$ rpki-client -vvf rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa File: 34E1DFE8BF7011EAB745BE31C4F9AE02.roa (raw, json) Hash identifier: d8opkbtcxlyFCpprQQ3tauoxiI6m50FsaHiBQoF0J2M= Subject key identifier: 32:58:E6:73:30:69:C6:C3:E3:8C:1C:80:F8:AB:46:22:F4:11:71:BA Certificate issuer: /CN=A912A13F/serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Certificate serial: 091F Authority key identifier: AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:04:15 +0000 ROA not before: Sat 20 Sep 2025 20:41:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138168 IP address blocks: 103.121.228.0/22 maxlen: 22 103.121.228.0/24 maxlen: 24 103.121.229.0/24 maxlen: 24 103.121.230.0/24 maxlen: 24 103.121.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2335 (0x91f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A13F, serialNumber=AB1627B7A8514392E1C678B7B078855A445566E4 Validity Not Before: Sep 20 20:41:33 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4475f-2019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:76:e0:2c:cc:76:a2:ff:8a:4d:4a:6c:52: 3f:03:4c:aa:46:e8:b1:3d:0e:e0:5f:e7:51:a8:4f: 52:4f:d9:a0:c9:3b:80:1d:5d:2b:b5:43:22:87:7d: ec:c7:5c:73:3e:e6:f6:3f:10:e8:e5:48:04:b4:b2: ff:4a:a1:ac:4c:9c:09:d8:3a:fa:27:c9:2e:a0:f3: ba:a5:a1:af:24:fe:a8:33:f6:ed:b1:7b:07:ec:f0: 26:50:10:66:3b:1f:75:99:48:54:24:52:30:d4:1b: 27:d4:be:80:2b:b4:01:4b:fe:51:93:6e:53:9c:6a: 4b:7a:ee:c8:46:f2:2d:e8:7c:d4:e1:cf:a4:99:14: a0:a3:9d:f7:0f:4d:59:e3:c2:6e:e7:39:b9:bf:0a: c4:ae:a8:bb:94:ae:cc:53:b5:db:42:7d:8d:16:e9: b2:46:82:8c:7b:6c:9e:9c:13:07:4b:30:b7:26:74: d0:f9:bf:f1:6b:39:36:e7:75:93:45:58:67:75:53: 28:32:95:1d:5f:6a:ae:b5:b9:45:4d:5f:bc:23:70: 5b:0d:f7:47:5b:8d:ab:4d:44:4b:59:1c:71:7a:c8: 72:76:6c:7b:f4:e0:77:c9:cc:39:1c:7f:d6:97:e7: a1:df:7f:60:6b:4b:8b:3d:74:d5:f3:e6:4b:03:91: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:58:E6:73:30:69:C6:C3:E3:8C:1C:80:F8:AB:46:22:F4:11:71:BA X509v3 Authority Key Identifier: keyid:AB:16:27:B7:A8:51:43:92:E1:C6:78:B7:B0:78:85:5A:44:55:66:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxYnt6hRQ5Lhxni3sHiFWkRVZuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A13F/A672E3B6BF6E11EAB656BF2FC4F9AE02/34E1DFE8BF7011EAB745BE31C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.228.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:41:c7:13:0b:9c:3c:9b:9e:03:d9:02:21:46:3e:89:80:3c: be:39:64:90:07:79:5b:9b:7f:1d:f1:5f:d3:28:92:29:d5:a6: c5:7a:c5:5e:8d:4f:d6:e8:57:6f:c9:93:80:8f:8b:11:e9:c1: d2:8b:ed:fa:f8:ee:5d:5b:ec:81:1b:91:53:c0:4f:a2:61:82: e3:6e:b2:c5:28:8d:b4:c4:cb:2a:2c:d9:54:f5:ad:f4:99:1e: 5f:ce:23:bf:69:b8:a7:59:28:7e:50:78:86:f5:a0:f3:78:a2: aa:25:38:64:05:09:a0:cf:b3:b7:a2:be:d8:20:f4:cc:6e:67: 11:02:66:50:08:65:7b:2a:d7:b0:62:de:e6:b5:d2:71:f4:bc: df:28:20:50:ba:02:dd:f8:43:f6:ee:07:27:b8:f0:85:a0:b0: 37:ab:1c:18:82:16:8a:92:14:0c:48:67:f3:9c:14:63:d5:b2: ec:6a:b1:2e:0f:63:82:8a:80:50:12:73:ae:d9:4c:84:bc:a4: 50:08:a4:eb:42:b4:c4:fd:9d:e2:7f:67:6a:65:6b:0e:45:ab: 16:e3:19:c3:62:02:5f:dd:d4:24:71:24:30:95:67:80:80:55: 0f:85:9f:9e:1d:de:5f:5c:b0:ca:d0:8c:71:28:01:6a:7d:27: 2e:23:a9:d5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkExM0YxMTAvBgNVBAUTKEFCMTYyN0I3QTg1MTQzOTJFMUM2NzhCN0IwNzg4NTVB NDQ1NTY2RTQwHhcNMjUwOTIwMjA0MTMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDc1Zi0yMDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHh24CzMdqL/ik1KbFI/A0yqRuixPQ7gX+dRqE9ST9mgyTuAHV0rtUMih33s x1xzPub2PxDo5UgEtLL/SqGsTJwJ2Dr6J8kuoPO6paGvJP6oM/btsXsH7PAmUBBm Ox91mUhUJFIw1Bsn1L6AK7QBS/5Rk25TnGpLeu7IRvIt6HzU4c+kmRSgo533D01Z 48Ju5zm5vwrErqi7lK7MU7XbQn2NFumyRoKMe2yenBMHSzC3JnTQ+b/xazk253WT RVhndVMoMpUdX2qutblFTV+8I3BbDfdHW42rTURLWRxxeshydmx79OB3ycw5HH/W l+eh339ga0uLPXTV8+ZLA5GSbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDJY5nMw acbD44wcgPirRiL0EXG6MB8GA1UdIwQYMBaAFKsWJ7eoUUOS4cZ4t7B4hVpEVWbk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzRi9BNjcyRTNCNkJG NkUxMUVBQjY1NkJGMkZDNEY5QUUwMi9xeFludDZoUlE1TGh4bmkzc0hpRldrUlZa dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4WW50NmhSUTVMaHhuaTNzSGlGV2tSVlp1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkExM0YvQTY3MkUzQjZCRjZFMTFFQUI2NTZCRjJGQzRGOUFFMDIvMzRFMURGRThC RjcwMTFFQUI3NDVCRTMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3nkMA0GCSqGSIb3DQEBCwUAA4IBAQBtQccTC5w8m54D2QIhRj6J gDy+OWSQB3lbm38d8V/TKJIp1abFesVejU/W6FdvyZOAj4sR6cHSi+36+O5dW+yB G5FTwE+iYYLjbrLFKI20xMsqLNlU9a30mR5fziO/abinWSh+UHiG9aDzeKKqJThk BQmgz7O3or7YIPTMbmcRAmZQCGV7KtewYt7mtdJx9LzfKCBQugLd+EP27gcnuPCF oLA3qxwYghaKkhQMSGfznBRj1bLsarEuD2OCioBQEnOu2UyEvKRQCKTrQrTE/Z3i f2dqZWsORasW4xnDYgJf3dQkcSQwlWeAgFUPhZ+eHd5fXLDK0IxxKAFqfScuI6nV -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:45 2026 by rpki-client