$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/2D70A1AE0DFE11F087A25C3FC4F9AE02.roa File: 2D70A1AE0DFE11F087A25C3FC4F9AE02.roa (raw, json) Hash identifier: 2y/jQz4yVj19GJGz1W72K4pwTYp+Le0fIXrjvRTBp0Y= Subject key identifier: 4A:89:79:D2:E8:39:36:53:CB:D8:CB:3B:AD:EF:0C:D2:1B:E3:59:18 Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1F81 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/2D70A1AE0DFE11F087A25C3FC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:19:09 +0000 ROA not before: Thu 06 Nov 2025 15:53:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.193.8.0/24 maxlen: 24 103.193.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8065 (0x1f81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Validity Not Before: Nov 6 15:53:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a4750d-558d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:79:33:23:6e:f3:a0:c5:96:9e:68:26:e6: 87:79:34:66:5c:3b:7d:8d:45:dd:07:f4:82:0e:1c: f2:f7:44:a5:cd:66:c8:98:e9:1d:27:20:2e:a0:bf: 65:c1:69:45:e1:17:9c:14:61:f8:da:1b:ae:50:95: 8e:da:75:98:8d:bc:df:7a:f7:67:ee:bb:50:dc:01: 2e:2d:47:63:bf:e2:ff:ef:6b:6a:7b:ea:1b:3f:b4: a4:ff:58:48:9d:32:ec:55:ed:39:dd:2f:37:b6:67: 26:cc:4b:b5:64:10:61:43:a8:1c:5b:21:29:98:12: 6e:f4:4f:d9:98:ab:d5:4f:b4:db:86:39:a4:46:30: a0:3a:1d:ed:cc:19:23:74:7c:5f:e0:76:f7:0e:ae: 87:ac:bc:57:62:0c:1d:4f:b2:2c:44:d5:b4:5e:74: 7b:27:c4:ff:2e:f7:2c:14:3c:19:25:15:80:4f:cf: 2a:06:50:7d:6f:12:f0:f2:41:a3:a9:f4:60:31:45: 9c:6c:1b:a1:f4:df:8a:a2:d0:8c:e8:de:16:65:39: f6:48:7c:99:97:db:c2:e4:a5:91:6b:df:cc:a9:bd: df:a3:72:da:56:29:9a:b7:87:08:f6:ac:8c:ca:0d: df:88:6d:4f:3d:d2:f4:91:4f:a0:fd:d2:7b:6a:07: d7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:89:79:D2:E8:39:36:53:CB:D8:CB:3B:AD:EF:0C:D2:1B:E3:59:18 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/2D70A1AE0DFE11F087A25C3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.193.8.0/23 Signature Algorithm: sha256WithRSAEncryption 86:d0:e4:f9:37:14:c6:a1:0e:07:f4:21:18:50:e8:1c:11:fb: ce:d5:4c:69:67:f9:56:42:f0:27:3c:1c:02:b0:0d:ca:40:62: 1c:5d:21:fc:bb:7d:28:2b:18:83:e3:e8:a3:e4:65:fa:33:75: 04:b1:7f:9b:45:7f:83:e5:55:81:3b:d5:cb:3c:a8:5d:55:ef: 7b:d9:7d:f7:7a:3c:03:1f:29:0c:35:f8:56:c9:ae:7e:67:b4: b8:c6:3b:e4:d3:9c:e6:c2:e5:8c:d1:e9:ee:10:b0:15:35:b6: 7e:c4:15:b9:16:b8:72:67:12:57:a6:44:fb:f8:9c:7b:ba:ab: 24:13:f2:5b:94:9d:de:75:43:fc:5c:17:ee:34:0e:1d:14:4b: 8a:b5:3c:e7:38:b0:82:82:08:d6:16:c7:68:5e:d7:06:28:4f: 65:a5:e6:2f:02:0a:31:6f:40:22:d3:87:12:90:6d:f1:97:5d: fa:86:6b:b0:ea:43:e2:4c:27:86:f6:2b:99:b6:2c:27:a1:c9: 0e:38:9f:c7:a8:dc:23:bd:3e:ff:87:42:45:25:ef:fb:bf:e8: e4:26:13:ca:74:8f:4c:48:98:f5:41:c3:fa:84:17:87:cf:fd: b0:be:66:17:4e:e4:95:1a:3b:f6:1f:c7:db:d7:e8:14:db:db: cb:2d:f5:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICH4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUxMTA2MTU1MzU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzUwZC01NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd55MyNu86DFlp5oJuaHeTRmXDt9jUXdB/SCDhzy90SlzWbImOkdJyAuoL9l wWlF4RecFGH42huuUJWO2nWYjbzfevdn7rtQ3AEuLUdjv+L/72tqe+obP7Sk/1hI nTLsVe053S83tmcmzEu1ZBBhQ6gcWyEpmBJu9E/ZmKvVT7TbhjmkRjCgOh3tzBkj dHxf4Hb3Dq6HrLxXYgwdT7IsRNW0XnR7J8T/LvcsFDwZJRWAT88qBlB9bxLw8kGj qfRgMUWcbBuh9N+KotCM6N4WZTn2SHyZl9vC5KWRa9/Mqb3fo3LaVimat4cI9qyM yg3fiG1PPdL0kU+g/dJ7agfXjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEqJedLo OTZTy9jLO63vDNIb41kYMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0YwRTMvMjkxNTc2QkU2QjM0MTFFNjkxODRCNjZDQzRGOUFFMDIvMkQ3MEExQUUw REZFMTFGMDg3QTI1QzNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ8EIMA0GCSqGSIb3DQEBCwUAA4IBAQCG0OT5NxTGoQ4H9CEYUOgc EfvO1UxpZ/lWQvAnPBwCsA3KQGIcXSH8u30oKxiD4+ij5GX6M3UEsX+bRX+D5VWB O9XLPKhdVe972X33ejwDHykMNfhWya5+Z7S4xjvk05zmwuWM0enuELAVNbZ+xBW5 FrhyZxJXpkT7+Jx7uqskE/JblJ3edUP8XBfuNA4dFEuKtTznOLCCggjWFsdoXtcG KE9lpeYvAgoxb0Ai04cSkG3xl136hmuw6kPiTCeG9iuZtiwnockOOJ/HqNwjvT7/ h0JFJe/7v+jkJhPKdI9MSJj1QcP6hBeHz/2wvmYXTuSVGjv2H8fb1+gU29vLLfXZ -----END CERTIFICATE-----Generated at Thu Mar 26 01:57:07 2026 by rpki-client