$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/4C7C5ECCE1B211EE84F03918C4F9AE02.roa File: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (raw, json) Hash identifier: vve+SNs5Y00q7s7j0iECqDMKhK39FhN+snt799G9ovQ= Subject key identifier: 0B:20:CC:C1:4F:25:43:93:8C:D8:CB:20:A6:0C:6F:BE:EB:BD:35:08 Certificate issuer: /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Certificate serial: 01E2 Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/4C7C5ECCE1B211EE84F03918C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:22:01 +0000 ROA not before: Fri 29 Aug 2025 05:25:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 7586 IP address blocks: 103.118.40.0/22 maxlen: 22 103.118.40.0/24 maxlen: 24 103.118.41.0/24 maxlen: 24 103.118.42.0/24 maxlen: 24 103.118.43.0/24 maxlen: 24 2403:27c0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5 Validity Not Before: Aug 29 05:25:37 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a59d08-8a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:19:11:6c:3e:8d:d7:44:1c:29:34:fa:f4:5e: 7f:1b:ce:34:1f:6f:f6:89:cc:e1:1c:6c:c7:90:42: dd:36:2a:71:a3:88:b7:7c:15:a9:44:d9:fc:c2:0a: f7:21:31:66:93:27:28:24:7a:97:a8:06:96:f5:34: 66:0c:ac:3e:87:a8:3c:09:10:f8:75:6f:f6:82:bf: 7f:7e:eb:f6:44:73:78:35:29:70:4c:eb:ad:7e:db: 8c:83:67:22:20:30:ed:dc:83:0f:9d:d4:fe:64:c8: 1d:8a:29:99:7b:18:e1:18:a0:60:30:39:4f:ad:74: 8b:1a:84:ac:56:cd:5b:d2:31:04:f7:7d:6f:62:73: 60:e6:6b:83:9a:d5:da:bb:79:64:27:70:1d:dd:8e: 4d:7e:88:ae:cd:ef:93:0e:bd:89:9d:09:e0:c7:13: 0a:59:f7:d9:17:b4:52:59:ae:47:e0:a7:d5:bf:3a: c9:7f:dd:a6:73:cb:73:78:d4:55:52:af:f7:33:36: 44:49:d5:14:9f:b6:d4:fa:78:7a:9f:05:e5:48:42: 16:b1:5e:cc:16:11:5f:79:c3:d4:19:09:f6:37:cb: 93:27:0f:55:e6:80:b0:d3:be:e1:aa:b9:9e:a4:45: cb:fc:8c:07:b0:1c:d5:ca:57:6b:69:52:78:07:12: 60:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:20:CC:C1:4F:25:43:93:8C:D8:CB:20:A6:0C:6F:BE:EB:BD:35:08 X509v3 Authority Key Identifier: keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/4C7C5ECCE1B211EE84F03918C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.118.40.0/22 IPv6: 2403:27c0:1000::/48 Signature Algorithm: sha256WithRSAEncryption 85:8b:59:7e:25:03:44:42:6c:01:cd:ab:65:7f:e1:a7:5f:9c: f6:b1:20:99:97:71:94:08:cf:9f:ed:c5:63:4c:63:dc:db:10: d5:35:82:84:65:20:42:6b:50:5d:ec:f5:d6:86:3f:28:d4:09: 79:51:57:3b:6d:f2:3f:57:b2:fa:74:46:d6:18:01:ed:6c:28: b5:5c:a8:50:de:38:7b:41:a0:99:99:23:5f:c0:4c:fa:ad:ad: 61:57:03:72:26:61:64:40:e9:11:40:04:4d:98:e0:94:6f:53: 64:d2:8b:73:ad:84:a5:7d:5d:83:59:af:a0:b3:77:6b:a4:db: 46:6e:ef:66:ae:f8:2e:6d:e7:01:96:dd:59:8e:d9:d2:a1:bd: 8a:f7:99:06:c1:9d:94:15:3a:3e:75:df:a5:9b:cb:a6:d7:fc: 73:3a:81:4c:ea:27:6f:ba:8c:17:8d:59:a5:17:28:f0:4e:b4: 53:e6:ca:39:eb:14:1d:51:8d:52:34:a5:17:f4:0e:81:33:17: d5:84:4f:96:83:7f:3c:be:18:fc:93:9d:2e:fb:fa:e3:64:67: e2:40:74:6e:9c:e0:a1:32:9d:05:08:a8:71:e7:fd:dc:63:4b: fa:36:6f:4e:28:52:1b:fe:d1:c9:9d:76:64:fe:d1:d0:84:40: 14:0e:8c:e5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E2NkYxMTAvBgNVBAUTKEIyMkMzRDBBQkNEMzkxOTQ4NkEzRTYxRThENzg4OTIz OTIyQkY2QTUwHhcNMjUwODI5MDUyNTM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWQwOC04YTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hkRbD6N10QcKTT69F5/G840H2/2iczhHGzHkELdNipxo4i3fBWpRNn8wgr3 ITFmkycoJHqXqAaW9TRmDKw+h6g8CRD4dW/2gr9/fuv2RHN4NSlwTOutftuMg2ci IDDt3IMPndT+ZMgdiimZexjhGKBgMDlPrXSLGoSsVs1b0jEE931vYnNg5muDmtXa u3lkJ3Ad3Y5Nfoiuze+TDr2JnQngxxMKWffZF7RSWa5H4KfVvzrJf92mc8tzeNRV Uq/3MzZESdUUn7bU+nh6nwXlSEIWsV7MFhFfecPUGQn2N8uTJw9V5oCw077hqrme pEXL/IwHsBzVyldraVJ4BxJgkwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAsgzMFP JUOTjNjLIKYMb77rvTUIMB8GA1UdIwQYMBaAFLIsPQq805GUhqPmHo14iSOSK/al MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTY2Ri84RkNDOUQyOEM2 RjkxMUVFOTdFNkZCMURDNEY5QUUwMi9zaXc5Q3J6VGtaU0dvLVllalhpSkk1SXI5 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NpdzlDcnpUa1pTR28tWWVqWGlKSTVJcjlxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E2NkYvOEZDQzlEMjhDNkY5MTFFRTk3RTZGQjFEQzRGOUFFMDIvNEM3QzVFQ0NF MUIyMTFFRTg0RjAzOTE4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ3YoMA8EAgACMAkDBwAkAyfAEAAwDQYJKoZIhvcNAQELBQADggEB AIWLWX4lA0RCbAHNq2V/4adfnPaxIJmXcZQIz5/txWNMY9zbENU1goRlIEJrUF3s 9daGPyjUCXlRVztt8j9Xsvp0RtYYAe1sKLVcqFDeOHtBoJmZI1/ATPqtrWFXA3Im YWRA6RFABE2Y4JRvU2TSi3OthKV9XYNZr6Czd2uk20Zu72au+C5t5wGW3VmO2dKh vYr3mQbBnZQVOj5136Wby6bX/HM6gUzqJ2+6jBeNWaUXKPBOtFPmyjnrFB1RjVI0 pRf0DoEzF9WET5aDfzy+GPyTnS77+uNkZ+JAdG6c4KEynQUIqHHn/dxjS/o2b04o Uhv+0cmddmT+0dCEQBQOjOU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:59 2026 by rpki-client