$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa File: 3E251228F81711ECBF85A038C4F9AE02.roa (raw, json) Hash identifier: +35QxxMyIjCMr8iV27/aV6sabG1DfHlXwGU/67Kw18Q= Subject key identifier: 72:E3:86:BD:A0:43:EC:97:3A:E7:ED:55:13:07:9B:E8:63:21:2D:7A Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Certificate serial: 0344 Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:04:06 +0000 ROA not before: Tue 23 Sep 2025 01:49:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9336 IP address blocks: 103.99.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Validity Not Before: Sep 23 01:49:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42b36-2084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8a:4b:b8:6d:af:6d:f7:05:fa:d2:27:d0:6a: f0:af:b7:c6:52:6f:56:d7:ef:ce:b9:6a:bc:a8:bb: f2:e4:75:1e:0a:ff:92:82:1b:eb:fc:41:5d:c0:c0: b5:0a:34:f8:aa:17:d2:e7:c6:e9:b1:00:a1:15:cf: 82:55:34:02:0c:57:64:94:6e:e7:53:13:b9:36:24: a2:09:f4:f6:01:8d:81:b5:8f:2b:cd:8e:b0:da:96: 4d:e1:85:27:3b:78:d3:a8:27:43:f8:5c:12:30:7b: 6b:59:43:a5:c7:15:81:c8:31:bf:90:d2:60:63:8a: 26:2d:ff:2d:23:9e:90:57:8f:c3:61:7d:b4:b2:81: 04:58:01:ff:bf:59:4e:85:5c:9f:5e:9e:c7:9f:ee: a8:f5:49:3d:12:ea:ed:a4:cf:f0:89:cc:92:96:a3: de:73:e2:5d:82:21:e4:32:dd:6d:a4:87:13:5a:b6: b1:9f:24:73:df:e7:eb:e2:89:31:84:62:24:58:f6: 55:52:00:bc:46:06:e1:fd:e6:9f:da:0c:c5:19:88: bf:ed:44:63:22:54:32:d6:73:52:f4:e9:f9:c4:de: cc:99:79:2f:f0:9d:b8:9e:fd:ae:ea:14:da:43:86: 3c:2b:33:9c:77:9b:2c:4f:3a:69:27:d2:0a:1c:10: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E3:86:BD:A0:43:EC:97:3A:E7:ED:55:13:07:9B:E8:63:21:2D:7A X509v3 Authority Key Identifier: keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/3E251228F81711ECBF85A038C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.44.0/22 Signature Algorithm: sha256WithRSAEncryption 64:97:1f:aa:3d:37:0a:ce:0c:e2:69:ad:a8:23:a7:bc:98:66: 93:51:f5:7b:04:02:6d:87:87:85:e1:ea:90:9a:92:97:ca:a1: 95:a6:7b:dc:33:b3:6a:0c:fa:e6:d0:3a:ba:85:ce:0e:49:9b: e3:29:9e:0a:24:f2:6c:54:b2:78:25:ec:42:6f:24:d3:ce:9d: 00:97:84:56:d6:7a:97:bb:66:29:a0:83:2e:0b:39:1d:91:67: 7f:e1:74:c7:d1:61:1b:c2:c0:23:40:0f:33:4b:6b:0f:f7:fc: 06:c4:f6:a9:c5:e8:f9:82:f8:3c:9c:64:b6:2e:71:3c:4b:c9: 17:54:b7:44:f4:47:f4:90:69:c2:2d:ef:42:8b:e2:55:21:7e: 99:18:0a:6b:97:81:ed:b1:c3:6a:cc:2c:8f:4c:90:59:da:eb: c3:73:55:e5:79:ea:ab:cf:d6:6d:0c:a4:84:0c:5d:db:2a:42: e2:b8:c2:65:ed:2a:c4:fe:c4:36:85:b7:87:03:78:25:fe:6d: 5c:4c:ae:44:3c:c7:43:3f:d7:ec:bd:d1:56:42:d2:45:c4:90: ac:28:b5:62:8b:18:a7:2f:c2:01:62:fd:fe:a3:5f:81:be:ea: 9e:f8:40:14:8f:d9:fe:50:ad:71:0a:96:88:9b:7a:46:25:af: 02:79:6a:65 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC RTdBMjM4QzUwHhcNMjUwOTIzMDE0OTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmIzNi0yMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YpLuG2vbfcF+tIn0Grwr7fGUm9W1+/OuWq8qLvy5HUeCv+Sghvr/EFdwMC1 CjT4qhfS58bpsQChFc+CVTQCDFdklG7nUxO5NiSiCfT2AY2BtY8rzY6w2pZN4YUn O3jTqCdD+FwSMHtrWUOlxxWByDG/kNJgY4omLf8tI56QV4/DYX20soEEWAH/v1lO hVyfXp7Hn+6o9Uk9EurtpM/wicySlqPec+JdgiHkMt1tpIcTWraxnyRz3+fr4okx hGIkWPZVUgC8Rgbh/eaf2gzFGYi/7URjIlQy1nNS9On5xN7MmXkv8J24nv2u6hTa Q4Y8KzOcd5ssTzppJ9IKHBCt6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHLjhr2g Q+yXOuftVRMHm+hjIS16MB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4 MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjEzNDgvMTIzMTIzN0VGODExMTFFQzkyODBDODJEQzRGOUFFMDIvM0UyNTEyMjhG ODE3MTFFQ0JGODVBMDM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2MsMA0GCSqGSIb3DQEBCwUAA4IBAQBklx+qPTcKzgziaa2oI6e8 mGaTUfV7BAJth4eF4eqQmpKXyqGVpnvcM7NqDPrm0Dq6hc4OSZvjKZ4KJPJsVLJ4 JexCbyTTzp0Al4RW1nqXu2YpoIMuCzkdkWd/4XTH0WEbwsAjQA8zS2sP9/wGxPap xej5gvg8nGS2LnE8S8kXVLdE9Ef0kGnCLe9Ci+JVIX6ZGAprl4HtscNqzCyPTJBZ 2uvDc1Xleeqrz9ZtDKSEDF3bKkLiuMJl7SrE/sQ2hbeHA3gl/m1cTK5EPMdDP9fs vdFWQtJFxJCsKLViixinL8IBYv3+o1+Bvuqe+EAUj9n+UK1xCpaIm3pGJa8CeWpl -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:17 2026 by rpki-client