$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/CDA6F2D0111611EFAD808A81C4F9AE02.roa File: CDA6F2D0111611EFAD808A81C4F9AE02.roa (raw, json) Hash identifier: mOiKBb1fBKJiEZ/Q4F6SgNQ8FYEX0pSib9+RjzLS4+g= Subject key identifier: 08:00:5F:08:25:2F:B9:EA:0A:66:8F:BF:AA:67:96:E2:5C:DC:2C:AB Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Certificate serial: 0841 Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/CDA6F2D0111611EFAD808A81C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:08:39 +0000 ROA not before: Sat 24 Jan 2026 21:17:30 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136251 IP address blocks: 103.204.180.0/24 maxlen: 24 103.204.181.0/24 maxlen: 24 103.204.182.0/24 maxlen: 24 103.204.183.0/24 maxlen: 24 202.181.0.0/24 maxlen: 24 202.181.1.0/24 maxlen: 24 202.181.2.0/24 maxlen: 24 202.181.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A Validity Not Before: Jan 24 21:17:30 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44867-4cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:8c:0f:ff:fa:6e:43:f6:22:cf:32:4b:80: 34:4b:2c:84:84:8f:49:3a:70:fe:25:2c:ba:11:0f: 17:80:48:f7:f7:d3:c3:d9:36:b5:3f:51:e4:72:c5: 4a:0e:92:ad:b6:c8:75:c3:cb:33:e0:0c:08:62:00: 51:97:b3:57:10:44:1f:21:f8:d5:00:e4:93:64:2c: b7:28:72:dd:ec:09:02:7d:96:cc:93:de:16:ea:19: fd:2a:b9:79:39:da:35:2d:1f:8d:20:66:88:6f:c9: f3:42:6a:e0:39:30:dd:59:3f:f4:c5:88:53:dd:dc: 60:22:54:0d:84:6f:34:46:56:fe:90:0e:d1:91:15: 66:d6:e6:a4:8f:6b:e5:06:ef:34:86:15:98:99:9c: 59:fe:bc:8d:ca:64:de:b2:72:84:0a:47:7d:92:4b: fe:70:8b:e7:e0:1c:7b:69:46:61:48:fe:87:31:1e: 57:94:f9:47:4a:8f:52:aa:bf:3f:91:0e:d5:fe:69: dc:5f:e1:df:78:d4:c3:e6:21:16:a3:64:17:fb:55: 8e:d1:ff:95:85:43:48:da:d1:5b:a8:6c:ef:e3:de: 4c:fd:43:48:1a:2e:52:4f:59:f4:17:c2:65:4f:a8: 95:28:63:95:57:02:dd:b8:e3:b0:3b:d2:c3:63:90: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:00:5F:08:25:2F:B9:EA:0A:66:8F:BF:AA:67:96:E2:5C:DC:2C:AB X509v3 Authority Key Identifier: keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/CDA6F2D0111611EFAD808A81C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.180.0/22 202.181.0.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:24:4b:86:86:d1:b9:52:00:5e:00:5a:c1:1c:71:5a:5d:e2: 09:fe:0d:a4:68:6e:c8:e2:1d:8f:25:21:e8:ed:d1:38:92:ca: 96:5c:26:19:7e:4b:59:c0:03:47:66:8a:40:b8:e8:02:0b:fa: ae:bf:da:8a:48:95:5c:53:56:47:6c:52:13:41:6c:1d:40:df: f3:99:35:2f:b4:f4:94:ed:50:a8:cc:0a:7d:38:d2:89:65:e0: f1:aa:40:ee:e4:d9:63:4a:99:07:c9:64:28:1c:26:39:cc:a4: b5:67:c5:e9:e0:69:4e:a0:a7:82:b6:c1:65:fb:56:aa:92:22: 19:fe:32:b5:e7:e2:fc:86:c5:25:59:dc:6b:a2:a3:cf:d5:c0: 36:18:c8:12:f9:18:67:5c:31:c3:dc:ae:d3:98:fb:c6:16:9a: b3:82:e6:14:13:27:50:87:60:30:b5:18:d9:94:80:4f:cb:b2: e8:50:8f:b7:ef:b2:08:2e:0b:29:a2:e0:7c:f4:65:19:26:9b: bd:34:f6:20:e3:90:51:89:79:83:a2:a5:0b:06:f8:65:69:bd: 09:22:2d:32:49:67:12:5a:e9:1f:45:71:56:bc:ec:d4:ba:70: b6:4f:a7:85:ff:78:18:2b:cf:c4:4e:92:23:2a:47:1f:87:44: 80:1e:37:3e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0 RkU1QjU2NEEwHhcNMjYwMTI0MjExNzMwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDg2Ny00Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gWMD//6bkP2Is8yS4A0SyyEhI9JOnD+JSy6EQ8XgEj399PD2Ta1P1HkcsVK DpKttsh1w8sz4AwIYgBRl7NXEEQfIfjVAOSTZCy3KHLd7AkCfZbMk94W6hn9Krl5 Odo1LR+NIGaIb8nzQmrgOTDdWT/0xYhT3dxgIlQNhG80Rlb+kA7RkRVm1uakj2vl Bu80hhWYmZxZ/ryNymTesnKECkd9kkv+cIvn4Bx7aUZhSP6HMR5XlPlHSo9Sqr8/ kQ7V/mncX+HfeNTD5iEWo2QX+1WO0f+VhUNI2tFbqGzv495M/UNIGi5ST1n0F8Jl T6iVKGOVVwLduOOwO9LDY5D9VQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAgAXwgl L7nqCmaPv6pnluJc3CyrMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3 N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NFMjIvMTJGQTgxMUExNzdCMTFFQjg0NjM0QzM2QzRGOUFFMDIvQ0RBNkYyRDAx MTE2MTFFRkFEODA4QTgxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ8y0AwQCyrUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeJEuGhtG5UgBe AFrBHHFaXeIJ/g2kaG7I4h2PJSHo7dE4ksqWXCYZfktZwANHZopAuOgCC/quv9qK SJVcU1ZHbFITQWwdQN/zmTUvtPSU7VCozAp9ONKJZeDxqkDu5NljSpkHyWQoHCY5 zKS1Z8Xp4GlOoKeCtsFl+1aqkiIZ/jK15+L8hsUlWdxroqPP1cA2GMgS+RhnXDHD 3K7TmPvGFpqzguYUEydQh2AwtRjZlIBPy7LoUI+377IILgspouB89GUZJpu9NPYg 45BRiXmDoqULBvhlab0JIi0ySWcSWukfRXFWvOzUunC2T6eF/3gYK8/ETpIjKkcf h0SAHjc+ -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:33 2026 by rpki-client