$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa File: 3ABFAC2231E211EFA341983CC4F9AE02.roa (raw, json) Hash identifier: 9utKPxoH2n6Lt3z3yPm91op8vGhWDr2B1tZqqN/7b1Q= Subject key identifier: 2E:19:75:5E:BA:1E:F8:0D:D5:46:30:B9:BF:78:4A:29:B7:C0:91:82 Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 08C5 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:05:29 +0000 ROA not before: Tue 06 May 2025 21:01:34 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 400619 IP address blocks: 103.151.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2245 (0x8c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: May 6 21:01:34 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a447a8-7b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:f1:44:5a:c4:d1:11:7b:69:36:f3:1c:8c: df:42:74:fa:bf:56:fa:bc:75:88:a5:72:66:7d:f2: ee:54:63:0b:4d:6b:5f:7e:a6:a8:8d:f4:e0:82:31: 20:d7:49:fa:af:07:78:3b:28:b0:35:27:54:9e:fd: 3c:3b:10:9c:19:f9:6f:62:8b:5c:8d:98:6c:ce:7f: 00:a3:29:4c:e6:2f:74:6b:3a:fc:d8:fa:27:5c:b2: 4e:3f:7e:26:77:73:b2:05:0c:b7:52:07:a4:fd:d3: 18:da:73:bd:ea:63:ef:a0:3f:ac:31:f7:23:17:be: e9:34:83:fe:45:97:09:fd:3e:f5:6a:f9:88:4c:13: 64:da:1f:28:56:10:89:aa:67:95:b6:c3:56:22:5d: fc:c3:d1:d9:fd:fc:c7:98:c1:8d:34:4b:2d:c7:7f: 56:91:c8:7b:24:6b:12:db:94:50:5d:67:cb:27:05: ea:4d:5f:63:af:31:93:9a:68:12:c4:a2:39:d7:e9: d7:77:2b:c6:20:1d:be:c4:37:61:a9:2d:26:f3:27: 47:b0:2b:da:ff:6a:95:b8:61:ac:ac:c9:46:0a:84: 4d:27:8d:31:10:01:e8:88:9d:e6:c9:54:e6:20:0e: d2:a2:7c:c8:73:45:66:16:62:44:04:aa:e9:91:f9: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:19:75:5E:BA:1E:F8:0D:D5:46:30:B9:BF:78:4A:29:B7:C0:91:82 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.117.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:dc:6d:eb:90:53:e5:62:6e:da:1e:5a:87:8a:69:67:63:ac: cf:7e:30:64:9c:94:3e:29:b9:d4:df:02:c8:95:24:cb:30:22: c6:d8:ac:6c:96:21:1b:c4:23:26:23:87:b6:62:16:a0:1f:bd: a7:6f:ec:24:31:6e:8c:04:61:1d:70:20:5d:be:ca:dd:e7:02: 7c:47:73:19:29:ff:bf:b2:f7:1a:76:e9:83:c4:fa:4a:58:51: 65:be:cf:99:82:c8:e8:4b:e0:19:49:16:5b:98:be:df:b4:81: 99:98:21:a7:1d:b6:fa:d7:ea:99:c6:77:48:e5:42:c8:21:69: 71:b1:76:c2:fa:31:1e:62:6a:3c:f3:1d:33:cd:d8:69:c6:99: fd:8e:60:c0:ad:f3:05:86:d5:6c:b0:48:7d:6b:b6:77:4a:e1: 8d:c4:3a:54:0b:9f:3c:5a:c4:e7:79:57:b1:d4:c1:44:bf:fa: db:c9:c8:7c:46:e7:c1:a5:a1:4b:01:9e:d1:5f:b2:d2:ea:9f: 66:38:cd:eb:82:a0:89:94:74:83:da:99:1f:72:c4:37:35:af: 7a:cf:d1:ff:02:79:b4:55:28:44:3a:05:7f:e0:d5:ee:ce:7d: 12:67:ce:f5:07:2d:45:64:bf:fa:59:1a:b9:45:5b:a0:01:c4: 05:ab:ca:ef -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNTA2MjEwMTM0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDdhOC03YjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FTxRFrE0RF7aTbzHIzfQnT6v1b6vHWIpXJmffLuVGMLTWtffqaojfTggjEg 10n6rwd4OyiwNSdUnv08OxCcGflvYotcjZhszn8AoylM5i90azr82PonXLJOP34m d3OyBQy3Ugek/dMY2nO96mPvoD+sMfcjF77pNIP+RZcJ/T71avmITBNk2h8oVhCJ qmeVtsNWIl38w9HZ/fzHmMGNNEstx39Wkch7JGsS25RQXWfLJwXqTV9jrzGTmmgS xKI51+nXdyvGIB2+xDdhqS0m8ydHsCva/2qVuGGsrMlGCoRNJ40xEAHoiJ3myVTm IA7SonzIc0VmFmJEBKrpkfmb0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC4ZdV66 HvgN1UYwub94Sim3wJGCMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUFFNEIvMjRBNjhFOUNEMEUzMTFFQTlBNzNCOTRGQzRGOUFFMDIvM0FCRkFDMjIz MUUyMTFFRkEzNDE5ODNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5d1MA0GCSqGSIb3DQEBCwUAA4IBAQB/3G3rkFPlYm7aHlqHimln Y6zPfjBknJQ+KbnU3wLIlSTLMCLG2KxsliEbxCMmI4e2YhagH72nb+wkMW6MBGEd cCBdvsrd5wJ8R3MZKf+/svcadumDxPpKWFFlvs+ZgsjoS+AZSRZbmL7ftIGZmCGn Hbb61+qZxndI5ULIIWlxsXbC+jEeYmo88x0zzdhpxpn9jmDArfMFhtVssEh9a7Z3 SuGNxDpUC588WsTneVex1MFEv/rbych8RufBpaFLAZ7RX7LS6p9mOM3rgqCJlHSD 2pkfcsQ3Na96z9H/Anm0VShEOgV/4NXuzn0SZ871By1FZL/6WRq5RVugAcQFq8rv -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:14 2026 by rpki-client