$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/736F8DBA819311EB8964C17EC4F9AE02.roa File: 736F8DBA819311EB8964C17EC4F9AE02.roa (raw, json) Hash identifier: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs= Subject key identifier: A9:63:B7:AB:87:B2:A8:15:4D:FC:C9:30:FA:BF:7F:FA:E0:DC:42:09 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0C11 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/736F8DBA819311EB8964C17EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:44:34 +0000 ROA not before: Wed 24 Dec 2025 19:16:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 5580 IP address blocks: 59.191.240.0/20 maxlen: 20 103.47.76.0/23 maxlen: 23 103.53.152.0/23 maxlen: 23 103.207.156.0/23 maxlen: 23 103.230.248.0/22 maxlen: 22 103.230.249.0/24 maxlen: 24 103.232.34.0/23 maxlen: 23 203.95.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3089 (0xc11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Dec 24 19:16:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46cf1-a877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:7a:e9:d0:a4:6c:f4:48:dc:97:94:5d:c4: 70:2c:a3:a9:a2:71:7f:75:4d:46:32:0f:b9:e2:1b: b2:7d:a1:cb:2e:42:9a:c0:9c:5f:0a:9b:f1:2d:c0: 7d:b1:32:31:69:87:79:0c:38:71:8d:ee:7f:cd:9e: a1:00:52:69:02:b0:9c:30:95:33:99:cb:7f:85:ea: c4:0e:ee:8a:95:21:d1:08:f7:df:ba:05:95:78:3a: 15:06:fa:77:bd:3a:77:58:ee:07:62:40:99:b2:6f: 09:a2:21:da:b9:c0:ff:2d:10:cd:c4:ae:c3:8a:65: d0:4d:79:5a:7a:6a:c8:dd:0d:1e:1e:c5:6b:33:65: 45:04:31:9d:c9:7a:a7:3e:27:d6:52:4d:25:c8:bd: 28:a6:84:46:2a:a1:5d:a0:d9:13:a5:99:fb:35:a1: 11:4e:54:f7:ad:43:f1:3e:5d:52:cb:73:ea:2e:0b: 0d:4f:33:b5:71:4f:90:d0:59:e4:1f:3a:60:f4:56: a3:8c:c3:b4:b3:74:6d:a1:e7:dd:d3:74:42:1e:f0: f6:5b:00:c8:96:ee:50:a3:35:03:b2:cd:7e:81:07: 5e:ac:f5:1c:e2:ef:02:29:d0:a2:0f:6e:02:85:b1: d0:17:8a:92:18:fa:3c:33:1d:7b:55:d7:3c:8e:bc: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:63:B7:AB:87:B2:A8:15:4D:FC:C9:30:FA:BF:7F:FA:E0:DC:42:09 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/736F8DBA819311EB8964C17EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.191.240.0/20 103.47.76.0/23 103.53.152.0/23 103.207.156.0/23 103.230.248.0/22 103.232.34.0/23 203.95.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:e1:e6:21:84:3d:4b:34:79:ee:f4:ed:07:42:ab:68:f3:74: 40:86:3e:f9:c2:ac:19:d2:49:64:df:7e:5b:c5:c2:43:0e:8d: 2d:b0:26:5e:48:cf:f2:05:b1:ef:c4:ff:95:94:e3:24:47:6c: 57:94:73:95:a7:1a:c6:dd:0a:7f:ff:01:46:2d:d8:95:97:9c: b8:2b:82:98:06:d2:a2:9b:23:47:52:ec:29:5f:98:f6:22:c1: e2:14:89:ec:6a:74:4e:e2:f1:b1:c5:96:9f:cc:92:61:96:14: 22:d1:7d:cb:15:4e:d0:9f:26:21:9c:72:ec:26:04:b4:43:60: ca:37:4b:72:d5:28:c9:c6:a5:2b:64:56:10:8f:cf:d4:a0:ca: d1:ea:bd:ba:f3:86:5c:b7:44:30:ff:77:20:d6:c4:dc:20:90: 22:70:78:10:55:94:a7:c1:df:4b:35:34:5e:42:5d:eb:31:df: 19:a5:e9:03:f3:a7:f4:b8:c1:b5:ae:79:e9:47:3f:ed:c9:9e: b7:13:4c:88:b6:37:49:30:33:dd:fd:bd:ca:62:e8:e5:ba:72: f1:ac:87:42:15:53:95:f9:2b:be:19:83:df:cb:72:35:d0:73: cf:85:8b:66:76:a5:f7:0a:14:13:f5:d1:a8:44:e1:69:68:42: c6:6a:ee:0c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICDBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjUxMjI0MTkxNjA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNmMS1hODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweh66dCkbPRI3JeUXcRwLKOponF/dU1GMg+54huyfaHLLkKawJxfCpvxLcB9 sTIxaYd5DDhxje5/zZ6hAFJpArCcMJUzmct/herEDu6KlSHRCPffugWVeDoVBvp3 vTp3WO4HYkCZsm8JoiHaucD/LRDNxK7DimXQTXlaemrI3Q0eHsVrM2VFBDGdyXqn PifWUk0lyL0opoRGKqFdoNkTpZn7NaERTlT3rUPxPl1Sy3PqLgsNTzO1cU+Q0Fnk Hzpg9FajjMO0s3Rtoefd03RCHvD2WwDIlu5QozUDss1+gQderPUc4u8CKdCiD24C hbHQF4qSGPo8Mx17Vdc8jrzh7wIDAQABo4IChDCCAoAwHQYDVR0OBBYEFKljt6uH sqgVTfzJMPq/f/rg3EIJMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDM0UvMEY1MEUwMzYzM0JBMTFFQTk1ODI4NTgxQzRGOUFFMDIvNzM2RjhEQkE4 MTkzMTFFQjg5NjRDMTdFQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQEO7/wAwQBZy9MAwQBZzWYAwQBZ8+cAwQCZ+b4AwQBZ+giAwQCy1/U MA0GCSqGSIb3DQEBCwUAA4IBAQB/4eYhhD1LNHnu9O0HQqto83RAhj75wqwZ0klk 335bxcJDDo0tsCZeSM/yBbHvxP+VlOMkR2xXlHOVpxrG3Qp//wFGLdiVl5y4K4KY BtKimyNHUuwpX5j2IsHiFInsanRO4vGxxZafzJJhlhQi0X3LFU7QnyYhnHLsJgS0 Q2DKN0ty1SjJxqUrZFYQj8/UoMrR6r2684Zct0Qw/3cg1sTcIJAicHgQVZSnwd9L NTReQl3rMd8ZpekD86f0uMG1rnnpRz/tyZ63E0yItjdJMDPd/b3KYujlunLxrIdC FVOV+Su+GYPfy3I10HPPhYtmdqX3ChQT9dGoROFpaELGau4M -----END CERTIFICATE-----Generated at Thu Mar 26 15:39:55 2026 by rpki-client