$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa File: 3619A9DA67B411F097A2770AC4F9AE02.roa (raw, json) Hash identifier: 7njbVYsd3V87sSM3WNmywbGIw28FJJd2oN7m9l4XA/M= Subject key identifier: D2:03:2A:6F:8F:D5:C4:5E:F0:BA:26:87:7F:C7:C7:6F:95:F5:A7:C4 Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 08EA Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:18:10 +0000 ROA not before: Tue 29 Jul 2025 23:21:23 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135578 IP address blocks: 103.66.176.0/23 maxlen: 23 103.66.176.0/24 maxlen: 24 103.66.177.0/24 maxlen: 24 2406:59c0::/32 maxlen: 32 2406:59c0::/48 maxlen: 48 2406:59c0:1::/48 maxlen: 48 2406:59c0:2::/48 maxlen: 48 2406:59c0:3::/48 maxlen: 48 2406:59c0:4::/48 maxlen: 48 2406:59c0:5::/48 maxlen: 48 2406:59c0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: Jul 29 23:21:23 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a51d92-da6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:40:cc:3c:74:7b:32:00:6e:f3:87:db:54:c4: 29:5c:b7:4d:91:b8:15:a5:85:5b:25:1c:51:7d:4d: 72:30:b4:49:be:09:0f:6d:d9:b4:7b:e3:84:a9:16: 0b:3a:f7:4e:3e:2c:c3:f1:57:80:e9:cc:a4:94:5b: 55:a0:61:36:17:ab:7b:d7:27:65:2a:6c:d8:57:ca: a8:ca:b7:96:48:b0:8e:34:aa:1d:f4:e2:8d:ea:98: a3:44:37:8a:f0:0e:4c:fc:b6:44:b9:af:b8:88:a6: a1:18:0d:78:36:d9:47:8c:d8:eb:e1:b0:ba:68:a5: d3:1c:a6:de:26:ad:87:6a:cc:49:53:dc:c8:3d:bb: 78:0b:ac:17:aa:f7:95:cb:e0:ff:05:bc:70:7a:ab: f8:7a:4b:40:6d:d0:c9:9d:03:40:a1:92:4b:76:fa: 4e:5d:4e:fd:ac:ac:2a:88:71:b6:51:f4:53:41:0e: 15:1d:c3:ec:d0:28:28:6e:95:f2:f9:45:29:eb:fd: ef:77:82:ea:1b:68:09:fa:8e:47:ea:9b:49:ac:77: 49:40:95:a9:d5:ad:51:32:a0:6f:06:7e:be:c1:dc: dd:d6:1a:e1:9d:6f:eb:53:3d:2c:c5:83:ec:87:5a: 92:87:d7:f7:28:00:59:cc:83:8f:36:48:ed:16:27: 42:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:03:2A:6F:8F:D5:C4:5E:F0:BA:26:87:7F:C7:C7:6F:95:F5:A7:C4 X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/3619A9DA67B411F097A2770AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.66.176.0/23 IPv6: 2406:59c0::/32 Signature Algorithm: sha256WithRSAEncryption c0:a7:1b:b1:c2:2b:87:45:00:7c:3d:f8:f7:95:99:48:13:a0: 85:d0:49:8f:fb:72:61:41:3e:f8:8d:11:bf:55:25:2c:47:ee: c1:6f:b3:05:16:1c:40:27:f7:b5:9f:f8:5f:c7:73:34:78:11: c1:c1:42:48:81:39:83:5e:29:90:41:2f:87:9a:f7:ee:b4:c8: cf:79:1a:28:42:fe:2e:03:0d:9f:ae:a2:4b:63:8e:b0:54:e7: 5c:4f:71:57:7d:34:95:0a:00:e5:10:50:6d:8a:a9:41:79:15: 3e:66:d3:8c:3c:61:7a:bf:22:d0:05:d1:da:9b:7b:60:f1:33: 35:da:82:00:0f:fe:a3:15:3d:07:72:a2:7a:4a:e1:06:a3:24: b2:81:4a:4e:e2:ae:8b:33:b6:76:7e:6e:7e:76:52:90:71:f9: 7f:ea:bc:6d:47:81:5a:e2:4c:d3:0a:71:dc:12:25:0d:76:8c: c2:23:d3:e5:b1:bf:91:ab:67:7b:19:53:f9:82:60:9d:4b:62: da:77:33:36:88:b6:14:7a:ae:fe:b0:7b:21:08:5a:2a:ff:23: 54:e3:23:4a:89:89:aa:95:a4:35:90:d3:41:75:be:f1:3a:98: 9c:ca:e1:35:35:e1:03:81:40:45:6e:7d:2e:a9:45:14:55:2a: 30:b7:2e:cc -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjUwNzI5MjMyMTIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWQ5Mi1kYTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUDMPHR7MgBu84fbVMQpXLdNkbgVpYVbJRxRfU1yMLRJvgkPbdm0e+OEqRYL OvdOPizD8VeA6cyklFtVoGE2F6t71ydlKmzYV8qoyreWSLCONKod9OKN6pijRDeK 8A5M/LZEua+4iKahGA14NtlHjNjr4bC6aKXTHKbeJq2HasxJU9zIPbt4C6wXqveV y+D/Bbxweqv4ektAbdDJnQNAoZJLdvpOXU79rKwqiHG2UfRTQQ4VHcPs0CgobpXy +UUp6/3vd4LqG2gJ+o5H6ptJrHdJQJWp1a1RMqBvBn6+wdzd1hrhnW/rUz0sxYPs h1qSh9f3KABZzIOPNkjtFidCIQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNIDKm+P 1cRe8Lomh3/Hx2+V9afEMB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjAvQTJERjRDRUNERDREMTFFQUJCNzY5NjdCQzRGOUFFMDIvMzYxOUE5REE2 N0I0MTFGMDk3QTI3NzBBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ0KwMA0EAgACMAcDBQAkBlnAMA0GCSqGSIb3DQEBCwUAA4IBAQDA pxuxwiuHRQB8Pfj3lZlIE6CF0EmP+3JhQT74jRG/VSUsR+7Bb7MFFhxAJ/e1n/hf x3M0eBHBwUJIgTmDXimQQS+HmvfutMjPeRooQv4uAw2frqJLY46wVOdcT3FXfTSV CgDlEFBtiqlBeRU+ZtOMPGF6vyLQBdHam3tg8TM12oIAD/6jFT0HcqJ6SuEGoySy gUpO4q6LM7Z2fm5+dlKQcfl/6rxtR4Fa4kzTCnHcEiUNdozCI9Plsb+Rq2d7GVP5 gmCdS2LadzM2iLYUeq7+sHshCFoq/yNU4yNKiYmqlaQ1kNNBdb7xOpicyuE1NeED gUBFbn0uqUUUVSowty7M -----END CERTIFICATE-----Generated at Thu Mar 26 23:22:33 2026 by rpki-client