$ rpki-client -vvf rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/38D7B616768D11EB94573712C4F9AE02.roa File: 38D7B616768D11EB94573712C4F9AE02.roa (raw, json) Hash identifier: p/HN4+cYHb4pXYatqROBo401SMy00O/P6+sd+OS9rlc= Subject key identifier: 29:07:E0:37:6B:5C:C6:F6:62:F0:7C:0F:95:60:DF:2B:07:A6:DE:64 Certificate issuer: /CN=A912C12B/serialNumber=A3091053104F084D75CA65217366EADF984913C1 Certificate serial: 0D08 Authority key identifier: A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/38D7B616768D11EB94573712C4F9AE02.roa Signing time: Sat 14 Mar 2026 18:23:03 +0000 ROA not before: Sat 14 Mar 2026 18:23:03 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138594 IP address blocks: 103.134.68.0/22 maxlen: 22 103.134.68.0/23 maxlen: 23 103.134.68.0/24 maxlen: 24 103.134.69.0/24 maxlen: 24 103.134.70.0/23 maxlen: 23 103.134.70.0/24 maxlen: 24 103.134.71.0/24 maxlen: 24 2404:6040::/32 maxlen: 32 2404:6040::/48 maxlen: 48 2404:6040:1::/48 maxlen: 48 2404:6040:2::/48 maxlen: 48 2404:6040:3::/48 maxlen: 48 2404:6040:4::/48 maxlen: 48 2404:6040:5::/48 maxlen: 48 2404:6040:6::/48 maxlen: 48 2404:6040:7::/48 maxlen: 48 2404:6040:8::/48 maxlen: 48 2404:6040:9::/48 maxlen: 48 2404:6040:a::/48 maxlen: 48 2404:6040:b::/48 maxlen: 48 2404:6040:c::/48 maxlen: 48 2404:6040:d::/48 maxlen: 48 2404:6040:e::/48 maxlen: 48 2404:6040:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C12B, serialNumber=A3091053104F084D75CA65217366EADF984913C1 Validity Not Before: Mar 14 18:23:03 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b5a787-026d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:88:78:94:f1:a0:6c:9a:e7:69:ed:92:84: b7:03:b7:5c:f3:ca:4d:c2:6e:2d:04:d9:38:ac:b1: 84:d0:70:f4:9e:59:27:f2:ca:b3:2c:af:49:c7:01: bb:ba:45:eb:44:96:9f:2c:07:b1:d4:28:0a:b2:8a: 59:24:d6:36:8f:7c:bd:0b:cd:1c:b2:24:31:c8:37: ea:56:22:93:4c:c6:6d:7b:18:45:53:e8:0c:da:55: 93:27:b5:0c:9a:d5:c7:e4:69:27:07:d7:41:32:f1: b6:95:80:66:1d:32:37:03:0a:b3:6e:2b:96:51:bd: 4c:f5:26:0f:6e:1d:8e:ad:47:2a:f9:48:7d:26:8d: e2:8d:d7:7c:1b:b4:1a:62:65:61:c5:c1:95:d6:34: bb:07:26:4a:28:05:bb:13:b9:00:f6:6b:29:e6:5c: 0c:c7:73:f2:90:5f:6b:86:69:af:c7:c6:cb:3c:9f: ee:01:4c:8f:d4:21:98:bd:19:5d:64:97:4f:c6:e0: e2:4a:4b:83:7e:e7:1e:b9:db:e3:13:2e:76:41:fd: dc:e9:e6:0b:f1:9a:d2:f2:92:90:d0:cf:fe:e2:f5: 18:5f:85:11:ea:f4:8e:62:63:8a:78:f2:5c:d1:3a: e2:af:b3:21:dc:5d:bb:21:0f:e0:75:13:fa:a2:48: be:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:07:E0:37:6B:5C:C6:F6:62:F0:7C:0F:95:60:DF:2B:07:A6:DE:64 X509v3 Authority Key Identifier: keyid:A3:09:10:53:10:4F:08:4D:75:CA:65:21:73:66:EA:DF:98:49:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/owkQUxBPCE11ymUhc2bq35hJE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owkQUxBPCE11ymUhc2bq35hJE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C12B/F9FED4C2FF9D11E999689577C4F9AE02/38D7B616768D11EB94573712C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.68.0/22 IPv6: 2404:6040::/32 Signature Algorithm: sha256WithRSAEncryption 5b:0b:60:7f:dc:fa:dd:68:1c:a2:11:ac:4c:e4:b1:44:9b:d0: ea:95:92:71:56:2a:b7:6d:f6:e4:b3:6b:35:15:47:c2:46:dc: f2:db:dc:5c:cc:20:fa:ed:11:0f:ef:0e:5c:b9:6e:3b:58:da: 85:2e:7b:d9:fd:cf:73:e2:01:9f:4c:b0:1b:2e:b6:60:27:80: 9a:ac:55:a3:7b:c9:92:c5:2a:39:a6:45:22:23:3c:14:05:cb: 8b:92:bc:a1:b0:38:a8:b4:1d:8e:77:13:36:c2:c6:01:98:e7: dc:04:82:fd:de:93:df:03:56:32:3e:b6:17:c9:b0:3d:6a:5c: cc:01:28:5a:f9:0b:ab:a1:99:68:ff:95:eb:27:9c:d9:48:64: f1:c9:a2:54:c3:25:54:d7:21:02:d3:8a:87:ed:03:24:46:3f: 11:dd:e2:57:05:4d:60:9d:c2:35:a2:d8:d0:f5:33:36:4f:45: 13:19:5b:ff:f5:0f:71:e9:03:69:8d:cf:78:c3:73:76:b5:1b: 23:36:75:48:b0:49:78:57:23:13:7a:4c:7e:a7:db:1e:2d:cf: d1:e5:1e:5e:2b:f9:0f:95:18:78:37:1e:1e:c7:13:7b:03:24: 01:ef:22:72:32:f0:8d:06:5d:52:9f:f6:af:91:98:5b:d6:fa: 0c:83:d0:48 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxMkIxMTAvBgNVBAUTKEEzMDkxMDUzMTA0RjA4NEQ3NUNBNjUyMTczNjZFQURG OTg0OTEzQzEwHhcNMjYwMzE0MTgyMzAzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1YTc4Ny0wMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6iIeJTxoGya52ntkoS3A7dc88pNwm4tBNk4rLGE0HD0nlkn8sqzLK9JxwG7 ukXrRJafLAex1CgKsopZJNY2j3y9C80csiQxyDfqViKTTMZtexhFU+gM2lWTJ7UM mtXH5GknB9dBMvG2lYBmHTI3AwqzbiuWUb1M9SYPbh2OrUcq+Uh9Jo3ijdd8G7Qa YmVhxcGV1jS7ByZKKAW7E7kA9msp5lwMx3PykF9rhmmvx8bLPJ/uAUyP1CGYvRld ZJdPxuDiSkuDfuceudvjEy52Qf3c6eYL8ZrS8pKQ0M/+4vUYX4UR6vSOYmOKePJc 0Trir7Mh3F27IQ/gdRP6oki+rwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCkH4Ddr XMb2YvB8D5Vg3ysHpt5kMB8GA1UdIwQYMBaAFKMJEFMQTwhNdcplIXNm6t+YSRPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzEyQi9GOUZFRDRDMkZG OUQxMUU5OTk2ODk1NzdDNEY5QUUwMi9vd2tRVXhCUENFMTF5bVVoYzJicTM1aEpF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293a1FVeEJQQ0UxMXltVWhjMmJxMzVoSkU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkMxMkIvRjlGRUQ0QzJGRjlEMTFFOTk5Njg5NTc3QzRGOUFFMDIvMzhEN0I2MTY3 NjhEMTFFQjk0NTczNzEyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4ZEMA0EAgACMAcDBQAkBGBAMA0GCSqGSIb3DQEBCwUAA4IBAQBb C2B/3PrdaByiEaxM5LFEm9DqlZJxViq3bfbks2s1FUfCRtzy29xczCD67REP7w5c uW47WNqFLnvZ/c9z4gGfTLAbLrZgJ4CarFWje8mSxSo5pkUiIzwUBcuLkryhsDio tB2OdxM2wsYBmOfcBIL93pPfA1YyPrYXybA9alzMASha+QuroZlo/5XrJ5zZSGTx yaJUwyVU1yEC04qH7QMkRj8R3eJXBU1gncI1otjQ9TM2T0UTGVv/9Q9x6QNpjc94 w3N2tRsjNnVIsEl4VyMTekx+p9seLc/R5R5eK/kPlRh4Nx4exxN7AyQB7yJyMvCN Bl1Sn/avkZhb1voMg9BI -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:18 2026 by rpki-client