$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa File: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (raw, json) Hash identifier: qLkSs7kTPTAyjiO/JLwbMtvUImC2c8ZvFgGL8hNqu5E= Subject key identifier: 21:8C:0E:9F:B6:C0:BE:E8:ED:74:FA:21:23:78:68:C7:88:09:96:83 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2E10 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa Signing time: Wed 04 Mar 2026 16:18:16 +0000 ROA not before: Wed 04 Mar 2026 16:18:16 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 131227 IP address blocks: 58.84.48.0/22 maxlen: 22 58.84.48.0/24 maxlen: 24 58.84.49.0/24 maxlen: 24 58.84.50.0/24 maxlen: 24 58.84.51.0/24 maxlen: 24 103.240.152.0/22 maxlen: 22 103.240.152.0/24 maxlen: 24 103.240.153.0/24 maxlen: 24 103.240.154.0/24 maxlen: 24 103.240.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11792 (0x2e10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Mar 4 16:18:16 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a85b48-c999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d2:a0:ad:6a:1a:93:11:ff:de:10:73:19:c4: 4e:14:c5:bd:e4:fd:e7:5e:6a:d2:f1:86:d0:33:b8: b3:76:08:af:ec:0c:0e:ec:a9:40:ae:69:3c:88:36: 7a:b6:75:1e:19:08:8c:c4:82:d5:db:16:ca:fc:81: f0:cf:9f:e8:8d:c0:fc:c4:37:c7:4d:a7:b7:f3:ea: 5e:0a:a4:c7:65:bf:2e:b1:03:48:78:f9:40:83:18: 17:a8:ad:81:81:8a:d9:15:b9:4c:65:0a:04:da:0b: ae:5d:61:c9:6e:9c:fc:7e:85:51:6f:cc:66:ea:4d: 09:2f:34:d7:70:b0:0c:31:cb:67:ae:c5:ba:f7:1f: ed:55:47:f3:0f:87:fa:26:83:d7:20:88:6b:6f:dc: fa:93:3a:f9:33:62:5e:46:46:e0:eb:d5:b6:d7:de: 43:57:fb:80:63:a2:0f:37:fa:ab:35:25:53:c3:19: d1:2f:e6:1e:88:ac:7c:48:b3:c4:c4:f4:52:be:53: 55:85:c3:9c:7e:a6:ed:a5:8c:c6:f0:7c:5e:f6:db: 0d:cf:d8:71:ce:61:2d:05:3c:00:3a:28:a9:51:d2: df:e1:e4:b8:65:68:5c:87:b2:a9:bc:01:45:b0:e3: 5e:64:96:40:78:9a:70:92:56:16:d4:d0:ee:07:14: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8C:0E:9F:B6:C0:BE:E8:ED:74:FA:21:23:78:68:C7:88:09:96:83 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 58.84.48.0/22 103.240.152.0/22 Signature Algorithm: sha256WithRSAEncryption d4:75:50:09:88:3c:c1:c2:6d:35:ec:4b:d5:7b:66:74:d4:31: 36:7d:b9:e6:5b:6d:ee:94:ee:94:3a:74:96:1e:93:28:76:fd: d6:91:11:a6:6b:8a:28:13:9f:d0:73:bc:1b:4b:87:6f:d7:fb: a7:e4:75:35:0b:4d:4b:dd:c5:3e:2e:33:84:4f:de:5d:ea:24: 1e:88:88:93:1e:1b:03:c5:ae:98:e2:a8:01:88:03:f1:9f:ec: 1a:d1:4a:8a:bb:1e:60:d3:8b:ee:11:a7:66:06:a2:02:1a:72: 24:86:5e:f7:59:79:39:af:c5:81:4f:94:3a:af:f3:6e:88:50: 6c:d5:8c:1e:2a:91:df:0f:ee:7e:2c:da:77:32:ea:d0:6c:8f: 0e:cd:1c:48:da:b2:f4:7b:67:41:46:7b:11:7a:7c:83:41:7c: 8f:a9:f2:ed:ff:3a:61:bf:15:ca:52:0f:46:d1:2e:74:bb:a4: c9:fa:57:43:33:4d:2e:6e:0e:72:f7:f5:51:fb:84:f3:63:d9: 48:0d:90:b3:28:05:06:16:87:3c:13:c1:f0:5e:b5:b8:5b:26: f4:ec:98:7c:07:f8:09:ac:12:64:e6:c0:1f:8a:86:0b:40:78: bd:fd:c4:f1:b1:1f:c3:b7:80:e9:5e:09:f6:4e:f1:ca:5a:90: 63:8e:b3:c6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICLhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjYwMzA0MTYxODE2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NWI0OC1jOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69KgrWoakxH/3hBzGcROFMW95P3nXmrS8YbQM7izdgiv7AwO7KlArmk8iDZ6 tnUeGQiMxILV2xbK/IHwz5/ojcD8xDfHTae38+peCqTHZb8usQNIePlAgxgXqK2B gYrZFblMZQoE2guuXWHJbpz8foVRb8xm6k0JLzTXcLAMMctnrsW69x/tVUfzD4f6 JoPXIIhrb9z6kzr5M2JeRkbg69W2195DV/uAY6IPN/qrNSVTwxnRL+YeiKx8SLPE xPRSvlNVhcOcfqbtpYzG8Hxe9tsNz9hxzmEtBTwAOiipUdLf4eS4ZWhch7KpvAFF sONeZJZAeJpwklYW1NDuBxSkIQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCGMDp+2 wL7o7XT6ISN4aMeICZaDMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0NjgvQ0U0OTQzNzY4QzNBMTFFM0JBMEVBRDJDNTkxMUVBMzIvMkU5MDg3QTgz MUQ4MTFFQ0EzQzRDRTNFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCOlQwAwQCZ/CYMA0GCSqGSIb3DQEBCwUAA4IBAQDUdVAJiDzBwm01 7EvVe2Z01DE2fbnmW23ulO6UOnSWHpModv3WkRGma4ooE5/Qc7wbS4dv1/un5HU1 C01L3cU+LjOET95d6iQeiIiTHhsDxa6Y4qgBiAPxn+wa0UqKux5g04vuEadmBqIC GnIkhl73WXk5r8WBT5Q6r/NuiFBs1YweKpHfD+5+LNp3MurQbI8OzRxI2rL0e2dB RnsRenyDQXyPqfLt/zphvxXKUg9G0S50u6TJ+ldDM00ubg5y9/VR+4TzY9lIDZCz KAUGFoc8E8HwXrW4Wyb07Jh8B/gJrBJk5sAfioYLQHi9/cTxsR/Dt4DpXgn2TvHK WpBjjrPG -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:06 2026 by rpki-client