$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa File: 210E6234639E11EB81185C31C4F9AE02.roa (raw, json) Hash identifier: xqzD7l4kBCICOJbvnqffEFI69K2k3TbirYz8xu8hGPA= Subject key identifier: 96:67:40:48:A2:B1:EC:8B:34:E8:46:DD:34:B4:6A:52:95:3B:69:70 Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Certificate serial: 074F Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa Signing time: Wed 04 Mar 2026 21:29:12 +0000 ROA not before: Wed 04 Mar 2026 21:29:12 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 140037 IP address blocks: 103.147.166.0/23 maxlen: 23 103.147.166.0/24 maxlen: 24 103.147.167.0/24 maxlen: 24 2001:df0:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1 Validity Not Before: Mar 4 21:29:12 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a8a428-a2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:5a:77:23:5a:12:55:07:c6:19:1d:d3:cc: 6f:41:37:7f:50:71:b2:f7:38:c4:fd:68:15:2b:37: be:88:0d:46:4e:45:1e:6e:d9:d8:57:19:2e:61:45: a2:27:6c:ac:4c:27:ed:03:cd:40:a3:26:43:86:db: e9:3b:87:41:32:2f:3d:29:fb:79:cb:d4:16:8f:3c: 4f:ec:48:5c:f7:bc:3e:2c:5b:86:99:54:93:4f:70: 95:aa:6c:38:42:1f:b7:5d:93:11:9a:95:ab:dd:1c: 02:48:e1:a6:49:76:64:43:d1:b7:62:fc:0c:81:25: 04:49:3a:f1:c4:c2:90:b3:91:4f:d1:7f:e1:12:b0: ef:4f:4e:94:97:4e:6f:b8:28:b1:30:99:64:90:b0: 15:ce:49:92:f4:ba:a2:5d:0e:04:82:46:a7:34:51: e8:b9:01:3f:15:6d:12:18:d4:72:bb:1a:0d:b0:e7: 50:2b:c2:c4:6c:42:46:e1:77:d5:b2:30:11:36:c3: 89:c9:52:cf:c8:f9:b9:8a:04:4b:d4:1f:8b:03:1f: ea:d6:e6:3b:ca:a2:7c:93:00:cc:33:8b:d9:51:ce: 4c:f5:36:80:e3:8c:00:36:dc:01:2d:e4:83:2c:a1: 7f:9e:70:7c:da:ba:31:f1:30:c7:a7:fa:bd:b5:6c: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:67:40:48:A2:B1:EC:8B:34:E8:46:DD:34:B4:6A:52:95:3B:69:70 X509v3 Authority Key Identifier: keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/210E6234639E11EB81185C31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.166.0/23 IPv6: 2001:df0:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:a9:e7:1f:7c:3e:e5:1d:29:87:18:05:2c:01:c3:ef:3f:9d: b1:96:09:d6:15:67:54:41:2c:2f:57:f4:c2:9a:89:54:af:fa: cf:a9:dc:49:f7:bb:fd:17:e7:67:b5:54:41:22:f6:2a:22:3f: 1a:f0:9c:36:9a:66:78:45:e6:02:f9:6e:5f:02:af:a2:91:89: 67:2f:a2:fb:80:44:df:0a:44:58:0d:87:a5:80:e4:ca:2f:ea: 86:3b:f0:15:6f:82:e4:74:61:62:50:ba:64:06:c0:d6:0e:6b: 1a:b3:d8:2d:71:6a:6f:8a:93:43:66:fb:91:96:e6:1f:af:84: e9:06:62:98:7a:45:bb:4f:72:eb:ab:59:4d:19:1f:42:87:98: 85:67:d7:b8:7f:53:56:1d:0a:4f:8f:36:07:58:5b:c1:4a:b7: eb:2b:b5:bc:a1:ba:a0:89:a8:0d:25:17:f0:ef:83:97:fe:8e: 50:f3:4d:96:ef:68:b6:8b:ac:9e:e2:33:86:61:e0:22:ea:34: cc:b4:de:54:3e:92:ae:ce:3a:b7:0e:c3:21:3b:db:5b:b2:78: 35:ab:af:b2:10:81:1d:62:02:b6:21:5a:dd:72:b5:e7:86:69: 18:c4:9d:c3:fb:da:bc:7e:fd:49:21:aa:df:73:84:4f:04:1c: 7d:20:61:55 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5 NDNBRkUwQzEwHhcNMjYwMzA0MjEyOTEyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4YTQyOC1hMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CVadyNaElUHxhkd08xvQTd/UHGy9zjE/WgVKze+iA1GTkUebtnYVxkuYUWi J2ysTCftA81AoyZDhtvpO4dBMi89Kft5y9QWjzxP7Ehc97w+LFuGmVSTT3CVqmw4 Qh+3XZMRmpWr3RwCSOGmSXZkQ9G3YvwMgSUESTrxxMKQs5FP0X/hErDvT06Ul05v uCixMJlkkLAVzkmS9LqiXQ4EgkanNFHouQE/FW0SGNRyuxoNsOdQK8LEbEJG4XfV sjARNsOJyVLPyPm5igRL1B+LAx/q1uY7yqJ8kwDMM4vZUc5M9TaA44wANtwBLeSD LKF/nnB82rox8TDHp/q9tWz0eQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJZnQEii seyLNOhG3TS0alKVO2lwMB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0 TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEUxQ0MvNUZFRkRBOEU2MzlDMTFFQjkwQjgzMDEzQzRGOUFFMDIvMjEwRTYyMzQ2 MzlFMTFFQjgxMTg1QzMxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5OmMA8EAgACMAkDBwAgAQ3woMAwDQYJKoZIhvcNAQELBQADggEB AIGp5x98PuUdKYcYBSwBw+8/nbGWCdYVZ1RBLC9X9MKaiVSv+s+p3En3u/0X52e1 VEEi9ioiPxrwnDaaZnhF5gL5bl8Cr6KRiWcvovuARN8KRFgNh6WA5Mov6oY78BVv guR0YWJQumQGwNYOaxqz2C1xam+Kk0Nm+5GW5h+vhOkGYph6RbtPcuurWU0ZH0KH mIVn17h/U1YdCk+PNgdYW8FKt+srtbyhuqCJqA0lF/Dvg5f+jlDzTZbvaLaLrJ7i M4Zh4CLqNMy03lQ+kq7OOrcOwyE721uyeDWrr7IQgR1iArYhWt1yteeGaRjEncP7 2rx+/Ukhqt9zhE8EHH0gYVU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:28 2026 by rpki-client