$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/DC5CA696596211EAB1A6C42AC4F9AE02.roa File: DC5CA696596211EAB1A6C42AC4F9AE02.roa (raw, json) Hash identifier: OfNFpH9GIQJltS0lQZJbFqhAmufXcOZEA+1QEku0JhA= Subject key identifier: 20:F6:67:5F:FE:66:08:F5:5D:83:C5:E6:11:9A:37:EF:90:5B:9F:85 Certificate issuer: /CN=A912A3D1/serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Certificate serial: 0DDE Authority key identifier: 26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/DC5CA696596211EAB1A6C42AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:39:12 +0000 ROA not before: Tue 30 Dec 2025 18:14:57 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 131183 IP address blocks: 103.103.239.0/24 maxlen: 24 103.111.34.0/23 maxlen: 24 103.111.36.0/24 maxlen: 24 2402:9dc0::/32 maxlen: 32 2402:9dc0::/36 maxlen: 36 2402:9dc0:1000::/36 maxlen: 36 2402:9dc0:2000::/36 maxlen: 36 2402:9dc0:3000::/36 maxlen: 36 2402:9dc0:4000::/36 maxlen: 36 2402:9dc0:5000::/36 maxlen: 36 2402:9dc0:6000::/36 maxlen: 36 2402:9dc0:7000::/36 maxlen: 36 2402:9dc0:8000::/36 maxlen: 36 2402:9dc0:9000::/36 maxlen: 36 2402:9dc0:a000::/36 maxlen: 36 2402:9dc0:b000::/36 maxlen: 36 2402:9dc0:c000::/36 maxlen: 36 2402:9dc0:d000::/36 maxlen: 36 2402:9dc0:e000::/36 maxlen: 36 2402:9dc0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3550 (0xdde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A3D1, serialNumber=26C32F4C975124A7280FA5F2F0333DCDABF03FEB Validity Not Before: Dec 30 18:14:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44f8f-0146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:05:f0:62:74:3b:33:c3:fd:fd:30:7a:16: a2:ae:0c:df:97:a8:5a:c2:b5:d3:2b:ae:4f:1e:84: 63:cd:87:5a:8f:c2:24:98:58:99:e7:75:d7:6c:e5: 5c:a9:32:8f:ca:f7:94:f5:b6:57:c7:c2:6e:54:01: 75:96:d8:03:73:ac:9d:79:64:b8:5a:3a:75:34:32: fe:ee:12:90:f5:eb:ff:8c:0f:8e:0c:a3:b6:f8:9c: 76:98:a3:ab:39:f4:31:0d:65:78:01:14:b6:e2:0d: b1:aa:55:3e:05:fb:ae:3e:3f:c0:61:aa:1d:32:c3: 23:cf:b7:92:59:6a:ec:08:13:c4:26:c3:b7:a7:95: 79:7e:cf:a7:40:76:a5:7d:30:15:44:c0:f4:6b:1b: 03:8a:3c:94:f3:d8:cf:fc:f0:e5:4a:bd:57:6f:2b: 5c:18:f6:a7:cf:2e:6d:7f:e0:77:90:c0:49:a2:4f: 3c:4f:93:bd:ee:b8:3b:53:7b:c9:d9:cc:89:eb:e7: 3f:0c:44:01:13:dd:e8:ef:92:4f:51:13:88:d5:cb: 94:c5:6a:63:bd:f9:37:1b:23:c4:bb:10:9f:94:1c: 41:c9:76:b5:c5:2a:81:e6:09:34:f5:c0:55:c7:21: 28:d6:00:0f:42:bc:00:e1:56:a4:55:80:86:22:f4: 21:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:67:5F:FE:66:08:F5:5D:83:C5:E6:11:9A:37:EF:90:5B:9F:85 X509v3 Authority Key Identifier: keyid:26:C3:2F:4C:97:51:24:A7:28:0F:A5:F2:F0:33:3D:CD:AB:F0:3F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/JsMvTJdRJKcoD6Xy8DM9zavwP-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JsMvTJdRJKcoD6Xy8DM9zavwP-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3D1/4F60EB9AD49611E990AD6B34C4F9AE02/DC5CA696596211EAB1A6C42AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.103.239.0/24 103.111.34.0-103.111.36.255 IPv6: 2402:9dc0::/32 Signature Algorithm: sha256WithRSAEncryption 12:45:7e:3d:50:11:b1:00:85:0f:92:e8:e1:69:46:05:4f:64: 81:e5:5a:3d:fc:cd:df:ee:4a:98:5c:de:b9:76:21:e7:99:cd: fb:9b:04:a0:2c:70:8f:8f:1f:b0:4f:31:7a:d1:d6:48:15:50: ba:35:2e:bc:6e:98:9f:43:23:0f:ae:46:a4:15:1b:d7:18:b7: c7:56:ea:7d:54:3a:8d:20:66:62:81:8b:dd:15:b8:12:09:92: 09:2c:b0:95:a9:b8:95:4b:3d:a5:07:b1:7f:3e:3d:e2:ae:e5: 5b:ef:03:8f:05:e7:ad:be:ae:dd:bd:e3:a1:11:39:02:b8:cb: 59:03:81:ea:fe:85:52:fb:ec:ac:8c:09:97:7a:b1:6e:b1:8f: b2:a7:b0:3f:42:96:88:11:38:bf:30:33:c6:d8:63:b5:02:0a: c0:5d:02:7c:ec:a9:21:af:bd:6e:b8:bd:d2:22:12:bf:7e:6b: 3c:24:b4:03:72:e3:9e:6f:af:96:56:4f:fb:fb:33:7e:13:aa: 27:55:cf:e4:7a:4c:99:d1:b7:4a:a7:03:69:e8:e0:87:b1:50: 00:87:0d:b1:fe:6c:8c:e4:37:c6:51:37:45:a9:09:40:90:60: 00:67:75:a9:55:6b:04:54:49:9e:de:9d:5a:65:3c:b3:cd:f8: 89:56:84:7a -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEzRDExMTAvBgNVBAUTKDI2QzMyRjRDOTc1MTI0QTcyODBGQTVGMkYwMzMzRENE QUJGMDNGRUIwHhcNMjUxMjMwMTgxNDU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGY4Zi0wMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRIF8GJ0OzPD/f0wehairgzfl6hawrXTK65PHoRjzYdaj8IkmFiZ53XXbOVc qTKPyveU9bZXx8JuVAF1ltgDc6ydeWS4Wjp1NDL+7hKQ9ev/jA+ODKO2+Jx2mKOr OfQxDWV4ARS24g2xqlU+BfuuPj/AYaodMsMjz7eSWWrsCBPEJsO3p5V5fs+nQHal fTAVRMD0axsDijyU89jP/PDlSr1XbytcGPanzy5tf+B3kMBJok88T5O97rg7U3vJ 2cyJ6+c/DEQBE93o75JPUROI1cuUxWpjvfk3GyPEuxCflBxByXa1xSqB5gk09cBV xyEo1gAPQrwA4VakVYCGIvQhNQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFCD2Z1/+ Zgj1XYPF5hGaN++QW5+FMB8GA1UdIwQYMBaAFCbDL0yXUSSnKA+l8vAzPc2r8D/r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTNEMS80RjYwRUI5QUQ0 OTYxMUU5OTBBRDZCMzRDNEY5QUUwMi9Kc012VEpkUkpLY29ENlh5OERNOXphdndQ LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pzTXZUSmRSSktjb0Q2WHk4RE05emF2d1Atcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkEzRDEvNEY2MEVCOUFENDk2MTFFOTkwQUQ2QjM0QzRGOUFFMDIvREM1Q0E2OTY1 OTYyMTFFQUIxQTZDNDJBQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUAwQAZ2fvMAwDBAFnbyIDBABnbyQwDQQCAAIwBwMFACQCncAwDQYJKoZI hvcNAQELBQADggEBABJFfj1QEbEAhQ+S6OFpRgVPZIHlWj38zd/uSphc3rl2IeeZ zfubBKAscI+PH7BPMXrR1kgVULo1LrxumJ9DIw+uRqQVG9cYt8dW6n1UOo0gZmKB i90VuBIJkgkssJWpuJVLPaUHsX8+PeKu5VvvA48F562+rt2946EROQK4y1kDger+ hVL77KyMCZd6sW6xj7KnsD9ClogROL8wM8bYY7UCCsBdAnzsqSGvvW64vdIiEr9+ azwktANy455vr5ZWT/v7M34TqidVz+R6TJnRt0qnA2no4IexUACHDbH+bIzkN8ZR N0WpCUCQYABndalVawRUSZ7enVplPLPN+IlWhHo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:09:40 2026 by rpki-client