$ rpki-client -vvf rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/7DA38A8E727011F08682A20EC4F9AE02.roa File: 7DA38A8E727011F08682A20EC4F9AE02.roa (raw, json) Hash identifier: X373raxuE2iLwtaK4YO98Y1yBAk9TK8MxVlU8+CTPKI= Subject key identifier: 5D:1F:BB:F0:09:F4:4B:79:FB:5B:25:2E:36:EA:AB:A7:B7:EA:62:23 Certificate issuer: /CN=A912A31E/serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8 Certificate serial: 0220 Authority key identifier: DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/7DA38A8E727011F08682A20EC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:59:48 +0000 ROA not before: Wed 19 Nov 2025 01:18:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 56135 IP address blocks: 101.234.72.0/22 maxlen: 22 103.29.192.0/22 maxlen: 22 103.29.192.0/24 maxlen: 24 103.29.194.0/24 maxlen: 24 103.29.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A31E, serialNumber=DA57B191C55BB3319EBD9182DC0D4E6AEF3E0DD8 Validity Not Before: Nov 19 01:18:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43844-7abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:cf:67:73:39:a9:b1:4c:55:bb:9b:12:17: 96:05:96:83:24:f2:a9:a6:bc:a9:d9:f7:71:85:11: 4c:02:2a:f3:8c:46:63:26:a4:4a:2b:2e:33:a6:f1: 6b:ec:39:55:e4:90:50:6b:1f:fb:80:b9:29:5a:5c: 9b:9a:1f:83:d9:e3:00:bb:62:0c:c5:3e:74:94:9c: 5a:6b:8b:50:49:b0:4d:0f:62:e5:74:36:cb:9f:67: 5c:57:4c:46:c8:5b:db:db:76:b0:dd:ce:cf:8b:7b: eb:88:34:8d:10:a9:cf:54:b5:60:be:dc:a7:b2:e0: ae:d4:07:98:71:e3:27:a3:bf:2f:1e:ff:78:55:c5: c8:e2:61:6f:0c:aa:3a:d6:30:d9:fd:fe:13:7a:b3: 35:78:53:24:c6:67:49:a0:48:5e:75:44:13:43:ea: 62:f0:25:2e:ff:7e:5d:f3:1a:c3:72:e5:f8:a5:b9: 45:9a:53:3f:dd:56:c2:e0:e4:b5:10:59:fe:cb:c3: b5:31:da:17:27:02:70:7c:92:e2:04:f4:22:09:2b: de:1c:30:4f:f6:f7:8c:ff:9e:2a:9f:91:91:87:00: 0e:c7:d2:76:6b:4a:ad:01:cc:a3:c1:2d:61:1c:b2: da:ce:5e:80:cb:23:7a:8b:2a:39:fe:15:58:c6:80: 27:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1F:BB:F0:09:F4:4B:79:FB:5B:25:2E:36:EA:AB:A7:B7:EA:62:23 X509v3 Authority Key Identifier: keyid:DA:57:B1:91:C5:5B:B3:31:9E:BD:91:82:DC:0D:4E:6A:EF:3E:0D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/2lexkcVbszGevZGC3A1Oau8-Ddg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lexkcVbszGevZGC3A1Oau8-Ddg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A31E/C8A4C4E4E8BB11EDA8DB8A1FC4F9AE02/7DA38A8E727011F08682A20EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.234.72.0/22 103.29.192.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:2f:87:4b:e0:25:7b:e3:3e:22:76:0e:f8:c6:9c:25:21:29: 9c:ca:26:75:5e:f6:b8:3c:cf:d4:04:8e:a6:57:f6:48:ef:cb: 85:61:be:dd:0e:7e:05:44:4e:bb:c3:84:5c:39:73:3c:a4:65: 16:ed:17:00:3c:05:95:72:15:29:a4:fa:29:f7:f8:1d:38:af: 0b:73:83:2a:66:3d:c5:95:9b:a0:85:7b:8c:52:84:1c:5d:e6: e6:d3:e9:71:db:81:bf:ac:3f:17:cc:fa:b6:b6:96:e2:65:7d: 5d:f9:9c:12:13:c6:dc:7b:e5:37:9e:82:ff:d9:f4:72:13:58: 9e:54:93:68:2b:fd:8a:1b:99:7a:c4:08:46:e7:43:56:60:ef: 9a:98:2c:11:3d:95:3f:5c:f8:d2:8c:84:ef:0f:09:3c:84:8d: 6a:c6:48:4a:d7:91:f2:b9:40:9c:59:4f:9d:2b:9f:c4:70:6b: f2:c2:65:89:e4:70:52:94:3f:d2:d1:dc:70:00:2a:e1:70:49: d9:55:f7:e9:85:d9:22:75:7d:2f:1f:c7:4e:da:94:a4:e6:d9: ab:79:9b:a3:89:96:fe:7f:b0:21:70:40:c8:f6:20:3c:60:f7: 58:23:10:52:c3:54:04:f4:35:d2:be:75:cf:0f:58:b5:70:9b: 85:a8:6e:7d -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzMUUxMTAvBgNVBAUTKERBNTdCMTkxQzU1QkIzMzE5RUJEOTE4MkRDMEQ0RTZB RUYzRTBERDgwHhcNMjUxMTE5MDExODU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzg0NC03YWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu87PZ3M5qbFMVbubEheWBZaDJPKppryp2fdxhRFMAirzjEZjJqRKKy4zpvFr 7DlV5JBQax/7gLkpWlybmh+D2eMAu2IMxT50lJxaa4tQSbBND2LldDbLn2dcV0xG yFvb23aw3c7Pi3vriDSNEKnPVLVgvtynsuCu1AeYceMno78vHv94VcXI4mFvDKo6 1jDZ/f4TerM1eFMkxmdJoEhedUQTQ+pi8CUu/35d8xrDcuX4pblFmlM/3VbC4OS1 EFn+y8O1MdoXJwJwfJLiBPQiCSveHDBP9veM/54qn5GRhwAOx9J2a0qtAcyjwS1h HLLazl6AyyN6iyo5/hVYxoAnCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF0fu/AJ 9Et5+1slLjbqq6e36mIjMB8GA1UdIwQYMBaAFNpXsZHFW7Mxnr2RgtwNTmrvPg3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTMxRS9DOEE0QzRFNEU4 QkIxMUVEQThEQjhBMUZDNEY5QUUwMi8ybGV4a2NWYnN6R2V2WkdDM0ExT2F1OC1E ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsZXhrY1Zic3pHZXZaR0MzQTFPYXU4LURkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzMUUvQzhBNEM0RTRFOEJCMTFFREE4REI4QTFGQzRGOUFFMDIvN0RBMzhBOEU3 MjcwMTFGMDg2ODJBMjBFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZepIAwQCZx3AMA0GCSqGSIb3DQEBCwUAA4IBAQCLL4dL4CV74z4i dg74xpwlISmcyiZ1Xva4PM/UBI6mV/ZI78uFYb7dDn4FRE67w4RcOXM8pGUW7RcA PAWVchUppPop9/gdOK8Lc4MqZj3FlZughXuMUoQcXebm0+lx24G/rD8XzPq2tpbi ZX1d+ZwSE8bce+U3noL/2fRyE1ieVJNoK/2KG5l6xAhG50NWYO+amCwRPZU/XPjS jITvDwk8hI1qxkhK15HyuUCcWU+dK5/EcGvywmWJ5HBSlD/S0dxwACrhcEnZVffp hdkidX0vH8dO2pSk5tmreZujiZb+f7AhcEDI9iA8YPdYIxBSw1QE9DXSvnXPD1i1 cJuFqG59 -----END CERTIFICATE-----Generated at Sat Mar 28 17:35:06 2026 by rpki-client