$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa File: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (raw, json) Hash identifier: 9Odwd+Tnh1umFLR0TM5Ak3v8LLc0vsp9acB6OkgzFHo= Subject key identifier: CB:3F:6B:EB:15:42:0B:FF:18:64:87:15:04:56:6D:16:40:D8:8D:82 Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Certificate serial: C8 Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:35:57 +0000 ROA not before: Mon 21 Jul 2025 07:44:43 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4764 IP address blocks: 103.60.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1 Validity Not Before: Jul 21 07:44:43 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a5842d-f4a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:57:a3:1e:9d:75:d6:4b:7d:bd:95:f6:a8: 10:85:c2:3c:c1:93:b4:56:e5:ce:a1:37:02:76:df: 6e:b7:a2:d1:58:af:17:57:94:a2:44:7b:30:6e:2b: 63:22:f4:a3:ca:46:c0:4d:10:c5:6e:af:88:87:06: d8:5e:0a:bc:a0:51:2e:b1:6c:6d:f7:1b:7a:3c:0f: 69:f1:2a:d9:6b:64:ed:15:8d:d7:8a:6c:a5:ee:a8: e5:51:5f:9f:a0:bd:12:e4:1c:72:a9:47:74:07:da: b9:68:57:6f:18:57:c2:0a:49:75:9c:07:4f:37:07: b8:93:47:4d:3a:0c:dc:e3:ad:88:7f:ed:14:5f:19: 41:c2:c0:ac:62:59:00:10:35:9b:12:6e:0b:e0:36: a3:e5:0d:16:d1:7d:d1:d9:a6:35:d3:36:c9:4e:86: 8f:b1:5e:18:b3:1a:34:f7:1b:bf:4d:ca:94:36:cd: 5a:c0:db:a0:3b:96:26:8b:cb:09:3a:7b:9f:f9:c1: 96:7d:80:ac:81:68:ac:92:ac:be:e2:21:4a:74:8b: e2:62:0e:13:f6:2a:a9:55:43:6a:9c:7d:e2:04:1f: 77:f4:d2:52:81:24:2b:48:50:5c:2a:35:78:46:69: f0:0a:12:81:93:40:3e:c5:69:6f:5d:ae:1b:90:3b: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:6B:EB:15:42:0B:FF:18:64:87:15:04:56:6D:16:40:D8:8D:82 X509v3 Authority Key Identifier: keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/2CD223FCEA7811EF92D8DC39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.60.152.0/22 Signature Algorithm: sha256WithRSAEncryption 80:22:61:68:84:26:4b:c8:a7:98:f0:50:29:27:55:4c:c2:5c: 2e:1a:db:3a:74:90:79:7e:9f:2c:80:a2:0b:a3:50:76:10:d8: d3:d5:28:d0:a6:b2:bd:04:a6:bf:b5:47:54:d1:01:de:75:90: d1:85:b3:29:ed:33:2b:4e:c8:07:9c:c7:76:48:3f:51:c3:ad: 61:0e:64:21:79:fd:e3:ef:97:34:8f:38:fd:f4:b5:4f:30:b0: 4a:be:5c:5b:ab:05:d0:a1:d9:86:2d:82:1f:f8:64:0f:c2:95: b8:33:c0:e1:33:58:60:1f:03:1d:b9:a1:c9:15:0d:a2:64:41: 3c:13:d5:4c:52:15:aa:f1:c2:19:4e:69:17:74:b7:d1:50:7a: c7:04:42:64:99:5f:50:4d:96:6c:39:f8:26:b1:d6:65:54:dc: d0:03:8c:a6:75:3f:36:4b:07:b5:02:59:23:8d:32:b8:66:1b: ef:dd:30:cc:c7:c2:40:8c:fb:0d:dd:9f:24:2e:96:3e:0a:2d: 9b:13:a2:0f:95:c3:50:74:b1:2d:dd:8a:1c:7e:95:37:93:de: 4b:72:a6:db:12:16:c3:7d:92:59:70:9d:61:7d:ba:4b:0e:89: c3:cd:53:0a:31:30:8f:e6:f8:29:f7:d7:ae:3f:bb:75:d3:7f: 7e:95:01:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg2NzkxMTAvBgNVBAUTKDkyODBGMDcwNzQ3NzUzMzg3QjZCQTY1NzMyRDZERDc5 OTJCMzUwQzEwHhcNMjUwNzIxMDc0NDQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODQyZC1mNGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZ5Xox6dddZLfb2V9qgQhcI8wZO0VuXOoTcCdt9ut6LRWK8XV5SiRHswbitj IvSjykbATRDFbq+IhwbYXgq8oFEusWxt9xt6PA9p8SrZa2TtFY3Ximyl7qjlUV+f oL0S5BxyqUd0B9q5aFdvGFfCCkl1nAdPNwe4k0dNOgzc462If+0UXxlBwsCsYlkA EDWbEm4L4Daj5Q0W0X3R2aY10zbJToaPsV4Ysxo09xu/TcqUNs1awNugO5Ymi8sJ Onuf+cGWfYCsgWiskqy+4iFKdIviYg4T9iqpVUNqnH3iBB939NJSgSQrSFBcKjV4 RmnwChKBk0A+xWlvXa4bkDtYnQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMs/a+sV Qgv/GGSHFQRWbRZA2I2CMB8GA1UdIwQYMBaAFJKA8HB0d1M4e2umVzLW3XmSs1DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODY3OS9DQjJDQjNDRUVB NzcxMUVGQTU2MzU2ODBDNEY5QUUwMi9rb0R3Y0hSM1V6aDdhNlpYTXRiZGVaS3pV TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvRHdjSFIzVXpoN2E2WlhNdGJkZVpLelVNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzg2NzkvQ0IyQ0IzQ0VFQTc3MTFFRkE1NjM1NjgwQzRGOUFFMDIvMkNEMjIzRkNF QTc4MTFFRjkyRDhEQzM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZzyYMA0GCSqGSIb3DQEBCwUAA4IBAQCAImFohCZLyKeY8FApJ1VM wlwuGts6dJB5fp8sgKILo1B2ENjT1SjQprK9BKa/tUdU0QHedZDRhbMp7TMrTsgH nMd2SD9Rw61hDmQhef3j75c0jzj99LVPMLBKvlxbqwXQodmGLYIf+GQPwpW4M8Dh M1hgHwMduaHJFQ2iZEE8E9VMUhWq8cIZTmkXdLfRUHrHBEJkmV9QTZZsOfgmsdZl VNzQA4ymdT82Swe1AlkjjTK4Zhvv3TDMx8JAjPsN3Z8kLpY+Ci2bE6IPlcNQdLEt 3YocfpU3k95LcqbbEhbDfZJZcJ1hfbpLDonDzVMKMTCP5vgp99euP7t1039+lQHo -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:39 2026 by rpki-client