$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa File: AF57B9EC2F7811EABC011040C4F9AE02.roa (raw, json) Hash identifier: QVQjppxIf7FR3SX2qv9C8LVzY09VQzhRkuQFcU373rY= Subject key identifier: F5:27:ED:DE:88:AC:95:D9:C8:DE:32:1A:1A:03:85:DE:6B:04:3D:50 Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Certificate serial: 0C09 Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:51:21 +0000 ROA not before: Thu 24 Apr 2025 19:18:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138904 IP address blocks: 103.136.236.0/22 maxlen: 24 2001:df0:f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3081 (0xc09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1 Validity Not Before: Apr 24 19:18:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a51749-4771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:2e:a6:4a:84:74:e6:67:a6:2b:d5:f0:38: 7f:95:a0:38:43:42:a0:7d:9b:6c:39:47:27:1f:d0: c8:7e:1d:50:fc:09:b7:ab:b7:bc:ce:bf:61:9d:66: e4:42:09:98:2b:fb:c7:c5:72:8e:4f:d1:55:57:a2: 50:99:c5:0a:ba:cf:c0:82:ec:29:40:fe:29:ec:10: 2e:fe:fd:29:44:06:60:c2:a6:63:22:63:12:d2:5c: 77:7a:ac:91:d9:e9:33:74:49:d9:8b:c1:74:d0:f7: 20:1e:d4:84:5a:16:80:a9:2f:47:65:d1:1f:d0:07: 70:8c:a7:b3:21:73:95:5d:87:6b:0f:84:bf:7d:8e: ab:83:8b:7e:9f:bc:4f:61:74:2a:2d:09:c2:b3:30: 40:16:22:a1:2a:5c:93:92:b4:bf:d2:19:52:98:13: 43:3a:01:87:8e:af:8d:e1:24:dd:9b:61:3d:b3:c0: a2:49:41:79:29:17:55:99:02:d4:19:ed:40:b4:fe: 61:98:bb:65:0d:51:4a:b3:68:28:aa:e1:e9:0e:28: 8d:c2:02:89:37:e8:76:55:a4:8d:03:98:e1:d0:76: 44:59:c8:1c:c0:64:cf:60:ca:7f:49:bd:06:9b:0c: a9:d5:58:54:1e:d5:5c:2b:49:2b:f8:2f:8d:43:9e: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:27:ED:DE:88:AC:95:D9:C8:DE:32:1A:1A:03:85:DE:6B:04:3D:50 X509v3 Authority Key Identifier: keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/AF57B9EC2F7811EABC011040C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.236.0/22 IPv6: 2001:df0:f80::/48 Signature Algorithm: sha256WithRSAEncryption 43:05:8e:aa:d1:d9:77:a9:a7:b1:eb:74:94:6c:5f:19:c5:70: 85:23:29:b3:6b:6e:c4:11:66:3e:b2:79:39:44:8f:a7:c2:b8: a5:bb:87:ee:a2:55:8f:54:6d:b9:4c:b1:06:26:18:a2:f5:6f: 95:d0:bb:00:27:e2:2b:9f:4c:77:81:7a:b2:03:b6:4f:b5:0e: 34:01:cb:da:e2:0e:c3:c6:8f:87:18:27:2c:a0:4f:5e:1a:1f: 25:55:c0:9b:3c:61:f3:81:72:47:49:1d:38:42:26:86:72:65: 70:03:e8:2c:28:e2:d3:ab:c5:ba:a8:f6:6a:63:45:ca:9a:25: 27:ea:74:62:40:cd:2b:2c:84:5f:d9:2b:4a:22:32:52:bb:8a: 05:7e:22:07:2a:43:82:71:58:09:a0:a1:96:12:13:ae:e7:41: 2c:d5:6f:2d:d6:bb:95:fb:06:e7:42:62:35:90:13:fb:8b:54: 25:56:ef:4f:60:47:bc:0d:e8:65:5b:ce:50:45:ce:38:9e:b6: f7:ec:eb:7f:35:77:ee:02:65:53:a2:75:de:75:40:d2:15:4c: c1:89:af:31:fe:21:6c:d0:6a:97:0c:c1:34:0d:61:e4:0d:04: c7:15:1e:de:d5:b2:25:6c:93:c2:b7:9b:81:7a:7a:96:b3:fd: b0:0e:87:59 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxNEIxMTAvBgNVBAUTKDNEQkNDQkJFN0JFOTE2Qzk2RUVBRUNEOThCRjVENTNF MUMzOTBFQTEwHhcNMjUwNDI0MTkxODM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTc0OS00NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuycupkqEdOZnpivV8Dh/laA4Q0KgfZtsOUcnH9DIfh1Q/Am3q7e8zr9hnWbk QgmYK/vHxXKOT9FVV6JQmcUKus/AguwpQP4p7BAu/v0pRAZgwqZjImMS0lx3eqyR 2ekzdEnZi8F00PcgHtSEWhaAqS9HZdEf0AdwjKezIXOVXYdrD4S/fY6rg4t+n7xP YXQqLQnCszBAFiKhKlyTkrS/0hlSmBNDOgGHjq+N4STdm2E9s8CiSUF5KRdVmQLU Ge1AtP5hmLtlDVFKs2goquHpDiiNwgKJN+h2VaSNA5jh0HZEWcgcwGTPYMp/Sb0G mwyp1VhUHtVcK0kr+C+NQ54y4QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPUn7d6I rJXZyN4yGhoDhd5rBD1QMB8GA1UdIwQYMBaAFD28y7576RbJburs2Yv11T4cOQ6h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjE0Qi9GMkE0OTI0RTJG NzYxMUVBOTFGRENCM0NDNEY5QUUwMi9QYnpMdm52cEZzbHU2dXpaaV9YVlBodzVE cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Biekx2bnZwRnNsdTZ1elppX1hWUGh3NURxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYxNEIvRjJBNDkyNEUyRjc2MTFFQTkxRkRDQjNDQzRGOUFFMDIvQUY1N0I5RUMy Rjc4MTFFQUJDMDExMDQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ4jsMA8EAgACMAkDBwAgAQ3wD4AwDQYJKoZIhvcNAQELBQADggEB AEMFjqrR2Xepp7HrdJRsXxnFcIUjKbNrbsQRZj6yeTlEj6fCuKW7h+6iVY9UbblM sQYmGKL1b5XQuwAn4iufTHeBerIDtk+1DjQBy9riDsPGj4cYJyygT14aHyVVwJs8 YfOBckdJHThCJoZyZXAD6Cwo4tOrxbqo9mpjRcqaJSfqdGJAzSsshF/ZK0oiMlK7 igV+IgcqQ4JxWAmgoZYSE67nQSzVby3Wu5X7BudCYjWQE/uLVCVW709gR7wN6GVb zlBFzjietvfs6381d+4CZVOidd51QNIVTMGJrzH+IWzQapcMwTQNYeQNBMcVHt7V siVsk8K3m4F6epaz/bAOh1k= -----END CERTIFICATE-----Generated at Thu Mar 26 20:22:49 2026 by rpki-client