$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/65EE26547A8711ECBA5D244DC4F9AE02.roa File: 65EE26547A8711ECBA5D244DC4F9AE02.roa (raw, json) Hash identifier: A+pMpuuxK+69eAMmv7UHhfa7LiNDLirKYwDV1gOEsKs= Subject key identifier: 81:B6:AF:24:63:C0:FC:32:8F:D2:C3:CF:71:46:83:B6:E1:4F:7E:73 Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A Certificate serial: 0CA6 Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/65EE26547A8711ECBA5D244DC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:24:25 +0000 ROA not before: Fri 02 May 2025 18:57:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137584 IP address blocks: 103.104.216.0/22 maxlen: 24 103.114.36.0/23 maxlen: 23 103.114.36.0/24 maxlen: 24 103.114.37.0/24 maxlen: 24 103.136.246.0/23 maxlen: 23 103.136.246.0/24 maxlen: 24 103.136.247.0/24 maxlen: 24 2404:6940::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A Validity Not Before: May 2 18:57:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a405c9-0823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:11:8c:82:00:0f:bd:2f:76:a2:ac:cc:fe:14: 11:72:0b:cd:ff:ec:4a:44:a4:b0:f7:0c:1a:bb:dd: 9e:7a:d4:1c:89:cf:e4:89:a2:34:f8:54:7f:21:07: 54:5d:60:7b:65:90:34:a9:52:ed:51:cc:66:b3:f8: 55:c0:07:d7:22:b5:e6:3c:cb:75:7c:a5:44:c9:29: 70:00:c9:b9:cb:7b:5b:ce:0a:90:e6:10:23:84:52: 05:5a:6c:3a:59:74:5a:c2:0c:31:70:1f:4c:cd:7d: fe:31:ad:34:1f:5c:44:28:9b:56:d4:03:96:61:11: 74:76:b6:54:9d:48:f0:4d:aa:96:75:ae:8b:bf:14: 95:4d:5d:cd:ca:4e:bf:fe:d3:07:68:8f:00:68:8c: db:8a:5d:5c:32:3a:2c:a9:86:9f:aa:02:80:ff:b4: 0a:6b:a7:d7:54:a6:a5:f9:35:33:bf:b5:7f:bd:53: 1a:28:59:15:55:e9:ce:b9:eb:ed:4f:7f:71:23:87: 95:01:cd:71:24:f8:90:86:24:7e:d2:76:91:d5:26: 06:8e:d4:2f:c2:b7:19:e6:f7:ea:6c:28:55:2b:77: 6c:84:68:f8:1d:d0:5d:7a:a8:45:b8:8c:ca:b4:5b: 6d:8b:cb:3b:29:3e:60:79:00:db:b1:42:b1:f1:f9: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B6:AF:24:63:C0:FC:32:8F:D2:C3:CF:71:46:83:B6:E1:4F:7E:73 X509v3 Authority Key Identifier: keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/65EE26547A8711ECBA5D244DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.216.0/22 103.114.36.0/23 103.136.246.0/23 IPv6: 2404:6940::/32 Signature Algorithm: sha256WithRSAEncryption 54:94:2d:5d:b1:fe:d4:a1:6d:da:73:ba:e0:ec:00:c7:06:d7: c6:72:c7:a9:3e:06:dc:99:8d:4f:8c:c5:69:7b:f3:ce:f7:0e: a4:ca:fb:61:40:2b:d4:2e:f4:44:23:ff:98:ed:16:47:1f:13: 0f:fe:51:a9:9a:d4:98:82:c9:35:0b:e7:0a:a2:2d:e4:7a:fc: 4f:c7:eb:93:b1:96:29:7c:4c:e9:20:c8:0a:a5:a7:47:30:da: 7f:6a:4c:79:ad:8d:76:db:1e:9c:98:40:9c:4b:bc:ed:39:84: 12:c3:e8:33:b8:d8:e4:36:90:83:c5:05:72:fc:0e:52:4d:d2: 39:36:37:db:c4:c8:33:3f:90:e6:b1:a1:c9:8c:14:0f:de:c0: 8f:99:3c:bb:ee:06:1d:cd:b1:81:b2:3a:93:35:f8:87:dc:0f: 81:84:20:5e:01:36:c2:b0:94:c6:a1:47:ec:2a:de:a8:09:32: bc:4a:d7:fb:33:95:32:d6:5b:ff:8d:76:00:8e:93:65:35:43: bb:fb:74:1a:66:1e:7c:f0:4c:e7:08:83:2d:de:39:5e:95:60: c6:84:4a:f1:f8:ef:c3:24:74:73:ec:9b:90:ba:0d:65:9f:f1: 72:f3:73:4d:28:b8:6d:d2:f2:de:82:80:87:a9:d0:d7:bf:89: aa:19:ab:43 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw NjQ5NzJDOUEwHhcNMjUwNTAyMTg1NzI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDVjOS0wODIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBGMggAPvS92oqzM/hQRcgvN/+xKRKSw9wwau92eetQcic/kiaI0+FR/IQdU XWB7ZZA0qVLtUcxms/hVwAfXIrXmPMt1fKVEySlwAMm5y3tbzgqQ5hAjhFIFWmw6 WXRawgwxcB9MzX3+Ma00H1xEKJtW1AOWYRF0drZUnUjwTaqWda6LvxSVTV3Nyk6/ /tMHaI8AaIzbil1cMjosqYafqgKA/7QKa6fXVKal+TUzv7V/vVMaKFkVVenOuevt T39xI4eVAc1xJPiQhiR+0naR1SYGjtQvwrcZ5vfqbChVK3dshGj4HdBdeqhFuIzK tFtti8s7KT5geQDbsUKx8fn67wIDAQABo4ICezCCAncwHQYDVR0OBBYEFIG2ryRj wPwyj9LDz3FGg7bhT35zMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFBQjUvQTNCREU3QTAxMEY2MTFFQTkxMDNCNjFCQzRGOUFFMDIvNjVFRTI2NTQ3 QTg3MTFFQ0JBNUQyNDREQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ2jYAwQBZ3IkAwQBZ4j2MA0EAgACMAcDBQAkBGlAMA0GCSqGSIb3 DQEBCwUAA4IBAQBUlC1dsf7UoW3ac7rg7ADHBtfGcsepPgbcmY1PjMVpe/PO9w6k yvthQCvULvREI/+Y7RZHHxMP/lGpmtSYgsk1C+cKoi3kevxPx+uTsZYpfEzpIMgK padHMNp/akx5rY122x6cmECcS7ztOYQSw+gzuNjkNpCDxQVy/A5STdI5NjfbxMgz P5DmsaHJjBQP3sCPmTy77gYdzbGBsjqTNfiH3A+BhCBeATbCsJTGoUfsKt6oCTK8 Stf7M5Uy1lv/jXYAjpNlNUO7+3QaZh588EznCIMt3jlelWDGhErx+O/DJHRz7JuQ ug1ln/Fy83NNKLht0vLegoCHqdDXv4mqGatD -----END CERTIFICATE-----Generated at Thu Mar 26 07:23:00 2026 by rpki-client