$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/66EDABB6815411EF98D05E1EC4F9AE02.roa File: 66EDABB6815411EF98D05E1EC4F9AE02.roa (raw, json) Hash identifier: bKF8Rh3YnKlaw/DYfv4LrA49RsP4M5SZ6RHzdBORNEw= Subject key identifier: F1:83:E4:7A:4F:01:45:F2:17:9D:A9:AF:AB:FA:14:03:71:C0:CD:4A Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 04AA Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/66EDABB6815411EF98D05E1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:42:54 +0000 ROA not before: Tue 01 Jul 2025 01:06:21 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58688 IP address blocks: 103.20.180.0/22 maxlen: 24 103.217.112.0/22 maxlen: 24 103.247.44.0/22 maxlen: 24 2405:6900:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Jul 1 01:06:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47a9e-6848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cc:66:57:0a:9f:f1:4c:d0:9d:99:07:85:14: 8a:44:53:14:54:fc:04:16:1e:e8:d4:aa:a6:22:0d: 19:a9:67:0f:40:e4:a9:a4:0b:fa:36:d2:4e:73:5b: 7a:d4:11:d8:db:39:fb:37:f8:86:1a:91:5a:11:6c: ab:7f:06:c0:24:00:cb:ff:39:f5:96:b5:1a:bc:e3: d6:76:99:94:c3:a3:da:65:68:f2:5e:bb:1e:0a:37: d7:c7:6c:ba:05:12:6f:d8:64:ef:a7:4c:d7:5b:4d: b8:95:b7:6d:de:58:33:c8:1a:02:0b:c8:99:f5:37: 16:01:50:e6:53:ad:59:d1:7a:a1:ad:2b:40:5d:e3: 31:1b:56:9e:24:b7:91:8b:5a:40:43:d8:79:81:20: 02:34:7c:cb:15:cc:26:dd:78:ad:b2:9c:3a:a6:46: e5:b0:45:d7:22:85:a7:08:c7:48:17:cd:c1:76:d3: 8c:24:d4:04:54:5f:39:92:08:b8:31:8f:de:d2:41: 61:d3:92:a6:60:80:44:a1:e7:1a:e9:f2:c1:b9:88: a6:0a:03:a7:23:c2:6f:e7:f5:80:3f:f6:9e:e1:b8: af:b4:53:2e:4c:f7:7e:05:5d:36:45:50:85:06:db: 79:63:96:58:8d:da:1d:9a:55:90:0a:94:8e:d3:3e: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:83:E4:7A:4F:01:45:F2:17:9D:A9:AF:AB:FA:14:03:71:C0:CD:4A X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/66EDABB6815411EF98D05E1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.20.180.0/22 103.217.112.0/22 103.247.44.0/22 IPv6: 2405:6900:f000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:37:f3:db:7a:6e:99:41:ef:14:4d:f1:22:65:3c:08:aa:f7: e2:04:17:c4:b9:68:da:01:15:9a:94:b7:9a:7e:0c:e4:5d:b0: 44:e9:20:0a:61:8c:5d:10:dc:b9:a3:f5:92:c5:4c:d6:df:50: 3a:c5:44:82:d0:89:7f:35:bf:0e:e1:ba:c7:56:7b:1c:85:9a: 7b:89:48:55:27:ba:c8:fe:a3:85:39:be:1e:6f:2e:c9:a3:1d: fb:73:8c:49:fd:03:c5:ae:e4:d4:8b:15:80:c5:66:8c:bb:70: a6:71:33:3c:19:22:99:93:23:db:d7:20:b1:69:f3:e5:e7:f6: 17:e1:82:8c:c3:a8:42:9b:c4:b7:fa:d7:e6:17:d7:b4:9e:4c: 0e:92:28:67:34:64:ca:fa:85:b0:7e:dd:92:f2:5e:bd:98:13: 39:ac:21:53:fe:d0:4c:6f:9d:d5:0b:ef:3b:4f:ef:0e:71:79: 2c:d1:be:c0:74:2e:58:ec:ff:07:45:d9:62:fe:bc:14:3c:dc: c9:21:e2:04:a3:91:d3:15:3f:77:29:77:47:b7:f9:18:43:74: 85:96:46:06:24:5f:c3:4a:ff:05:dd:fe:a4:9b:e8:3c:39:b2: 30:9d:6c:1b:4a:d7:b9:cb:68:52:e8:99:8d:b1:dc:55:f4:f0: 5f:75:98:bf -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNzAxMDEwNjIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2E5ZS02ODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38xmVwqf8UzQnZkHhRSKRFMUVPwEFh7o1KqmIg0ZqWcPQOSppAv6NtJOc1t6 1BHY2zn7N/iGGpFaEWyrfwbAJADL/zn1lrUavOPWdpmUw6PaZWjyXrseCjfXx2y6 BRJv2GTvp0zXW024lbdt3lgzyBoCC8iZ9TcWAVDmU61Z0XqhrStAXeMxG1aeJLeR i1pAQ9h5gSACNHzLFcwm3Xitspw6pkblsEXXIoWnCMdIF83BdtOMJNQEVF85kgi4 MY/e0kFh05KmYIBEoeca6fLBuYimCgOnI8Jv5/WAP/ae4bivtFMuTPd+BV02RVCF Btt5Y5ZYjdodmlWQCpSO0z7pJwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFPGD5HpP AUXyF52pr6v6FANxwM1KMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkVCOTQvRTNDQzI1RDg4MTFFMTFFQzkyMDI1NTUxQzRGOUFFMDIvNjZFREFCQjY4 MTU0MTFFRjk4RDA1RTFFQzRGOUFFMDIucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAY BAIAATASAwQCZxS0AwQCZ9lwAwQCZ/csMA4EAgACMAgDBgQkBWkA8DANBgkqhkiG 9w0BAQsFAAOCAQEAijfz23pumUHvFE3xImU8CKr34gQXxLlo2gEVmpS3mn4M5F2w ROkgCmGMXRDcuaP1ksVM1t9QOsVEgtCJfzW/DuG6x1Z7HIWae4lIVSe6yP6jhTm+ Hm8uyaMd+3OMSf0Dxa7k1IsVgMVmjLtwpnEzPBkimZMj29cgsWnz5ef2F+GCjMOo QpvEt/rX5hfXtJ5MDpIoZzRkyvqFsH7dkvJevZgTOawhU/7QTG+d1QvvO0/vDnF5 LNG+wHQuWOz/B0XZYv68FDzcySHiBKOR0xU/dyl3R7f5GEN0hZZGBiRfw0r/Bd3+ pJvoPDmyMJ1sG0rXuctoUuiZjbHcVfTwX3WYvw== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:29 2026 by rpki-client