$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa File: 25234272DF4311EDA83C7074C4F9AE02.roa (raw, json) Hash identifier: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s= Subject key identifier: B3:DE:09:53:C7:10:CE:D0:7B:B1:33:CF:3E:D8:3B:C4:33:2E:29:20 Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0D07 Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa Signing time: Mon 16 Mar 2026 18:23:46 +0000 ROA not before: Mon 16 Mar 2026 18:23:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136176 IP address blocks: 103.83.15.0/24 maxlen: 24 103.84.133.0/24 maxlen: 24 2401:32c0::/32 maxlen: 32 2401:32c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Mar 16 18:23:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b84ab2-64b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:14:2e:18:2d:c1:07:28:33:6b:3a:10:03: 16:1d:7e:87:77:2b:62:a6:45:d0:2d:0f:22:62:19: 68:ce:88:ec:b4:45:15:93:8b:bd:1e:2d:c1:b5:4f: da:f2:bb:00:28:53:a4:ab:74:d7:27:d1:d4:ea:7e: 20:bc:41:25:2d:b7:e2:e2:e3:f7:a8:35:18:10:aa: fb:1e:2b:7e:2c:7a:7c:a0:c9:fe:df:7c:ac:94:3e: f2:2e:60:8e:32:21:7e:7d:92:ed:2e:4a:89:02:b3: 28:80:99:1f:d0:90:3e:08:69:07:f2:af:ad:bc:4e: 45:ea:fe:0b:1c:3c:16:dd:bc:dd:e9:02:ca:3b:eb: 46:e0:26:8b:e8:c3:f8:92:9d:10:d3:54:a9:9b:b3: 03:a7:fa:13:1f:ae:1e:6f:f2:6f:08:3f:e6:0f:ff: 53:9a:eb:e7:1f:98:fe:d3:36:e5:b7:21:d1:03:e9: e7:cd:5d:40:ae:18:c9:63:65:13:82:ab:8a:02:8b: 27:44:31:c9:66:16:9f:9a:c0:97:af:db:4b:1b:01: be:c0:c8:f5:3d:f7:ee:b3:2f:89:47:e9:63:a5:28: be:67:ef:99:f8:ed:17:6f:6b:ee:e7:2f:47:e8:f0: fb:47:d3:cc:65:af:c0:35:af:8d:fb:aa:87:2e:b9: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DE:09:53:C7:10:CE:D0:7B:B1:33:CF:3E:D8:3B:C4:33:2E:29:20 X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.83.15.0/24 103.84.133.0/24 IPv6: 2401:32c0::/32 Signature Algorithm: sha256WithRSAEncryption 24:64:df:d2:80:c2:98:75:2e:9e:2d:20:5d:a9:03:f0:a0:8f: 13:31:c5:6f:fa:6c:2b:5d:90:a5:54:7a:8a:c9:fe:e5:60:24: f3:db:47:83:ac:7a:cf:c3:53:e9:37:50:40:5b:47:a2:65:ba: cb:6b:6e:74:ab:4b:37:8e:14:62:bd:72:d9:70:8e:98:1a:f1: 39:86:13:9e:ec:c3:4b:f8:c4:f7:34:a6:a4:4f:be:56:95:9f: c7:a8:1e:b8:2f:2a:e8:c9:dc:72:63:91:26:84:ce:0d:30:ee: 9d:b4:f5:0b:f9:d2:e1:ee:c4:6d:cd:de:7b:53:35:ed:e5:f7: c3:3c:7d:2e:17:33:a5:d8:56:3d:8b:3f:df:43:d1:24:43:1d: 87:45:38:7e:60:99:cf:ec:13:b4:5d:c0:3c:9d:a0:74:d5:7e: f3:cc:50:86:99:00:99:63:6b:19:e7:7e:46:27:ca:87:86:70: d4:a9:43:d1:e6:16:b0:1d:1b:fe:ee:54:c4:58:5d:f9:ca:92: 19:17:a9:3d:00:be:4b:e7:4e:10:a3:08:eb:98:fe:6b:48:16: bc:07:ad:52:41:18:2d:0e:42:0c:a2:fa:5c:84:67:99:ff:c3: d6:a6:33:0c:61:bf:37:f5:8e:93:1c:98:70:81:ff:31:70:b3: 2f:d8:bd:39 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjYwMzE2MTgyMzQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NGFiMi02NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WIULhgtwQcoM2s6EAMWHX6HdytipkXQLQ8iYhlozojstEUVk4u9Hi3BtU/a 8rsAKFOkq3TXJ9HU6n4gvEElLbfi4uP3qDUYEKr7Hit+LHp8oMn+33yslD7yLmCO MiF+fZLtLkqJArMogJkf0JA+CGkH8q+tvE5F6v4LHDwW3bzd6QLKO+tG4CaL6MP4 kp0Q01Spm7MDp/oTH64eb/JvCD/mD/9TmuvnH5j+0zbltyHRA+nnzV1ArhjJY2UT gquKAosnRDHJZhafmsCXr9tLGwG+wMj1Pffusy+JR+ljpSi+Z++Z+O0Xb2vu5y9H 6PD7R9PMZa/ANa+N+6qHLrmVOwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLPeCVPH EM7Qe7Ezzz7YO8QzLikgMB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkQyQ0UvMkIwRTcyNDAwMTM2MTFFQUIwMDA2NDM4QzRGOUFFMDIvMjUyMzQyNzJE RjQzMTFFREE4M0M3MDc0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ1MPAwQAZ1SFMA0EAgACMAcDBQAkATLAMA0GCSqGSIb3DQEBCwUA A4IBAQAkZN/SgMKYdS6eLSBdqQPwoI8TMcVv+mwrXZClVHqKyf7lYCTz20eDrHrP w1PpN1BAW0eiZbrLa250q0s3jhRivXLZcI6YGvE5hhOe7MNL+MT3NKakT75WlZ/H qB64LyroydxyY5EmhM4NMO6dtPUL+dLh7sRtzd57UzXt5ffDPH0uFzOl2FY9iz/f Q9EkQx2HRTh+YJnP7BO0XcA8naB01X7zzFCGmQCZY2sZ535GJ8qHhnDUqUPR5haw HRv+7lTEWF35ypIZF6k9AL5L504QowjrmP5rSBa8B61SQRgtDkIMovpchGeZ/8PW pjMMYb839Y6THJhwgf8xcLMv2L05 -----END CERTIFICATE-----Generated at Thu Mar 26 05:39:11 2026 by rpki-client