$ rpki-client -vvf rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/CCCA3842714711EDBB61A87FC4F9AE02.roa File: CCCA3842714711EDBB61A87FC4F9AE02.roa (raw, json) Hash identifier: dQes4cKEo3vqUyE4KHkW1L+GW6dnJAq7VF/ynzV3hTs= Subject key identifier: 89:0B:E1:E3:AB:A7:BF:0C:35:6E:22:BC:77:B0:DA:A3:DB:D0:F6:11 Certificate issuer: /CN=A914F6AF/serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182 Certificate serial: 0267 Authority key identifier: A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/CCCA3842714711EDBB61A87FC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:38:31 +0000 ROA not before: Wed 31 Dec 2025 01:21:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 135425 IP address blocks: 103.99.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F6AF, serialNumber=A3D250C5D52C5A8AC67BA021884D191A5D4A7182 Validity Not Before: Dec 31 01:21:15 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a592d7-8dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:de:f7:9c:30:88:c6:88:8d:be:34:6e:f5:cf: 4f:37:43:a8:d0:a3:5a:a3:3e:c1:18:03:5b:82:62: 54:9d:c6:e7:91:f8:6c:65:12:14:5b:4b:6d:a9:6a: 83:65:17:82:a7:a3:89:7e:37:13:23:82:98:02:78: c0:6c:1e:b6:00:7b:00:2c:3b:15:92:7d:c8:e8:ea: 40:fa:39:6a:c6:80:6f:9d:39:a2:f0:92:61:61:2c: ac:ef:6d:4e:89:a5:c3:c6:85:58:90:b8:11:a9:7c: e8:25:f8:ae:19:12:88:b2:8f:87:3b:d9:e1:27:9d: cd:01:c0:75:ef:d5:99:4d:89:c5:2a:55:7a:57:12: 7a:1b:a2:4e:ba:eb:fa:78:05:bb:0a:87:43:96:65: a1:e1:bd:31:94:34:19:51:0f:77:e5:df:25:30:7a: 97:d4:1f:31:9c:d0:30:d8:7b:04:9e:be:39:f4:0a: 86:03:36:89:8a:d8:ed:14:23:ae:c5:3d:c4:bc:ab: 01:9e:3e:71:3f:96:99:93:0f:97:27:d3:34:70:d3: dc:d3:3e:ad:50:25:d5:82:66:d5:60:72:65:1b:48: 14:26:d7:0e:80:05:7e:cc:35:8c:b4:6a:ee:8c:72: bf:6b:df:1a:03:a4:e6:05:5f:e9:03:49:c2:b8:7e: 52:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0B:E1:E3:AB:A7:BF:0C:35:6E:22:BC:77:B0:DA:A3:DB:D0:F6:11 X509v3 Authority Key Identifier: keyid:A3:D2:50:C5:D5:2C:5A:8A:C6:7B:A0:21:88:4D:19:1A:5D:4A:71:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/o9JQxdUsWorGe6AhiE0ZGl1KcYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9JQxdUsWorGe6AhiE0ZGl1KcYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F6AF/F6D8DA9C714411ED9FDF3D12C4F9AE02/CCCA3842714711EDBB61A87FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.20.0/23 Signature Algorithm: sha256WithRSAEncryption 83:31:ff:59:a3:bb:73:34:9a:61:97:f8:77:67:b9:3d:42:55: 38:ec:4c:5d:c8:ce:52:9a:e3:56:fb:c1:f3:c5:8f:7f:32:cb: 01:df:2d:5f:30:ad:d8:ef:cd:37:ec:e7:d2:15:f0:b6:d8:1c: 43:be:fd:9c:35:d9:35:2b:6b:b5:12:3e:cc:f0:bf:95:0b:0e: 5b:51:ff:2c:bc:15:c4:51:3f:a8:42:e5:ed:c3:0c:e0:c9:0d: 99:08:b4:6a:dc:fc:80:28:db:fe:24:2a:63:63:4d:3b:7f:0f: 31:f4:10:6e:9d:8f:ab:77:77:40:e2:25:e1:4c:f5:2c:e3:4d: 3f:25:bb:b7:bd:f9:63:c6:26:c8:67:6c:fa:94:9a:10:f9:fd: dd:f5:d6:52:f5:f3:8d:1a:4f:cc:af:18:ff:46:0f:02:33:9f: 96:ae:c4:32:06:f0:fc:5b:72:7b:56:77:3c:8f:c1:ed:ce:ef: 7c:64:89:f9:b8:e5:7e:5c:8c:25:39:15:05:bc:66:33:5e:c4: 0f:44:5a:48:d4:6f:b8:83:8e:90:55:39:3e:4a:2e:05:48:0e: 3a:14:2d:e1:51:87:15:b2:15:fa:b9:6f:b9:a3:bc:54:6e:a6: ca:20:07:f1:15:46:8c:b7:a3:72:b7:a6:5a:0c:b6:12:1e:8e: 44:96:9c:00 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2QUYxMTAvBgNVBAUTKEEzRDI1MEM1RDUyQzVBOEFDNjdCQTAyMTg4NEQxOTFB NUQ0QTcxODIwHhcNMjUxMjMxMDEyMTE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTJkNy04ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN73nDCIxoiNvjRu9c9PN0Oo0KNaoz7BGANbgmJUncbnkfhsZRIUW0ttqWqD ZReCp6OJfjcTI4KYAnjAbB62AHsALDsVkn3I6OpA+jlqxoBvnTmi8JJhYSys721O iaXDxoVYkLgRqXzoJfiuGRKIso+HO9nhJ53NAcB179WZTYnFKlV6VxJ6G6JOuuv6 eAW7CodDlmWh4b0xlDQZUQ935d8lMHqX1B8xnNAw2HsEnr459AqGAzaJitjtFCOu xT3EvKsBnj5xP5aZkw+XJ9M0cNPc0z6tUCXVgmbVYHJlG0gUJtcOgAV+zDWMtGru jHK/a98aA6TmBV/pA0nCuH5S5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIkL4eOr p78MNW4ivHew2qPb0PYRMB8GA1UdIwQYMBaAFKPSUMXVLFqKxnugIYhNGRpdSnGC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjZBRi9GNkQ4REE5Qzcx NDQxMUVEOUZERjNEMTJDNEY5QUUwMi9vOUpReGRVc1dvckdlNkFoaUUwWkdsMUtj WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285SlF4ZFVzV29yR2U2QWhpRTBaR2wxS2NZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEY2QUYvRjZEOERBOUM3MTQ0MTFFRDlGREYzRDEyQzRGOUFFMDIvQ0NDQTM4NDI3 MTQ3MTFFREJCNjFBODdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ2MUMA0GCSqGSIb3DQEBCwUAA4IBAQCDMf9Zo7tzNJphl/h3Z7k9 QlU47ExdyM5SmuNW+8HzxY9/MssB3y1fMK3Y78037OfSFfC22BxDvv2cNdk1K2u1 Ej7M8L+VCw5bUf8svBXEUT+oQuXtwwzgyQ2ZCLRq3PyAKNv+JCpjY007fw8x9BBu nY+rd3dA4iXhTPUs400/Jbu3vfljxibIZ2z6lJoQ+f3d9dZS9fONGk/Mrxj/Rg8C M5+WrsQyBvD8W3J7Vnc8j8Htzu98ZIn5uOV+XIwlORUFvGYzXsQPRFpI1G+4g46Q VTk+Si4FSA46FC3hUYcVshX6uW+5o7xUbqbKIAfxFUaMt6Nyt6ZaDLYSHo5ElpwA -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:13 2026 by rpki-client