$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/3A5DE11AE17511F084EED35B3E6F56BC.roa File: 3A5DE11AE17511F084EED35B3E6F56BC.roa (raw, json) Hash identifier: nGjZghgPTQAKj7m8Hrr253DItDRqZimbCIH9cpE2W6s= Subject key identifier: A0:95:4F:4B:60:B1:E4:8A:BE:5D:D6:A1:BA:49:7F:76:9A:1E:D4:3E Certificate issuer: /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Certificate serial: 2F Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/3A5DE11AE17511F084EED35B3E6F56BC.roa Signing time: Sat 07 Mar 2026 08:45:14 +0000 ROA not before: Sat 07 Mar 2026 08:45:14 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137386 IP address blocks: 103.48.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9 Validity Not Before: Mar 7 08:45:14 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69abe59a-60a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0c:aa:65:92:76:5b:0b:e9:91:ce:c1:fb:4e: a9:24:cb:44:40:4b:32:de:5c:95:dc:69:5a:b0:3e: f2:0d:4c:9e:da:53:50:f3:d8:f0:76:ab:e5:74:15: 54:5a:30:e9:14:69:f1:f9:2a:b0:24:26:24:06:cd: 73:f3:a1:2b:aa:07:7f:a4:d8:fb:a1:1c:5c:3b:f6: bd:f6:af:f0:71:44:44:8e:6a:62:83:d7:07:74:71: f6:8c:cd:dc:c3:81:24:24:0a:5f:12:00:7b:4d:38: 28:ea:b3:6e:f3:35:2c:b8:c2:27:a3:85:27:2b:69: 2c:07:8f:c0:72:6a:13:6c:0b:87:58:f6:40:31:6b: 4e:e1:cb:bb:8a:4d:e8:a9:84:74:21:d0:75:dc:04: fc:fa:6f:88:89:da:fc:85:4a:e5:bc:82:1b:37:61: e6:f1:e5:77:88:1a:4e:0b:11:d1:55:68:e4:8e:13: ed:d3:41:15:77:50:72:23:24:11:40:4c:a6:ec:db: 88:5a:22:46:91:2a:b9:3e:73:0a:d7:26:07:b5:a3: 67:fc:46:bc:e5:42:23:c2:72:1f:7d:48:1a:c5:05: 11:d3:32:37:94:03:70:b4:3f:41:42:fa:85:00:43: 37:a5:b8:f4:75:4c:2e:ab:92:cd:0a:a5:36:ee:ef: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:95:4F:4B:60:B1:E4:8A:BE:5D:D6:A1:BA:49:7F:76:9A:1E:D4:3E X509v3 Authority Key Identifier: keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/3A5DE11AE17511F084EED35B3E6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.48.164.0/22 Signature Algorithm: sha256WithRSAEncryption e7:5f:9d:88:53:02:66:e7:e9:d6:b6:3e:fd:7d:47:f7:e1:1a: ef:3b:6d:1b:02:3c:b9:43:29:46:31:87:54:37:69:59:be:e2: 86:4d:68:8f:c7:48:1b:b1:67:1b:90:40:5a:ea:5b:51:25:be: af:cb:7d:7a:ef:ba:b7:85:fd:fe:11:e2:60:a0:18:04:85:1b: 15:d7:69:5c:5d:0e:91:2e:ad:32:d6:02:17:06:54:93:da:c1: 4a:20:f1:3b:7a:20:d2:ea:6c:ea:56:ea:2e:f7:00:83:31:0c: 79:0f:7b:45:a4:bc:d6:6d:3d:8d:c1:bf:c4:bb:37:b5:63:ae: 87:10:9f:02:1e:bd:6c:71:e8:14:6c:0d:b4:60:47:66:88:7e: 21:15:a1:ef:b2:1b:87:71:74:a1:b4:e3:05:c9:2a:f6:86:0d: 53:0c:a4:78:d9:f9:e4:df:42:7b:ff:c2:4b:ec:e3:7d:de:9c: 5c:08:b0:6b:2c:84:32:2b:39:30:f2:a0:7d:f4:f8:e2:27:5b: 68:50:08:8a:de:c3:0b:d5:e1:47:f3:d6:91:ea:e7:13:fc:22: db:68:52:c2:d2:de:c0:fb:16:af:f4:24:29:78:04:a2:ba:25: e8:9c:ea:e3:88:b3:ec:cb:b7:c5:62:a3:2a:32:75:94:66:c2: 80:20:a0:c7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUJBMjExMC8GA1UEBRMoRkU5OThBQkJCMTM0QjkzQzFDRTdGODRFOEI5RkJFMURE QTlCNjRBOTAeFw0yNjAzMDcwODQ1MTRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YWJlNTlhLTYwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLDKplknZbC+mRzsH7Tqkky0RASzLeXJXcaVqwPvINTJ7aU1Dz2PB2q+V0FVRa MOkUafH5KrAkJiQGzXPzoSuqB3+k2PuhHFw79r32r/BxRESOamKD1wd0cfaMzdzD gSQkCl8SAHtNOCjqs27zNSy4wiejhScraSwHj8ByahNsC4dY9kAxa07hy7uKTeip hHQh0HXcBPz6b4iJ2vyFSuW8ghs3Yebx5XeIGk4LEdFVaOSOE+3TQRV3UHIjJBFA TKbs24haIkaRKrk+cwrXJge1o2f8RrzlQiPCch99SBrFBRHTMjeUA3C0P0FC+oUA QzeluPR1TC6rks0KpTbu77t1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUoJVPS2Cx 5Iq+Xdahukl/dpoe1D4wHwYDVR0jBBgwFoAU/pmKu7E0uTwc5/hOi5++HdqbZKkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBQkEyL0I0NDM2MEM4RTE3 NDExRjBBNTQxRDAyRDNFNkY1NkJDL19wbUt1N0UwdVR3YzVfaE9pNS0tSGRxYlpL ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3BtS3U3RTB1VHdjNV9oT2k1LS1IZHFiWktrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJBMi9CNDQzNjBDOEUxNzQxMUYwQTU0MUQwMkQzRTZGNTZCQy8zQTVERTExQUUx NzUxMUYwODRFRUQzNUIzRTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnMKQwDQYJKoZIhvcNAQELBQADggEBAOdfnYhTAmbn6da2Pv19R/fh Gu87bRsCPLlDKUYxh1Q3aVm+4oZNaI/HSBuxZxuQQFrqW1Elvq/LfXrvureF/f4R 4mCgGASFGxXXaVxdDpEurTLWAhcGVJPawUog8Tt6INLqbOpW6i73AIMxDHkPe0Wk vNZtPY3Bv8S7N7VjrocQnwIevWxx6BRsDbRgR2aIfiEVoe+yG4dxdKG04wXJKvaG DVMMpHjZ+eTfQnv/wkvs433enFwIsGsshDIrOTDyoH30+OInW2hQCIrewwvV4Ufz 1pHq5xP8IttoUsLS3sD7Fq/0JCl4BKK6Jeic6uOIs+zLt8VioyoydZRmwoAgoMc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:49 2026 by rpki-client