$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa File: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (raw, json) Hash identifier: bw6V3e8uxgz/w4mVGTTnR4lCFXMSeabuBZrROz8xFwc= Subject key identifier: 41:B2:FB:A0:19:B7:BC:02:F9:48:0A:FE:FA:2D:E4:2C:28:D6:B7:B3 Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Certificate serial: 0B81 Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa Signing time: Fri 06 Mar 2026 19:25:32 +0000 ROA not before: Fri 06 Mar 2026 19:25:32 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138688 IP address blocks: 103.136.156.0/23 maxlen: 23 103.136.156.0/24 maxlen: 24 103.136.157.0/24 maxlen: 24 2407:4140::/32 maxlen: 32 2407:4140::/48 maxlen: 48 2407:4140:1::/48 maxlen: 48 2407:4140:2::/48 maxlen: 48 2407:4140:3::/48 maxlen: 48 2407:4140:4::/48 maxlen: 48 2407:4140:5::/48 maxlen: 48 2407:4140:6::/48 maxlen: 48 2407:4140:7::/48 maxlen: 48 2407:4140:8::/48 maxlen: 48 2407:4140:9::/48 maxlen: 48 2407:4140:a::/48 maxlen: 48 2407:4140:b::/48 maxlen: 48 2407:4140:c::/48 maxlen: 48 2407:4140:d::/48 maxlen: 48 2407:4140:e::/48 maxlen: 48 2407:4140:f::/48 maxlen: 48 2407:4140:10::/48 maxlen: 48 2407:4140:11::/48 maxlen: 48 2407:4140:13::/48 maxlen: 48 2407:4140:14::/48 maxlen: 48 2407:4140:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2945 (0xb81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4 Validity Not Before: Mar 6 19:25:32 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ab2a2b-25df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4b:45:38:6d:78:f7:f0:da:47:92:26:a3:70: 4c:8d:e4:b1:05:75:7c:5b:df:c7:f0:61:37:e3:56: 63:3b:5b:ec:59:a6:77:47:52:56:c9:fb:50:3e:8d: 0c:9d:e4:f0:03:7f:97:74:73:f2:7a:f6:49:65:23: cf:ca:f8:09:31:a1:8d:2f:01:9a:03:20:65:84:1d: fa:a6:40:0c:fa:61:de:42:3a:68:00:cd:0a:69:f6: 64:d4:fe:ba:cf:2d:24:41:b5:62:a8:6c:d7:ff:2e: 8e:35:06:99:0f:74:b8:9f:13:9b:68:ab:9a:ad:69: f8:de:95:09:05:5a:c7:70:a9:5e:c3:05:85:c9:93: df:c1:01:01:78:02:1d:6a:45:d5:d9:57:e9:23:c8: 54:36:a8:e5:4b:fe:a0:e4:26:26:a0:63:a7:ad:a8: b7:fc:d6:d4:1f:7c:7e:72:88:22:d5:62:a0:82:2d: 09:fe:08:26:11:c5:55:1c:64:29:64:3c:61:33:fe: b4:5b:c7:85:3d:92:ef:50:7b:b0:27:3a:cb:22:73: ed:5a:e3:5c:48:72:b7:70:6c:db:1d:d5:6c:42:50: 03:88:09:9e:76:6e:8b:c2:c5:bb:30:0c:0d:a3:4f: be:43:23:84:1f:dd:44:21:88:cf:be:48:93:0b:92: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B2:FB:A0:19:B7:BC:02:F9:48:0A:FE:FA:2D:E4:2C:28:D6:B7:B3 X509v3 Authority Key Identifier: keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.156.0/23 IPv6: 2407:4140::/32 Signature Algorithm: sha256WithRSAEncryption 2a:cd:a6:5e:fe:a3:34:ef:35:1a:1c:95:60:2f:42:ab:87:e9: ac:8e:b7:0f:df:e9:63:e8:0d:fb:09:9b:9e:e0:ba:32:54:e7: 16:b4:43:b3:65:53:c5:29:a9:3e:a4:51:f6:6a:83:29:13:06: e7:88:75:7e:2c:6e:74:51:1f:3d:79:80:2d:89:bf:96:c6:9a: b3:4f:28:56:44:a1:3e:ba:85:6d:de:3d:68:24:2f:aa:e8:29: db:a1:3b:5c:7a:ed:99:8e:f7:0a:5f:9d:67:00:34:19:ce:86: 7e:ed:cd:31:b8:52:4a:7c:0f:5c:33:27:54:bc:7d:20:7a:01: a0:b6:d8:ad:23:bf:5e:b5:7e:4d:bc:01:b2:f4:2b:49:6d:9f: 07:18:f4:f5:60:d8:7e:c2:42:ad:ba:ca:ea:a4:f1:f8:42:95: 16:9e:29:fa:bd:17:e7:5b:e5:b8:39:f5:9c:0b:10:90:7e:66: 54:92:26:96:3e:49:66:f6:d2:db:ab:4a:ba:2f:90:54:d2:82: 36:72:42:9c:ea:2e:aa:05:f0:93:7c:96:e9:8a:4a:fd:f8:c7: 42:c5:e7:17:c6:aa:7c:29:aa:ae:c2:19:95:62:83:25:c2:d2: ae:e3:55:28:e8:88:ab:a9:f3:83:f4:d7:80:fe:66:dd:a1:10: 82:c7:7d:79 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5 NkRCQ0VGQjQwHhcNMjYwMzA2MTkyNTMyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiMmEyYi0yNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ktFOG149/DaR5Imo3BMjeSxBXV8W9/H8GE341ZjO1vsWaZ3R1JWyftQPo0M neTwA3+XdHPyevZJZSPPyvgJMaGNLwGaAyBlhB36pkAM+mHeQjpoAM0KafZk1P66 zy0kQbViqGzX/y6ONQaZD3S4nxObaKuarWn43pUJBVrHcKlewwWFyZPfwQEBeAId akXV2VfpI8hUNqjlS/6g5CYmoGOnrai3/NbUH3x+cogi1WKggi0J/ggmEcVVHGQp ZDxhM/60W8eFPZLvUHuwJzrLInPtWuNcSHK3cGzbHdVsQlADiAmedm6LwsW7MAwN o0++QyOEH91EIYjPvkiTC5IvCwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEGy+6AZ t7wC+UgK/vot5Cwo1rezMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3 N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU2Q0EvNzQwOUI0N0E0RkM3MTFFQThFNDZENDE1QzRGOUFFMDIvQUExQUJGMEFC MjAwMTFFQTlDMERGQjJGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4icMA0EAgACMAcDBQAkB0FAMA0GCSqGSIb3DQEBCwUAA4IBAQAq zaZe/qM07zUaHJVgL0Krh+msjrcP3+lj6A37CZue4LoyVOcWtEOzZVPFKak+pFH2 aoMpEwbniHV+LG50UR89eYAtib+WxpqzTyhWRKE+uoVt3j1oJC+q6CnboTtceu2Z jvcKX51nADQZzoZ+7c0xuFJKfA9cMydUvH0gegGgttitI79etX5NvAGy9CtJbZ8H GPT1YNh+wkKtusrqpPH4QpUWnin6vRfnW+W4OfWcCxCQfmZUkiaWPklm9tLbq0q6 L5BU0oI2ckKc6i6qBfCTfJbpikr9+MdCxecXxqp8KaquwhmVYoMlwtKu41Uo6Iir qfOD9NeA/mbdoRCCx315 -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:34 2026 by rpki-client