$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/503E43126E5E11EEB39D9E48C4F9AE02.roa File: 503E43126E5E11EEB39D9E48C4F9AE02.roa (raw, json) Hash identifier: 0Pp/jipwHz+dDFZW3SdujQfWz5D9Ej7JkD74IDbQ7uI= Subject key identifier: 3C:FC:83:25:CB:4E:07:20:11:30:44:9D:0D:9D:7E:6F:E4:45:B7:54 Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 01CC Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/503E43126E5E11EEB39D9E48C4F9AE02.roa Signing time: Sat 07 Mar 2026 03:37:52 +0000 ROA not before: Sat 07 Mar 2026 03:37:52 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132529 IP address blocks: 43.248.52.0/22 maxlen: 22 103.244.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0, serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Mar 7 03:37:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69ab9d8f-8dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:2a:af:1e:bd:73:b0:c0:93:66:75:14:f3: 22:0c:49:1b:92:21:b8:c1:81:aa:0e:06:fe:9c:f1: 42:65:56:4f:22:87:d9:2f:d1:74:09:50:aa:91:48: 4b:8d:83:d1:87:93:c7:5d:83:b5:82:32:aa:7f:bf: 78:aa:02:bd:60:fd:da:5a:47:88:56:4e:59:7e:a5: 68:c4:09:a8:1e:c8:ca:c6:2c:53:a5:7e:99:f6:e2: 77:15:3a:8b:fc:c9:25:e6:d8:81:7b:ce:21:e7:cd: 83:af:47:09:0e:aa:df:7b:af:4f:db:3a:ca:1d:af: ed:ee:b6:80:fd:97:85:ad:21:2f:c7:b3:07:d1:70: 96:5b:ad:25:46:13:6d:71:07:07:68:23:b3:9d:a7: 8f:cc:32:5c:45:8c:47:b6:da:12:73:92:99:2b:4b: 54:3d:ca:c4:65:2a:5d:f9:75:ab:bc:e5:9d:bc:a3: 88:62:14:99:8a:84:26:e0:4b:33:39:22:cf:c7:fa: bf:fa:a7:df:05:80:40:0b:2f:86:5a:22:4f:08:06: 29:a0:ef:e6:be:af:05:e4:c5:ff:99:69:ba:c2:b2: 86:7c:74:f1:21:1c:79:dd:86:a4:eb:7c:7e:e3:32: 8f:14:5f:92:50:d7:0c:42:23:3e:17:50:17:c9:c9: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FC:83:25:CB:4E:07:20:11:30:44:9D:0D:9D:7E:6F:E4:45:B7:54 X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/503E43126E5E11EEB39D9E48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.52.0/22 103.244.128.0/22 Signature Algorithm: sha256WithRSAEncryption 89:1e:13:d3:39:1d:6c:5b:8b:f6:63:2c:7b:8f:05:90:c2:2d: ca:dd:b0:5f:33:6b:af:4e:f1:20:43:df:a3:3d:3f:54:1d:34: 48:f2:f9:d3:28:29:0d:1d:a9:22:db:2e:4d:80:0d:ab:3c:bf: b9:68:64:5a:3c:5c:43:9c:3b:e2:c5:bf:d4:ba:d9:7f:88:0c: d6:12:40:d7:52:57:1d:04:5f:3f:df:ae:1b:75:d4:3c:21:25: d4:06:fb:96:c1:47:c9:02:98:4d:06:6d:ac:0c:37:ab:99:6a: 96:6f:8d:a5:79:6b:c3:2c:ff:8c:7f:4f:b5:4e:fd:bd:46:3c: 40:98:c1:b6:3b:57:90:82:38:58:8b:59:ea:d5:7f:43:f5:ea: 0c:72:e7:9a:1a:52:42:aa:bf:a8:be:54:30:1e:9f:40:d6:d3: d7:2e:80:2e:72:03:7b:cd:d5:3e:55:dd:ef:c3:ff:e5:98:3f: b7:f8:04:23:f6:77:e2:60:39:a5:9c:9c:ba:7e:40:ef:09:b3: 08:a0:80:78:61:df:44:9b:0e:42:69:0a:94:f4:56:cd:4a:0e: 64:82:a6:88:a4:1f:71:9e:eb:fb:54:13:25:40:04:d2:17:7a: bd:1f:e9:98:fa:b1:00:88:03:81:7b:78:c4:61:62:d8:07:d1: 15:d0:eb:12 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwRTAxMTAvBgNVBAUTKDNGMjBDMjlFMUQ3RTUxNURGM0UzRDg1QUE0NEU3NTFG ODE3MjczMUEwHhcNMjYwMzA3MDMzNzUyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiOWQ4Zi04ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/8qrx69c7DAk2Z1FPMiDEkbkiG4wYGqDgb+nPFCZVZPIofZL9F0CVCqkUhL jYPRh5PHXYO1gjKqf794qgK9YP3aWkeIVk5ZfqVoxAmoHsjKxixTpX6Z9uJ3FTqL /Mkl5tiBe84h582Dr0cJDqrfe69P2zrKHa/t7raA/ZeFrSEvx7MH0XCWW60lRhNt cQcHaCOznaePzDJcRYxHttoSc5KZK0tUPcrEZSpd+XWrvOWdvKOIYhSZioQm4Esz OSLPx/q/+qffBYBACy+GWiJPCAYpoO/mvq8F5MX/mWm6wrKGfHTxIRx53Yak63x+ 4zKPFF+SUNcMQiM+F1AXycnowwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDz8gyXL TgcgETBEnQ2dfm/kRbdUMB8GA1UdIwQYMBaAFD8gwp4dflFd8+PYWqROdR+BcnMa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTBFMC8zRUIxMEM5QTZE OTgxMUVFQUEyQUEzNkFDNEY5QUUwMi9QeURDbmgxLVVWM3o0OWhhcEU1MUg0Rnlj eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjEwRTAvM0VCMTBDOUE2RDk4MTFFRUFBMkFBMzZBQzRGOUFFMDIvNTAzRTQzMTI2 RTVFMTFFRUIzOUQ5RTQ4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/g0AwQCZ/SAMA0GCSqGSIb3DQEBCwUAA4IBAQCJHhPTOR1sW4v2 Yyx7jwWQwi3K3bBfM2uvTvEgQ9+jPT9UHTRI8vnTKCkNHaki2y5NgA2rPL+5aGRa PFxDnDvixb/Uutl/iAzWEkDXUlcdBF8/364bddQ8ISXUBvuWwUfJAphNBm2sDDer mWqWb42leWvDLP+Mf0+1Tv29RjxAmMG2O1eQgjhYi1nq1X9D9eoMcueaGlJCqr+o vlQwHp9A1tPXLoAucgN7zdU+Vd3vw//lmD+3+AQj9nfiYDmlnJy6fkDvCbMIoIB4 Yd9Emw5CaQqU9FbNSg5kgqaIpB9xnuv7VBMlQATSF3q9H+mY+rEAiAOBe3jEYWLY B9EV0OsS -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:26 2026 by rpki-client