$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa File: 2884888A717011E99BA2FB3DC4F9AE02.roa (raw, json) Hash identifier: PaYa3XqCNqlKALsec1HMQNqlcAxMErVMEmTN74jVBUA= Subject key identifier: 46:60:1B:5B:91:03:CC:D1:85:85:87:EA:56:2E:E6:C8:E9:64:64:B7 Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Certificate serial: 110A Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:26:39 +0000 ROA not before: Fri 30 Jan 2026 17:15:00 +0000 ROA not after: Tue 02 Jun 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.116.193.0/24 maxlen: 24 103.116.194.0/24 maxlen: 24 2001:df3:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4362 (0x110a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686 Validity Not Before: Jan 30 17:15:00 2026 GMT Not After : Jun 2 00:00:00 2026 GMT Subject: CN=69a468bf-8b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:13:09:2e:7a:a4:61:8f:de:47:82:21:53:c0: b3:8c:b9:a0:d1:09:91:6c:5d:fa:3d:85:8e:b1:81: ef:0b:71:4e:51:92:5e:8b:13:06:1c:b4:9e:58:61: 7f:75:5a:d5:c5:78:d6:1f:6b:34:0e:5a:1c:9a:bf: 78:f5:fc:87:e3:ac:7e:be:86:33:5a:83:fc:e8:3b: 2c:e1:6d:57:af:02:70:7f:e3:88:a5:e7:ab:c8:b4: fb:88:07:e0:0d:09:e1:dc:22:20:81:78:5e:ce:cd: d4:49:be:8e:5b:97:8c:d3:65:a1:e2:3a:2d:13:c8: 66:76:90:18:23:87:eb:eb:fc:34:4e:95:53:7a:9a: 33:f2:a1:e9:6d:f4:d9:fb:d9:86:4c:0c:4d:c2:4e: 32:37:6c:21:3d:b4:b4:4a:c2:a7:09:df:bd:89:b9: b2:60:7c:c9:85:fa:57:cc:5e:35:a5:0b:c0:ea:b1: c9:28:fc:40:d3:6e:ac:f9:15:db:88:1e:88:97:f9: dc:40:33:8e:c4:35:df:63:66:9a:54:52:ee:b2:7c: ae:71:d1:2f:60:bd:9d:99:0b:97:ef:8a:a9:34:e9: 1f:c3:22:b8:d6:93:e5:72:dc:9c:a5:c7:7c:c0:40: 4d:d7:61:f9:68:ca:34:fb:28:ac:d1:7a:aa:33:13: 14:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:60:1B:5B:91:03:CC:D1:85:85:87:EA:56:2E:E6:C8:E9:64:64:B7 X509v3 Authority Key Identifier: keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/2884888A717011E99BA2FB3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.193.0-103.116.194.255 IPv6: 2001:df3:1300::/48 Signature Algorithm: sha256WithRSAEncryption 1a:c4:53:88:f8:f5:dd:b3:08:20:2a:9d:31:fa:6f:ac:e1:8d: a4:20:e2:9d:0b:6d:2f:86:d1:13:56:0b:0e:d2:83:25:da:fc: da:7d:4d:42:c2:52:1c:36:26:2a:96:fd:f8:65:ec:ac:84:3a: 03:84:2b:0c:d6:e3:2b:89:98:12:f2:58:06:96:a1:c1:9d:6b: ca:67:f8:25:5c:a7:c6:63:66:e2:be:d4:a3:f4:87:45:9c:8d: 35:00:12:8b:f2:d6:9f:16:c9:e6:47:97:c4:2b:57:59:bd:73: ae:b0:bf:07:02:0a:36:fc:ae:66:7a:6e:f4:81:be:09:59:ed: 07:69:88:4e:4f:46:72:60:d8:11:ab:05:e8:2a:56:7e:51:e9: c0:a5:82:81:7b:0f:92:28:d5:a2:9b:a6:09:78:02:78:13:7c: e3:ee:5f:e1:aa:a2:a0:b9:c6:d4:3d:93:c5:76:1d:70:bb:e8: 45:a4:a8:a9:38:f0:b4:76:21:b0:8b:90:a6:1f:6d:a6:0a:55: a9:a8:50:67:0d:f4:fe:9b:e6:b6:da:ab:d4:f0:5a:c0:6d:6f: fa:69:8c:e1:0f:71:79:4a:84:bd:4e:53:f5:0f:19:62:e1:0e: b7:5c:56:dc:3c:d6:ff:54:ce:62:c6:a0:d1:51:1a:3b:5d:b0: ca:ac:85:07 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICEQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy OThDNUU2ODYwHhcNMjYwMTMwMTcxNTAwWhcNMjYwNjAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhiZi04YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xMJLnqkYY/eR4IhU8CzjLmg0QmRbF36PYWOsYHvC3FOUZJeixMGHLSeWGF/ dVrVxXjWH2s0Dlocmr949fyH46x+voYzWoP86Dss4W1XrwJwf+OIpeeryLT7iAfg DQnh3CIggXhezs3USb6OW5eM02Wh4jotE8hmdpAYI4fr6/w0TpVTepoz8qHpbfTZ +9mGTAxNwk4yN2whPbS0SsKnCd+9ibmyYHzJhfpXzF41pQvA6rHJKPxA026s+RXb iB6Il/ncQDOOxDXfY2aaVFLusnyucdEvYL2dmQuX74qpNOkfwyK41pPlctycpcd8 wEBN12H5aMo0+yis0XqqMxMU0wIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFEZgG1uR A8zRhYWH6lYu5sjpZGS3MB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQzQTkvQkI3RkZCOEUzQTkyMTFFOUI1MkRDRjUzQzRGOUFFMDIvMjg4NDg4OEE3 MTcwMTFFOTlCQTJGQjNEQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAU BAIAATAOMAwDBABndMEDBABndMIwDwQCAAIwCQMHACABDfMTADANBgkqhkiG9w0B AQsFAAOCAQEAGsRTiPj13bMIICqdMfpvrOGNpCDinQttL4bRE1YLDtKDJdr82n1N QsJSHDYmKpb9+GXsrIQ6A4QrDNbjK4mYEvJYBpahwZ1rymf4JVynxmNm4r7Uo/SH RZyNNQASi/LWnxbJ5keXxCtXWb1zrrC/BwIKNvyuZnpu9IG+CVntB2mITk9GcmDY EasF6CpWflHpwKWCgXsPkijVopumCXgCeBN84+5f4aqioLnG1D2TxXYdcLvoRaSo qTjwtHYhsIuQph9tpgpVqahQZw30/pvmttqr1PBawG1v+mmM4Q9xeUqEvU5T9Q8Z YuEOt1xW3DzW/1TOYsag0VEaO12wyqyFBw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:53 2026 by rpki-client