:a4:d8:b7:c8:15:c6:06:4b: 15:3c:b3:9f:f3:c2:69:1b:3e:5b:31:92:e7:af:7a:44:45:68: c6:f8:94:aa:53:3c:7e:83:23:e2:7a:74:5c:58:80:e2:73:d7: 70:c6:a8:7c:87:7f:6b:2e:ab:c4:c9:54:c2:d6:c5:0c:ac:45: 46:1f:c8:83:1c:d6:a0:ac:44:cd:df:fe:19:1f:0b:0e:a8:f2: 56:d8:a2:83 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICETIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC QTMxNTRFNkYwHhcNMjYwMzAyMTcyMTM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YzcyMS00ZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sGLmHAiwLIEl4ALgnbpjntTCg/2lR+Wf7QiWZGbbIZmjSRF3o83mHQsJ2cX woNkBxpb2rDn9dP7GEg3jMX7kQsvQbLrTPcSA0qBc3nRBpKT7n/+771JlVV8B2dm RQKLdut4+qqznxn+27TqV0k9wZTsOkZfc1K4yZQCAzDESOBedoolZUrQyYmXnUBw KmoP0id909iSYzN4LnwcGOb7KZEigywmKxurC0GoB6iqpvXeurdUzqUA1Zf+Fw9f plDU4I2ycykqulzknExr+KiZEjRdjfMdpB7dM9YfQNQWBEZmehZReA5XMO4lJS5U +NDb7+fGVMSDXqe02wZFYN4TewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOz8jKz0 Q/bQq7CmuDecYBdhPm+PMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFGMEIvQjU5NDE5RDIzMkVEMTFFOTlDOTU0QzI0QzRGOUFFMDIvMjExNTFFRjBB OEM0MTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4S3MA0GCSqGSIb3DQEBCwUAA4IBAQCGgURKjruD4vInUAFLWY8Y vresb0dEW/FP+KY469FxJE5mG5sVb9VmTQovHOznxY7g7P5WV5CIG1MRbvKLLvxv 2sPZRv2sbVX0V1pnDGYW1pK7TEINkrb8kdAA3l9OCEkYCEppSl1yKGadLIutWRTa Qujo+GOSaQzmCsE8ilXjpEBsoVVSutKhQmUMJK7ebXG23GpYV9sNfoEmU1cEdh4d iBZ1warGToXkdrQWpNi3yBXGBksVPLOf88JpGz5bMZLnr3pERWjG+JSqUzx+gyPi enRcWIDic9dwxqh8h39rLqvEyVTC1sUMrEVGH8iDHNagrETN3/4ZHwsOqPJW2KKD -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:07 2026 by rpki-client