$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa File: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (raw, json) Hash identifier: qlfBMvqZOkkBGu03hBwePTIVyKcLh1KiUl3FHIpuDvc= Subject key identifier: 71:DF:FD:B0:4E:12:74:DC:FC:B1:EC:07:97:92:A5:5F:67:70:AA:62 Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 0396 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:03:17 +0000 ROA not before: Thu 11 Dec 2025 10:06:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141767 IP address blocks: 103.186.196.0/23 maxlen: 24 2400:74e0::/32 maxlen: 32 2400:74e0::/47 maxlen: 48 2400:74e0:2::/48 maxlen: 48 2400:74e0:3::/48 maxlen: 48 2400:74e0:e::/48 maxlen: 48 2400:74e0:f::/48 maxlen: 48 2400:74e0:10::/47 maxlen: 47 2400:74e0:10::/48 maxlen: 48 2400:74e0:11::/48 maxlen: 48 2400:74e0:12::/47 maxlen: 48 2400:74e0:21::/48 maxlen: 48 2400:74e0:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 918 (0x396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: Dec 11 10:06:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42b05-9225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:c2:f3:a0:38:04:1d:8b:7b:84:c3:94:7b: 80:37:3a:00:87:fa:94:7d:f3:00:0b:89:61:b3:fb: a7:a3:56:8c:f4:35:f1:7c:22:c7:2d:0c:d4:32:7c: ba:9c:13:fe:16:45:a1:52:ea:eb:41:5b:d8:c0:ef: 2d:ac:9d:f6:38:3e:48:11:a8:5d:24:61:d5:60:e6: 3a:e6:c7:41:49:e2:3a:a8:7c:cf:a3:0c:64:43:b4: 4e:0c:9c:b5:6e:e0:96:ad:14:d5:0a:9f:7b:7f:26: 4c:fa:10:e1:78:b1:94:63:2e:68:6b:28:6b:ce:1c: 64:d2:d9:31:97:af:95:12:3f:ea:df:8c:5d:c2:76: 29:13:d3:d5:3d:9e:54:6d:5b:86:08:6d:b8:23:29: d8:70:6a:3e:46:98:bf:29:d0:28:86:11:30:cc:ab: 53:02:c9:1b:01:97:41:e2:9d:c5:39:03:2e:6b:1b: 8c:53:07:40:29:bc:6a:e1:cb:40:5e:e3:19:dc:03: 29:a8:c7:46:c9:9c:16:82:d7:2f:e9:50:f9:81:a4: 6f:25:0c:45:42:2f:98:bf:4b:27:66:da:bc:9d:35: 05:4c:3e:76:3b:0f:64:1f:56:d8:a3:f4:d0:10:79: dd:40:99:54:07:14:e5:d1:37:58:77:e4:a1:d1:f6: ad:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:FD:B0:4E:12:74:DC:FC:B1:EC:07:97:92:A5:5F:67:70:AA:62 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/4D6093C2EAD711ECBF99921CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.196.0/23 IPv6: 2400:74e0::/32 Signature Algorithm: sha256WithRSAEncryption af:ff:7e:d5:ab:39:61:13:33:2b:8c:a1:ec:72:20:41:59:3e: e1:83:61:7e:94:2a:3f:8e:ea:93:2c:88:25:a4:14:2a:fb:d5: e8:b6:e1:ea:fb:5d:24:60:8a:3d:43:b1:76:8a:f9:07:3b:fb: 6f:f4:31:2f:ec:76:8a:36:84:8d:47:2c:b9:b8:dd:4c:06:6f: f1:d8:80:56:03:84:f7:d4:06:af:e1:af:ac:2f:6a:b4:54:06: db:80:19:58:72:f6:5a:54:bf:1f:0c:5c:89:ce:f4:e0:2c:bc: 27:cd:74:a0:52:ff:31:c9:65:a0:e6:08:0c:ff:a4:da:db:01: ef:24:a7:52:2c:58:02:84:f7:bb:26:ed:13:f6:87:16:4d:e7: ed:cd:63:1d:53:2f:4f:24:0e:a5:ee:ec:26:42:28:57:af:91: ed:db:43:59:44:c1:b5:87:2e:77:ea:ec:09:26:ab:69:60:ae: 82:0e:33:b1:40:9d:af:6b:d1:bc:c5:3c:59:82:07:93:7c:48: 5c:87:bd:38:47:f3:02:a6:47:96:3d:b2:63:d7:91:79:20:eb: c7:b2:2e:60:8d:1b:12:06:08:cc:b1:9e:e5:49:a0:dd:13:a1: d1:9b:4b:fb:f4:7d:cd:13:c6:c8:59:54:51:7d:e2:c3:e4:f3: f5:c9:f4:a7 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUxMjExMTAwNjUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmIwNS05MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ/C86A4BB2Le4TDlHuANzoAh/qUffMAC4lhs/uno1aM9DXxfCLHLQzUMny6 nBP+FkWhUurrQVvYwO8trJ32OD5IEahdJGHVYOY65sdBSeI6qHzPowxkQ7RODJy1 buCWrRTVCp97fyZM+hDheLGUYy5oayhrzhxk0tkxl6+VEj/q34xdwnYpE9PVPZ5U bVuGCG24IynYcGo+Rpi/KdAohhEwzKtTAskbAZdB4p3FOQMuaxuMUwdAKbxq4ctA XuMZ3AMpqMdGyZwWgtcv6VD5gaRvJQxFQi+Yv0snZtq8nTUFTD52Ow9kH1bYo/TQ EHndQJlUBxTl0TdYd+Sh0fatXwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHHf/bBO EnTc/LHsB5eSpV9ncKpiMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUyQ0MvQUY2NzY1RkNFNTgwMTFFQzlCOUQyQjYyQzRGOUFFMDIvNEQ2MDkzQzJF QUQ3MTFFQ0JGOTk5MjFDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7rEMA0EAgACMAcDBQAkAHTgMA0GCSqGSIb3DQEBCwUAA4IBAQCv /37VqzlhEzMrjKHsciBBWT7hg2F+lCo/juqTLIglpBQq+9XotuHq+10kYIo9Q7F2 ivkHO/tv9DEv7HaKNoSNRyy5uN1MBm/x2IBWA4T31Aav4a+sL2q0VAbbgBlYcvZa VL8fDFyJzvTgLLwnzXSgUv8xyWWg5ggM/6Ta2wHvJKdSLFgChPe7Ju0T9ocWTeft zWMdUy9PJA6l7uwmQihXr5Ht20NZRMG1hy536uwJJqtpYK6CDjOxQJ2va9G8xTxZ ggeTfEhch704R/MCpkeWPbJj15F5IOvHsi5gjRsSBgjMsZ7lSaDdE6HRm0v79H3N E8bIWVRRfeLD5PP1yfSn -----END CERTIFICATE-----Generated at Thu Mar 26 04:05:18 2026 by rpki-client