$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa File: 1C2EA330925011EE9571EE40C4F9AE02.roa (raw, json) Hash identifier: XfdGm7eKGJG4mI4OlbsmvCWQLht74XpIFUZS0ZbYwl8= Subject key identifier: B7:63:59:6B:69:DE:4D:A5:D3:52:5E:16:B8:F0:CC:E8:FE:3C:AE:87 Certificate issuer: /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26 Certificate serial: 01CA Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa Signing time: Fri 01 May 2026 04:35:46 +0000 ROA not before: Fri 01 May 2026 04:35:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136478 IP address blocks: 103.184.253.0/24 maxlen: 24 2001:df0:94c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 03:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26 Validity Not Before: May 1 04:35:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f42da2-f5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:84:f1:02:40:c5:32:d9:d5:67:59:e0:ee: fd:73:e3:90:83:a4:23:87:b9:61:93:2e:27:b8:3f: 5d:7a:0c:8d:09:b0:b0:fe:9b:19:e8:74:0c:09:5a: 3c:d9:c1:67:6a:b3:e8:3a:ea:73:28:dc:4e:4a:ae: 7b:6f:ca:1e:04:34:f0:ac:4f:6a:d7:6a:35:a7:d1: 6d:b1:ae:24:7c:1c:b4:ff:70:fc:0a:92:a4:27:b8: 4f:26:9a:f8:a8:0e:0c:56:53:92:26:ae:2b:b1:a9: 09:b1:5e:e4:2e:1d:86:26:f4:3d:22:73:a7:53:6c: a4:00:55:29:2d:38:42:38:2a:76:69:72:8d:5d:c3: c2:fa:02:fd:f1:64:df:89:d3:e8:7a:bc:df:ce:3d: 34:91:25:09:90:b5:c1:e0:08:72:3e:f7:01:12:cd: 36:15:5f:ff:40:9e:6d:2f:ed:0b:2b:88:00:56:92: 14:08:e7:d2:37:05:72:17:de:c2:b7:e3:9e:4f:e8: ca:88:6b:7f:e3:27:36:89:8e:56:fc:4d:98:3e:28: 94:a0:ae:5a:5d:e0:e5:dc:17:98:c4:f8:fd:87:92: d4:93:fe:ce:1c:6c:c1:d0:81:af:7c:af:35:cf:af: 7a:95:9b:e9:fe:ed:3d:9e:09:fb:c0:f0:67:85:5f: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:63:59:6B:69:DE:4D:A5:D3:52:5E:16:B8:F0:CC:E8:FE:3C:AE:87 X509v3 Authority Key Identifier: keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.184.253.0/24 IPv6: 2001:df0:94c0::/48 Signature Algorithm: sha256WithRSAEncryption a1:94:8e:48:ea:fc:78:b1:94:30:4f:bb:a9:77:35:e8:69:13: 76:1e:d0:ba:ce:38:1d:e7:d9:41:ef:da:85:3f:dc:ad:8d:73: a5:7b:ee:2f:0f:60:8e:61:58:ee:cb:5b:01:7e:c8:7b:dd:65: 8f:00:02:7c:ca:8d:4a:ec:63:a3:c1:25:de:6b:34:ca:95:1a: 17:d1:fc:7c:68:ea:96:67:3f:0f:1c:67:f9:7e:2b:f2:4b:42: db:bb:f6:b7:1c:fe:11:4e:d2:d3:3d:1b:cc:38:40:fa:7e:ea: 70:47:a7:76:06:1e:5a:fa:aa:5f:d4:aa:66:84:e1:2a:2c:ab: 7c:de:e6:83:3b:80:6f:77:67:a1:0f:ec:f3:c4:46:ef:05:f2: e9:09:73:de:1d:e1:66:60:ca:52:8b:44:16:e6:27:0c:83:1a: fd:02:83:91:73:f3:90:db:58:b5:02:b7:bb:71:cc:e3:2c:4d: d0:42:b5:e7:89:2b:11:57:46:3f:44:31:b0:17:e0:52:dd:68: 99:b9:0b:c1:88:fd:0b:f6:15:bc:6c:8b:0f:e0:bd:3b:a0:a1: d1:68:62:27:8e:0d:11:cc:69:da:44:59:f0:aa:04:a7:2b:9f: 0a:d6:2a:4d:d6:61:70:7f:21:cb:5a:4e:cc:92:18:54:1c:9b: 3c:71:e4:58 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDMzMxMTAvBgNVBAUTKERFQUYxQzhERTRGRTNDNTFDNjkxNTNGQ0FGOUZFOEMy QUQ2RjhFMjYwHhcNMjYwNTAxMDQzNTQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY0MmRhMi1mNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMCE8QJAxTLZ1WdZ4O79c+OQg6Qjh7lhky4nuD9degyNCbCw/psZ6HQMCVo8 2cFnarPoOupzKNxOSq57b8oeBDTwrE9q12o1p9Ftsa4kfBy0/3D8CpKkJ7hPJpr4 qA4MVlOSJq4rsakJsV7kLh2GJvQ9InOnU2ykAFUpLThCOCp2aXKNXcPC+gL98WTf idPoerzfzj00kSUJkLXB4AhyPvcBEs02FV//QJ5tL+0LK4gAVpIUCOfSNwVyF97C t+OeT+jKiGt/4yc2iY5W/E2YPiiUoK5aXeDl3BeYxPj9h5LUk/7OHGzB0IGvfK81 z696lZvp/u09ngn7wPBnhV/q/wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLdjWWtp 3k2l01JeFrjwzOj+PK6HMB8GA1UdIwQYMBaAFN6vHI3k/jxRxpFT/K+f6MKtb44m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzMy9CMEJGQUMzNDky NEYxMUVFQThDMjI0NDBDNEY5QUUwMi8zcThjamVULVBGSEdrVlA4cjVfb3dxMXZq aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNxOGNqZVQtUEZIR2tWUDhyNV9vd3ExdmppWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FDMzMvQjBCRkFDMzQ5MjRGMTFFRUE4QzIyNDQwQzRGOUFFMDIvMUMyRUEzMzA5 MjUwMTFFRTk1NzFFRTQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ7j9MA8EAgACMAkDBwAgAQ3wlMAwDQYJKoZIhvcNAQELBQADggEB AKGUjkjq/HixlDBPu6l3NehpE3Ye0LrOOB3n2UHv2oU/3K2Nc6V77i8PYI5hWO7L WwF+yHvdZY8AAnzKjUrsY6PBJd5rNMqVGhfR/Hxo6pZnPw8cZ/l+K/JLQtu79rcc /hFO0tM9G8w4QPp+6nBHp3YGHlr6ql/UqmaE4Sosq3ze5oM7gG93Z6EP7PPERu8F 8ukJc94d4WZgylKLRBbmJwyDGv0Cg5Fz85DbWLUCt7txzOMsTdBCteeJKxFXRj9E MbAX4FLdaJm5C8GI/Qv2Fbxsiw/gvTugodFoYieODRHMadpEWfCqBKcrnwrWKk3W YXB/IctaTsySGFQcmzxx5Fg= -----END CERTIFICATE-----Generated at Wed May 13 12:31:19 2026 by rpki-client