$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa File: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (raw, json) Hash identifier: jtEsNW5dsJnyiRP9T6w5VXMqncVI3hSz4F5K41d01ew= Subject key identifier: 3B:52:4C:2B:16:F4:BE:3D:E8:B5:6B:33:45:57:84:C8:35:3A:92:6B Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0227 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa Signing time: Fri 06 Mar 2026 10:15:53 +0000 ROA not before: Fri 06 Mar 2026 10:15:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139839 IP address blocks: 103.132.20.0/23 maxlen: 23 103.132.20.0/24 maxlen: 24 103.132.21.0/24 maxlen: 24 2400:f6a0::/32 maxlen: 32 2400:f6a0::/36 maxlen: 36 2400:f6a0:1000::/36 maxlen: 36 2400:f6a0:2000::/36 maxlen: 36 2400:f6a0:3000::/36 maxlen: 36 2400:f6a0:4000::/36 maxlen: 36 2400:f6a0:5000::/36 maxlen: 36 2400:f6a0:6000::/36 maxlen: 36 2400:f6a0:7000::/36 maxlen: 36 2400:f6a0:8000::/36 maxlen: 36 2400:f6a0:a000::/36 maxlen: 36 2400:f6a0:b000::/36 maxlen: 36 2400:f6a0:c000::/36 maxlen: 36 2400:f6a0:d000::/36 maxlen: 36 2400:f6a0:e000::/36 maxlen: 36 2400:f6a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: Mar 6 10:15:53 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69aaa959-ba30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:5a:f3:7c:eb:78:1f:3f:06:07:1a:bb:60: 98:64:67:a3:a9:0f:da:71:67:b9:dc:ee:08:04:9a: 9e:8e:e5:10:f3:c9:48:35:1e:6d:b8:cd:28:28:b1: cc:58:a0:32:97:07:3e:ea:ce:e5:a5:66:68:92:97: e7:c8:5c:12:38:a3:af:bc:78:2a:36:34:f4:65:9a: fe:43:cd:e0:4f:e7:28:8a:c1:e3:92:49:bc:94:14: 4e:cf:63:d5:d0:2a:ee:0b:57:3c:8f:97:b8:4c:42: 4e:1f:96:4c:07:87:64:09:e8:c5:3e:09:df:46:1f: 82:7f:3b:47:28:40:ab:4a:2b:40:dc:21:d6:6e:65: f0:0e:8c:ac:a2:b7:c2:00:1c:0b:ce:3a:8d:f0:b0: 80:eb:31:6a:a9:6f:5f:47:b6:66:27:30:5d:d7:b7: 92:d7:f9:68:31:0b:45:0a:ab:40:ce:80:8c:8d:46: e2:a6:53:24:a3:21:ad:91:c3:02:de:f1:f4:b0:bd: 5d:96:d1:86:b5:12:64:00:2e:16:3c:74:bb:3f:10: be:78:26:4e:f4:91:15:c5:01:ff:30:0d:a6:0e:5b: 03:a9:74:d3:34:b5:4d:56:4c:a3:ae:ed:ec:9e:be: a0:84:78:13:75:1f:8c:3b:41:de:2c:6d:78:31:0a: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:52:4C:2B:16:F4:BE:3D:E8:B5:6B:33:45:57:84:C8:35:3A:92:6B X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.20.0/23 IPv6: 2400:f6a0::/32 Signature Algorithm: sha256WithRSAEncryption 1c:2e:87:19:b4:c8:bb:02:24:a3:97:a9:26:6c:69:a1:e2:ab: 30:1f:d6:fb:2c:f0:9a:06:29:e3:e9:cf:ff:ee:7d:df:e0:e4: c2:0c:ba:e9:79:25:8c:eb:50:90:94:31:d8:4f:5b:a8:cd:2c: 30:d3:4b:73:04:d6:12:98:89:c8:2f:13:61:f1:84:79:93:46: 42:7b:f9:bf:4e:39:10:7e:5a:92:7d:a2:cf:77:12:24:e4:b0: 6f:c8:5b:4c:2e:67:b5:49:3c:2c:9b:19:c8:e4:4e:a7:29:b4: 96:fd:d0:6a:13:6c:5a:84:c2:08:11:8f:36:db:63:ba:50:3f: 77:37:f6:06:be:91:13:bc:50:17:b1:98:04:07:1e:77:d4:37: 9d:08:04:45:98:f9:da:07:0c:ca:30:50:a9:dc:d8:55:da:44: 5f:e9:df:7f:04:1a:15:19:34:37:03:f0:7f:fb:08:79:1d:3f: 70:fc:c0:b9:30:68:78:63:c2:1a:16:74:22:6d:60:53:7c:99: 82:04:92:cd:83:9f:df:a3:5a:76:da:e5:41:97:d4:fb:31:16: 22:77:15:ef:37:33:0c:07:a0:37:90:76:68:8a:92:e7:69:80: b8:f9:83:ad:42:7c:8d:74:48:a6:67:b1:7e:c7:5c:9d:df:58: 6d:b9:7b:2c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjYwMzA2MTAxNTUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFhYTk1OS1iYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK1a83zreB8/Bgcau2CYZGejqQ/acWe53O4IBJqejuUQ88lINR5tuM0oKLHM WKAylwc+6s7lpWZokpfnyFwSOKOvvHgqNjT0ZZr+Q83gT+coisHjkkm8lBROz2PV 0CruC1c8j5e4TEJOH5ZMB4dkCejFPgnfRh+CfztHKECrSitA3CHWbmXwDoysorfC ABwLzjqN8LCA6zFqqW9fR7ZmJzBd17eS1/loMQtFCqtAzoCMjUbiplMkoyGtkcMC 3vH0sL1dltGGtRJkAC4WPHS7PxC+eCZO9JEVxQH/MA2mDlsDqXTTNLVNVkyjru3s nr6ghHgTdR+MO0HeLG14MQqH5QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDtSTCsW 9L496LVrM0VXhMg1OpJrMB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc4OTAvQURFMTMxODZEQURGMTFFREIxRjlENzE5QzRGOUFFMDIvRUM4Q0E3MkNE QUUzMTFFREEwQTZCMDNEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4QUMA0EAgACMAcDBQAkAPagMA0GCSqGSIb3DQEBCwUAA4IBAQAc LocZtMi7AiSjl6kmbGmh4qswH9b7LPCaBinj6c//7n3f4OTCDLrpeSWM61CQlDHY T1uozSww00tzBNYSmInILxNh8YR5k0ZCe/m/TjkQflqSfaLPdxIk5LBvyFtMLme1 STwsmxnI5E6nKbSW/dBqE2xahMIIEY8222O6UD93N/YGvpETvFAXsZgEBx531Ded CARFmPnaBwzKMFCp3NhV2kRf6d9/BBoVGTQ3A/B/+wh5HT9w/MC5MGh4Y8IaFnQi bWBTfJmCBJLNg5/fo1p22uVBl9T7MRYidxXvNzMMB6A3kHZoipLnaYC4+YOtQnyN dEimZ7F+x1yd31htuXss -----END CERTIFICATE-----Generated at Fri Mar 27 04:12:32 2026 by rpki-client