$ rpki-client -vvf rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/A215F7263E2B11F19BB8FE1BB7833773.roa File: A215F7263E2B11F19BB8FE1BB7833773.roa (raw, json) Hash identifier: CG+Fkm8MRpZF2H0mCDcsrtByDJI5HEiQSaXQPyB65U0= Subject key identifier: 8B:3B:FD:6C:84:77:71:80:03:38:29:85:9F:4F:59:05:E6:84:7A:EC Certificate issuer: /CN=A917171E/serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F Certificate serial: 02 Authority key identifier: DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/A215F7263E2B11F19BB8FE1BB7833773.roa Signing time: Wed 22 Apr 2026 09:14:15 +0000 ROA not before: Wed 22 Apr 2026 09:14:15 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 63888 IP address blocks: 61.14.252.0/22 maxlen: 22 61.14.252.0/24 maxlen: 24 61.14.253.0/24 maxlen: 24 61.14.254.0/24 maxlen: 24 61.14.255.0/24 maxlen: 24 103.248.88.0/22 maxlen: 22 103.248.88.0/24 maxlen: 24 103.248.89.0/24 maxlen: 24 103.248.90.0/24 maxlen: 24 103.248.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.crl rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 09:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917171E, serialNumber=DE6362BEA4CEDD7D77F6AF7C06898CBB8764C47F Validity Not Before: Apr 22 09:14:15 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69e89167-a483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:4c:d7:22:7e:5d:5e:32:7c:d6:d1:73:f5: b6:63:16:5f:28:5a:c0:6c:e4:80:81:15:bb:dc:fe: 3a:48:3d:64:f2:cf:c7:d1:1c:8f:58:1b:1a:cf:88: 70:0b:f5:18:eb:af:27:3a:71:d0:be:3e:15:07:21: 8e:63:af:3b:00:08:12:8d:70:c9:a3:22:dc:76:39: 5e:d7:72:a4:08:99:cf:13:75:d1:9f:98:56:65:96: a2:99:0f:7e:82:8c:18:35:9e:1f:7b:d5:67:fb:cb: 73:07:23:b5:3c:0c:f8:57:4d:ad:a2:64:22:8a:ec: 1f:09:17:88:ef:e6:82:9b:59:2c:11:08:ed:24:f3: 3d:45:b5:8a:52:92:64:3b:14:09:75:dc:a6:94:b6: 13:f8:2e:9c:05:fc:d2:75:2b:53:a0:a9:b9:91:68: ae:39:2c:11:0b:ab:6a:a2:cf:ea:ac:17:af:46:0e: b7:9c:96:05:9a:ed:ca:20:19:b5:f2:cb:d1:78:f6: 25:0b:0a:ab:63:9e:5b:22:65:65:03:ab:b9:fb:b9: f7:26:c9:28:13:20:b4:3a:60:bc:f2:5e:d9:a3:99: b3:20:76:35:fb:19:2b:cf:9e:75:19:c8:ca:99:54: 8a:62:6c:20:d4:fa:9f:f1:2c:31:cb:2f:8d:68:cf: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:FD:6C:84:77:71:80:03:38:29:85:9F:4F:59:05:E6:84:7A:EC X509v3 Authority Key Identifier: keyid:DE:63:62:BE:A4:CE:DD:7D:77:F6:AF:7C:06:89:8C:BB:87:64:C4:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/3mNivqTO3X139q98BomMu4dkxH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3mNivqTO3X139q98BomMu4dkxH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917171E/9F39BB2C3E2711F1B4DED9A3B5833773/A215F7263E2B11F19BB8FE1BB7833773.roa sbgp-ipAddrBlock: critical IPv4: 61.14.252.0/22 103.248.88.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:78:bb:21:55:16:c9:31:b2:f9:d9:ac:49:9f:fc:e3:4f:91: cf:69:97:82:99:ce:80:f7:37:12:72:a4:56:7f:8c:3a:14:ca: f5:ca:ad:11:47:6d:49:a7:eb:07:dc:65:bc:65:84:5c:20:e2: 03:6c:d2:42:a5:09:28:b3:9b:5c:ab:38:eb:41:41:07:29:cd: 4b:75:27:93:6a:d8:85:2a:7c:99:ae:6d:24:d5:5b:f1:54:5c: 44:04:c7:e5:73:a8:34:3c:41:5d:c9:ec:6b:8e:d2:f8:9c:28: 78:c4:ee:80:d1:40:7b:4d:57:d3:82:ba:29:f9:0a:93:00:b4: e2:45:ae:40:0e:58:f7:d5:ef:6d:0d:39:00:71:5b:d6:10:d1: 5c:15:7b:64:9a:7b:03:d2:58:07:eb:3f:77:41:b6:34:aa:84: ef:b0:74:c9:59:a4:19:f4:ef:14:57:de:ab:dc:27:e2:9e:a0: fa:b5:ba:12:a5:a7:e4:26:e5:26:b2:d3:c6:14:64:74:85:81: ab:6f:09:7e:2a:44:ff:fa:74:91:d5:1b:37:c7:ec:64:e3:14: 84:2e:40:87:c3:8a:dc:28:bf:ac:92:90:f9:50:1c:60:73:c8: 20:d1:74:17:6f:86:af:cc:4e:89:8b:95:68:49:de:ec:92:80: 94:e8:4a:3f -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MTcxRTExMC8GA1UEBRMoREU2MzYyQkVBNENFREQ3RDc3RjZBRjdDMDY4OThDQkI4 NzY0QzQ3RjAeFw0yNjA0MjIwOTE0MTVaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTg5MTY3LWE0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+mUzXIn5dXjJ81tFz9bZjFl8oWsBs5ICBFbvc/jpIPWTyz8fRHI9YGxrPiHAL 9Rjrryc6cdC+PhUHIY5jrzsACBKNcMmjItx2OV7XcqQImc8TddGfmFZllqKZD36C jBg1nh971Wf7y3MHI7U8DPhXTa2iZCKK7B8JF4jv5oKbWSwRCO0k8z1FtYpSkmQ7 FAl13KaUthP4LpwF/NJ1K1OgqbmRaK45LBELq2qiz+qsF69GDreclgWa7cogGbXy y9F49iULCqtjnlsiZWUDq7n7ufcmySgTILQ6YLzyXtmjmbMgdjX7GSvPnnUZyMqZ VIpibCDU+p/xLDHLL41oz2hpAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUizv9bIR3 cYADOCmFn09ZBeaEeuwwHwYDVR0jBBgwFoAU3mNivqTO3X139q98BomMu4dkxH8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxNzFFLzlGMzlCQjJDM0Uy NzExRjFCNERFRDlBM0I1ODMzNzczLzNtTml2cVRPM1gxMzlxOThCb21NdTRka3hI OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM21OaXZxVE8zWDEzOXE5OEJvbU11NGRreEg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTcxRS85RjM5QkIyQzNFMjcxMUYxQjRERUQ5QTNCNTgzMzc3My9BMjE1RjcyNjNF MkIxMUYxOUJCOEZFMUJCNzgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAI9DvwDBAJn+FgwDQYJKoZIhvcNAQELBQADggEBADt4uyFVFskxsvnZ rEmf/ONPkc9pl4KZzoD3NxJypFZ/jDoUyvXKrRFHbUmn6wfcZbxlhFwg4gNs0kKl CSizm1yrOOtBQQcpzUt1J5Nq2IUqfJmubSTVW/FUXEQEx+VzqDQ8QV3J7GuO0vic KHjE7oDRQHtNV9OCuin5CpMAtOJFrkAOWPfV720NOQBxW9YQ0VwVe2SaewPSWAfr P3dBtjSqhO+wdMlZpBn07xRX3qvcJ+KeoPq1uhKlp+Qm5Say08YUZHSFgatvCX4q RP/6dJHVGzfH7GTjFIQuQIfDitwov6ySkPlQHGBzyCDRdBdvhq/MTomLlWhJ3uyS gJToSj8= -----END CERTIFICATE-----Generated at Wed May 13 20:23:03 2026 by rpki-client