$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa File: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (raw, json) Hash identifier: g66ApfZFK5/BwJYxiIawl59WPLIsVlwdY8bAYaAobMU= Subject key identifier: 7A:20:AD:C9:F4:5A:FA:DE:B8:BE:0E:61:95:A4:90:0F:58:07:89:70 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0CC7 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:41:01 +0000 ROA not before: Mon 26 May 2025 19:11:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138694 IP address blocks: 103.136.204.0/22 maxlen: 22 103.136.204.0/23 maxlen: 23 103.136.204.0/24 maxlen: 24 103.136.205.0/24 maxlen: 24 103.136.206.0/23 maxlen: 23 103.136.206.0/24 maxlen: 24 103.136.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: May 26 19:11:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a425cd-bccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:45:77:1d:2c:84:35:b6:29:27:d4:4b:06:28: 08:7a:35:bb:9d:28:9c:ab:04:56:77:f9:2e:3a:7d: ff:84:6c:d2:a9:ab:0a:af:91:87:d5:4d:b8:f1:17: 8b:39:ea:43:51:1b:06:ea:36:ff:bd:d0:b7:70:f9: 44:23:88:ea:cd:d7:ff:5e:ec:34:d0:5d:bd:19:87: f2:5a:75:57:75:1b:66:58:b8:d6:21:3a:31:5a:9e: 86:66:89:01:34:d8:2e:a2:fb:6f:41:b9:ff:32:42: 61:a3:40:d3:37:2d:93:ba:c3:88:ed:a6:c6:d5:d2: 36:bb:81:fc:93:21:eb:31:2d:91:27:3e:d4:a6:5e: 57:ab:f8:72:b7:d3:d1:10:3a:c0:f6:80:f9:a5:9b: 46:17:da:5d:d5:48:83:29:92:a3:08:ba:c0:d0:92: 69:e1:06:a6:7e:cb:7e:52:d5:f0:5a:d9:5c:37:a2: 9b:f6:63:f5:27:33:6e:f7:b4:bf:51:6c:fb:c5:5b: c6:0e:6a:86:f7:18:cb:44:32:53:4f:07:29:1b:c3: 17:ce:e5:47:60:51:1a:c4:4d:c2:55:a4:63:a1:2b: 44:c0:90:2b:c8:36:8d:11:b2:63:e7:de:7c:cc:19: 4c:b1:b9:3d:ad:b3:5d:a0:cd:fc:94:75:2d:44:25: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:20:AD:C9:F4:5A:FA:DE:B8:BE:0E:61:95:A4:90:0F:58:07:89:70 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.204.0/22 Signature Algorithm: sha256WithRSAEncryption 86:dc:94:37:42:a4:58:c4:b4:b5:b5:00:21:7e:f9:7c:90:85: ab:da:1b:ee:9f:94:12:38:cc:95:35:8c:9b:d1:46:85:d3:dc: 51:01:44:5f:56:74:1f:20:03:e2:11:b9:e8:40:e7:fd:6d:18: a1:8c:9f:d6:d2:4b:8e:b9:58:64:25:ca:02:48:5e:7a:1b:1a: 71:d4:2a:e9:2c:c0:83:31:3a:98:40:22:36:3d:e0:fb:80:47: 84:a8:90:0b:7b:e1:32:11:05:17:86:55:60:53:a2:f9:93:3a: f7:3d:e1:b5:ab:0b:d1:28:ec:07:bb:71:9b:2b:f9:e8:ae:73: 95:64:27:af:55:f2:7d:27:68:03:6a:99:10:63:46:3d:9a:ac: b5:02:aa:1b:6b:4a:13:ed:b7:60:eb:c3:9c:c9:ce:a7:8a:3e: c1:4b:e3:b8:dd:ac:27:d6:6e:45:69:5c:3d:60:1a:a9:c5:06: e9:2f:c3:ab:3d:6f:f5:4e:ce:7e:73:58:a6:0c:57:24:2e:bd: c9:4e:40:0f:45:ea:36:9d:2c:fa:4e:6e:d2:ec:50:e5:49:82: 18:10:b9:02:6c:ed:7f:5d:50:ad:44:2a:10:91:71:46:33:88: 7e:7e:52:01:2d:dc:c6:3a:c9:21:58:16:7f:16:87:b5:fd:2e: 55:83:20:e2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwNTI2MTkxMTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjVjZC1iY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkUV3HSyENbYpJ9RLBigIejW7nSicqwRWd/kuOn3/hGzSqasKr5GH1U248ReL OepDURsG6jb/vdC3cPlEI4jqzdf/Xuw00F29GYfyWnVXdRtmWLjWIToxWp6GZokB NNguovtvQbn/MkJho0DTNy2TusOI7abG1dI2u4H8kyHrMS2RJz7Upl5Xq/hyt9PR EDrA9oD5pZtGF9pd1UiDKZKjCLrA0JJp4Qamfst+UtXwWtlcN6Kb9mP1JzNu97S/ UWz7xVvGDmqG9xjLRDJTTwcpG8MXzuVHYFEaxE3CVaRjoStEwJAryDaNEbJj5958 zBlMsbk9rbNdoM38lHUtRCVFhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHogrcn0 WvreuL4OYZWkkA9YB4lwMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRDRjYvRkQyNTAxOEEwQjdEMTFFQTk4RThGQTNDQzRGOUFFMDIvNEE2QTU5OEVE QjEzMTFFQjlCMjIzQjQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4jMMA0GCSqGSIb3DQEBCwUAA4IBAQCG3JQ3QqRYxLS1tQAhfvl8 kIWr2hvun5QSOMyVNYyb0UaF09xRAURfVnQfIAPiEbnoQOf9bRihjJ/W0kuOuVhk JcoCSF56Gxpx1CrpLMCDMTqYQCI2PeD7gEeEqJALe+EyEQUXhlVgU6L5kzr3PeG1 qwvRKOwHu3GbK/nornOVZCevVfJ9J2gDapkQY0Y9mqy1Aqoba0oT7bdg68Ocyc6n ij7BS+O43awn1m5FaVw9YBqpxQbpL8OrPW/1Ts5+c1imDFckLr3JTkAPReo2nSz6 Tm7S7FDlSYIYELkCbO1/XVCtRCoQkXFGM4h+flIBLdzGOskhWBZ/Foe1/S5VgyDi -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:06 2026 by rpki-client